Skip to content

chore(deps-dev): bump the linters group across 1 directory with 5 updates - #2423

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/linters-8806236189
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/linters-8806236189

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the linters group with 5 updates in the / directory:

Package From To
@eslint/js 9.39.2 10.0.1
eslint 9.39.2 10.11.0
eslint-plugin-astro 1.5.0 3.2.1
globals 17.4.0 17.12.0
prettier 3.8.1 3.9.9

Updates @eslint/js from 9.39.2 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

  • c87d5bd fix: update eslint (#20531) (renovate[bot])
  • d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
  • 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
  • 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

  • 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
  • 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
  • b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

  • e5c281f chore: updates for v9.39.3 release (Jenkins)
  • 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
  • 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
  • 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
  • da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
  • 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

  • f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
  • a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
  • c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
  • fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
  • 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
  • 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
  • ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
  • 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
  • c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
  • 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
  • a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
  • a89059d feat!: Program range span entire source text (#20133) (Pixel998)
  • 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
  • f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
  • aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
  • f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
  • 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
  • 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
  • 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
  • 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
  • f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

  • bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
  • 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
  • 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits
  • 84fb885 chore: package.json update for @​eslint/js release
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
  • f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
  • b4b3127 chore: package.json update for @​eslint/js release
  • 0b14059 chore: package.json update for @​eslint/js release
  • fa31a60 feat!: add name to configs (#20015)
  • 1e2cad5 chore: package.json update for @​eslint/js release
  • 454a292 feat!: update eslint:recommended configuration (#20210)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
  • See full diff in compare view

Updates eslint from 9.39.2 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

  • 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

  • b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
  • 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))

... (truncated)

Commits
  • 3c0b7c6 10.11.0
  • 321f0a7 Build: changelog update for 10.11.0
  • 520dd77 perf: Implement fast paths in critical areas (#21210)
  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
  • 24310e3 chore: update ecosystem plugins (#21324)
  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
  • Additional commits viewable in compare view

Updates eslint-plugin-astro from 1.5.0 to 3.2.1

Release notes

Sourced from eslint-plugin-astro's releases.

v3.2.1

Patch Changes

  • #636 bd55613 Thanks @​renovate! - Fix <style lang="postcss"> transform to accept ESM-only PostCSS plugins loaded via postcss-load-config

  • #639 2ecb3bd Thanks @​ota-meshi! - Support postcss-load-config v4 and later for <style lang="postcss"> by running PostCSS in a worker thread. postcss-load-config v3 keeps working.

v3.2.0

Minor Changes

v3.1.0

Minor Changes

  • #616 425aebb Thanks @​ota-meshi! - Resolve the TypeScript parser from the typescript-eslint package when @typescript-eslint/parser is not installed directly.

v3.0.1

Patch Changes

  • #601 e5c330d Thanks @​astrochemx! - Fix a TypeError that occurs during the preprocessing phase when eslint-plugin-astro encounters a self-closing <script /> tag.

v3.0.0

Major Changes

  • #590 f5c3cec Thanks @​ota-meshi! - Deprecate astro/no-omitted-end-tags, make it a no-op, and remove it from the recommended configuration. This rule can no longer report omitted end tags once Astro's Rust compiler rejects them during parsing.

  • #596 f8cbb64 Thanks @​ota-meshi! - Deprecate astro/valid-compile and remove it from the recommended configuration. Astro's astro check command is now recommended for project-wide diagnostics.

  • #568 df28a46 Thanks @​ota-meshi! - Upgrade astro-eslint-parser to v3. Astro files are now parsed with Astro's Rust compiler (@astrojs/compiler-rs) instead of @astrojs/compiler.

v2.1.1

Patch Changes

  • #588 3a04d1e Thanks @​ota-meshi! - Fix false positives in astro/no-omitted-end-tags for component names that overlap with HTML tag names, such as <Head>, while preserving reported source offsets.

v2.1.0

Minor Changes

v2.0.0

Major Changes

... (truncated)

Changelog

Sourced from eslint-plugin-astro's changelog.

3.2.1

Patch Changes

  • #636 bd55613 Thanks @​renovate! - Fix <style lang="postcss"> transform to accept ESM-only PostCSS plugins loaded via postcss-load-config

  • #639 2ecb3bd Thanks @​ota-meshi! - Support postcss-load-config v4 and later for <style lang="postcss"> by running PostCSS in a worker thread. postcss-load-config v3 keeps working.

3.2.0

Minor Changes

3.1.0

Minor Changes

  • #616 425aebb Thanks @​ota-meshi! - Resolve the TypeScript parser from the typescript-eslint package when @typescript-eslint/parser is not installed directly.

3.0.1

Patch Changes

  • #601 e5c330d Thanks @​astrochemx! - Fix a TypeError that occurs during the preprocessing phase when eslint-plugin-astro encounters a self-closing <script /> tag.

3.0.0

Major Changes

  • #590 f5c3cec Thanks @​ota-meshi! - Deprecate astro/no-omitted-end-tags, make it a no-op, and remove it from the recommended configuration. This rule can no longer report omitted end tags once Astro's Rust compiler rejects them during parsing.

  • #596 f8cbb64 Thanks @​ota-meshi! - Deprecate astro/valid-compile and remove it from the recommended configuration. Astro's astro check command is now recommended for project-wide diagnostics.

  • #568 df28a46 Thanks @​ota-meshi! - Upgrade astro-eslint-parser to v3. Astro files are now parsed with Astro's Rust compiler (@astrojs/compiler-rs) instead of @astrojs/compiler.

2.1.1

Patch Changes

  • #588 3a04d1e Thanks @​ota-meshi! - Fix false positives in astro/no-omitted-end-tags for component names that overlap with HTML tag names, such as <Head>, while preserving reported source offsets.

2.1.0

Minor Changes

... (truncated)

Commits
  • 1cfdc01 Version Packages (#638)
  • 75f20e9 chore(deps): update dependency @​astrojs/mdx to v8 (#632)
  • 2ecb3bd fix: support postcss-load-config v4+ by running PostCSS in a worker (#639)
  • bd55613 chore(deps): update dependency prettier-plugin-astro to v1 (#636)
  • 830840c chore(deps): update dependency postcss-nested to v8 (#611)
  • 46b831f Version Packages (#637)
  • f3187f7 feat: add support for eslint-plugin-jsx-a11y-x (#629)
  • f974955 chore(deps): update dependency @​astrojs/markdown-satteri to v0.4.1 (#635)
  • 5d02283 chore(deps): update changesets/action action to v2.1.2 (#634)
  • 03bc808 chore(deps): update dependency tsdown to ^0.23.0 (#633)
  • Additional commits viewable in compare view

Updates globals from 17.4.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

  • Update globals (2026-09-01) (#353) 50a2119
  • Add __webpack_layer__ global (#351) 779a11a

sindresorhus/globals@v17.11.0...v17.12.0

v17.11.0

  • Add react-native globals (#337) 61eafbf

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

  • Add GM_cookie to Greasemonkey globals (#349) f468407

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

  • Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

v17.7.0

  • Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

v17.6.0

  • Update globals (2026-05-01) (#343) 00a4dd9

sindresorhus/globals@v17.5.0...v17.6.0

... (truncated)

Commits

Updates prettier from 3.8.1 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
</tr></table> 

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 1, 2026 03:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@netlify

netlify Bot commented Jul 1, 2026 •

Copy link
Copy Markdown

❌ Deploy Preview for expressjscom-preview failed.

Name Link
🔨 Latest commit dee7a51
🔍 Latest deploy log https://app.netlify.com/projects/expressjscom-preview/deploys/6abfdc873d3ab20008a22b23

@socket-security

socket-security Bot commented Jul 1, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedglobals@​17.4.0 ⏵ 17.12.0100 +110086 +197 +3100
Updated@​eslint/​js@​9.39.2 ⏵ 10.0.110010010087100
Updatedeslint-plugin-astro@​1.5.0 ⏵ 3.2.19810010091100
Updatedeslint@​9.39.2 ⏵ 10.11.097 +110010095 +45100
Updatedprettier@​3.8.1 ⏵ 3.9.99810097 +197100

View full report

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/linters-8806236189 branch 3 times, most recently from 2a492bc to 0bda763 Compare July 4, 2026 16:40
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/linters-8806236189 branch from 0bda763 to e5f4e44 Compare August 1, 2026 16:55
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/linters-8806236189 branch from e5f4e44 to af0865d Compare September 1, 2026 16:58
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/linters-8806236189 branch from af0865d to 5b68323 Compare October 1, 2026 16:57
@bjohansebas

Copy link
Copy Markdown
Member

@dependabot rebase

…ates

Bumps the linters group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.2` | `10.0.1` |
| [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.11.0` |
| [eslint-plugin-astro](https://github.com/ota-meshi/eslint-plugin-astro) | `1.5.0` | `3.2.1` |
| [globals](https://github.com/sindresorhus/globals) | `17.4.0` | `17.12.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.9` |



Updates `@eslint/js` from 9.39.2 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

Updates `eslint` from 9.39.2 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.2...v10.11.0)

Updates `eslint-plugin-astro` from 1.5.0 to 3.2.1
- [Release notes](https://github.com/ota-meshi/eslint-plugin-astro/releases)
- [Changelog](https://github.com/ota-meshi/eslint-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](ota-meshi/eslint-plugin-astro@v1.5.0...v3.2.1)

Updates `globals` from 17.4.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.4.0...v17.12.0)

Updates `prettier` from 3.8.1 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.9.9)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: linters
- dependency-name: eslint
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: linters
- dependency-name: eslint-plugin-astro
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: linters
- dependency-name: globals
  dependency-version: 17.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: linters
- dependency-name: prettier
  dependency-version: 3.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: linters
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/linters-8806236189 branch from 5b68323 to dee7a51 Compare October 2, 2026 16:32

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant