Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2025

Bumps @eslint/js and @types/eslint__js. These dependencies needed to be updated together.
Updates @eslint/js from 9.15.0 to 9.21.0

Release notes

Sourced from @​eslint/js's releases.

v9.21.0

Features

  • 418717f feat: introduce new deprecated types for rules (#19238) (fnx)
  • 5c5b802 feat: Add --ext CLI option (#19405) (Milos Djermanovic)

Bug Fixes

  • db5340d fix: update missing plugin message template (#19445) (Milos Djermanovic)
  • d8ffdd4 fix: do not exit process on rule crash (#19436) (Francesco Trotta)

Documentation

  • c5561ea docs: Update README (GitHub Actions Bot)
  • 80b0485 docs: replace var with let and const in rule example (#19434) (Tanuj Kanti)
  • f67d5e8 docs: Update README (GitHub Actions Bot)
  • 75afc61 docs: Update README (GitHub Actions Bot)
  • 0636cab docs: Update Eleventy from v2 to v3 (#19415) (Amaresh S M)
  • dd7d930 docs: Update README (GitHub Actions Bot)

Chores

  • a8c9a9f chore: update @eslint/eslintrc and @eslint/js (#19453) (Francesco Trotta)
  • 265e0cf chore: package.json update for @​eslint/js release (Jenkins)
  • 3401b85 test: add test for Rule.ReportDescriptor type (#19449) (Francesco Trotta)
  • e497aa7 chore: update rewrite dependencies (#19448) (Francesco Trotta)
  • dab5478 chore: better error message for missing plugin in config (#19402) (Tanuj Kanti)
  • ebfe2eb chore: set js language for bug report issue config block (#19439) (Josh Goldberg ✨)
  • 5fd211d test: processors can return subpaths (#19425) (Milos Djermanovic)

v9.20.1

Bug Fixes

Documentation

  • fe3ccb2 docs: allow typing in search box while dropdown is open (#19424) (Amaresh S M)
  • 93c78a5 docs: Add instructions for pnpm compat (#19422) (Nicholas C. Zakas)
  • b476a93 docs: Fix Keyboard Navigation for Search Results (#19416) (Amaresh S M)
  • ccb60c0 docs: Update README (GitHub Actions Bot)

v9.20.0

Features

  • e89a54a feat: change behavior of inactive flags (#19386) (Milos Djermanovic)

Bug Fixes

  • 91d4d9f fix: Bring types in sync with @​eslint/core (#19157) (Nicholas C. Zakas)
  • fa25c7a fix: Emit warning when empty config file is used (#19399) (Nicholas C. Zakas)
  • 31a9fd0 fix: Clearer error message for wrong plugin format (#19380) (Nicholas C. Zakas)
  • 61d99e3 fix: Better error message for unserializable parser (#19384) (Nicholas C. Zakas)
  • db1b9a6 fix: Ensure module scope is checked for references in consistent-this (#19383) (Nicholas C. Zakas)
  • 8bcd820 fix: arrow-body-style crash with single-token body (#19379) (Milos Djermanovic)

Documentation

  • b7012c8 docs: rewrite examples with var using let and const (#19407) (Mueez Javaid Hashmi)

... (truncated)

Changelog

Sourced from @​eslint/js's changelog.

v9.21.0 - February 21, 2025

  • a8c9a9f chore: update @eslint/eslintrc and @eslint/js (#19453) (Francesco Trotta)
  • 265e0cf chore: package.json update for @​eslint/js release (Jenkins)
  • 418717f feat: introduce new deprecated types for rules (#19238) (fnx)
  • 3401b85 test: add test for Rule.ReportDescriptor type (#19449) (Francesco Trotta)
  • e497aa7 chore: update rewrite dependencies (#19448) (Francesco Trotta)
  • c5561ea docs: Update README (GitHub Actions Bot)
  • db5340d fix: update missing plugin message template (#19445) (Milos Djermanovic)
  • d8ffdd4 fix: do not exit process on rule crash (#19436) (Francesco Trotta)
  • dab5478 chore: better error message for missing plugin in config (#19402) (Tanuj Kanti)
  • 80b0485 docs: replace var with let and const in rule example (#19434) (Tanuj Kanti)
  • ebfe2eb chore: set js language for bug report issue config block (#19439) (Josh Goldberg ✨)
  • f67d5e8 docs: Update README (GitHub Actions Bot)
  • 75afc61 docs: Update README (GitHub Actions Bot)
  • 5fd211d test: processors can return subpaths (#19425) (Milos Djermanovic)
  • 0636cab docs: Update Eleventy from v2 to v3 (#19415) (Amaresh S M)
  • 5c5b802 feat: Add --ext CLI option (#19405) (Milos Djermanovic)
  • dd7d930 docs: Update README (GitHub Actions Bot)

v9.20.1 - February 11, 2025

  • fe3ccb2 docs: allow typing in search box while dropdown is open (#19424) (Amaresh S M)
  • 274f054 fix: fix RuleContext type (#19417) (Francesco Trotta)
  • 93c78a5 docs: Add instructions for pnpm compat (#19422) (Nicholas C. Zakas)
  • b476a93 docs: Fix Keyboard Navigation for Search Results (#19416) (Amaresh S M)
  • ccb60c0 docs: Update README (GitHub Actions Bot)

v9.20.0 - February 7, 2025

  • 979097a chore: upgrade @​eslint/js@​9.20.0 (#19412) (Francesco Trotta)
  • 031734e chore: package.json update for @​eslint/js release (Jenkins)
  • 91d4d9f fix: Bring types in sync with @​eslint/core (#19157) (Nicholas C. Zakas)
  • b7012c8 docs: rewrite examples with var using let and const (#19407) (Mueez Javaid Hashmi)
  • d4c47c3 test: avoid empty config warning in test output (#19408) (Milos Djermanovic)
  • e89a54a feat: change behavior of inactive flags (#19386) (Milos Djermanovic)
  • fa25c7a fix: Emit warning when empty config file is used (#19399) (Nicholas C. Zakas)
  • 6406376 docs: Update README (GitHub Actions Bot)
  • 350f2b9 docs: rewrite some examples with var using let and const (#19404) (Mueez Javaid Hashmi)
  • 93c325a docs: rewrite examples with var using let and const (#19398) (Mueez Javaid Hashmi)
  • 56ff404 docs: replace var with let or const in rules docs (#19396) (Daniel Harbrueger)
  • 4053226 docs: change sourceType in no-eval examples (#19393) (Milos Djermanovic)
  • 1324af0 docs: replace var with let and const in rules docs (#19392) (Daniel Harbrueger)
  • 8b87e00 docs: replace var with const and let in rules (#19389) (Tanuj Kanti)
  • 31a9fd0 fix: Clearer error message for wrong plugin format (#19380) (Nicholas C. Zakas)
  • 61d99e3 fix: Better error message for unserializable parser (#19384) (Nicholas C. Zakas)
  • 758c66b docs: Explain what frozen rules mean (#19382) (Nicholas C. Zakas)
  • 67dd82a chore: update dependency @​eslint/json to ^0.10.0 (#19387) (renovate[bot])
  • db1b9a6 fix: Ensure module scope is checked for references in consistent-this (#19383) (Nicholas C. Zakas)
  • 8bcd820 fix: arrow-body-style crash with single-token body (#19379) (Milos Djermanovic)

... (truncated)

Commits
  • 265e0cf chore: package.json update for @​eslint/js release
  • 031734e chore: package.json update for @​eslint/js release
  • 58560e7 chore: package.json update for @​eslint/js release
  • 362099c chore: package.json update for @​eslint/js release
  • 495aa49 chore: extract package name from package.json for public interface (#19314)
  • 84c5787 chore: package.json update for @​eslint/js release
  • df9bf95 chore: package.json update for @​eslint/js release
  • See full diff in compare view

Updates @types/eslint__js from 8.42.3 to 9.14.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) and [@types/eslint__js](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/eslint__js). These dependencies needed to be updated together.

Updates `@eslint/js` from 9.15.0 to 9.21.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.21.0/packages/js)

Updates `@types/eslint__js` from 8.42.3 to 9.14.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/eslint__js)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/eslint__js"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 24, 2025
@github-actions
Copy link

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@eslint/js ^9.21.0 🟢 6.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 6Found 19/30 approved changesets -- score normalized to 6
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 10no binaries found in the repo
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/@types/eslint__js ^9.14.0 🟢 7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 9Found 27/30 approved changesets -- score normalized to 9
License🟢 9license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/@eslint/config-array 0.19.2 UnknownUnknown
npm/@eslint/core 0.12.0 UnknownUnknown
npm/@eslint/core 0.9.1 UnknownUnknown
npm/@eslint/eslintrc 3.3.0 🟢 6
Details
CheckScoreReason
Maintained🟢 31 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 3
Code-Review🟢 9Found 20/21 approved changesets -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@eslint/js 9.21.0 🟢 6.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 6Found 19/30 approved changesets -- score normalized to 6
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 10no binaries found in the repo
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/@eslint/object-schema 2.1.6 UnknownUnknown
npm/@eslint/plugin-kit 0.2.7 UnknownUnknown
npm/@humanwhocodes/retry 0.4.2 UnknownUnknown
npm/@types/eslint__js 9.14.0 🟢 7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 9Found 27/30 approved changesets -- score normalized to 9
License🟢 9license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/debug 4.4.0 🟢 4.3
Details
CheckScoreReason
Code-Review🟢 3Found 10/28 approved changesets -- score normalized to 3
Dangerous-Workflow⚠️ -1no workflows found
Pinned-Dependencies⚠️ -1no dependencies found
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ -1No tokens found
Maintained🟢 72 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 7
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/flatted 3.3.3 🟢 3.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 0Found 0/26 approved changesets -- score normalized to 0
Maintained⚠️ 22 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/import-fresh 3.3.1 🟢 4.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Maintained⚠️ 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Code-Review⚠️ 2Found 8/30 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • package.json
  • pnpm-lock.yaml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant