Skip to content

[DEPENDABOT]: Bump eslint from 9.39.2 to 10.10.0 - #2051

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/eslint-10.10.0
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/eslint-10.10.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps eslint from 9.39.2 to 10.10.0.

Release notes

Sourced from eslint's releases.

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

  • b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
  • 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))
  • 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])
  • 3c753f1 chore: update eslint (#21289) (renovate[bot])
  • 1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)
  • 08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)
  • 77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])
  • 007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)
  • 0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)

v10.9.1

Bug Fixes

  • 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

  • ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

... (truncated)

Commits

@dependabot dependabot Bot added dependabot Issues/PRs opened by Dependabot dependencies Pull requests that update a dependency file labels Sep 16, 2026
@changeset-bot

changeset-bot Bot commented Sep 16, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 9f0e940

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot dependabot Bot changed the title [DEPENDABOT]: Bump eslint from 9.39.2 to 10.10.0 [DEPENDABOT]: bump eslint from 9.39.2 to 10.10.0 Sep 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-10.10.0 branch from 4ee98ef to 1a33f80 Compare September 16, 2026 13:40
@dependabot dependabot Bot changed the title [DEPENDABOT]: bump eslint from 9.39.2 to 10.10.0 [DEPENDABOT]: Bump eslint from 9.39.2 to 10.10.0 Sep 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-10.10.0 branch from 1a33f80 to a431510 Compare September 19, 2026 22:42
Bumps [eslint](https://github.com/eslint/eslint) from 9.39.2 to 10.10.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.2...v10.10.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-10.10.0 branch from a431510 to 9f0e940 Compare September 23, 2026 11:21
@stefcameron

Copy link
Copy Markdown
Member

Investigated this one specifically because the sibling repos (tabbable, focus-trap) had similar-looking eslint 10 PRs that turned out to be fixable via a coordinated migration (drop @babel/eslint-parser/@babel/eslint-plugin, swap eslint-plugin-import for eslint-plugin-import-x). That fix does NOT work here.

The peer conflict CI reports (@babel/eslint-parser capping eslint at ^9) is only the surface issue. Underneath it, eslint-plugin-react@7.37.5 (latest published) actually crashes under ESLint 10 — reproduced locally:

TypeError: Error while loading rule 'react/display-name': contextOrFilename.getFilename is not a function
    at .../eslint-plugin-react/lib/util/version.js:31:100

ESLint 10 removed context.getFilename() from the rule context API, and eslint-plugin-react's own react-version detection still calls it. No newer eslint-plugin-react release exists (7.37.5 is latest; peer still caps at eslint ^9.7), so this is a real upstream incompatibility, not just an unpublished peer range. Leaving this open until eslint-plugin-react ships eslint-10 support.

@stefcameron

Copy link
Copy Markdown
Member

Closing — this needed more than a version bump. eslint-plugin-react@7.37.5 (latest published) genuinely crashes under ESLint 10 (ESLint 10 removed context.getFilename(), which eslint-plugin-react's own react-version detection still calls — see the earlier comment on this PR for the repro). No fix has shipped upstream despite a long-open tracking issue, so I migrated the repo off eslint-plugin-react entirely, to the actively-maintained @eslint-react/eslint-plugin (paired with the existing eslint-plugin-react-hooks, which was already ESLint-10-compatible). Also dropped @babel/eslint-parser/@babel/eslint-plugin (unused/no longer eslint-10-compatible) and migrated eslint-plugin-import → eslint-plugin-import-x, same as the sibling repos (tabbable, focus-trap).

@dependabot @github

dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/eslint-10.10.0 branch September 23, 2026 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot Issues/PRs opened by Dependabot dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant