chore(deps-dev): bump eslint from 8.57.1 to 10.8.0 - #472
Conversation
Bumps [eslint](https://github.com/eslint/eslint) from 8.57.1 to 10.8.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.1...v10.8.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 3 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 888a6cf. Configure here.
| "@babel/core": "^7.27.1", | ||
| "@babel/preset-env": "^7.27.1", | ||
| "eslint": "^8.56.0", | ||
| "eslint": "^10.8.0", |
There was a problem hiding this comment.
ESLint 10 breaks CI Node
High Severity
Bumping eslint to 10.8.0 requires Node ^20.19.0 || ^22.13.0 || >=24, but CircleCI still runs Node 20.11. npm run lint in CI will fail on startup before any rules run, blocking build-and-test and releases.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 888a6cf. Configure here.
| "@babel/core": "^7.27.1", | ||
| "@babel/preset-env": "^7.27.1", | ||
| "eslint": "^8.56.0", | ||
| "eslint": "^10.8.0", |
There was a problem hiding this comment.
Lint config not migrated
High Severity
ESLint 10 removes eslintrc support, so .eslintrc.json (which extends airbnb-base and sets envs) is ignored. The remaining eslint.config.js only has overrides, still references removed valid-jsdoc, and uses import/* rules without registering the plugin, so npm run lint fails or no longer applies the real ruleset.
Reviewed by Cursor Bugbot for commit 888a6cf. Configure here.
| "@babel/core": "^7.27.1", | ||
| "@babel/preset-env": "^7.27.1", | ||
| "eslint": "^8.56.0", | ||
| "eslint": "^10.8.0", |
There was a problem hiding this comment.
Incompatible ESLint peer deps
High Severity
eslint is bumped to v10 while eslint-config-airbnb-base@15.0.0 only peers eslint ^7 || ^8, and installed eslint-plugin-import@2.32.0 only peers through ^9. ESLint 10 support for the import plugin is still unreleased, so the lint stack is unsupported and likely to break at install or runtime.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 888a6cf. Configure here.
Bumps eslint from 8.57.1 to 10.8.0.
Release notes
Sourced from eslint's releases.
... (truncated)
Commits
749dfed10.8.04bd0d75Build: changelog update for 10.8.04fbf46dtest: pinwebpackversion to 5.108.4 (#21137)6ddf858docs: fix broken Specify Parser Options anchor link (#21106)784dfbedocs: Clarifyno-eq-nulldescription (#21120)6b8d2f7fix: escape reserved characters in rule id inhtmlformatter (#21129)2d063e2chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)eccbe7btest: add error locations tono-class-assign(#21123)2fee9bbfeat: exportConfigObjectfromeslint/config(#21082)e7d1e43ci: bump actions/setup-go from 6 to 7 (#21118)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Medium Risk
Major ESLint upgrade with unchanged Airbnb config creates peer/engine mismatch risk for
npm run lintand release prerelease checks, but no runtime library impact.Overview
Bumps the eslint devDependency from ^8.56.0 to ^10.8.0 in
package.json, with a matching refresh ofpackage-lock.jsonfor ESLint 10’s dependency tree (e.g.@eslint/config-array,@humanfs/node, updatedespree/eslint-scope).This is a major tooling upgrade only—no changes to
srcor test code. eslint-config-airbnb-base (still ^15.0.0) officially peers eslint ^7.32.0 || ^8.2.0, so lint may fail or warn until Airbnb supports ESLint 10 or config is migrated. ESLint 10 also requires Node ^20.19.0 || ^22.13.0 || >=24, which may affect CI if older Node images are used.Reviewed by Cursor Bugbot for commit 888a6cf. Bugbot is set up for automated code reviews on this repo. Configure here.