Skip to content

chore(deps): update dependency eslint-plugin-prettier to v5.5.3#5823

Merged
nvuillam merged 1 commit intomainfrom
renovate/eslint-plugin-prettier-5.5.x
Jul 21, 2025
Merged

chore(deps): update dependency eslint-plugin-prettier to v5.5.3#5823
nvuillam merged 1 commit intomainfrom
renovate/eslint-plugin-prettier-5.5.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jul 18, 2025

This PR contains the following updates:

Package Change Age Confidence
eslint-plugin-prettier 5.5.1 -> 5.5.3 age confidence

Release Notes

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v5.5.3

Compare Source

republish the latest version

Full Changelog: prettier/eslint-plugin-prettier@v5.5.2...v5.5.3

v5.5.2

Compare Source

Changelog

5.5.1

Patch Changes

5.5.0

Minor Changes

5.4.1

Patch Changes
  • #​740 c21521f Thanks @​JounQin! - fix(deps): bump synckit to v0.11.7 to fix potential TypeError: Cannot read properties of undefined (reading 'message') error

5.4.0

Minor Changes

5.3.1

Patch Changes

5.3.0

Minor Changes

5.2.6

Patch Changes

5.2.5

Patch Changes

5.2.4

Patch Changes

5.2.3

Patch Changes

5.2.2

Patch Changes

5.2.1

Patch Changes

5.2.0

Minor Changes

5.1.3

Patch Changes

5.1.2

Patch Changes
  • #​623 8210e44 Thanks @​BPScott! - Add exports mapping to package.json, to allow import eslintPluginRecommended from 'eslint-plugin-prettier/recommended' to work as expected.

    Strictly speaking this is a breaking change as it removes the ability for people to import from "eslint-plugin-prettier/eslint-plugin-prettier.js" and "eslint-plugin-prettier/recommended.js" but the former was never recommended in the first place and the latter has only been available for a few days.

  • #​621 2b09e7f Thanks @​JounQin! - feat: support parsing markdown via eslint-mdx natively

    What means the following is unnecessary anymore when using with eslint-mdx/eslint-plugin-mdx!

    [
      {
        files: ["**/*.md"],
        rules: { "prettier/prettier": ["error", { parser: "markdown" }] },
      },
      {
        files: ["**/*.mdx"],
        rules: { "prettier/prettier": ["error", { parser: "mdx" }] },
      },
    ]

5.1.1

Patch Changes

5.1.0

Minor Changes
  • #​616 3856413 Thanks @​BPScott! - Add recommended config for the flat config format.

    If you are using flat config, import the recommended config from eslint-plugin-prettier/recommended. Like the legacy format recommended config, this automatically includes the contents of eslint-config-prettier.

    // eslint.config.js
    const eslintPluginPrettierRecommended = require("eslint-plugin-prettier/recommended");
    
    module.exports = [
      // Any other config imports go at the top
      eslintPluginPrettierRecommended,
    ];
Patch Changes
  • #​614 5270877 Thanks @​BPScott! - Add meta block to plugin. This improves debugging and cachebusting when using the new flat config

  • #​603 a63a570 Thanks @​filiptammergard! - fix: specify eslint-config-prettier as peer dependency

    It's already added to peerDependenciesMeta as optional, which means it should also be specified in peerDependencies.

5.0.1

Patch Changes

5.0.0

Major Changes
Minor Changes
Patch Changes

4.2.2

Patch Changes

4.2.1

Patch Changes

4.2.0

Minor Changes

v4.1.0 (2022-06-27)

v4.0.0 (2021-08-30)

This breaking change drops support for old versions of ESLint, Prettier and
Node. You must use at least ESLint v7.28.0, Prettier v2.0.0 and Node v12.0.0.
Aside from that, usage of this plugin remains identical.

  • v4 - Drop support for eslint 5/6, prettier 1, node 6/8 (#​429) (acb56f3)

v3.4.1 (2021-08-20)

v3.4.0 (2021-04-15)

v3.3.1 (2021-01-04)

  • fix: add eslint-config-prettier as an optional peer dependency (#​374) (d59df27)
  • build(deps-dev): bump eslint from 7.16.0 to 7.17.0 (b87985d)
  • build(deps-dev): bump eslint from 7.15.0 to 7.16.0 (11e427e)

v3.3.0 (2020-12-13)

  • Minor: Perf improvement: Do not clear the config cache on each run (#​368) (1b90ea7)
  • Add peerDependenciesMeta block (#​367) (86608d5)
  • build(deps-dev): bump eslint from 7.14.0 to 7.15.0 (885f484)
  • build(deps-dev): bump eslint from 7.3.1 to 7.14.0 (cebc80b)

v3.2.0 (2020-12-03)

  • Skip CI for eslint 6 + node 8 (#​364) (f8f08e4)
  • Turn off problematic rules in recommended config (prepare for next eslint-config-prettier version) (#​360) (a1e5591)
  • Create dependabot.yml (f58b6c7)
  • docs(README): fix prettier getFileInfo link (#​335) (5a690f1)
  • build(deps-dev): bump eslint-plugin-eslint-plugin from 2.2.2 to 2.3.0 (8614c45)
  • build(deps-dev): bump eslint from 7.3.0 to 7.3.1 (12d9ed8)
  • build(deps-dev): bump eslint from 7.2.0 to 7.3.0 (5a6f42e)
  • chore: update CI badge in readme (5012b66)
  • Use Github Actions for CI (#​305) (41eb64f)

v3.1.4 (2020-06-14)

  • Avoid clearing Prettier cache when not using prettierrc (#​303) (3c8e2d9)
  • build(deps-dev): bump eslint-plugin-eslint-plugin from 2.2.1 to 2.2.2 (93f7c8b)
  • build(deps-dev): bump eslint from 7.1.0 to 7.2.0 (650ac7a)
  • build(deps-dev): bump eslint-plugin-self from 1.2.0 to 1.2.1 (6449ec1)
  • build(deps-dev): bump eslint from 7.0.0 to 7.1.0 (fd30022)
  • Chore: Add CI tests for ESLint 7 (#​291) (cc2979b)
  • build(deps-dev): bump eslint-config-prettier from 6.10.1 to 6.11.0 (35a7ee6)

v3.1.3 (2020-04-13)

  • Fix: Set meta.type to "layout" (#​283) (97152e2)
  • build(deps-dev): bump eslint-config-prettier from 6.10.0 to 6.10.1 (185b106)
  • build(deps): [security] bump acorn from 6.1.0 to 6.4.1 (bba5881)
  • build(deps-dev): bump eslint-config-prettier from 6.9.0 to 6.10.0 (9a47a6f)
  • build(deps-dev): bump eslint-plugin-eslint-plugin from 2.2.0 to 2.2.1 (aad671d)
  • build(deps-dev): bump eslint-plugin-eslint-plugin from 2.1.0 to 2.2.0 (e2458c2)
  • build(deps-dev): bump eslint-config-prettier from 6.8.0 to 6.9.0 (05ef06f)
  • build(deps-dev): bump eslint-config-prettier from 6.7.0 to 6.8.0 (ab80b3c)
  • build(deps-dev): bump eslint from 6.7.2 to 6.8.0 (dea1b30)

v3.1.2 (2019-12-15)

  • Resolve config when getting list of inferred parsers (1ad45be)
  • Fix tests now they to stop them inheriting from base prettierrc file (14840fa)
  • Move prettier config into dedicated file, so vscode plugins pick it up (c49334a)
  • build(deps-dev): bump eslint from 6.7.1 to 6.7.2 (15e6cf9)
  • build(deps-dev): bump eslint from 6.6.0 to 6.7.1 (e8ad019)
  • build(deps-dev): bump eslint-config-prettier from 6.6.0 to 6.7.0 (44f4bfe)
  • build(deps-dev): bump eslint-config-prettier from 6.5.0 to 6.6.0 (46580c5)
  • build(deps-dev): bump prettier from 1.18.2 to 1.19.1 (10b4676)
  • build(deps-dev): bump eslint from 6.5.1 to 6.6.0 (53eaeae)
  • build(deps-dev): bump eslint-config-prettier from 6.4.0 to 6.5.0 (ad3321c)
  • build(deps-dev): bump mocha from 6.2.1 to 6.2.2 (b7280b6)
  • build(deps-dev): bump eslint-config-prettier from 6.3.0 to 6.4.0 (4c1d69a)
  • build(deps-dev): bump eslint from 6.5.0 to 6.5.1 (c109a7a)
  • build(deps-dev): bump mocha from 6.2.0 to 6.2.1 (3134bea)
  • build(deps-dev): bump eslint from 6.4.0 to 6.5.0 (7c290d7)

v3.1.1 (2019-09-18)

  • build(deps-dev): bump eslint from 6.3.0 to 6.4.0 (8a793eb)
  • build(deps-dev): bump eslint-config-prettier from 6.2.0 to 6.3.0 (88c3f6c)
  • build(deps-dev): bump eslint-config-prettier from 6.0.0 to 6.2.0 (5f9fbc1)
  • build(deps-dev): bump eslint from 6.2.2 to 6.3.0 (746b66d)
  • build(deps-dev): bump eslint from 6.1.0 to 6.2.2 (97eedb4)
  • build(deps-dev): bump eslint from 6.0.1 to 6.1.0 (afef9d1)
  • build(deps-dev): bump mocha from 6.1.4 to 6.2.0 (0360a84)
  • build(deps): [security] bump lodash from 4.17.11 to 4.17.14 (9eceb68)
  • Fix: When forcing the JS parser, use the modern name (#​212) (1385310)
  • Add eslint 6 to test matrix (#​210) (bca77e6)
  • build(deps-dev): bump eslint-config-prettier from 5.0.0 to 6.0.0 (4c069bd)
  • build(deps-dev): bump eslint-config-prettier from 4.3.0 to 5.0.0 (60bb22f)
  • build(deps-dev): bump prettier from 1.18.0 to 1.18.2 (a183560)
  • build(deps-dev): bump prettier from 1.17.1 to 1.18.0 (0cad479)
  • build(deps-dev): bump eslint-config-prettier from 4.2.0 to 4.3.0 (6f3c76f)
  • build(deps-dev): bump prettier from 1.17.0 to 1.17.1 (03aecfd)

v3.1.0 (2019-05-11)

  • New: Allow options to be passed to prettier.getFileInfo (#​187) (21fa69a)
  • build(deps-dev): bump eslint-plugin-eslint-plugin from 2.0.1 to 2.1.0 (bb597e1)
  • build(deps-dev): bump eslint-config-prettier from 4.1.0 to 4.2.0 (0bb7c1d)
  • build(deps-dev): bump vue-eslint-parser from 6.0.3 to 6.0.4 (2f77df4)
  • build(deps-dev): bump mocha from 6.1.3 to 6.1.4 (222b87a)
  • build(deps-dev): bump prettier from 1.16.4 to 1.17.0 (58d8ff8)
  • build(deps-dev): bump mocha from 6.1.2 to 6.1.3 (e94e56c)
  • build(deps-dev): bump mocha from 6.1.1 to 6.1.2 (c02244b)
  • build(deps-dev): bump mocha from 6.0.2 to 6.1.1 (a9a2e4e)
  • build(deps-dev): bump eslint from 5.15.3 to 5.16.0 (073c14c)
  • build(deps-dev): bump eslint from 5.15.2 to 5.15.3 (bda931f)
  • build(deps-dev): bump eslint from 5.15.1 to 5.15.2 (19f53d6)
  • build(deps-dev): bump eslint from 5.15.0 to 5.15.1 (34b39de)
  • build(deps-dev): bump eslint from 5.14.1 to 5.15.0 (13bcc66)
  • build(deps-dev): bump eslint-plugin-self from 1.1.0 to 1.2.0 (5b4adb8)
  • build(deps-dev): bump vue-eslint-parser from 6.0.2 to 6.0.3 (e676cd1)
  • build(deps-dev): bump eslint-config-prettier from 4.0.0 to 4.1.0 (b8a9215)
  • build(deps-dev): bump mocha from 6.0.1 to 6.0.2 (cde36e4)
  • build(deps-dev): bump mocha from 6.0.0 to 6.0.1 (eb39699)
  • build(deps-dev): bump mocha from 5.2.0 to 6.0.0 (5d75421)
  • build(deps-dev): bump eslint from 5.14.0 to 5.14.1 (829156e)
  • build(deps-dev): bump eslint from 5.13.0 to 5.14.0 (b76d0b4)
  • build(deps-dev): bump vue-eslint-parser from 6.0.0 to 6.0.2 (15439e8)
  • build(deps-dev): bump vue-eslint-parser from 5.0.0 to 6.0.0 (0ea70e5)
  • build(deps-dev): bump eslint from 5.12.1 to 5.13.0 (5f18729)
  • build(deps-dev): bump prettier from 1.16.3 to 1.16.4 (ef637fe)
  • build(deps-dev): bump prettier from 1.16.1 to 1.16.3 (58ab20c)
  • build(deps-dev): bump eslint-config-prettier from 3.6.0 to 4.0.0 (14393bd)
  • build(deps-dev): bump prettier from 1.16.0 to 1.16.1 (00198b9)
  • build(deps-dev): bump prettier from 1.15.3 to 1.16.0 (7890a87)
  • build(deps-dev): bump eslint from 5.12.0 to 5.12.1 (92a8984)
  • build(deps-dev): bump eslint-config-prettier from 3.5.0 to 3.6.0 (5292d12)
  • build(deps-dev): bump eslint-config-prettier from 3.4.0 to 3.5.0 (44a2558)
  • build(deps-dev): bump eslint-config-prettier from 3.3.0 to 3.4.0 (425cfce)
  • build(deps-dev): bump eslint from 5.11.1 to 5.12.0 (3e9aa39)
  • build(deps-dev): bump eslint-plugin-node from 8.0.0 to 8.0.1 (e913afd)
  • build(deps-dev): bump vue-eslint-parser from 4.0.3 to 5.0.0 (ecfd5ba)

v3.0.1 (2018-12-28)

  • Catch and format SyntaxErrors as eslint violations (#​141) (4a0e57d)
  • build(deps-dev): bump eslint from 5.11.0 to 5.11.1 (d34daed)
  • build(deps-dev): bump eslint from 5.10.0 to 5.11.0 (7f4f45d)
  • build(deps-dev): bump eslint-plugin-eslint-plugin from 2.0.0 to 2.0.1 (5be3bcf)
  • build(deps-dev): bump eslint from 5.9.0 to 5.10.0 (11e7c44)
  • build(deps-dev): bump eslint-plugin-eslint-plugin from 1.4.1 to 2.0.0 (9e5bf14)
  • build(deps-dev): bump vue-eslint-parser from 4.0.2 to 4.0.3 (234583a)
  • build(deps-dev): bump vue-eslint-parser from 3.3.0 to 4.0.2 (8675d57)
  • Upgrade: Bump vue-eslint-parser from 3.2.2 to 3.3.0 (2379e93)
  • Upgrade: Bump eslint-config-prettier from 3.1.0 to 3.3.0 (3ea0021)
  • Upgrade: Bump eslint from 5.8.0 to 5.9.0 (c774fb8)
  • build(deps-dev): bump eslint-plugin-node from 7.0.1 to 8.0.0 (#​121) (2a4fba0)
  • build(deps-dev): bump eslint-plugin-eslint-plugin from 1.4.0 to 1.4.1 (#​120) (29caa29)
  • build(deps-dev): bump eslint from 5.6.0 to 5.8.0 (#​119) (2836350)

v3.0.0 (2018-10-01)

  • Chore: Add eslint peer-dependency (d55d79c)
  • Breaking: Extract showInvisibles and generateDifferences (bf7c40c)
  • Breaking: Defining prettier options must use an object (478c7e5)
  • Breaking: Drop support for ESLint v3 and v4 (2326231)
  • Chore: Update dependencies (1ec94c8)
  • Chore: remove two unused dependencies (bfe459c)
  • Chore: Rename test files to keep them sequential (d38ea52)
  • Breaking: Remove pragma support (3af422c)
  • Breaking: Update minimum required pretter version to 1.13.0 (29c0506)
  • Breaking: Drop support for node v4, v7 and v9 (be460bd)
  • Chore: Add vscode config to autoformat on save (9fac6b4)
  • Chore: Improve travis matrix (46d2444)
  • Chore: Add format script to run prettier (d46aa6d)

v2.7.0 (2018-09-26)

  • Update: Support prettierignore and custom processors (#​111) (38537ba)
  • Build: switch to release script package (047dc8f)

v2.6.2 (2018-07-06)

  • Fix: Add representation for \r to showInvisibles (#​100) (731bbb5)
  • Docs: Add clarification about Flow/React support to readme (#​96) (977aa77)

v2.6.1 (2018-06-23)

v2.6.0 (2018-02-02)

  • Update: Add option to skip loading prettierrc (#​83) (9e0fb48)
  • Build: add Node 8 and 9 to Travis (e5b5fa7)
  • Chore: add test for vue parsing (1ab43fd)

v2.5.0 (2018-01-16)

v2.4.0 (2017-12-17)

v2.3.1 (2017-09-18)

  • Fix: Guard against older prettier installation (#​56) (8a115f9)

v2.3.0 (2017-09-18)

v2.2.0 (2017-08-16)

v2.1.2 (2017-06-14)

v2.1.1 (2017-05-19)

v2.1.0 (2017-05-16)

v2.0.1 (2017-02-26)

  • Docs: add travis badge to README.md (1daa495)
  • Upgrade: prettier to 0.18.0 (1700e41)
  • Chore: use eslint-config-prettier (c979b84)
  • Fix: avoid relying on an internal eslint function (5296930)
  • Docs: mention eslint-config-prettier in README.md (3fd855d)
  • Chore: pin the version of prettier used to lint this module (refs #​1) (db85633)

v2.0.0 (2017-01-28)

  • Docs: create changelog (d388095)
  • Docs: add 2.0.0 migration guide (db508d7)
  • Breaking: Make prettier a peerDependency (#​1) (d8a8992)
  • Docs: add repo url to package.json (2474bc9)
  • Docs: suggest prettier-eslint if eslint rules disagree with prettier (3414437)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Jul 18, 2025
@renovate renovate bot enabled auto-merge (squash) July 18, 2025 23:08
@github-actions
Copy link
Contributor

github-actions bot commented Jul 18, 2025

🦙 MegaLinter status: ⚠️ WARNING

⚠️ PYTHON / bandit - 67 errors
Run started:2025-07-20 22:32:01.671148

Test results:
>> Issue: [B404:blacklist] Consider possible security implications associated with the subprocess module.
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/blacklists/blacklist_imports.html#b404-import-subprocess
   Location: ./.automation/build.py:11:0
10	import shutil
11	import subprocess
12	import sys

--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ''
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b105_hardcoded_password_string.html
   Location: ./.automation/build.py:2994:35
2993	                api_github_headers = {"content-type": "application/json"}
2994	                use_github_token = ""
2995	                if "GITHUB_TOKEN" in os.environ:

--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ' (with GITHUB_TOKEN)'
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b105_hardcoded_password_string.html
   Location: ./.automation/build.py:2998:39
2997	                    api_github_headers["authorization"] = f"Bearer {github_token}"
2998	                    use_github_token = " (with GITHUB_TOKEN)"
2999	                logging.info(

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3375:14
3374	        cwd=cwd,
3375	        shell=True,
3376	        executable=None if sys.platform == "win32" else which("bash"),
3377	    )
3378	    stdout = utils.clean_string(process.stdout)
3379	    logging.info(f"Format table results: ({process.returncode})\n" + stdout)
3380	
3381	
3382	def generate_version():
3383	    # npm version
3384	    logging.info("Updating npm package version…")

--------------------------------------------------
>> Issue: [B607:start_process_with_partial_path] Starting a process with a partial executable path
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b607_start_process_with_partial_path.html
   Location: ./.automation/build.py:3386:14
3385	    cwd_to_use = os.getcwd() + "/mega-linter-runner"
3386	    process = subprocess.run(
3387	        [
3388	            "npm",
3389	            "version",
3390	            "--newversion",
3391	            RELEASE_TAG,
3392	            "-no-git-tag-version",
3393	            "--no-commit-hooks",
3394	        ],
3395	        stdout=subprocess.PIPE,
3396	        universal_newlines=True,
3397	        cwd=cwd_to_use,
3398	        shell=True,
3399	    )
3400	    print(process.stdout)

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3398:14
3397	        cwd=cwd_to_use,
3398	        shell=True,
3399	    )
3400	    print(process.stdout)
3401	    print(process.stderr)
3402	    # Update python project version:
3403	    process = subprocess.run(
3404	        ["hatch", "version", RELEASE_TAG],
3405	        stdout=subprocess.PIPE,
3406	        text=True,
3407	        shell=True,
3408	        check=True,
3409	    )
3410	    # Update changelog
3411	    if UPDATE_CHANGELOG is True:
3412	        changelog_file = f"{REPO_HOME}/CHANGELOG.md"

--------------------------------------------------
>> Issue: [B607:start_process_with_partial_path] Starting a process with a partial executable path
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b607_start_process_with_partial_path.html
   Location: ./.automation/build.py:3403:14
3402	    # Update python project version:
3403	    process = subprocess.run(
3404	        ["hatch", "version", RELEASE_TAG],
3405	        stdout=subprocess.PIPE,
3406	        text=True,
3407	        shell=True,
3408	        check=True,
3409	    )
3410	    # Update changelog

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3407:14
3406	        text=True,
3407	        shell=True,
3408	        check=True,
3409	    )
3410	    # Update changelog
3411	    if UPDATE_CHANGELOG is True:
3412	        changelog_file = f"{REPO_HOME}/CHANGELOG.md"
3413	        with open(changelog_file, "r", encoding="utf-8") as md_file:
3414	            changelog_content = md_file.read()

--------------------------------------------------
>> Issue: [B605:start_process_with_a_shell] Starting a process with a shell, possible injection detected, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b605_start_process_with_a_shell.html
   Location: ./.automation/build.py:3455:4
3454	    logging.info("Running command: " + " ".join(command))
3455	    os.system(" ".join(command))
3456	

--------------------------------------------------
>> Issue: [B404:blacklist] Consider possible security implications associated with the subprocess module.
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/blacklists/blacklist_imports.html#b404-import-subprocess
   Location: ./megalinter/Linter.py:28:0
27	import shutil
28	import subprocess
29	import sys

--------------------------------------------------
>> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
   Severity: Medium   Confidence: High
   CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/blacklists/blacklist_calls.html#b310-urllib-urlopen
   Location: ./megalinter/Linter.py:567:24
566	                    with (
567	                        urllib.request.urlopen(remote_config_file) as response,
568	                        open(local_config_file, "wb") as out_file,

--------------------------------------------------
>> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
   Severity: Medium   Confidence: High
   CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/blacklists/blacklist_calls.html#b310-urllib-urlopen
   Location: ./megalinter/Linter.py:646:24
645	                    with (
646	                        urllib.request.urlopen(remote_ignore_file) as response,
647	                        open(local_ignore_file, "wb") as out_file,

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=

(Truncated to 8000 characters out of 42362)
⚠️ BASH / bash-exec - 1 error
Results of bash-exec linter (version 5.2.37)
See documentation on https://megalinter.io/beta/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .automation/build_schemas_doc.sh
✅ [SUCCESS] .automation/format-tables.sh
✅ [SUCCESS] .vscode/testlinter.sh
✅ [SUCCESS] build.sh
✅ [SUCCESS] entrypoint.sh
❌ [ERROR] sh/megalinter_exec
    Error: File:[sh/megalinter_exec] is not executable
⚠️ REPOSITORY / grype - 30 errors
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
NAME                           INSTALLED  FIXED IN  TYPE    VULNERABILITY        SEVERITY  EPSS           RISK   
ejs                            3.1.6      3.1.7     npm     GHSA-phwq-j96m-2c2q  Critical  93.5% (99th)   87.9   
tar                            6.0.1      6.1.1     npm     GHSA-3jfq-g458-7qm9  High      86.8% (99th)   68.2   
requests                       2.24.0     2.31.0    python  GHSA-j8r2-6x86-q33q  Medium    6.1% (90th)    3.4    
ip                             1.1.5                npm     GHSA-2p57-rm9w-gvfp  High      2.6% (84th)    2.0    
minimist                       1.2.5      1.2.6     npm     GHSA-xvch-5gv4-984h  Critical  1.1% (77th)    1.1    
tar                            6.0.1      6.1.9     npm     GHSA-5955-9wpr-37jh  High      0.9% (75th)    0.7    
ejs                            3.1.6      3.1.10    npm     GHSA-ghr5-ch3p-vcr6  Medium    1.3% (78th)    0.6    
node-fetch                     2.6.6      2.6.7     npm     GHSA-r683-j2x4-v87g  High      0.6% (67th)    0.5    
minimatch                      3.0.4      3.0.5     npm     GHSA-f8q6-p94x-37v3  High      0.4% (61st)    0.3    
semver                         7.3.5      7.5.2     npm     GHSA-c2qf-rxjj-qqgw  High      0.4% (60th)    0.3    
tar                            6.0.1      6.1.2     npm     GHSA-r628-mhmh-qjhw  High      0.2% (43rd)    0.2    
ansi-regex                     3.0.0      3.0.1     npm     GHSA-93q8-gq69-wqmw  High      0.2% (42nd)    0.1    
cross-spawn                    7.0.3      7.0.5     npm     GHSA-3xgq-45jj-v275  High      0.2% (42nd)    0.1    
http-cache-semantics           4.1.0      4.1.1     npm     GHSA-rc47-6667-2j5j  High      0.2% (39th)    0.1    
ip                             1.1.5      1.1.9     npm     GHSA-78xj-cgh5-2h22  Low       0.4% (59th)    0.1    
tar                            6.0.1      6.2.1     npm     GHSA-f5x3-32g6-xq36  Medium    0.2% (42nd)    0.1    
tar                            6.1.11     6.2.1     npm     GHSA-f5x3-32g6-xq36  Medium    0.2% (42nd)    0.1    
braces                         3.0.2      3.0.3     npm     GHSA-grv7-fg5c-xmjg  High      0.2% (37th)    0.1    
@octokit/request-error         2.1.0      5.1.1     npm     GHSA-xx4v-prfh-6cgc  Medium    0.2% (42nd)    0.1    
micromatch                     4.0.4      4.0.8     npm     GHSA-952p-6rrq-rcjv  Medium    0.2% (41st)    < 0.1  
@octokit/request               5.6.2      8.4.1     npm     GHSA-rmvr-2pp2-xj38  Medium    0.2% (40th)    < 0.1  
@octokit/plugin-paginate-rest  2.17.0     9.2.2     npm     GHSA-h5c3-5r3r-rr8q  Medium    < 0.1% (25th)  < 0.1  
debug                          4.2.0      4.3.1     npm     GHSA-gxpj-cx7g-858c  Low       < 0.1% (27th)  < 0.1  
requests                       2.24.0     2.32.0    python  GHSA-9wx4-h78v-vm56  Medium    < 0.1% (13th)  < 0.1  
tar                            6.0.1      6.1.9     npm     GHSA-qq89-hq3f-393p  High      < 0.1% (3rd)   < 0.1  
tar                            6.0.1      6.1.7     npm     GHSA-9r2w-394v-53qc  High      < 0.1% (3rd)   < 0.1  
word-wrap                      1.2.3      1.2.4     npm     GHSA-j8xg-fqg3-53r7  Medium    < 0.1% (5th)   < 0.1  
requests                       2.24.0     2.32.4    python  GHSA-9hjg-9r4m-mvj7  Medium    < 0.1% (4th)   < 0.1  
brace-expansion                1.1.11     1.1.12    npm     GHSA-v6h2-p8h4-qcjw  Low       < 0.1% (3rd)   < 0.1  
brace-expansion                2.0.1      2.0.2     npm     GHSA-v6h2-p8h4-qcjw  Low       < 0.1% (3rd)   < 0.1
[0032] ERROR discovered vulnerabilities at or above the severity threshold
⚠️ SPELL / lychee - 5 errors
[WARN ] WARNING: `--exclude-mail` is deprecated and will soon be removed; E-Mail is no longer checked by default. Use `--include-mail` to enable E-Mail checking.
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
📝 Summary
---------------------
🔍 Total.........2349
✅ Successful....1892
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.......452
❓ Unknown..........0
🚫 Errors...........5

Errors in README.md
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden

Errors in megalinter/descriptors/html.megalinter-descriptor.yml
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
⚠️ MARKDOWN / markdownlint - 307 errors
.github/copilot-instructions.md:9 MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/copilot-instructions.md:156 MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/linters/valestyles/proselint/README.md:12:601 MD013/line-length Line length [Expected: 600; Actual: 755]
CHANGELOG.md:2003:87 MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/badge.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Badge"]
docs/config-activation.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Activation and deactivation"]
docs/config-apply-fixes.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Apply fixes"]
docs/config-cli-lint-mode.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLI lint mode"]
docs/config-file.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: ".mega-linter.yml file"]
docs/config-filtering.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Filter linted files"]
docs/config-linters.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Linter specific variables"]
docs/config-postcommands.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Post-commands"]
docs/config-precommands.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Pre-commands"]
docs/config-variables-security.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Environment variables security"]
docs/config-variables.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Common variables"]
docs/configuration.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Configuration"]
docs/descriptors/action_actionlint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "actionlint"]
docs/descriptors/action.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ACTION"]
docs/descriptors/ansible_ansible_lint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ansible-lint"]
docs/descriptors/ansible_ansible_lint.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 795]
docs/descriptors/ansible.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ANSIBLE"]
docs/descriptors/api_spectral.md:14:601 MD013/line-length Line length [Expected: 600; Actual: 746]
docs/descriptors/api.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "API"]
docs/descriptors/arm_arm_ttk.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "arm-ttk"]
docs/descriptors/arm.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ARM"]
docs/descriptors/bash_bash_exec.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bash-exec"]
docs/descriptors/bash_shellcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shellcheck"]
docs/descriptors/bash_shellcheck.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 785]
docs/descriptors/bash_shfmt.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shfmt"]
docs/descriptors/bash.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BASH"]
docs/descriptors/bicep_bicep_linter.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bicep_linter"]
docs/descriptors/bicep.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BICEP"]
docs/descriptors/c_clang_format.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "clang-format"]
docs/descriptors/c_clang_format.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 768]
docs/descriptors/c_cppcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cppcheck"]
docs/descriptors/c_cpplint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cpplint"]
docs/descriptors/c.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "C"]
docs/descriptors/clojure_cljstyle.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cljstyle"]
docs/descriptors/clojure_cljstyle.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 768]
docs/descriptors/clojure.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLOJURE"]
docs/descriptors/cloudformation_cfn_lint.md:14:601 MD013/line-length Line length [Expected: 600; Actual: 865]
docs/descriptors/cloudformation.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLOUDFORMATION"]
docs/descriptors/coffee_coffeelint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "coffeelint"]
docs/descriptors/coffee_coffeelint.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 746]
docs/descriptors/coffee.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "COFFEE"]
docs/descriptors/copypaste.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "COPYPASTE"]
docs/descriptors/cpp_clang_format.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "clang-format"]
docs/descriptors/cpp_clang_format.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 768]
docs/descriptors/cpp_cppcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cppcheck"]
docs/descriptors/cpp_cpplint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cpplint"]
docs/descriptors/cpp.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "C++"]
docs/descriptors/csharp_csharpier.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "csharpier"]
docs/descriptors/csharp_csharpier.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 750]
docs/descriptors/csharp_dotnet_format.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "dotnet-format"]
docs/descriptors/csharp_roslynator.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "roslynator"]
docs/descriptors/csharp_roslynator.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 770]
docs/descriptors/csharp.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "C\#"]
docs/descriptors/css_stylelint.md:14:601 MD013/line-length Line length [Expected: 600; Actual: 788]
docs/descriptors/css.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CSS"]
docs/descriptors/dart_dartanalyzer.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "dartanalyzer"]
docs/descriptors/dart.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "DART"]
docs/descriptors/dockerfile_hadolint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "hadolint"]
docs/descriptors/dockerfile_hadolint.md:8:601 MD013/line-length Line length [Expected: 600;

(Truncated to 8000 characters out of 38125)

✅ Linters with no issues

black, checkov, cspell, flake8, git_diff, hadolint, isort, jscpd, jsonlint, markdown-table-formatter, mypy, npm-groovy-lint, prettier, pylint, ruff, secretlint, shellcheck, shfmt, spectral, syft, trivy, trivy-sbom, trufflehog, v8r, v8r, xmllint, yamllint

See detailed report in MegaLinter reports

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/eslint-plugin-prettier-5.5.x branch from dc65a28 to afe8728 Compare July 20, 2025 18:16
@renovate renovate bot force-pushed the renovate/eslint-plugin-prettier-5.5.x branch from afe8728 to cedce5a Compare July 20, 2025 21:12
@renovate renovate bot force-pushed the renovate/eslint-plugin-prettier-5.5.x branch from cedce5a to 00dc16c Compare July 20, 2025 21:12
@renovate renovate bot force-pushed the renovate/eslint-plugin-prettier-5.5.x branch from 00dc16c to f002ee5 Compare July 20, 2025 21:21
@renovate renovate bot force-pushed the renovate/eslint-plugin-prettier-5.5.x branch from f002ee5 to e2a1c78 Compare July 20, 2025 22:23
@nvuillam nvuillam merged commit 0cd5c87 into main Jul 21, 2025
132 checks passed
@nvuillam nvuillam deleted the renovate/eslint-plugin-prettier-5.5.x branch July 21, 2025 03:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant