Skip to content

fix: drop eslint-plugin-import from the TypeScript lint preset - #121

Merged
chaitanyapotti merged 1 commit into
mainfrom
fix/drop-eslint-plugin-import
Nov 4, 2026
Merged

chaitanyapotti merged 1 commit into
mainfrom
fix/drop-eslint-plugin-import

Conversation

@chaitanyapotti

@chaitanyapotti chaitanyapotti commented Nov 4, 2026 •

Copy link
Copy Markdown
Member

Motivation and Context

eslint-plugin-import 2.32.0 accepts ESLint only through version 9. That peer range made npm install ESLint 9.39.5. That release is no longer supported. ESLint 9 also pulled minimatch into the lockfile.

Jira Link

N/A

Description

Remove eslint-plugin-import and the import-js/no-extraneous-dependencies rule from @toruslabs/oxlint-config-typescript. The native Oxlint import plugin stays. Bump eslint-plugin-tsdoc to 0.5.4. The lockfile now resolves ESLint 10.14.0 for the remaining ESLint peers. The root package manager pin moves to npm 12.2.1, and oxlint-tailwindcss moves to 1.17.1.

How has this been tested?

  • vp test packages/oxlint-config-typescript/index.test.ts (5 tests passed)
  • vp lint on the changed TypeScript files
  • vp fmt --check on the changed TypeScript files and the changeset

Screenshots (if appropriate)

N/A

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist

  • My code follows the code style of this project. (run lint)
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I have added tests to cover my changes.
  • All new and existing tests passed.

Note

Medium Risk
Consumers lose no-extraneous-dependencies enforcement from this preset; dependency resolution shifts away from ESLint 9, which affects anyone relying on the old lint behavior or lockfile ESLint version.

Overview
Removes eslint-plugin-import from @toruslabs/oxlint-config-typescript so installs no longer pull in unsupported ESLint 9 via that plugin’s peer range. The preset still uses Oxlint’s built-in import plugin; only the JS bridge plugin import-js and the import-js/no-extraneous-dependencies rule are gone, so dev-vs-prod dependency checks from that rule no longer run.

eslint-plugin-tsdoc is bumped to 0.5.4. Root tooling pins npm 12.2.1 and oxlint-tailwindcss ^1.17.1. Tests were updated to match the slimmer jsPlugins list and removed extraneous-deps expectations.

Reviewed by Cursor Bugbot for commit 873478c. Bugbot is set up for automated code reviews on this repo. Configure here.

The plugin peer range stops at ESLint 9, so installs kept the unsupported ESLint 9.39.5 release.
@chaitanyapotti
chaitanyapotti requested review from a team as code owners November 4, 2026 09:49
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​types/​node@​24.13.6 ⏵ 24.19.2100 +110081 +196100
Updatedoxlint-tailwindcss@​1.17.0 ⏵ 1.17.198 +110010096 +1100

View full report

@chaitanyapotti
chaitanyapotti merged commit dc129b7 into main Nov 4, 2026
9 checks passed
@chaitanyapotti
chaitanyapotti deleted the fix/drop-eslint-plugin-import branch November 4, 2026 10:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants