Skip to content

chore(deps-dev): bump eslint from 8.57.0 to 10.13.0 in /internal/dev_server/ui - #974

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/internal/dev_server/ui/eslint-10.13.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/internal/dev_server/ui/eslint-10.13.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

Bumps eslint from 8.57.0 to 10.13.0.

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

  • 4618052 feat: handle astral letters in new-cap (#21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

  • 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.



Note

Overview
Upgrades the eslint dev dependency in internal/dev_server/ui from 8.57.0 to 10.13.0, with a matching package-lock.json refresh. ESLint 10 pulls in a new lint stack (e.g. @eslint/config-array, @humanfs/node, updated espree / eslint-scope) and drops legacy pieces such as @eslint/eslintrc and doctrine that shipped with ESLint 8.

There are no source or ESLint config file edits in this PR—the UI already uses flat eslint.config.js, which aligns with ESLint 9+. Impact is limited to npm run lint and local/CI Node versions: ESLint 10 expects Node ^20.19.0, ^22.13.0, or ≥24. Worth confirming lint still passes given older @typescript-eslint/* 7.x packages still declare eslint ^8 peers alongside typescript-eslint 8.x.

Reviewed by Cursor Bugbot for commit ece99fb. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot
dependabot Bot requested a review from a team as a code owner October 27, 2026 04:54
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 27, 2026
@dependabot
dependabot Bot requested review from zakk-verrilli-ld and removed request for a team October 27, 2026 04:54
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Oct 27, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 283da5a. Configure here.

"@typescript-eslint/parser": "7.13.1",
"@vitejs/plugin-react": "4.5.0",
"eslint": "8.57.0",
"eslint": "10.13.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ESLint 10 breaks React plugin

High Severity

Bumping eslint to 10.13.0 leaves eslint-plugin-react at 7.37.4, which only peers eslint through ^9.7. ESLint 10 removed context.getFilename(), so the recommended React rules used in eslint.config.js crash (typically contextOrFilename.getFilename is not a function). npm run lint and the UI CI lint job fail.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 283da5a. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/internal/dev_server/ui/eslint-10.13.0 branch from 283da5a to 889cc30 Compare November 2, 2026 14:36
@ld-ahartmann

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 10.13.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.0...v10.13.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/internal/dev_server/ui/eslint-10.13.0 branch from 889cc30 to ece99fb Compare November 2, 2026 15:23
@ld-ahartmann

Copy link
Copy Markdown
Contributor

Closing for now: needs a dev-server UI eslint toolchain cleanup (drop unused @typescript-eslint v7 / react-hooks / react-refresh deps) before eslint 9+ will install.

@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/internal/dev_server/ui/eslint-10.13.0 branch November 2, 2026 15:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant