@typescript-eslint/parser version 8.9.0 introduces subtle but potentially impactful updates compared to the previous stable version, 8.8.1. While the core description remains consistent (an ESLint custom parser leveraging TypeScript ESTree), developers should note the changes in dependent packages. All @typescript-eslint/* dependencies, including @typescript-eslint/types, @typescript-eslint/visitor-keys, @typescript-eslint/scope-manager, and @typescript-eslint/typescript-estree, have been bumped from version 8.8.1 to 8.9.0. This indicates internal improvements or bug fixes within those specific sub-packages that this parser relies on. No changes are seen regarding the peer dependencies or the dev dependencies. This means that the eslint, jest and typescript version used by developers should stay the same. Furthermore, the package size remains unchanged, with an unpacked size of 18676 bytes across 11 files. The main difference between the 2 packages is the release date, with the newest version is released a week after the previous. This may mean that the new version fixes some bugs from the previous. Developers should consult the changelogs for each of those updated @typescript-eslint/* packages to understand the precise nature of these changes before upgrading, which are not explicitly detailed in the parser's metadata itself. This is especially true in scenarios where code depends on very specific behavior or types exposed by these sub-packages - these details are important if you want to upgrade your ESLint and TypeScript projects.
The are not vulnerabilities for the version 8.9.0 of the package @typescript-eslint/parser