Mike McCready

See also GitHub Actions announcement [GitHub-hosted runners: Public Beta of Ubuntu 24.04 is now available](https://github.blog/changelog/2024-05-14-github-hosted-runners-public-beta-of-ubuntu-24-04-is-now-available/) May 14, 2024.

- This CRITICAL security vulnerability was also reported in https://github.com/cypress-io/cypress-docker-images/issues/1115 for [cypress/included:13.11.0](https://hub.docker.com/layers/cypress/included/13.11.0/images/sha256-08d27295f83918b513bf57d85e70a931e62ffd1d21e31774428acffc0b29c950) To reproduce report, use for example: ```shell trivy image --ignore-unfixed --vuln-type library --severity CRITICAL cypress/included:13.11.0 ```

- PR https://github.com/cypress-io/cypress/pull/30159 submitted to resolve this issue.

- Also mentioned in https://github.com/yarnpkg/yarn/issues/9035

@ihordiachenko https://eslint.org/blog/2023/09/preparing-custom-rules-eslint-v9/ gives a code example for updating [`context.getAncestors()`](https://eslint.org/blog/2023/09/preparing-custom-rules-eslint-v9/#context.getancestors()) so that it is compatible with ESLint >= `9.0.0` and earlier versions.

@crfrolik > Just encountered this. Is there a workaround? > > ``` > Oops! Something went wrong! :( > > ESLint: 9.1.1 > > TypeError: context.getAncestors is not a function...

@ihordiachenko Would you like a PR to fix this issue or are you already planning to do it yourself?

@ihordiachenko - I went ahead and submitted PR https://github.com/ihordiachenko/eslint-plugin-chai-friendly/pull/33 to resolve this issue.

@ihordiachenko > released in `[email protected]` Thank you very much! I am just testing with Cypress and ESLint v9 flat configuration and it all looks good! 👍🏻

Is there some reason this has not been addressed? https://github.com/actions/toolkit/blob/457303960f03375db6f033e214b9f90d79c3fe5c/packages/cache/package.json#L49 In other places `[email protected]` is being used rather than `[email protected]`. Could this also be updated in https://github.com/actions/toolkit/blob/main/packages/cache/package.json to avoid the...