Skip to content

chore(deps-dev): bump the eslint group across 1 directory with 5 updates#6272

Open
dependabot[bot] wants to merge 7 commits intomainfrom
dependabot-npm_and_yarn-eslint-7f9e39f6e4
Open

chore(deps-dev): bump the eslint group across 1 directory with 5 updates#6272
dependabot[bot] wants to merge 7 commits intomainfrom
dependabot-npm_and_yarn-eslint-7f9e39f6e4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the eslint group with 5 updates in the / directory:

Package From To
eslint 9.39.3 9.39.4
eslint-config-xo 0.49.0 0.50.0
eslint-plugin-package-json 0.88.3 0.89.3
eslint-plugin-vue 9.33.0 10.8.0
@eslint/js 9.39.3 10.0.1

Updates eslint from 9.39.3 to 9.39.4

Release notes

Sourced from eslint's releases.

v9.39.4

Bug Fixes

  • f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)
  • a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)
  • 234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)
  • b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

  • 4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

  • b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)
  • 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
  • 1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)
Commits

Updates eslint-config-xo from 0.49.0 to 0.50.0

Release notes

Sourced from eslint-config-xo's releases.

v0.50.0

Breaking

  • Require ESLint 10 874aefa

New rules

Improvements

  • no-sequences: Add allowInParentheses: false 391d4c8

xojs/eslint-config-xo@v0.49.0...v0.50.0

Commits

Updates eslint-plugin-package-json from 0.88.3 to 0.89.3

Release notes

Sourced from eslint-plugin-package-json's releases.

v0.89.3

0.89.3 (2026-03-04)

🚀 Features

🩹 Bug Fixes

v0.89.2

0.89.2 (2026-02-27)

🚀 Features

  • enable ignorePrivate on more require- rules (#1607) (4004220)

🩹 Bug Fixes

  • deps: update package-json-validator to 1.0.1 (#1599) (8550731)

v0.89.1

0.89.1 (2026-02-22)

🚀 Features

v0.89.0

0.89.0 (2026-02-20)

⚠ BREAKING CHANGES

  • move the publishable require rules to recommended (#1565)

🚀 Features

Changelog

Sourced from eslint-plugin-package-json's changelog.

0.89.3 (2026-03-04)

🚀 Features

🩹 Bug Fixes

0.89.2 (2026-02-27)

🚀 Features

  • enable ignorePrivate on more require- rules (#1607) (4004220)

🩹 Bug Fixes

  • deps: update package-json-validator to 1.0.1 (#1599) (8550731)

0.89.1 (2026-02-22)

🚀 Features

0.89.0 (2026-02-20)

⚠ BREAKING CHANGES

  • move the publishable require rules to recommended (#1565)

🚀 Features

Commits
  • 213d5f8 chore(main): release 0.89.3 (#1614)
  • 7626cd9 feat: add require-packageManager rule (#1620)
  • ded1928 chore(deps): update actions/setup-node digest to 53b8394 (#1625)
  • 2a62cdd ci: use built-in repo token for contributors (#1624)
  • c12a11b chore(deps): update dependency lint-staged to v16.3.0 (#1623)
  • ffed383 chore(deps): update dependency @​types/node to v24.11.0 (#1622)
  • a0cf03b chore(deps): update node.js to v24.14.0 (#1621)
  • 53679e4 chore: restore prettier-plugin-sentences-per-line (#1617)
  • 8e8a78a chore(deps): lock file maintenance (#1616)
  • 59796bf docs: add michaelfaith as a contributor for projectManagement (#1615)
  • Additional commits viewable in compare view

Updates eslint-plugin-vue from 9.33.0 to 10.8.0

Release notes

Sourced from eslint-plugin-vue's releases.

v10.8.0

Minor Changes

Patch Changes

v10.7.0

Minor Changes

Patch Changes

  • Fixed false positives in vue/define-props-destructuring rule when imported types are passed to defineProps (#2995)
  • Updated Vue 3 export names resources: added DirectiveModifiers (#2996)
  • Updated Vue 3 export names resources: added nodeOps and patchProp (#2986)

v10.6.2

Patch Changes

v10.6.1

Patch Changes

v10.6.0

Minor Changes

Patch Changes

... (truncated)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.8.0

Minor Changes

Patch Changes

10.7.0

Minor Changes

Patch Changes

  • Fixed false positives in vue/define-props-destructuring rule when imported types are passed to defineProps (#2995)
  • Updated Vue 3 export names resources: added DirectiveModifiers (#2996)
  • Updated Vue 3 export names resources: added nodeOps and patchProp (#2986)

10.6.2

Patch Changes

10.6.1

Patch Changes

10.6.0

Minor Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eslint-plugin-vue since your current version.


Updates @eslint/js from 9.39.3 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

  • c87d5bd fix: update eslint (#20531) (renovate[bot])
  • d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
  • 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
  • 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

  • 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
  • 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
  • b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

  • e5c281f chore: updates for v9.39.3 release (Jenkins)
  • 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
  • 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
  • 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
  • da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
  • 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

  • f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
  • a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
  • c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
  • fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
  • 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
  • 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
  • ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
  • 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
  • c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
  • 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
  • a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
  • a89059d feat!: Program range span entire source text (#20133) (Pixel998)
  • 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
  • f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
  • aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
  • f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
  • 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
  • 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
  • 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
  • 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
  • f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

  • bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
  • 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
  • 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits
  • 84fb885 chore: package.json update for @​eslint/js release
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
  • f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
  • b4b3127 chore: package.json update for @​eslint/js release
  • 0b14059 chore: package.json update for @​eslint/js release
  • fa31a60 feat!: add name to configs (#20015)
  • 1e2cad5 chore: package.json update for @​eslint/js release
  • 454a292 feat!: update eslint:recommended configuration (#20210)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

🔭🐙🐈 Test this branch here: https://design-system.deutschebahn.com/core-web/review/dependabot-npm_and_yarn-eslint-7f9e39f6e4

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 9, 2026
@github-project-automation github-project-automation bot moved this to 🏗 In progress in UX Engineering Team Backlog Mar 9, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Mar 9, 2026

⚠️ No Changeset found

Latest commit: 2757b46

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions bot added the 📺showcases Changes to 1-n showcases label Mar 9, 2026
@github-actions github-actions bot enabled auto-merge (squash) March 9, 2026 22:40
@dependabot dependabot bot force-pushed the dependabot-npm_and_yarn-eslint-7f9e39f6e4 branch 22 times, most recently from 5834a01 to 0c8432b Compare March 16, 2026 09:12
@dependabot dependabot bot force-pushed the dependabot-npm_and_yarn-eslint-7f9e39f6e4 branch 4 times, most recently from 30f7958 to 6cb67c1 Compare March 25, 2026 07:16
@mfranzke
Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 25, 2026

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@dependabot dependabot bot force-pushed the dependabot-npm_and_yarn-eslint-7f9e39f6e4 branch from 6cb67c1 to 64c0cd6 Compare March 25, 2026 08:44
@mfranzke
Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot-npm_and_yarn-eslint-7f9e39f6e4 branch 10 times, most recently from e4baba4 to 5b9911f Compare March 29, 2026 07:08
@mfranzke
Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot-npm_and_yarn-eslint-7f9e39f6e4 branch 3 times, most recently from ab295e2 to d421e61 Compare March 29, 2026 20:37
dependabot bot and others added 5 commits March 31, 2026 22:16
Bumps the eslint group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [eslint](https://github.com/eslint/eslint) | `9.39.3` | `9.39.4` |
| [eslint-config-xo](https://github.com/xojs/eslint-config-xo) | `0.49.0` | `0.50.0` |
| [eslint-plugin-package-json](https://github.com/michaelfaith/eslint-plugin-package-json) | `0.88.3` | `0.89.3` |
| [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `9.33.0` | `10.8.0` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.3` | `10.0.1` |



Updates `eslint` from 9.39.3 to 9.39.4
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.3...v9.39.4)

Updates `eslint-config-xo` from 0.49.0 to 0.50.0
- [Release notes](https://github.com/xojs/eslint-config-xo/releases)
- [Commits](xojs/eslint-config-xo@v0.49.0...v0.50.0)

Updates `eslint-plugin-package-json` from 0.88.3 to 0.89.3
- [Release notes](https://github.com/michaelfaith/eslint-plugin-package-json/releases)
- [Changelog](https://github.com/michaelfaith/eslint-plugin-package-json/blob/main/CHANGELOG.md)
- [Commits](michaelfaith/eslint-plugin-package-json@v0.88.3...v0.89.3)

Updates `eslint-plugin-vue` from 9.33.0 to 10.8.0
- [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases)
- [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md)
- [Commits](vuejs/eslint-plugin-vue@v9.33.0...v10.8.0)

Updates `@eslint/js` from 9.39.3 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 9.39.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: eslint
- dependency-name: eslint-config-xo
  dependency-version: 0.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: eslint-plugin-package-json
  dependency-version: 0.89.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: eslint-plugin-vue
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: eslint
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: eslint
...

Signed-off-by: dependabot[bot] <support@github.com>
nmerget
nmerget previously approved these changes Apr 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🏘components 🛠️configuration dependencies Pull requests that update a dependency file 📕documentation Improvements or additions to documentation javascript Pull requests that update Javascript code 📺showcases Changes to 1-n showcases

Projects

Status: ⏰ready for release

Development

Successfully merging this pull request may close these issues.

2 participants