build(deps): bump minimatch, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, @vitest/coverage-v8, eslint and eslint-plugin-svelte#2438
Conversation
…cript-eslint/parser, @vitest/coverage-v8, eslint and eslint-plugin-svelte Bumps [minimatch](https://github.com/isaacs/minimatch) to 10.2.5 and updates ancestor dependencies [minimatch](https://github.com/isaacs/minimatch), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser), [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8), [eslint](https://github.com/eslint/eslint) and [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte). These dependencies need to be updated together. Updates `minimatch` from 9.0.3 to 10.2.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v9.0.3...v10.2.5) Updates `@typescript-eslint/eslint-plugin` from 6.21.0 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 6.21.0 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/parser) Updates `@vitest/coverage-v8` from 3.2.7 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `eslint` from 8.57.1 to 10.7.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.1...v10.7.0) Updates `eslint-plugin-svelte` from 2.46.1 to 3.22.0 - [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases) - [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.22.0/packages/eslint-plugin-svelte) --- updated-dependencies: - dependency-name: minimatch dependency-version: 10.2.5 dependency-type: indirect - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.64.0 dependency-type: direct:development - dependency-name: "@typescript-eslint/parser" dependency-version: 8.64.0 dependency-type: direct:development - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development - dependency-name: eslint-plugin-svelte dependency-version: 3.22.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 160297cbac
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "bson-objectid": "^2.0.4", | ||
| "dotenv": "^17.4.1", | ||
| "eslint": "^8.28.0", | ||
| "eslint": "^10.7.0", |
There was a problem hiding this comment.
In the lint workflow I checked (.github/workflows/lint-and-test.yml), CI runs npm run lint, which calls eslint .; fdfind -H finds no eslint.config.*, only .eslintrc.cjs/.eslintignore. The ESLint v10 migration guide says the “eslintrc config system has been completely removed”, so this dependency bump makes the lint job stop reading the repo’s config and fail until a flat config is added or ESLint stays on a legacy-compatible major.
Useful? React with 👍 / 👎.
| "@vitest/coverage-v8": "^3.2.7", | ||
| "@typescript-eslint/eslint-plugin": "^8.x", | ||
| "@typescript-eslint/parser": "^8.x", | ||
| "@vitest/coverage-v8": "^4.1.10", |
There was a problem hiding this comment.
This upgrades @vitest/coverage-v8 to 4.1.10 while vitest remains ^3.1.4 (the lock resolves 3.2.7); the lockfile entry for the new coverage package declares peers on vitest: "4.1.10" and @vitest/browser: "4.1.10". When npm run test:coverage asks Vitest 3 to load the V8 coverage provider, it will load an incompatible Vitest 4 provider/util stack and npm already reports the peer conflict during install resolution, so either upgrade the Vitest stack together or keep coverage-v8 on 3.x.
Useful? React with 👍 / 👎.
Bumps minimatch to 10.2.5 and updates ancestor dependencies minimatch, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, @vitest/coverage-v8, eslint and eslint-plugin-svelte. These dependencies need to be updated together.
Updates
minimatchfrom 9.0.3 to 10.2.5Changelog
Sourced from minimatch's changelog.
... (truncated)
Commits
693c82310.2.57953af1do not allow .. to consume drive letter on Windows1caf918lint and format7783ed6ignore docs6d9b356update deps etcc36addb10.2.426b9002docs: add warning about ReDoS3a0d83bfix partial matching of globstar patternsea9484010.2.30873fbaupdate depsInstall script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
@typescript-eslint/eslint-pluginfrom 6.21.0 to 8.64.0Release notes
Sourced from @typescript-eslint/eslint-plugin's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/eslint-plugin's changelog.
... (truncated)
Commits
414d9abchore(release): publish 8.64.0bcfe16ffeat(eslint-plugin): [no-loop-func] supportusing/await usingdeclarati...5b5bfdefix(eslint-plugin): [require-array-sort-compare] handle constrained arrays (#...321856cchore: cleanup cspell config (#12526)b418cf5feat(typescript-estree): throw for invalid definite assignment in class prope...737de2bdocs: align unified-signatures correct example parameter (#12506)a63c17adocs: fix shadowed parameter name in unified-signatures example (#12502)290cf6cchore(release): publish 8.63.08d8fda6feat(eslint-plugin): [no-misused-promises] detect async usage of a sync dispo...fec4f4ffix(eslint-plugin): [no-base-to-string] don't flag a shadowed String() call (...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@typescript-eslint/eslint-pluginsince your current version.Updates
@typescript-eslint/parserfrom 6.21.0 to 8.64.0Release notes
Sourced from @typescript-eslint/parser's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/parser's changelog.
... (truncated)
Commits
414d9abchore(release): publish 8.64.0290cf6cchore(release): publish 8.63.03ea32f4chore(release): publish 8.62.154e2857chore(release): publish 8.62.081e4c26feat: remove redundant package.json "files" (#12444)aaad718chore(release): publish 8.61.116a5b24chore(release): publish 8.61.04f84a69chore(release): publish 8.60.11849b53chore: typecheck using tsgo (#12139)f891c29chore(release): publish 8.60.0Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@typescript-eslint/parsersince your current version.Updates
@vitest/coverage-v8from 3.2.7 to 4.1.10Release notes
Sourced from @vitest/coverage-v8's releases.
... (truncated)
Commits
db616d2chore: release v4.1.10 (#10718)a7a61e7chore: release v4.1.9 (#10598)e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...a09d472chore: release v4.1.7a8fd24cchore: release v4.1.6e399846chore: release v4.1.5ac04bacchore: release v4.1.42dc0d62chore: release v4.1.3fc6f482chore: release v4.1.2Updates
eslintfrom 8.57.1 to 10.7.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
fabd99b10.7.037c5e75Build: changelog update for 10.7.09489379chore: update dependency@eslint/eslintrcto ^3.3.6 (#21076)81a4774chore: updates for v9.39.5 release3e7bf15fix: applyignoreClassesWithImplementsto class expressions (#21069)9835414chore: enable$ExpectTypeannotations in all TypeScript files (#21071)cf2a9bffeat: add errorClassNames option to preserve-caught-error rule (#21032)c30d808docs: Update READMEf8b873afeat: max-nested-callbacks option for constructor callbacks (#21063)72adf6bchore: restrictmarkdownlint-cli2updates in renovate (#21067)Updates
eslint-plugin-sveltefrom 2.46.1 to 3.22.0Release notes
Sourced from eslint-plugin-svelte's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-svelte's changelog.
... (truncated)
Commits
0d9f1a0chore: release eslint-plugin-svelte (#1564)cdad05afeat: addno-conflicting-module-namesrule (#1563)28c1234chore: release eslint-plugin-svelte (#1560)4138a57feat: addno-bind-value-on-checkable-inputsrule (#1559)e8ee416chore: release eslint-plugin-svelte (#1544)32ba915feat: add no-at-const-tags rule (#1545)989bfa5fix: disallow props based on SvelteKit route component type (#1503)5efd295chore: release eslint-plugin-svelte (#1538)f0416befeat: support Svelte 5 declaration tags (#1533)fc83a38chore: release eslint-plugin-svelte (#1535)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-svelte since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.