Upgrading eslint-config-prettier 8 to 9
Breaking8.10.2 → 9.1.2Breaking1Security1New2Changed1
SecurityHigh · CVSS 7.5eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious codeGHSA-f29h-pxvx-f335 · CVE-2025-54313 ↗
BreakingUpgrade verdict
1 breaking change and a security fix.
In plain terms
- A rule about the byte order mark at the start of files is no longer disabled for you, so you may see new lint errors about it.
- eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code
Must act 2 items need code or config changes
What you must change
Breaking1
The unicode-bom rule is no longer turned off, so ESLint may now report BOM errors that were previously suppressed.
unicode-bomSecurity1
eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code
High · CVSS 7.5