Skip to content

chore(deps-dev): bump @eslint/js from 9.8.0 to 9.39.5 - #46

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint/js-9.39.5
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint/js-9.39.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026 •

Copy link
Copy Markdown

Bumps @eslint/js from 9.8.0 to 9.39.5.

Release notes

Sourced from @​eslint/js's releases.

v9.39.5

Bug Fixes

Documentation

  • 74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
  • eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
  • daf7791 chore: pin [email protected] (#20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

v9.39.4

Bug Fixes

  • f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)
  • a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)
  • 234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)
  • b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

  • 4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

  • b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)
  • 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
  • 1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)

v9.39.3

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)

Chores

  • 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#20529) (Milos Djermanovic)
  • 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
  • af498c6 chore: ignore /docs/v9.x in link checker (#20453) (Milos Djermanovic)

v9.39.2

Bug Fixes

  • 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

  • 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

... (truncated)

Commits
  • 202117b chore: package.json update for @​eslint/js release
  • 71b2f6b chore: package.json update for @​eslint/js release
  • 9ceef92 chore: package.json update for @​eslint/js release
  • c43ce24 chore: package.json update for @​eslint/js release
  • c7ebefc chore: package.json update for @​eslint/js release
  • 2375a6d chore: package.json update for @​eslint/js release
  • 9e7fad4 chore: add script to auto-generate eslint:recommended configuration (#20208)
  • 25d0e33 chore: package.json update for @​eslint/js release
  • abee4ca chore: package.json update for @​eslint/js release
  • 90a71bf docs: update README files to add badge and instructions (#20115)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.8.0 to 9.39.5.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.39.5/packages/js)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 9.39.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 13, 2026
@vercel

vercel Bot commented Aug 13, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
ephbaumdotdev Ready Ready Preview Aug 13, 2026 9:48pm

ephbaum added a commit that referenced this pull request Sep 21, 2026
…ettier-plugin-astro 1.0) (#78)

* chore(deps): roll up 11 green Dependabot bumps

Consolidates the Dependabot PRs whose CI was already green into a single
lockfile update, so one build gates the lot instead of eleven:

  zod                       4.4.3  -> 4.6.5   (#77)
  vite                      8.2.1  -> 8.3.0   (#73)
  @iconify-json/logos       1.2.12 -> 1.2.14  (#71)
  globals                   17.11.0 -> 17.12.0 (#69)
  @typescript-eslint/parser 8.66.0 -> 8.70.0  (#68)
  @astrojs/sitemap          3.7.3  -> 3.7.4   (#66)
  sharp                     0.35.3 -> 0.35.4  (#63)
  satori                    0.29.0 -> 0.33.4  (#60)
  typescript                5.9.3  -> 6.0.3   (#57)
  @eslint/js                9.8.0  -> 9.39.5  (#46)
  unocss / @unocss/astro / @unocss/reset 66.7.5 -> 66.10.2 (#74)

Dependabot raised only @unocss/reset; the three unocss packages share a
release train and have to move together, so the other two ride along.

Verified with pnpm run lint, format:check, and build — 215 pages, no
astro check errors under TypeScript 6.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01G214G6mJBeVBZ3CbukkNRu

* chore(deps): bump astro from 7.2.1 to 7.3.2 (#76)

Raised on its own (#76) this bump failed `astro check` with 20 errors —
every `post.data` access reported as `unknown`. The cause is zod, not
Astro: 7.3 infers a collection's `data` type through the schema's
`.transform()`, and zod 4.4.3's output types defeat that inference. With
the zod 4.6.5 bump from the previous commit in place, `astro check`
reports zero errors, which is why this rides along here instead.

The range resolves to 7.3.3, the current patch.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01G214G6mJBeVBZ3CbukkNRu

* chore(deps-dev): bump prettier-plugin-astro from 0.14.1 to 1.0.0 (#75)

1.0.0 changes how it breaks JSX-ish expressions in .astro files, so the
bump alone left 11 files failing `format:check` — that is why #75 is red.
This commit carries the reformat with it.

Two things worth knowing about the new output:

- It is not idempotent on the first pass. One `pnpm run format` turns
  `{cond && <script ... />}` in BaseHead.astro into a form it then wants
  to rewrite again as `{cond && (<script ... />)}`, so a single
  `check:fix` can still leave CI red. Run it twice; the tree here has
  converged and a third pass is a no-op.
- Rendered HTML is unchanged except for one construct: `<Button>&larr;
  Back to blog</Button>` in BlogContent.astro now breaks across lines,
  which adds collapsing whitespace either side of the label inside the
  anchor. Diffed all 215 built pages against a 7.3.3 build of the
  previous formatting; that anchor is the only difference once the
  per-build random font-fallback ids and brutal-ui colours are
  normalised out.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01G214G6mJBeVBZ3CbukkNRu

* docs: note the prettier-plugin-astro self-closing script gotcha

The plugin's 1.0.x printer is not idempotent for a self-closing
`<script />` inside a `{cond && …}` expression that has to wrap: one
`format` pass emits output that fails `format:check`, and a second pass
converges. Records the shape to avoid and, more usefully, what the
confusing CI failure means when it happens.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01G214G6mJBeVBZ3CbukkNRu

* docs: widen the prettier-plugin-astro note to the style-comment bug

Two corrections to the note added a moment ago. It pinned the behaviour to
1.0.1 when what is actually known is that it is a 1.0.x regression — 0.14.1
was stable — so a future reader should not assume moving off 1.0.1 clears it.

It also missed the worse of the two bugs: multi-line CSS comments in a
`<style>` block gain two spaces of indentation on every run and never reach
a fixed point, so `format:check` cannot pass at all. Verified against
upstream issue 487's repro on our install (7 -> 9 -> 11 -> 13 spaces).
No `<style>` block here carries a comment today, which is why CI is green;
adding one to BlogContent, BaseFooter, or SummaryCard would strand it.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01G214G6mJBeVBZ3CbukkNRu

---------

Co-authored-by: Claude <[email protected]>

ephbaum commented Oct 23, 2026

Copy link
Copy Markdown
Owner

Closing as stale: @eslint/js ^9.39.5 already landed on main via #78.


Generated by Claude Code

@ephbaum ephbaum closed this Oct 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/eslint/js-9.39.5 branch October 23, 2026 00:20

This branch was successfully deployed

1 active deployment
Preview — ad9141e4 Deployed Aug 13, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant