Skip to content

Bump the build group across 1 directory with 3 updates - #5607

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/build-4143c67924
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/build-4143c67924

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the build group with 3 updates in the / directory: eslint-plugin-json, eslint-plugin-jsonc and eslint.

Updates eslint-plugin-json from 4.0.1 to 5.0.0

Commits

Updates eslint-plugin-jsonc from 3.2.0 to 3.4.2

Release notes

Sourced from eslint-plugin-jsonc's releases.

v3.4.2

Patch Changes

v3.4.1

Patch Changes

  • #532 97a7564 Thanks @​ota-meshi! - Fix allowLineSeparatedGroups in jsonc/sort-keys when ignored properties occur between sorted keys.

v3.4.0

Minor Changes

v3.3.0

Minor Changes

Changelog

Sourced from eslint-plugin-jsonc's changelog.

3.4.2

Patch Changes

3.4.1

Patch Changes

  • #532 97a7564 Thanks @​ota-meshi! - Fix allowLineSeparatedGroups in jsonc/sort-keys when ignored properties occur between sorted keys.

3.4.0

Minor Changes

3.3.0

Minor Changes

Commits
  • a9b6492 chore: release eslint-plugin-jsonc (#546)
  • c541481 chore: add missing changeset for #544 (#545)
  • 26c3a71 chore(deps): update changesets/action action to v2.1.1 (#542)
  • 9e93aa3 fix(indent): handle mixed indentation correctly (#544)
  • 95aa728 chore(deps): update changesets/action action to v2.1.0 (#541)
  • 19889c0 chore(deps): update dependency @​changesets/get-release-plan to v5 (#540)
  • 8c99c7c chore(deps): update dependency @​changesets/cli to v3 (#538)
  • a738fe5 chore(deps): update dependency vite-plugin-eslint4b to ^0.9.0 (#539)
  • 6a67a81 chore(deps): update dependency @​changesets/changelog-github to v1 (#537)
  • 755e27c chore(deps): update changesets/action action to v2 (#536)
  • Additional commits viewable in compare view

Updates eslint from 9.39.4 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

  • b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
  • 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))
  • 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])
  • 3c753f1 chore: update eslint (#21289) (renovate[bot])
  • 1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)
  • 08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)
  • 77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])
  • 007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)
  • 0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)

v10.9.1

Bug Fixes

  • 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

  • ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

... (truncated)

Commits


Note

Medium Risk
Major ESLint and eslint-plugin-json upgrades can change lint results or fail if peer/config packages are incompatible; impact is limited to tooling/CI, not runtime behavior.

Overview
Updates the build dependency group via Dependabot: eslint ^9.39.4 → ^10.10.0 (devDependency), eslint-plugin-json ^4.0.1 → ^5.0.0, and eslint-plugin-jsonc ^3.2.0 → ^3.4.2, with matching package-lock.json resolution changes.

No application or ESLint config source changes are included—only manifest/lockfile versions. npm run lint (and CI that runs it) is the main surface that may behave differently after the ESLint 10 and eslint-plugin-json 5 major bumps.

Reviewed by Cursor Bugbot for commit 962e6a3. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 21, 2026
@dependabot
dependabot Bot requested review from a team as code owners July 21, 2026 14:53
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch 5 times, most recently from a60114f to ca7f346 Compare July 28, 2026 14:53
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch 7 times, most recently from 987dbb9 to 02273de Compare August 5, 2026 14:53
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch 6 times, most recently from 758f1d8 to 7490629 Compare August 12, 2026 14:53
Comment thread package.json Outdated
"chai": "^6.2.2",
"diff": "^9.0.0",
"eslint": "^9.17.0",
"eslint": "^10.8.1",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ESLint 10 breaks lint pipeline

High Severity

Bumping eslint to 10.8.1 pulls a major that is incompatible with eslint-plugin-import@2.32.0 from @duckduckgo/eslint-config. That plugin still peers only through ESLint 9 and is known to throw at runtime on ESLint 10 (removed APIs such as FileEnumerator / SourceCode helpers), so npm run lint can fail hard.

@eslint/js also stays on 9.39.4 under that config, which deepens the mismatch until the shared config (or a released import-plugin with ESLint 10 support) is updated first.


Please tell me if this was useful or not with a 👍 or 👎.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 7490629. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch 5 times, most recently from ca6bedf to 92eb04a Compare August 19, 2026 14:55
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch 2 times, most recently from cc9fb15 to ee6fdc0 Compare August 21, 2026 14:53
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch 4 times, most recently from bdc53ed to bd181a2 Compare August 27, 2026 14:53

@cursor cursor Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit bd181a2. Configure here.

Comment thread package.json Outdated
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch 6 times, most recently from 1bfd5e9 to fd52823 Compare September 4, 2026 14:53
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch 3 times, most recently from e77dd94 to b99767c Compare September 9, 2026 14:52
Bumps the build group with 3 updates in the / directory: [eslint-plugin-json](https://github.com/azeemba/eslint-plugin-json), [eslint-plugin-jsonc](https://github.com/ota-meshi/eslint-plugin-jsonc) and [eslint](https://github.com/eslint/eslint).


Updates `eslint-plugin-json` from 4.0.1 to 5.0.0
- [Release notes](https://github.com/azeemba/eslint-plugin-json/releases)
- [Commits](https://github.com/azeemba/eslint-plugin-json/commits)

Updates `eslint-plugin-jsonc` from 3.2.0 to 3.4.2
- [Release notes](https://github.com/ota-meshi/eslint-plugin-jsonc/releases)
- [Changelog](https://github.com/ota-meshi/eslint-plugin-jsonc/blob/master/CHANGELOG.md)
- [Commits](ota-meshi/eslint-plugin-jsonc@v3.2.0...v3.4.2)

Updates `eslint` from 9.39.4 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.10.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: build
- dependency-name: eslint-plugin-json
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: build
- dependency-name: eslint-plugin-jsonc
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/build-4143c67924 branch from b99767c to 962e6a3 Compare September 10, 2026 14:53

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants