chore(deps): Bump the dev-dependencies group across 1 directory with 2 updates by dependabot[bot] · Pull Request #551 · nullvariant/nullvariant-vscode-extensions

dependabot · 2026-06-29T06:44:31Z

Bumps the dev-dependencies group with 2 updates in the / directory: eslint and eslint-plugin-sonarjs.

Updates eslint from 10.5.0 to 10.6.0

Release notes

v10.6.0

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)

bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)

8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)

5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)

9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)

d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)

2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)

63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)

7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)

399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)

f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)

bea49f7 docs: Update README (GitHub Actions Bot)

e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)

8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)

3eb3d9b docs: Update README (GitHub Actions Bot)

c5bb59c docs: Update README (GitHub Actions Bot)

eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)

3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])

c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)

a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)

27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)

865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])

27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)

970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)

b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])

6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

Commits

5d12a04 10.6.0
f7ca54b Build: changelog update for 10.6.0
6a42034 ci: run ecosystem tests on main branch (#20891)
b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014)
c3abfca chore: correct JSDoc param types in html formatter (#21018)
a83683d docs: Update README
a832320 ci: split ecosystem tests into separate jobs (#21001)
6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013)
Additional commits viewable in compare view

Updates eslint-plugin-sonarjs from 4.0.3 to 4.1.0

Commits

See full diff in compare view

dependabot · 2026-06-29T06:44:32Z

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

nullvariant-mimi · 2026-06-29T06:44:45Z

🐰 Mimi's Validation Report ✅

All checks are looking good! Great job! 🎉

⏳ Some checks are still running. I will keep watching!

バリデーターを通してくださいね

This report was carefully prepared by nullvariant-mimi[bot]

github-actions · 2026-06-29T06:44:45Z

VEX Assessment: `not_affected`

This dependency update modifies devDependencies only.

Status: not_affected
Justification: vulnerable_code_not_in_execute_path
Impact: Zero production dependencies. No third-party code is included in the published VSIX.

Any CVEs in updated devDependencies do not affect end users. The VEX document will be automatically updated by the weekly VEX Auto-Update workflow.

🤖 Automated VEX assessment

nullvariant-luna · 2026-06-29T06:44:46Z

👧 Luna's Exploration Report 📦

No new dependencies added. Just version bumps! Nothing to explore here... 😴

Botに418返そうよ！

This report was curiously compiled by nullvariant-luna[bot]

github-actions · 2026-06-29T06:44:46Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/eslint

^10.6.0

Unknown

npm/eslint-plugin-sonarjs

^4.1.0

Unknown

npm/eslint

10.6.0

🟢 6.6

Details

Check	Score	Reason
Code-Review	🟢 8	Found 23/28 approved changesets -- score normalized to 8
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
Security-Policy	🟢 10	security policy file detected
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 10	SAST tool is run on all commits

npm/eslint-plugin-sonarjs

4.1.0

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Code-Review	🟢 10	all changesets reviewed
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	⚠️ 0	dangerous workflow patterns detected
Token-Permissions	⚠️ 2	detected GitHub workflow tokens with excessive permissions
License	🟢 9	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	🟢 10	packaging workflow detected
Signed-Releases	⚠️ -1	no releases found
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

extensions/git-id-switcher/package.json
package-lock.json

nullvariant-blaze · 2026-06-29T06:44:49Z

🐗 Blaze's Release Review 📦

No version bump. Just dependency changes... boring. Wake me up when it's deploy time! 😤

よっしゃ！デプロイしまくるぞ！

This review was ENTHUSIASTICALLY filed by nullvariant-blaze[bot]

socket-security · 2026-06-29T06:44:55Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint-plugin-sonarjs@4.0.3 ⏵ 4.1.0
	eslint@10.5.0 ⏵ 10.6.0	⁺¹			⁺²

View full report

nullvariant-ciel · 2026-06-29T06:45:21Z

🕊️ Ciel's Mediation ☀️

*~~ gliding on a gentle breeze ~~ How serene!*

3 zoo members have reviewed this PR.

Zoo Member	Status
🐰 Mimi	Commented
👧 Luna	Commented
🐗 Blaze	Commented

☀️ The zoo is in harmony. Everything looks peaceful from up here.

まあまあ、ほどほどに。

This mediation was peacefully delivered by nullvariant-ciel[bot]

…2 updates Bumps the dev-dependencies group with 2 updates in the / directory: [eslint](https://github.com/eslint/eslint) and [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS). Updates `eslint` from 10.5.0 to 10.6.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.5.0...v10.6.0) Updates `eslint-plugin-sonarjs` from 4.0.3 to 4.1.0 - [Release notes](https://github.com/SonarSource/SonarJS/releases) - [Commits](https://github.com/SonarSource/SonarJS/commits) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: eslint-plugin-sonarjs dependency-version: 4.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

…3c0523c

sonarqubecloud · 2026-06-29T14:52:31Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 29, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-dfc3c0523c branch 2 times, most recently from a8b7a2f to 6acd2f4 Compare June 29, 2026 10:12

dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-dfc3c0523c branch from 6acd2f4 to 38e0a0f Compare June 29, 2026 10:37

Merge branch 'main' into dependabot/npm_and_yarn/dev-dependencies-dfc…

441f1fe

…3c0523c

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the dev-dependencies group across 1 directory with 2 updates#551

chore(deps): Bump the dev-dependencies group across 1 directory with 2 updates#551
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-dfc3c0523c

dependabot Bot commented on behalf of github Jun 29, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

nullvariant-mimi Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 29, 2026

Uh oh!

nullvariant-luna Bot commented Jun 29, 2026

Uh oh!

github-actions Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

nullvariant-blaze Bot commented Jun 29, 2026

Uh oh!

socket-security Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

nullvariant-ciel Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.6.0

Features

Bug Fixes

Documentation

Chores

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Labels

Uh oh!

nullvariant-mimi Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🐰 Mimi's Validation Report ✅

Uh oh!

github-actions Bot commented Jun 29, 2026

VEX Assessment: not_affected

Uh oh!

nullvariant-luna Bot commented Jun 29, 2026

👧 Luna's Exploration Report 📦

Uh oh!

github-actions Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

nullvariant-blaze Bot commented Jun 29, 2026

🐗 Blaze's Release Review 📦

Uh oh!

socket-security Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nullvariant-ciel Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🕊️ Ciel's Mediation ☀️

Uh oh!

sonarqubecloud Bot commented Jun 29, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 29, 2026 •

edited

Loading

nullvariant-mimi Bot commented Jun 29, 2026 •

edited

Loading

VEX Assessment: `not_affected`

github-actions Bot commented Jun 29, 2026 •

edited

Loading

socket-security Bot commented Jun 29, 2026 •

edited

Loading

nullvariant-ciel Bot commented Jun 29, 2026 •

edited

Loading