chore(deps-dev): Bump eslint from 9.39.4 to 10.14.0 by dependabot[bot] · Pull Request #88 · NeiRo21/solidmarks

dependabot · 2026-11-11T12:06:02Z

Bumps eslint from 9.39.4 to 10.14.0.

Release notes

v10.14.0

Features

d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)

827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)

161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)

6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)

9155e14 fix: Update @humanfs/node dependency version (#21434) (Nicholas C. Zakas)

cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)

5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)

dab466e docs: Update README (GitHub Actions Bot)

97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)

7697550 docs: Update README (GitHub Actions Bot)

0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)

0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)

e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)

6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])

a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)

67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)

276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])

449724e chore: update ecosystem plugins (#21420) (ESLint Bot)

8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

v10.13.0

Features

48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)

a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)

66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

4783a68 docs: Update README (GitHub Actions Bot)

43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])

95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)

317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)

b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)

47b7063 chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])

... (truncated)

Commits

12cbff4 10.14.0
6b696e7 Build: changelog update for 10.14.0
0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
0f94f47 docs: remove zh-hans from docs language switcher (#21437)
dab466e docs: Update README
827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
161558a fix: handle LS, PS and empty hashbang comments (#21419)
Additional commits viewable in compare view

github-actions · 2026-11-11T12:06:15Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@cacheable/memory

2.2.0

Unknown

npm/@cacheable/utils

2.5.0

Unknown

npm/@eslint/config-array

0.23.5

Unknown

npm/@eslint/config-helpers

0.7.0

Unknown

npm/@eslint/eslintrc

3.3.7

🟢 5.5

Details

Check	Score	Reason
Maintained	🟢 10	15 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	⚠️ 2	Found 7/30 approved changesets -- score normalized to 2
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@eslint/object-schema

3.0.5

Unknown

npm/@eslint/plugin-kit

0.7.3

Unknown

npm/@keyv/bigmap

1.3.1

🟢 7

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	🟢 10	all dependencies are pinned
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
SAST	⚠️ -1	internal error: internal error: Client.Checks.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: Although you appear to have the correct authorization credentials, the `AikidoSec` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.

npm/@keyv/serialize

1.1.1

🟢 7

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	🟢 10	all dependencies are pinned
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
SAST	⚠️ -1	internal error: internal error: Client.Checks.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: Although you appear to have the correct authorization credentials, the `AikidoSec` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.

npm/@types/esrecurse

4.3.1

🟢 6.6

Details

Check	Score	Reason
Code-Review	🟢 9	Found 28/29 approved changesets -- score normalized to 9
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Binary-Artifacts	🟢 10	no binaries found in the repo
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed

npm/cacheable

2.5.0

Unknown

npm/eslint

10.14.0

🟢 6.5

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 7	Found 19/25 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 10	SAST tool is run on all commits

npm/eslint-scope

9.1.2

Unknown

npm/file-entry-cache

11.1.5

Unknown

npm/flat-cache

6.1.23

Unknown

npm/flatted

3.4.4

🟢 3.6

Details

Check	Score	Reason
Maintained	⚠️ 1	0 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 1
Code-Review	⚠️ 0	Found 2/22 approved changesets -- score normalized to 0
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 4	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	🟢 6	SAST tool is not run on all commits -- score normalized to 6

npm/hashery

1.5.1

Unknown

npm/hookified

1.15.1

Unknown

npm/hookified

2.2.0

Unknown

npm/keyv

5.6.0

🟢 7

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	🟢 10	all dependencies are pinned
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
SAST	⚠️ -1	internal error: internal error: Client.Checks.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: Although you appear to have the correct authorization credentials, the `AikidoSec` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.

npm/qified

0.10.1

Unknown

Scanned Files

package-lock.json

Bumps [eslint](https://github.com/eslint/eslint) from 9.39.4 to 10.14.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.14.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.14.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2026

dependabot Bot mentioned this pull request Nov 11, 2026

chore(deps-dev): Bump eslint from 9.39.4 to 10.11.0 #83

Closed

dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-10.14.0 branch from 6e3f988 to 0ff28db Compare November 11, 2026 12:13

dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-10.14.0 branch from 0ff28db to 34ade8f Compare November 11, 2026 12:48

Navigation Menu

Repository navigation

chore(deps-dev): Bump eslint from 9.39.4 to 10.14.0 - #88

chore(deps-dev): Bump eslint from 9.39.4 to 10.14.0#88
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-10.14.0

dependabot Bot commented on behalf of github Nov 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 11, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.14.0

Features

Bug Fixes

Documentation

Chores

v10.13.0

Features

Bug Fixes

Documentation

Chores

Uh oh!

github-actions Bot commented Nov 11, 2026

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 11, 2026 •

edited

Loading