deps(npm)(deps-dev): bump eslint from 9.39.2 to 10.0.1#37
deps(npm)(deps-dev): bump eslint from 9.39.2 to 10.0.1#37dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [eslint](https://github.com/eslint/eslint) from 9.39.2 to 10.0.1. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.2...v10.0.1) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
❌ Deploy Preview for verax-tutorial failed.
|
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 2 potential issues.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
| "@typescript-eslint/parser": "^8.55.0", | ||
| "@vitejs/plugin-react": "^5.1.4", | ||
| "eslint": "^9.39.2", | ||
| "eslint": "^10.0.1", |
There was a problem hiding this comment.
@eslint/js not bumped alongside eslint major version
High Severity
eslint was bumped to ^10.0.1 but @eslint/js remains at ^9.39.2. ESLint v10 decoupled @eslint/js from its own dependencies and introduced a breaking change (feat!: update eslint:recommended configuration). The project's eslint.config.js imports js.configs.recommended from @eslint/js, so the v9 recommended config will be applied instead of the updated v10 recommended config, leading to stale or mismatched lint rules.
Additional Locations (1)
| "@typescript-eslint/parser": "^8.55.0", | ||
| "@vitejs/plugin-react": "^5.1.4", | ||
| "eslint": "^9.39.2", | ||
| "eslint": "^10.0.1", |
There was a problem hiding this comment.
Multiple plugins lack eslint v10 peer dependency support
Medium Severity
Bumping eslint to v10 creates peer dependency conflicts with several locked plugin versions: @typescript-eslint/eslint-plugin@8.55.0 (eslint: "^8.57.0 || ^9.0.0"), eslint-plugin-react@7.37.5 (eslint: "... || ^9.7"), eslint-plugin-react-hooks@7.0.1 (eslint: "... || ^9.0.0"), eslint-plugin-jsx-a11y@6.10.2, and eslint-plugin-import@2.32.0. These plugins may break at runtime since eslint v10 removed deprecated SourceCode methods, context methods, and eslintrc support.
Additional Locations (1)
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps eslint from 9.39.2 to 10.0.1.
Release notes
Sourced from eslint's releases.
... (truncated)
Commits
0bd549710.0.1ddb80efBuild: changelog update for 10.0.1c87d5bdfix: update eslint (#20531)e5c281fchore: updates for v9.39.3 released841001fix: updateminimatchto10.2.1to address security vulnerabilities (#20519)8c3832achore: update@typescript-eslint/parserto ^8.56.0 (#20514)5b3dbcedocs: add AI acknowledgement section to templates (#20431)04c2147fix: update error message for unused suppressions (#20496)8330d23test: add tests for config-api (#20493)37d6e91chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Medium Risk
This is a major ESLint upgrade that can change lint behavior and potentially break CI/lint scripts. ESLint v10 also tightens Node.js engine requirements, which may require updating local/CI runtimes.
Overview
Upgrades dev tooling by bumping
eslintfrom9.39.2to10.0.1inpackage.jsonand regeneratingpackage-lock.jsonto match.The lockfile reflects ESLint v10’s updated dependency graph (notably
minimatchv10 and newer@eslint/*packages) and its newer Node.js engine constraints.Written by Cursor Bugbot for commit 9fe9af9. This will update automatically on new commits. Configure here.