Bump eslint from 9.39.4 to 10.0.3 in /client#907
Bump eslint from 9.39.4 to 10.0.3 in /client#907dependabot[bot] wants to merge 1 commit intodevelopfrom
Conversation
dependabot
bot
added
dependencies
Claudia-Anthropica
left a comment
Claudia-Anthropica
left a comment
There was a problem hiding this comment.
@dependabot This is a major version bump (ESLint 9 → 10) that can't be merged as a standalone dependency bump. The companion packages (@eslint/js at 9.39.4, @eslint/eslintrc, @eslint/compat) and likely the eslint.config.mjs need to be updated together. CI build-client is already failing. This needs to be handled as a manual migration rather than an automated Dependabot bump.
| "css-loader": "7.1.4", | ||
| "css-minimizer-webpack-plugin": "8.0.0", | ||
| "eslint": "9.39.4", | ||
| "eslint": "10.0.3", |
There was a problem hiding this comment.
@dependabot [medium] ESLint 10 is a major version with breaking changes — it drops Node 18 support, removes bundled @eslint/js, bumps internal packages to new majors (eslint-scope 9, espree 11, eslint-visitor-keys 5), and drops chalk/lodash.merge. The project still has @eslint/js pinned at 9.39.4 and the ESLint config relies on it (import js from '@eslint/js'). These companion packages need to be updated in lockstep, and the config may need changes for ESLint 10 compatibility. CI is already failing on the client build.
🤖 Prompt for AI agents
In client/package.json, ESLint was bumped from 9 to 10 but companion packages (@eslint/js, @eslint/eslintrc, @eslint/compat) were not updated. Bump @eslint/js to 10.x, update @eslint/eslintrc and @eslint/compat to their latest compatible versions, then run npm install and npx eslint src/ to verify the config still works. Check the ESLint 10 migration guide for any config changes needed in eslint.config.mjs.
Bumps [eslint](https://github.com/eslint/eslint) from 9.39.4 to 10.0.3. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.0.3) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/client/eslint-10.0.3
branch
from
8705591 to
b6582b3
Compare
Claudia-Anthropica
left a comment
Claudia-Anthropica
left a comment
There was a problem hiding this comment.
@dependabot The previous feedback still applies — this major version bump needs the companion packages (@eslint/js, @eslint/eslintrc, @eslint/compat) updated in lockstep and potentially config changes in eslint.config.mjs. This is better handled as a manual migration rather than an automated Dependabot bump.
1 participant
Bumps eslint from 9.39.4 to 10.0.3.
Release notes
Sourced from eslint's releases.
... (truncated)
Commits
bfce7ea10.0.3d44ced8Build: changelog update for 10.0.3e511b58fix: update eslint (#20595)ef8fb92chore: package.json update for eslint-config-eslint releasee8f2104chore: updates for v9.39.4 release5cd1604refactor: simplify isCombiningCharacter helper (#20524)9fc31b0docs: Update README70ff1d0chore: eslint-config-eslint require Node^20.19.0 || ^22.13.0 || >=24(#20586)f4c9cf9fix: include variable name inno-useless-assignmentmessage (#20581)4efaa36docs: add info box foreslint-plugin-eslint-comments(#20570)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)