TypeError: (0 , a.hasTrojanSource) is not a function

[travi]

i'm seeing the following error in lockfile updates from renovate:

TypeError: (0 , a.hasTrojanSource) is not a function
 Occurred while linting /home/runner/work/project/project/cucumber.js:1
 Rule: "anti-trojan-source/no-bidi"
     at /home/runner/work/project/project/node_modules/eslint-plugin-anti-trojan-source/dist/index.js:1:709
     at Array.forEach (<anonymous>)
     at onCodePathStart (/home/runner/work/project/project/node_modules/eslint-plugin-anti-trojan-source/dist/index.js:1:667)
     at ruleErrorHandler (/home/runner/work/project/project/node_modules/eslint/lib/linter/linter.js:1076:28)
     at /home/runner/work/project/project/node_modules/eslint/lib/linter/safe-emitter.js:45:58
     at Array.forEach (<anonymous>)
     at Object.emit (/home/runner/work/project/project/node_modules/eslint/lib/linter/safe-emitter.js:45:38)
     at startCodePath (/home/runner/work/project/project/node_modules/eslint/lib/linter/code-path-analysis/code-path-analyzer.js:437:26)
     at processCodePathToEnter (/home/runner/work/project/project/node_modules/eslint/lib/linter/code-path-analysis/code-path-analyzer.js:463:13)
     at CodePathAnalyzer.enterNode (/home/runner/work/project/project/node_modules/eslint/lib/linter/code-path-analysis/code-path-analyzer.js:800:9)

this is one example:

• error in the context of a failed CI workflow
• related renovate PR

this seems to be related to how this plugin consumes the recent update to the underlying anti-trojan-source package

[lirantal]

Ahh yes, I'm looking. Thanks Travi!

[lirantal]

I published 1.8.1 of anti-trojan-source which exposes the previous hasTrojanSource function. Can you re-run the CI or update and confirm it's now fixed, @travi ?

[travi]

That did it, thanks for the quick turn around!

To confirm, should I be looking to use this in a different way?

[lirantal]

I added some more functions around more invisible and dangerous chars but it shouldn't require you to be explicitly aware of it. I'll release an update to the eslint plugin to leverage them and use the updated code on anti-trojan-source.

[travi]

Awesome. I've been following your updates about it lately, but wasn't sure if I needed to take action to leverage the new protections. Looking forward to the updates

[lirantal]

Yep I think we're good on this one so I'll close it.