[Snyk] Upgrade eslint-plugin-react from 7.20.5 to 7.37.5

[scatools-demo]

Snyk has created this PR to upgrade eslint-plugin-react from 7.20.5 to 7.37.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 63 versions ahead of your current version.

• The recommended version was released 10 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-567746	416	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	416	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	416	Proof of Concept
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	416	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-15053838	416	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-15053838	416	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-15053838	416	No Known Exploit
	Open Redirect SNYK-JS-EXPRESS-6474509	416	No Known Exploit
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	416	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-15053838	416	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	416	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	416	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	416	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	416	No Known Exploit
	Cross-site Scripting SNYK-JS-SEND-7926862	416	No Known Exploit
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	416	No Known Exploit

Release notes

Package name: eslint-plugin-react

• 7.37.5 - 2025-04-03
  

  Fixed

  • no-unknown-property: allow shadow root attrs on <template> (#3912 @ ljharb)
  • prop-types: support ComponentPropsWithRef from a namespace import (#3651 @ corydeppen)
  • jsx-no-constructed-context-values: detect constructed context values in React 19 <Context> usage (#3910 @ TildaDares)
  • no-unknown-property: allow transform-origin on rect (#3914 @ ljharb)

  Changed

  • [Docs] button-has-type: clean up phrasing (#3909 @ hamirmahal)
• 7.37.4 - 2025-01-13
  

  Fixed

  • no-unknown-property: support onBeforeToggle, popoverTarget, popoverTargetAction attributes (#3865 @ acusti)
  • [types] fix types of flat configs (#3874 @ ljharb)
• 7.37.3 - 2024-12-24
  

  Fixed

  • no-danger: avoid a crash on a nested component name (#3833 @ ljharb)
  • [Fix] types: correct generated type declaration (#3840 @ ocavue)
  • no-unknown-property: support precedence prop in react 19 (#3829 @ acusti)
  • prop-types: props missing in validation when using generic types from a namespace import (#3859 @ rbondoc96)

  Changed

  • [Tests] jsx-no-script-url: Improve tests (#3849 @ radu2147)
  • [Docs] fix broken links: default-props-match-prop-types, jsx-boolean-value, jsx-curly-brace-presence, jsx-no-bind, no-array-index-key, no-is-mounted, no-render-return-value, require-default-props (#3841 @ bastiendmt)
• 7.37.2 - 2024-10-22
  

  Fixed

  • destructuring-assignment: fix false negative when using typeof props.a (#3835 @ golopot)

  Changed

  • [Refactor] destructuring-assignment: use getParentStatelessComponent (#3835 @ golopot)
• 7.37.1 - 2024-10-01
  

  Fixed

  • [meta] do not npmignore d.ts files (#3836 @ ljharb)

  Changed

  • [readme] Fix shared settings link (#3834 @ MgenGlder)
• 7.37.0 - 2024-09-27
  

  Added

  • add type generation (#3830 @ voxpelli)
  • no-unescaped-entities: add suggestions (#3831 @ StyleShit)
  • forbid-component-props: add allowedForPatterns/disallowedForPatterns options (#3805 @ Efimenko)
  • no-unstable-nested-components: add propNamePattern to support custom render prop naming conventions (#3826 @ danreeves)

  Changed

  • [readme] flat config example for react 17+ (#3824 @ GabenGar)
• 7.36.1 - 2024-09-12
  

  Fixed

  • no-is-mounted: fix logic in method name check (#3821 @ Mathias-S)
  • jsx-no-literals: Avoid crashing on valueless boolean props (#3823 @ reosarevok)
• 7.36.0 - 2024-09-12
  

  Added

  • no-string-refs: allow this.refs in > 18.3.0 (#3807 @ henryqdineen)
  • jsx-no-literals Add elementOverrides option and the ability to ignore this rule on specific elements (#3812 @ Pearce-Ropion)
  • forward-ref-uses-ref: add rule for checking ref parameter is added ([#3667][] @ NotWoods)

  Fixed

  • function-component-definition, boolean-prop-naming, jsx-first-prop-new-line, jsx-props-no-multi-spaces, propTypes: use type args (#3629 @ HenryBrown0)
  • JSX pragma: fail gracefully (#3632 @ ljharb)
  • jsx-props-no-spreading: add explicitSpread option to schema (#3799 @ ljharb)

  Changed

  • [Tests] add @ typescript-eslint/parser v6 (#3629 @ HenryBrown0)
  • [Tests] add @ typescript-eslint/parser v7 and v8 (#3629 @ hampustagerud)
  • [Docs] no-danger: update broken link (#3817 @ lucasrmendonca)
  • [types] add jsdoc type annotations (#3731 @ y-hsgw)
  • [Tests] button-has-type: add test case with spread (#3731 @ y-hsgw)
• 7.35.2 - 2024-09-03
  

  Fixed

  • jsx-curly-brace-presence: avoid autofixing attributes with double quotes to a double quoted attribute (#3814 @ ljharb)
• 7.35.1 - 2024-09-02
  

  Fixed

  • jsx-curly-brace-presence: do not trigger on strings containing a quote character (#3798 @ akulsr0)
• 7.35.0 - 2024-07-20
• 7.34.4 - 2024-07-13
• 7.34.3 - 2024-06-18
• 7.34.2 - 2024-05-28
• 7.34.1 - 2024-03-15
• 7.34.0 - 2024-03-04
• 7.33.2 - 2023-08-16
• 7.33.1 - 2023-07-29
• 7.33.0 - 2023-07-20
• 7.32.2 - 2023-01-29
• 7.32.1 - 2023-01-16
• 7.32.0 - 2023-01-11
• 7.31.11 - 2022-11-18
• 7.31.10 - 2022-10-10
• 7.31.9 - 2022-10-09
• 7.31.8 - 2022-09-09
• 7.31.7 - 2022-09-05
• 7.31.6 - 2022-09-04
• 7.31.5 - 2022-09-04
• 7.31.4 - 2022-09-03
• 7.31.3 - 2022-09-03
• 7.31.2 - 2022-09-02
• 7.31.1 - 2022-08-26
• 7.31.0 - 2022-08-24
• 7.30.2 - 2022-08-24
• 7.30.1 - 2022-06-23
• 7.30.0 - 2022-05-18
• 7.29.4 - 2022-03-13
• 7.29.3 - 2022-03-03
• 7.29.2 - 2022-02-26
• 7.29.1 - 2022-02-25
• 7.29.0 - 2022-02-25
• 7.28.0 - 2021-12-22
• 7.27.1 - 2021-11-19
• 7.27.0 - 2021-11-10
• 7.26.1 - 2021-09-30
• 7.26.0 - 2021-09-21
• 7.25.3 - 2021-09-19
• 7.25.2 - 2021-09-16
• 7.25.1 - 2021-08-30
• 7.25.0 - 2021-08-29
• 7.24.0 - 2021-05-29
• 7.23.2 - 2021-04-08
• 7.23.1 - 2021-03-24
• 7.23.0 - 2021-03-23
• 7.22.0 - 2020-12-30
• 7.21.5 - 2020-10-20
• 7.21.4 - 2020-10-09
• 7.21.3 - 2020-10-02
• 7.21.2 - 2020-09-24
• 7.21.1 - 2020-09-23
• 7.21.0 - 2020-09-23
• 7.20.6 - 2020-08-12
• 7.20.5 - 2020-07-28

from eslint-plugin-react GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs