Update dependency jshint to v2 (master)

[appcues-wss]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
jshint (source)	~0.9.1 -> ~2.9.3

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	CVE
High	7.5	WS-2016-0036
Low	3.5	CVE-2016-10538

---

Release Notes

jshint/jshint (jshint)

v2.9.3

Compare Source

Bug Fixes

• Add TypedArray globals for ES2015 (ee0acab)
• Allow Expression within for-in head (56c95d0)
• Avoid crash when peeking past end of prog (#​2937) (330d429)
• Correct behavior of singleGroups (#​2951) (97fefb7)
• Correct interpretation of ASI (#​2977) (3ef7a03)
• Correctly recognize asi after directives (039ee2e), closes #​2714
• Disallow Import declarations below top lvl (d800e44)
• Support y RegExp flag in ES2015 code (#​2999) (a801433)
• Support semicolons within arrow fn params (#​3003) (179a9d6)

Features

• Error for literals on rhs of instanceof (e3e745b), closes #​2777

v2.9.2

Compare Source

This release contains a number of bug fixes. As always, we thank everyone who
reported issues and submitted patches; those contributions are essential to the
continuing improvement of the project. We hope you'll keep it up!

Bug Fixes

• (cli - extract) lines can end with "\r\n", not "\n\r" (93818f3), closes #​2825
• Account for implied closures (c3b4d63)
• Add CompositionEvent to browser globals (56515cf)
• Allow destructuring in setter parameter (97d0ac1)
• Allow parentheses around object destructuring assignment. (7a0bd70), closes #​2775
• Allow regex inside template literal (5dd9c90), closes #​2791
• Allow regexp literal after 'instanceof' (caa30e6), closes #​2773
• Correct CLI's indentation offset logic (47daf76), closes #​2778
• Do not crash on invalid input (2e0026f)
• Do not fail on valid configurations (2fb3c24)
• Don't throw E056 for vars used in two functions (fd91d4a), closes #​2838
• Emit correct token value from "module" API (4a43fb9)
• Expand forms accepted in dstr. assignment (8bbd537)
• Improve binding power for tagged templates (9cf2ff0)
• Improve reporting of "Bad assignment." (08df19e)
• Make the 'freeze' option less strict (b76447c), closes #​1600
• Report "Bad assignment." in destructuring (fe559ed)
• Report character position for camelcase errors (480252a), closes #​2845
• Reserve await keyword in ES6 module code (b1c8d5b)

v2.9.1

Compare Source

Following the revocation of version 2.9.0, we observed an extended "release
candidate" phase where we encouraged users to vet JSHint for undesirable
changes in behavior. During that time, we identified and resolved a number of
such regressions. This release comprises all changes from the release candidate
phase along with the improvements initially released as version 2.9.0. This
release does not itself contain any changes to the codebase. If you are
upgrading from version 2.8.0 or earlier, please refer to the
previously-published release notes for details on bug fixes and features--these
can be found in the project's CHANGELOG.md file and on the project's website.

v2.8.0

Compare Source

Bug Fixes

• add the "fetch" global for "browser" environment (b3b41c8), closes #​2355
• Allow lexer to communicate completion (a093f78)
• Distinguish between directive and mode (51059bd)
• Don't throw "Duplicate class method" with computed method names (ab12dfb), closes #​2350
• Ignore unused arrow-function parameters if unused: vars (2ea9cb0), closes #​2345
• Move helper methods to state object (678da76)
• parse const declarations in ForIn/Of loops (2b673d9), closes #​2334 #​2335
• Parse semicolons in class bodies (58c8e64)
• Prevent regression in enforceall (6afcde4)
• Relax singleGroups restrictions: arrow fns (4a4f522)
• Relax singleGroups restrictions: IIFEs (9f55160)
• Reset generator flag for each method definition (2444a04), closes #​2388 #​2389

Features

• Implement module option (290280c)
• support destructuring in ForIn/Of loops, lint bad ForIn/Of LHS (c0edd9f), closes #​2341

v2.7.0

Compare Source

Bug Fixes

• Accept get and set as ID properties (2ad235c)
• allow trailing comma in ArrayBindingPattern (3477933), closes #​2222
• allow typeof symbol === "symbol" (7f7aac2), closes #​2241 #​2242
• Correctly enforce maxparams:0 (011364e)
• default to empty string in src/cli.js loadIgnores (0eeba14)
• disallow 'lone' rest operator in identifier() (dd08f85), closes #​2222
• emit I003 more carefully and less annoyingly (757fb73), closes #​2251
• export all names for var/let/const declarations (3ce1267), closes #​2248 #​2253 #​2252
• Incorrect 'Unclosed string' when the closing quote is the first character after a newline (b804e65), closes #​1532 #​1532 #​1319
• predefine HTMLTemplateElement in browser (231557a), closes #​2246
• Prevent incorrect warnings for relations (64f85f3)
• Relax restrictions on singleGroups (896bf82)
• templates are operands, not operators (162dee6), closes #​2223 #​2224

Features

• add varstmt enforcement option to disallow use of VariableStatements (59396f7), closes #​1549

2.6.3 (2015-02-28)

Bug Fixes

• parse trailing comma in ObjectBindingPattern (7a2b713), closes #​2220

2.6.2 (2015-02-28)

Bug Fixes

• Disable futurehostile option by default (3cbd41f)
• Make let variables in the closure shadow predefs (cfd2e0b)

2.6.1 (2015-02-27)

Bug Fixes

• Allow object-literals within template strings (4f08b74), closes #​2082
• Correct behavior of singleGroups (6003c83)
• Correct token reported by singleGroups (bc857f3)
• Disambiguate argument (d75ef69)
• Do not crash on improper use of delete (35df49f)
• ES6 modules respect undef and unused (438d928)
• Fix false positives in 'nocomma' option (33612f8)
• Handle multi-line tokens after return or yield (5c9c7fd), closes #​1814 #​2142
• Miss xdescribe/xit/context/xcontext in mocha (8fe6610)
• Parse nested templates (3da1eaf), closes #​2151 #​2152
• Permit "eval" as object key (b5f5d5d)
• Prevent beginning array from being confused for JSON (813d97a)
• Refactor doFunction (06b5d40)
• Remove quotmark linting for NoSubstTemplates (7e80490)
• Remove tautological condition (f0bff58)
• remove unused var (e69acfe), closes #​2156
• Simulate class scope for class expr names (ac98a24)
• Support more cases of ES6 module usage (776ed69), closes #​2118 #​2143
• Templates can not be directives (20ff670)
• Unfollowable path in lexer. (065961a)

Features

• Implement new option futurehostile (da52aa0)
• parse and lint tagged template literals (4816dbd), closes #​2000

v2.6.3

Compare Source

Bug Fixes

• parse trailing comma in ObjectBindingPattern (7a2b713), closes #​2220

v2.6.2

Compare Source

Bug Fixes

• Disable futurehostile option by default (3cbd41f)
• Make let variables in the closure shadow predefs (cfd2e0b)

v2.6.1

Compare Source

Bug Fixes

• Allow object-literals within template strings (4f08b74), closes #​2082
• Correct behavior of singleGroups (6003c83)
• Correct token reported by singleGroups (bc857f3)
• Disambiguate argument (d75ef69)
• Do not crash on improper use of delete (35df49f)
• ES6 modules respect undef and unused (438d928)
• Fix false positives in 'nocomma' option (33612f8)
• Handle multi-line tokens after return or yield (5c9c7fd), closes #​1814 #​2142
• Miss xdescribe/xit/context/xcontext in mocha (8fe6610)
• Parse nested templates (3da1eaf), closes #​2151 #​2152
• Permit "eval" as object key (b5f5d5d)
• Prevent beginning array from being confused for JSON (813d97a)
• Refactor doFunction (06b5d40)
• Remove quotmark linting for NoSubstTemplates (7e80490)
• Remove tautological condition (f0bff58)
• remove unused var (e69acfe), closes #​2156
• Simulate class scope for class expr names (ac98a24)
• Support more cases of ES6 module usage (776ed69), closes #​2118 #​2143
• Templates can not be directives (20ff670)
• Unfollowable path in lexer. (065961a)

Features

• Implement new option futurehostile (da52aa0)
• parse and lint tagged template literals (4816dbd), closes #​2000

v2.6.0

Compare Source

Bug Fixes

• Add missing globals to browser environment (32f02e0)
• Allow array, grouping and string form to follow spread operator in function call args. (437655a), closes #​2060 #​2060
• Correct bug in enforcement of singleGroups (5fedda6), closes #​2064
• Remove dead code (3b5d94a), closes #​883
• Remove dead code for parameter parsing (a1d5817)
• Revert unnecessary commit (a70bbda)

Features

• elision option to relax "Extra comma" warnings (cbfc827), closes #​2062
• Add new Jasmine 2.1 globals to "jasmine" option (343c45e), closes #​2023
• Support generators in class body (ee348c3)

BREAKING CHANGES

• In projects which do not enable ES3 mode, it is now an error by default to use elision array elements,
  also known as empty array elements (such as [1, , 3, , 5])

2.5.11 (2014-12-18)

2.5.10 (2014-11-06)

2.5.9 (2014-11-06)

2.5.8 (2014-10-29)

2.5.7 (2014-10-28)

2.5.6 (2014-09-21)

2.5.5 (2014-08-24)

2.5.4 (2014-08-18)

2.5.3 (2014-08-08)

2.5.2 (2014-07-05)

2.5.1 (2014-05-16)

v2.5.11

Compare Source

2.5.11 (2014-12-18)

v2.5.10

Compare Source

2.5.10 (2014-11-06)

v2.5.9

Compare Source

2.5.9 (2014-11-06)

v2.5.8

Compare Source

2.5.8 (2014-10-29)

v2.5.7

Compare Source

2.5.7 (2014-10-28)

v2.5.6

Compare Source

2.5.6 (2014-09-21)

v2.5.5

Compare Source

2.5.5 (2014-08-24)

v2.5.4

Compare Source

2.5.4 (2014-08-18)

v2.5.3

Compare Source

2.5.3 (2014-08-08)

v2.5.2

Compare Source

2.5.2 (2014-07-05)

v2.5.1

Compare Source

2.5.11 (2014-12-18)

v2.5.0

Compare Source

2.4.3 (2014-01-26)

2.4.2 (2014-01-21)

2.4.1 (2014-01-03)

v2.4.4

Compare Source

2.4.4 (2014-02-21)

v2.4.3

Compare Source

2.4.3 (2014-01-26)

v2.4.2

Compare Source

2.4.2 (2014-01-21)

v2.4.1

Compare Source

2.4.1 (2014-01-03)

v2.4.0

Compare Source

2.4.0 (2013-12-25)

v2.3.0

Compare Source

2.3.0 (2013-10-21)

v2.2.0

Compare Source

2.1.10 (2013-08-15)

Thanks to Dave Camp JSHint now supports list
comprehensions, a declarative way of transforming a list:

[ for (i of [ 1, 2, 3 ]) i + 2 ]; // Returns [ 3, 4, 5 ]

Note: SpiderMonkey currently implements a slightly different syntax for list
comprehensions which is also supported by JSHint.

Patch summary

• ae96e5c
  Fixed #​1220: Add typed array
  option, implied by 'node' option
• 27bd241
  Fixed #​1222: Update
  PhantomJS globals to 1.7 API
• 6c5a085
  Fixed #​1216: Support for
  array comprehensions using for-of (closed #​1095)
• 83374ad
  No issue: Remove /stable/ subdirectories
• 1a3c47f
  Fixed #​1174: Fixed a false
  positive 'destructuring assignment' warning (closed #​1177)
• 303c535
  Fixed #​1183: Fix an issue
  with debugger warning pointing to a wrong line in some cases
• a0b7181
  No issue: Add helper programs to apply and land patches from GitHub
• 9c2b8dd
  Fixed #​1194: Don't look for
  a config when input is /dev/stdin
• a17ae9e
  Fixed #​1189: Support spaces
  in /*global ... */
• dcc1251
  Fixed #​1197: Make Rhino
  wrapper to be more consistent with NPM package.
• 96ea1a8
  No issue: Split make.js into bin/build and bin/changelog
• 4ac19fa
  No issue: Move JSHint config into package.json

Thanks to Rob Wu, Ryan Cannon, Dave Camp, Amir Livneh, Josh Hoff, Nikolay
S. Frantsev, Lapo Luchini, Lukas Domnick for sending patches!

2.1.9 (2013-08-02)

2.1.8 (2013-08-01)

2.1.7 (2013-07-29)

2.1.6 (2013-07-29)

UPDATE: We just published another version, 2.1.7, which contains only one
bugfix: #​1199.

In this release we added two new arguments to our CLI program: exclude which
allows you to exclude directories from linting and prereq which allows you to
specify a file containing declarations of the global variables used throughout
your project. In addition to that, we added support for stdin. JSHint now
follows a UNIX convention where if a given file path is a dash (-) the the
program reads from stdin.

We also extended our ES6 coverage by adding support for yield statements and
import/export declarations. JSHint is still the only linter that can
parse most ES6 and Mozilla-specific JavaScript code.

For more changes, see the patch summary below.

• 004dc61
  Fixed #​1178: Changed
  'predef' to 'globals' in the example .jshintrc
• cd69f13
  Fixed #​1187: Explicitly
  define contents of our NPM package
• c83caf3
  Fixed #​1166: Tweaks to
  import/export support
• 537dcbd
  Fixed #​1164: Add codes to
  errors generated by quit()
• 6aed7ed
  Fixed #​1155: Use shelljs
  option in make.js
• 87df213
  Fixed #​1153: Moved E037 and
  E038 to the warnings section and changed their message.
• dd060c7
  Fixed #​779: Add support for
  !pattern in the .jshintignore files
• 5de09c4
  Fixed #​696: Add support for
  --exclude arg
• ee3d598
  Fixed #​809: Added short
  options to bin/jshint where it made sense
• b937895
  Fixed #​810: Made --reporter
  description in -h more straightforward
• 1c70362
  Fixed #​839: Add support for
  prereq files
• 28dae4b
  Fixed #​741: expose loadConfig
  from CLI
• b39e2ac
  Followup #​687:
  eqnull
• 90b733b
  Followup #​687: Use '-' as a
  marker for stding
• 68db0d8
  Fixed #​687: Allow input via
  stdin
• 5924b2a
  Fixed #​1157: Add support for
  import/export.
• 729cfd7
  Fixed #​1154: Add MouseEvent
  and CustomEvent browser globals
• 9782fc8
  Fixed #​1134: Catch reserved
  words in ES3 mode.
• 87e3e6c
  Fixed #​1138: Count ternary
  and or operators for complexity
• 66f3e4c
  Fixed #​1133: Make shelljs
  imply node.
• 79dc812
  Fixed #​704: Add config file
  support for the Rhino wrappers.
• 88c862d
  Fixed #​1109: Parse yield
  expressions.

Thanks to Terry Roe, Sindre Sorhus, Thomas Boyt, Nikolay S. Frantsev,
XhmikosR, Jacob Rask, Kevin Chu, Tim Ruffles, Stephen Mathieson, Lukas Domnick,
usrbincc for sending patches!

2.1.5 (2013-07-27)

2.1.4 (2013-06-24)

2.1.3 (2013-06-03)

2.1.2 (2013-05-22)

2.1.1 (2013-05-21)

v2.1.11

Compare Source

2.1.11 (2013-09-20)

v2.1.10

Compare Source

Thanks to Dave Camp JSHint now supports list
comprehensions, a declarative way of transforming a list:

[ for (i of [ 1, 2, 3 ]) i + 2 ]; // Returns [ 3, 4, 5 ]

Note: SpiderMonkey currently implements a slightly different syntax for list
comprehensions which is also supported by JSHint.

Patch summary

• ae96e5c
  Fixed #​1220: Add typed array
  option, implied by 'node' option
• 27bd241
  Fixed #​1222: Update
  PhantomJS globals to 1.7 API
• 6c5a085
  Fixed #​1216: Support for
  array comprehensions using for-of (closed #​1095)
• 83374ad
  No issue: Remove /stable/ subdirectories
• 1a3c47f
  Fixed #​1174: Fixed a false
  positive 'destructuring assignment' warning (closed #​1177)
• 303c535
  Fixed #​1183: Fix an issue
  with debugger warning pointing to a wrong line in some cases
• a0b7181
  No issue: Add helper programs to apply and land patches from GitHub
• 9c2b8dd
  Fixed #​1194: Don't look for
  a config when input is /dev/stdin
• a17ae9e
  Fixed #​1189: Support spaces
  in /*global ... */
• dcc1251
  Fixed #​1197: Make Rhino
  wrapper to be more consistent with NPM package.
• 96ea1a8
  No issue: Split make.js into bin/build and bin/changelog
• 4ac19fa
  No issue: Move JSHint config into package.json

Thanks to Rob Wu, Ryan Cannon, Dave Camp, Amir Livneh, Josh Hoff, Nikolay
S. Frantsev, Lapo Luchini, Lukas Domnick for sending patches!

v2.1.9

Compare Source

2.1.9 (2013-08-02)

v2.1.8

Compare Source

2.1.8 (2013-08-01)

v2.1.7

Compare Source

2.1.7 (2013-07-29)

v2.1.6

Compare Source

UPDATE: We just published another version, 2.1.7, which contains only one
bugfix: #​1199.

In this release we added two new arguments to our CLI program: exclude which
allows you to exclude directories from linting and prereq which allows you to
specify a file containing declarations of the global variables used throughout
your project. In addition to that, we added support for stdin. JSHint now
follows a UNIX convention where if a given file path is a dash (-) the the
program reads from stdin.

We also extended our ES6 coverage by adding support for yield statements and
import/export declarations. JSHint is still the only linter that can
parse most ES6 and Mozilla-specific JavaScript code.

For more changes, see the patch summary below.

• 004dc61
  Fixed #​1178: Changed
  'predef' to 'globals' in the example .jshintrc
• cd69f13
  Fixed #​1187: Explicitly
  define contents of our NPM package
• c83caf3
  Fixed #​1166: Tweaks to
  import/export support
• 537dcbd
  Fixed #​1164: Add codes to
  errors generated by quit()
• 6aed7ed
  Fixed #​1155: Use shelljs
  option in make.js
• 87df213
  Fixed #​1153: Moved E037 and
  E038 to the warnings section and changed their message.
• dd060c7
  Fixed #​779: Add support for
  !pattern in the .jshintignore files
• 5de09c4
  Fixed #​696: Add support for
  --exclude arg
• ee3d598
  Fixed #​809: Added short
  options to bin/jshint where it made sense
• b937895
  Fixed #​810: Made --reporter
  description in -h more straightforward
• 1c70362
  Fixed #​839: Add support for
  prereq files
• 28dae4b
  Fixed #​741: expose loadConfig
  from CLI
• b39e2ac
  Followup #​687:
  eqnull
• 90b733b
  Followup #​687: Use '-' as a
  marker for stding
• 68db0d8
  Fixed #​687: Allow input via
  stdin
• 5924b2a
  Fixed #​1157: Add support for
  import/export.
• 729cfd7
  Fixed #​1154: Add MouseEvent
  and CustomEvent browser globals
• 9782fc8
  Fixed #​1134: Catch reserved
  words in ES3 mode.
• 87e3e6c
  Fixed #​1138: Count ternary
  and or operators for complexity
• 66f3e4c
  Fixed #​1133: Make shelljs
  imply node.
• 79dc812
  Fixed #​704: Add config file
  support for the Rhino wrappers.
• 88c862d
  Fixed #​1109: Parse yield
  expressions.

Thanks to Terry Roe, Sindre Sorhus, Thomas Boyt, Nikolay S. Frantsev,
XhmikosR, Jacob Rask, Kevin Chu, Tim Ruffles, Stephen Mathieson, Lukas Domnick,
usrbincc for sending patches!

v2.1.5

Compare Source

2.1.5 (2013-07-27)

v2.1.4

Compare Source

2.1.4 (2013-06-24)

v2.1.3

Compare Source

2.1.3 (2013-06-03)

v2.1.2

Compare Source

2.1.2 (2013-05-22)

v2.1.1

Compare Source

2.1.11 (2013-09-20)

v2.1.0

Compare Source

JSHint 2.1.0 is out. This releases adds support for ES6 class syntax and
fixes some issues with our parser.

• Added support for ES6 class syntax.
  (#​1048)
• Added support for error code in the Checkstyle reporter.
  (#​1088)
• Added support for do statement bodies that are not block
  statements.
  (#​1062)
• Fixed issues with JSHint not parsing comma expressions correctly.
  (#​1084)
• Fixed a bug with W080 no longer pointing to relevant identifiers.
  (#​1070)
• Fixed a potential issue with Node 0.10 and Windows.
  (#​1065)
• Fixed issues with JSHint not parsing assignments in switch
  conditionals.
  (#​1064)
• Fixed an issue with esnext and moz modes turning off the
  default es5 mode.
  (#​1068)

Thanks to usrbincc, James Allardice, Iraê Carvalho, Nick Schonning and
jklein for sending patches!

2.0.1 (2013-05-08)

v2.0.1

Compare Source

2.0.1 (2013-05-08)

v2.0.0

Compare Source

WARNING: This release introduces backwards incompatible changes.

JSHint 2.0.0 is out! This version hits a pretty big milestone for the project:
this is the first JSHint release for which I'm not the biggest contributor. I
personally believe this fact validates JSHint as a successful open source
project. And I'm extremely thankful to all you who file bug reports and send
patches—you're all awesome.

EcmaScript 5

The first and foremost: starting with this version JSHint will assume ES5 as
the default environment. Before, JSHint was checking all the code per ES3
specification with an option to enable ES5 mode. Now ES5 mode is the default
mode and if you want to check your code against the ES3 specification (useful
when developing for super old browsers such as Internet Explorer 6) you will
have to use es3:true.

Special thanks to Rick Waldron for championing this change.

Partial support for Mozilla JavaScript extensions and ES6

Thanks to our newest core contributor, Bernard Pratz, JSHint now has partial
support for Mozilla JavaScript extensions (moz option) and ES6 (esnext
option):

• Destructuring assignment
• const
• let blocks and expressions
• Generators and iterators
• List comprehension
• Try/catch filters and multiple catch blocks
• Concise method declaration
• for ... of loops
• Fat arrows

We have more patches in queue that add support for classes and other nifty ES6
things. Stay tuned!

CLI

• JSHint now looks for .jshintrc in the directory being linted.
  (#​833)
• Various cross-platform fixes for our Node CLI module.
• New public method for the CLI export that allows third-parties to hook into
  the file resolution logic.
  (#​741)

General

• For non-Node system we upgraded to the latest version of Browserify. This
  resolves some performance issues we had with Rhino.

• Added SVG globals to the browser environment.

• Option smarttabs now ignores mixed tabs and spaces within single-
  and multi-line comments.

• Added a new pragma to unignore a warning:

  /*jshint -W096 */
  
  // All warnings about keys producing unexpected results will
  // be ignored here.
  
  /*jshint +W096 */
  
  // But not here.
  

• JSHint now ignores unrecognized JSLint options.

• Fixed a bug where indent:false was triggering indentation warnings.
  (#​1035)

• Fixed a regression bug where unused was not behaving correctly.
  (#​996)

• Plus lots and lots of other, smaller bug fixes.

New rapid release schedule

And last but not least: starting with this version, I'm switching JSHint to a
more rapid release schedule. This simply means that I will be publishing new
versions of JSHint more often. I will try my best to follow
semver recommendations and ship working software. But as
our license says, no guarantees.

Thanks to Bernarnd Pratz, Michelle Steigerwalt, Yuya Tanaka, Matthew
Flaschen, Juan Pablo Buritica, Matt Cheely, Steve Mosley, Stephen Sorensen,
Rick Waldron, Hugues Malphettes, Jeff Thompson, xzyfer, Lee Leathers, croensch,
Steven Benner, James Allardice, Sindre Sorhus, Jordan Harband, Stuart Knightley
and Kevin Locke for sending patches!

v1.1.0

Compare Source

1.1.0 (2013-03-06)

v1.0.0

1.0.0 (2013-01-30)

---

• If you want to rebase/retry this PR, check this box