[Snyk] Upgrade tslint from 5.11.0 to 5.20.1 #1

snyk-bot · 2019-12-15T04:58:47Z

Snyk has created this PR to upgrade tslint from 5.11.0 to 5.20.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 12 versions ahead of your current version.
The recommended version was released a month ago, on 2019-11-05.

The recommended version fixes:

Severity	Issue
	Arbitrary File Overwrite SNYK-JS-TAR-174125
	Prototype Pollution SNYK-JS-SETVALUE-450213
	Prototype Pollution SNYK-JS-SETVALUE-450213
	Prototype Pollution SNYK-JS-MIXINDEEP-450212
	Prototype Pollution SNYK-JS-LODASH-73638
	Prototype Pollution SNYK-JS-LODASH-450202
	Prototype Pollution SNYK-JS-HANDLEBARS-534988
	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478
	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388
	Prototype Pollution SNYK-JS-HANDLEBARS-469063
	Prototype Pollution SNYK-JS-HANDLEBARS-174183
	Prototype Pollution SNYK-JS-HANDLEBARS-173692
	Time of Check Time of Use (TOCTOU) npm:chownr:20180731
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639
	Timing Attack SNYK-JS-ELLIPTIC-511941
	Prototype Pollution SNYK-JS-MERGE-72553

Release notes

Package name: tslint

5.20.1 - 2019-11-05
No changes from v5.20.0, just re-released to correctly mark with the latest dist-tag on NPM.
5.20.0 - 2019-09-10
- [bugfix] fix strict-boolean-expressions false positive with "ignore-rhs" option (#4833)
- [bugfix] fix no-unnecessary-type-assertion no error when "strict": true in compiler flags (#4841)
- [bugfix] "ignore" option for file-name-casing rule works correctly (#4848)
- [bugfix] fix array-type false positive for simple parenthesized types with "array-simple" option (#4844)
- [new-rule-option] object-literal-shorthand supports {"property"?: "never", "method"?: "never"} as config options (#4842)
- [new-rule-option]: allow-generics option for invalid-void rule (#4839)
- [new-rule-option] check-super-calls option for unnecessary-constructor rule (#4813)
- [chore] Upgrade diff dependency to v4.0.1 (#4845, #4852)
Thanks to our contributors!
- Bas Bosman
- Tanmoy Bhowmik
- David Zulaica
- Maxime Kjaer
- @guidsdo
- Pavel Birukov
- Josh Goldberg
- Akshaya Srivatsa
5.19.0 - 2019-08-20
- [bugfix] relax promise-function-async for short parenthesized arrow functions (#4765)
- [bugfix] fix no-async-without-await false positive for abstract methods (#4782)
- [bugfix] fix strict-comparison false positive for null and undefined literals (#4786)
- [bugfix] improve no-angle-bracket-type-assertion autofix semantics with more parentheses (#4823)
- [enhancement] add BigInt support to restrict-plus-operands rule (#4814)
- [enhancement] await-promise now supports new TypeScript 3.6 AST API symbols for async iterators (#4800)
- [new-rule-option] check-strings and check-regex options for max-line-length rule (#4798)
- [new-rule-option] variable-declaration-ignore-function option for typedef rule (#4769)
- [new-rule-option] ignore-blank-lines option for object-literal-sort-keys rule (#4808)
- [new-rule] no-for-in (#4747)
- [new-rule] invalid-void (#4736)
- [new-rule] strict-string-expressions reports errors on type coercions found in string expressions (#4807)
- [new-rule] no-promise-as-boolean (#4790)
- [docs] link to OSS fellowship medium post in README (#4821)
Thanks to our contributors!
- Josh Pike
- Tanmoy Bhowmik
- Michael Withagen
- Evgeniy Timokhov
- Vitalij Krotov
- Josh Goldberg
- Veda
- Guido
- Robert Fink
- Max Sysoev
5.18.0 - 2019-06-21
- [feature] New --print-config CLI flag (#4744)
- [bugfix] no-unnecessary-type-assertion no longer flags x! non-null assertions if --strictNullChecks is not enabled (#3724)
- [bugfix] quotemark handles unbalanced quotes more gracefully without crashing (#4344)
- [docs] Add tslint-playground link to README and bug report template (#4150)
- [enhancement] no-magic-numbers rule ignores arguments passed into default Number methods (#3668)
- [new-fixer] comment-format (#3583)
- [new-rule-option] "allow-trailing-lowercase" option for comment-format rule (#3583)
- [new-rule-option] "ignore-accessors" for adjacent-overload-signatures to ignore getters / setters overloads (#3718)
- [new-rule] no-async-without-await (#3945)
- [new-rule] strict-comparisons (#4519)
Thanks to our contributors!
- Josh Goldberg
- smoehrle
- Mateusz Witkowski
- Andy Hanson
- John Wiseheart
- Eran Shabi
- Tibor Blenessy
- AndreasGassmann
- Ryan Waskiewicz
- Isabelle
5.17.0 - 2019-05-30
- [bugfix] quotemark backtic option now ignores enum members, use strict declarations, lookup types, and strings containing octal escape sequences. (#4693)
- [bugfix] no-redundant-jsdoc no longer errors on JSDocThisTag (#4690)
- [chore] Update devDependency mocha from v3.2.0 to v6.1.4 (#4669) (#4674)
- [chore] Update devDependency js-yaml from ^3.13.0 to ^3.13.1 (#4663)
- [chore] Update deprecated devDependency github to @octokit/rest (#4673)
- [chore] Update devDependency nyc from v13.3.0 to v14.1.1 (#4699)
- [deprecation] no-use-before-declare rule for typescript >= 2.9.0 (#4695)
- [documentation] Minor fix for variable-name rule metadata (#4731)
- [documentation] Fixed no-unused-variable argument count (#4683)
- [enhancement] Allow const assertions in no-object-literal-type-assertion (#4681)
- [new-fixer] unnecessary-constructor (#4694)
Thanks to our contributors!
- Bjorn Stromberg
- Vitaliy Agoshkov
- knafteN
- Bowen Ni
- Waseem Ahmad
- Åsmund Grammeltvedt
- Eric Ferreira
- Zhen Tian
- Tom Lakesman
- zachkirsch
5.16.0 - 2019-04-16
- [bugfix] Excuse more quotemark backtick edge cases and fix behavior for TS < 2.7.1 (#4642)
- [bugfix] Fix regression in interface-name rule related to numeric characters in interface names (#4655, #4626)
- [enhancement] Update nyc from v10.2.0 to v13.3.0 (#4633)
- [enhancement] Migrate from deprecated babel-code-frame package to new @babel/code-frame package (#4632)
- [enhancement] Improve error message for restrict-plus-operands rule. (#4635)
- [enhancement] comment-format rule now whitelists //region comments generated by JetBrains IDE (#4609)
- [enhancement] Relax no-null-undefined-union rule. (#4625)
- [new-rule-option] allow-else-if option for unnecessary-else rule (#4599)
- [documentation] Fix "identifer" typo in custom rules docs (#4657)
- [documentation] Fix code example for switch-default rule (#4650)
- [documentation] Fix documentation example for prose formatter (#4656)
- [documentation] no-parameter-properties: fix unclear rule description (#4629)
- [documentation] Fix typo in rule docs generation (#4638)
Thanks to our contributors!
- Oleg Artene
- William Neely
- Bjorn Stromberg
- Matthew Barry
- Neha Rathi
- Vincent Langlet
- rarenal
- Greg Jednaszewski
- Adam Postma
- Eric Ferreira
- Evgeniy Timokhov
- Martin Probst
5.15.0 - 2019-04-01
- [api] WalkContext and AbstractWalker type parameter defaults to void (#2600)
- [bugfix] no-void-expression now allows conditional expressions (#4606)
- [bugfix] fix linebreak handling in ordered-imports (#4583)
- [bugfix] fix static-this false positive for higher order components (#4580)
- [bugfix] Fixed crash in unnecessary-else from blank if statements (#4603)
- [bugfix] Fixed false positive in unnecessary-else after non-jumping statement (#4603)
- [bugfix] interface-name now handles interface starting with "I18n" correctly (#4486)
- [bugfix] no-string-throw fix inserts whitespace if not present after throw keyword (#4540)
- [bugfix] quotemark: fix some edge cases for backtick option (#4618)
- [bugfix] unnecessary-constructor: don't flag non-private constructors that are actually necessary (#4619)
- [enhancement] Upgrade js-yaml to avoid security issue (#4595)
- [new-rule-option] allow-single-line-comments option for file-header rule (#4560)
- [new-rule-option] ignore-rest-args option for no-any rule (#4581)
- [new-rule] no-null-undefined-union (#4589)
Thanks to our contributors!
- Max Belsky
- Steve Moser
- Christian Flach
- Roman Rogowski
- Terry
- Luke
- Andy Hanson
- Vitalij Krotov
- Josh Goldberg
- Vincent Langlet
- Neha Rathi
- Eric Ferreira
5.14.0 - 2019-03-13
- [bugfix] backtick option for quotemark rule no longer incorrectly flags string literals that must use single/double quotes (#4535)
- [bugfix] Fixed regression in CheckstyleFormatter backwards compatibility (#4561)
- [bugfix] whitespace rule now lints export statements (#4554)
- [bugfix] no-trailing-whitespace no longer flags files starting with a byte order mark (#4543)
- [enhancement] promise-function-async now allows single statement lamda functions that delegate to another promise-returning function (#4553)
- [enhancement] Add note to docs about zero-indexing for machine formatters (#4544)
- [enhancement] Fix metadata of the whitespace rule (#4551)
- [enhancement] Add junit output for files which are successfully linted (#4566)
- [new-rule-option] underscore option for no-shadowed-variable rule to ignore shadowed underscores (#4546)
- [new-rule-option] require-const-for-all-caps option for variable-name rule (#2936)
- [new-rule-option] overloads option for completed-docs rule to enforce documentation of each overload signature (#4563)
- [new-rule-option] allow-namespace-imports option for no-duplicate-imports rule (#4524)
- [new-rule-option] allow-arguments option for no-object-literal-type-assertion rule to allow type assertions on object literals used inside call expressions (#4521)
- [new-rule-option] allow-delete option for no-unbound-method rule (#4548)
- [new-rule] no-tautology-expression (#4470)
- [new-rule] static-this (#4475)
- [new-rule] unnecessary-else (#4502)
Thanks to our contributors!
- Roman Rogowski
- Max Belsky
- Edward Drapkin
- Dominik Palo
- Matthew McCune
- Debsmita
- Lucas Charles
- Piotr Gajowniczek
- Darren Anderson
- Noam Yogev
- Josh Goldberg
- Karol Majewski
5.13.1 - 2019-03-01
5.13.0 - 2019-02-23
5.12.1 - 2019-01-10
5.12.0 - 2018-12-18
5.11.0 - 2018-07-16