Skip to content

Bump the eslint group across 1 directory with 5 updates - #128

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-fc6e1c56a8
Open

Bump the eslint group across 1 directory with 5 updates#128
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-fc6e1c56a8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the eslint group with 5 updates in the / directory:

Package From To
@html-eslint/eslint-plugin 0.62.0 0.65.0
@html-eslint/parser 0.62.0 0.65.0
eslint 10.5.0 10.9.1
eslint-plugin-sonarjs 4.0.3 4.2.0
eslint-plugin-unicorn 65.0.1 73.0.0

Updates @html-eslint/eslint-plugin from 0.62.0 to 0.65.0

Release notes

Sourced from @​html-eslint/eslint-plugin's releases.

v0.65.0

What's Changed

dependabot

Full Changelog: yeonjuan/html-eslint@v0.64.0...v0.65.0

v0.64.0

What's Changed

New Contributors

Full Changelog: yeonjuan/html-eslint@v0.63.0...v0.64.0

v0.63.0

What's Changed

dependabot

... (truncated)

Commits
  • 9557d60 v0.65.0
  • 3b401b5 chore: add twig, handlebar tests (#661)
  • 752066d chore(deps): bump @​hono/node-server from 1.19.13 to 1.19.17 (#659)
  • 42544ec chore: bump @​mdn/browser-compat-data from ^8.0.8 to 8.0.10 (#658)
  • 9ab50c2 v0.65.0-alpha.0
  • 475fd5a feat: handle logical branches in templatse (#649)
  • ae4283b chore(deps): bump nanoid from 3.3.16 to 3.3.18 (#657)
  • 2f7f812 chore(deps): bump js-yaml from 3.15.0 to 3.15.1 (#655)
  • 872eadf chore(deps): bump fast-uri from 3.1.4 to 3.1.5 (#654)
  • 42edd79 chore(deps): bump hono from 4.12.32 to 4.13.0 (#653)
  • Additional commits viewable in compare view

Updates @html-eslint/parser from 0.62.0 to 0.65.0

Release notes

Sourced from @​html-eslint/parser's releases.

v0.65.0

What's Changed

dependabot

Full Changelog: yeonjuan/html-eslint@v0.64.0...v0.65.0

v0.64.0

What's Changed

New Contributors

Full Changelog: yeonjuan/html-eslint@v0.63.0...v0.64.0

v0.63.0

What's Changed

dependabot

... (truncated)

Commits
  • 9557d60 v0.65.0
  • 3b401b5 chore: add twig, handlebar tests (#661)
  • 752066d chore(deps): bump @​hono/node-server from 1.19.13 to 1.19.17 (#659)
  • 42544ec chore: bump @​mdn/browser-compat-data from ^8.0.8 to 8.0.10 (#658)
  • 9ab50c2 v0.65.0-alpha.0
  • 475fd5a feat: handle logical branches in templatse (#649)
  • ae4283b chore(deps): bump nanoid from 3.3.16 to 3.3.18 (#657)
  • 2f7f812 chore(deps): bump js-yaml from 3.15.0 to 3.15.1 (#655)
  • 872eadf chore(deps): bump fast-uri from 3.1.4 to 3.1.5 (#654)
  • 42edd79 chore(deps): bump hono from 4.12.32 to 4.13.0 (#653)
  • Additional commits viewable in compare view

Updates eslint from 10.5.0 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

  • 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

  • ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

  • 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
  • 87f66f4 docs: Update README (GitHub Actions Bot)
  • 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
  • f3993b0 docs: Update README (GitHub Actions Bot)
  • ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
  • 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
  • 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
  • 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

  • 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
  • 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
  • dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
  • f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
  • 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

  • 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
  • 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
  • 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
  • 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
  • 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

  • 7d0cbf8 docs: Update README (GitHub Actions Bot)
  • 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
  • 678c90b docs: Update README (GitHub Actions Bot)
  • 8a10424 docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

Updates eslint-plugin-sonarjs from 4.0.3 to 4.2.0

Changelog

Sourced from eslint-plugin-sonarjs's changelog.

Release Guide

SonarJS currently has two distinct release targets:

Target Artifact Main workflow Notes
Standard SonarQube analyzer Maven/JAR release artifacts .github/workflows/automated-release.yml This is the normal SonarJS release flow.
SQAA (previously A3S) Docker image for LanguageAnalyzerService .github/workflows/docker-sqaa.yml Manual SQAA-only entry point and fallback.

Terminology

  • SQAA is the current name for what older docs and repository names still call A3S.
  • Some external identifiers still keep the legacy a3s name for compatibility. The important ones are:
    • the Docker repository path a3s/analysis/javascript
    • packages/grpc/src/proto/language_analyzer.proto with option java_package = "com.sonarsource.a3s.analyzer.grpc";
  • Do not rename those compatibility-sensitive identifiers as part of a routine release.

Standard SonarQube Analyzer Release

This is the regular SonarJS analyzer release. It produces the standard SonarQube analyzer artifacts and can also automate the SQAA handoff using the same build number.

Entry points

  1. Start .github/workflows/automated-release.yml.
  2. That workflow orchestrates the release and then calls .github/workflows/release.yml for the actual artifact publication.
  3. After the release succeeds, .github/workflows/bump-versions.yml opens the next development iteration PR.

What .github/workflows/automated-release.yml does

The SonarJS workflow is a thin wrapper around SonarSource/release-github-actions/.github/workflows/automated-release.yml@v1 with SonarJS-specific inputs:

  • project name SonarJS
  • plugin name javascript
  • Jira project JS
  • optional SQC and SQS integration PRs
  • optional SQAA integration, enabled in the SonarJS wrapper and implemented by a custom local workflow
  • SLVS, SLVSCODE, SLE, and SLI integration tickets enabled
  • the generic release-github-actions SQAA integration explicitly disabled, because SonarJS uses analysis/js_ts_image_tag instead of gradle/sonar-plugins.versions.toml

The reusable workflow performs the following steps:

  1. Freeze the target branch.
  2. Run the releasability checks with SonarSource/gh-action_releasability@v3.
  3. Resolve the release version with get-release-version.
  4. Resolve the Jira version with get-jira-version.
  5. Generate Jira-based release notes with get-jira-release-notes unless explicit notes were provided.
  6. Create the REL Jira ticket with create-jira-release-ticket.
  7. Publish the GitHub release with publish-github-release.
  8. Unfreeze the branch.
  9. Release the Jira version, create the next Jira version, and move the REL ticket to Technical Release Done.

... (truncated)

Commits

Updates eslint-plugin-unicorn from 65.0.1 to 73.0.0

Release notes

Sourced from eslint-plugin-unicorn's releases.

v73.0.0

New rules

Improvements

  • Improve performance (#3560) 7b7c7906
  • Harden rules (#3585) 9c2b0bb1
  • consistent-boolean-name: Add wrappers option (#3572) 78c5abf2
  • consistent-boolean-name: Add granular check options (#3591) a33b1c1e
  • consistent-function-style: Add defaultExport option (#3600) e78a7c96
  • prefer-https: Add ignore option (#3557) 7f7ec066
  • comment-content: Handle Unicode word boundaries (#3597) dd52b4a4
  • import-style: Ignore type-only imports (#3599) f2a62e37
  • name-replacements: Handle TypeScript parameter properties (#3575) fa0df7bd
  • no-negated-comparison: Never check relational operators (#3589) 6120423a
  • no-this-outside-of-class: Allow explicit TypeScript this parameters (#3596) 6a709b75
  • no-unnecessary-string-trim: Handle Zod string schemas (#3577) 1c06db0c
  • prefer-else-if: Handle existing else if chains (#3587) 46eaaf00
  • prefer-simple-condition-first: Treat == null checks as simple (#3559) d1be07ea
  • prefer-set-has: Fix false positives for computed members (#3562) 28176822
  • consistent-export-decorator-position: Fix decorator position reporting (#3583) 0a19cb4d
  • no-array-for-each: Fix deprecation docs (#3568) 0096a181
  • Fix process.exit control-flow analysis (#3590) 342a5edf

sindresorhus/eslint-plugin-unicorn@v72.0.0...v73.0.0

v72.0.0

Breaking

  • prefer-minimal-ternary: Rename checkVaryingCallee option to checkVaryingBase (#3508) 825b7b9b

New rules

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 28, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jun 28, 2026

Copy link
Copy Markdown

Deploying tk-embed with  Cloudflare Pages  Cloudflare Pages

Latest commit: 493991d
Status: ✅  Deploy successful!
Preview URL: https://f93831dd.tk-embed.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-esli-lfts.tk-embed.pages.dev

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-fc6e1c56a8 branch from 0b2a8bc to f01281b Compare July 4, 2026 03:11
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-fc6e1c56a8 branch from f01281b to 9fb87b4 Compare July 25, 2026 03:02
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-fc6e1c56a8 branch 2 times, most recently from df20965 to ee4c352 Compare August 15, 2026 03:03
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-fc6e1c56a8 branch from ee4c352 to 9c91b13 Compare August 22, 2026 03:02
Bumps the eslint group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@html-eslint/eslint-plugin](https://github.com/yeonjuan/html-eslint) | `0.62.0` | `0.65.0` |
| [@html-eslint/parser](https://github.com/yeonjuan/html-eslint) | `0.62.0` | `0.65.0` |
| [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.9.1` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.0.3` | `4.2.0` |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `65.0.1` | `73.0.0` |



Updates `@html-eslint/eslint-plugin` from 0.62.0 to 0.65.0
- [Release notes](https://github.com/yeonjuan/html-eslint/releases)
- [Commits](yeonjuan/html-eslint@v0.62.0...v0.65.0)

Updates `@html-eslint/parser` from 0.62.0 to 0.65.0
- [Release notes](https://github.com/yeonjuan/html-eslint/releases)
- [Commits](yeonjuan/html-eslint@v0.62.0...v0.65.0)

Updates `eslint` from 10.5.0 to 10.9.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.5.0...v10.9.1)

Updates `eslint-plugin-sonarjs` from 4.0.3 to 4.2.0
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `eslint-plugin-unicorn` from 65.0.1 to 73.0.0
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](sindresorhus/eslint-plugin-unicorn@v65.0.1...v73.0.0)

---
updated-dependencies:
- dependency-name: "@html-eslint/eslint-plugin"
  dependency-version: 0.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: "@html-eslint/parser"
  dependency-version: 0.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: eslint
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: eslint-plugin-unicorn
  dependency-version: 69.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: eslint
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-fc6e1c56a8 branch from 9c91b13 to 493991d Compare August 29, 2026 03:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant