Skip to content

Bump eslint from 9.39.4 to 10.2.1#1266

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/eslint-10.2.1
Open

Bump eslint from 9.39.4 to 10.2.1#1266
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/eslint-10.2.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps eslint from 9.39.4 to 10.2.1.

Release notes

Sourced from eslint's releases.

v10.2.1

Bug Fixes

  • 14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)
  • 84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)
  • af764af fix: clarify language and processor validation errors (#20729) (Pixel998)
  • e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

  • ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)
  • 57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)
  • c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)
  • 1418d52 docs: Update README (GitHub Actions Bot)
  • 39771e6 docs: Update README (GitHub Actions Bot)
  • 71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)
  • 22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)
  • 8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

  • 7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])
  • fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])
  • 7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)
  • 4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])
  • 51080eb test: processor service (#20731) (kuldeep kumar)
  • e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)
  • 4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)
  • 066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)

v10.2.0

Features

  • 586ec2f feat: Add meta.languages support to rules (#20571) (Copilot)
  • 14207de feat: add Temporal to no-obj-calls (#20675) (Pixel998)
  • bbb2c93 feat: add Temporal to ES2026 globals (#20672) (Pixel998)

Bug Fixes

  • 542cb3e fix: update first-party dependencies (#20714) (Francesco Trotta)

Documentation

  • a2af743 docs: add language to configuration objects (#20712) (Francesco Trotta)
  • 845f23f docs: Update README (GitHub Actions Bot)
  • 5fbcf59 docs: remove sourceType from ts playground link (#20477) (Tanuj Kanti)
  • 8702a47 docs: Update README (GitHub Actions Bot)
  • ddeaded docs: Update README (GitHub Actions Bot)
  • 2b44966 docs: add Major Releases section to Manage Releases (#20269) (Milos Djermanovic)
  • eab65c7 docs: update eslint versions in examples (#20664) (루밀LuMir)
  • 3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#20660) (Milos Djermanovic)

Chores

  • 8120e30 refactor: extract no unmodified loop condition (#20679) (kuldeep kumar)
  • 46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697) (renovate[bot])
  • 01ed3aa test: add unit tests for unicode utilities (#20622) (Manish chaudhary)

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
eslint [>= 10.0.a, < 10.1]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 20, 2026 12:30
@dependabot dependabot Bot requested a review from stefanfinseth April 20, 2026 12:30
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
Copy link
Copy Markdown

@ecobitai ecobitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Verification: CHANGES NEEDED

eslint 9.39.4 → 10.2.1 (major bump, devDependency)

Breaking Changes Detected

This PR introduces a peer dependency conflict that prevents installation:

npm error ERESOLVE could not resolve
npm error peer eslint@"^9.0.0" from neostandard@0.13.0
npm error Conflicting peer dependency: eslint@9.39.4

CI Status

Test - Failed during npm ci (dependency resolution)
✅ Other checks passed (but irrelevant since install fails)

Root Cause

The project uses neostandard@0.13.0 as its ESLint configuration, which has a strict peer dependency on eslint@^9.0.0. ESLint 10 is not yet supported by neostandard.

neostandard ESLint 10 Support Status

  • Issue #350 (github.com/neostandard/neostandard/issues/350) tracks ESLint 10 support
  • Status: Open, actively being worked on
  • Timeline: Will be released after StandardJS reconciliation is complete
  • Current version (0.13.0): Only supports ESLint 9.x

Fix Plan

Option 1: Close this PR (Recommended)

  • Close this PR as neostandard does not yet support ESLint 10
  • Wait for neostandard to release ESLint 10 support (track issue #350)
  • Re-create the upgrade PR after neostandard adds support

Option 2: Switch to a different ESLint config (Not Recommended)

  • Remove neostandard from devDependencies
  • Configure ESLint directly or use an alternative config that supports ESLint 10
  • This would require significant migration effort and testing

Recommendation

DO NOT MERGE - This PR cannot be merged in its current state. The peer dependency conflict prevents any CI checks from running.

Action Required: Close this PR and wait for neostandard to add ESLint 10 support. You can track progress at neostandard/neostandard#350

Investigation Details

  • Dependency Type: devDependency (ESLint is a development tool)
  • Version Jump: Major (9.x → 10.x) - breaking changes expected
  • Usage: ESLint is used via neostandard config for code linting
  • Conflict: neostandard@0.13.0 requires eslint@^9.0.0 as peer dependency
  • Ecosystem Status: ESLint 10 was released recently; many plugins and configs are still catching up
Technical Details
Property Value
Classifier Tier standard
Tier Reasoning Major version bump with security advisory and CI failure requires investigation despite being a dev dependency. The failed check must be reviewed before merging.
Verdict REQUEST_CHANGES
Model z-ai/glm-5-20260211
Iterations 10
Reasoning enabled
Duration 325.9s
Auto-Verify enabled
Auto-Approve Level major
Auto-Merge Level minor
Tokens Count Cost
Input 154,869 $0.1115
Output 2,077 $0.0048
Total $0.1163

Classifier overhead: 388 tokens ($0.0006)

Tools: shell, search_web x3, fetch_url x5

⚡️ Trace Log

🔷 Executed:

gh run view 24666547187 --log-failed 2>&1 | head -100

Length of output: 4589 chars

Test	Install dependencies	2026-04-20T12:30:19.3195520Z ##[group]Run npm ci --no-audit --no-progress --prefer-offline
Test	Install dependencies	2026-04-20T12:30:19.3196070Z �[36;1mnpm ci --no-audit --no-progress --prefer-offline�[0m
Test	Install dependencies	2026-04-20T12:30:19.3226696Z shell: /usr/bin/bash -e {0}
Test	Install dependencies	2026-04-20T12:30:19.3227322Z ##[endgroup]
Test	Install dependencies	2026-04-20T12:30:21.2730530Z npm error code ERESOLVE
Test	Install dependencies	2026-04-20T...

🔷 Executed:

search_web(query="neostandard eslint 10 compatibility")

Length of output: 2529 chars

Found 5 results for "neostandard eslint 10 compatibility":

1. Compatibility issues · Issue #10 · neostandard/neostandard
   https://github.com/neostandard/neostandard/issues/10
   - ESLint no longer recognises eg: /* eslint-env mocha */ - FIXABLE BY USER, although ESLint has made it hard by removing the env options and instead pointing people to use eg: /* global describe, it -- Globals defined by Mocha */ Doable for Mocha, very verbose for browsers. One alternative is to do: neostandard({ env:...

🔷 Executed:

fetch_url(extraction_prompt="What versions of eslint does neostandard support? What are the peer dependencies? Is there a version...", url="https://www.npmjs.com/package/neostandard")

Length of output: 829 chars

*Content from https://www.npmjs.com/package/neostandard:*

# Analysis Result

The web page content provided is **inaccessible**. The page shows a security verification message from npm.js indicating that the website is performing a security check to protect against malicious bots, rather than displaying the actual package information.

## Unable to Extract:
- ✗ Supported ESLint versions for neostandard
- ✗ Peer dependencies
- ✗ Whether there's a version supporting ESLint 10

## Recommendation:
T...

🔷 Executed:

fetch_url(extraction_prompt="What versions of eslint does neostandard support? Is there support for eslint 10? What are the peer ...", url="https://github.com/neostandard/neostandard")

Length of output: 1179 chars

*Content from https://github.com/neostandard/neostandard:*

# Neostandard ESLint Support Summary

## ESLint Version Support

Based on the GitHub repository content, here's what I found regarding ESLint version support:

- **Built for ESLint 9**: The documentation explicitly states "Built for ESLint 9"
- **ESLint 10 Support**: **No explicit mention of ESLint 10 support** in the provided content
- **TypeScript types**: The project uses `@types/eslint@^9` (as noted in the commit "fix(deps): move al...

🔷 Executed:

fetch_url(extraction_prompt="Is there an issue or discussion about eslint 10 support? What is the latest version and does it supp...", url="https://github.com/neostandard/neostandard/issues")

Length of output: 747 chars

*Content from https://github.com/neostandard/neostandard/issues:*

# ESLint 10 Support Analysis

## Issue Found
Yes, there is an open discussion about ESLint 10 support:

- **Issue #350**: "Support ESLint 10"
  - Status: **Open**
  - Opened by: voxpelli
  - Date: Feb 8, 2026
  - Comments: 15

## Latest Version Information
The page shows references to version **1.0.0** in several issues (issues #327, #308), suggesting this is a recent or current version milestone being worked on.

## Conclusion
T...

🔷 Executed:

search_web(query="neostandard 1.0 eslint 10 support release")

Length of output: 2298 chars

Found 5 results for "neostandard 1.0 eslint 10 support release":

1. neostandard - npm
   https://www.npmjs.com/package/neostandard?activeTab=readme
   As of neostandard v1.0.0, eslint-plugin-import-x has been removed to reduce dependency weight and installation complexity.

2. Releases · neostandard/neostandard
   https://github.com/neostandard/neostandard/releases
   neostandard · v0.11.8 · d0929e3 · This commit was created on GitHub.com and signed with GitHub’s verified signature. GPG key ID:...

🔷 Executed:

fetch_url(extraction_prompt="What is the latest version of neostandard? Does any version support eslint 10? What are the peer dep...", url="https://github.com/neostandard/neostandard/releases")

Length of output: 1105 chars

*Content from https://github.com/neostandard/neostandard/releases:*

# neostandard Version Information

## Latest Version
**v0.13.0** (released 2026-02-26)

## ESLint 10 Support
Based on the release notes provided, **no version explicitly mentions supporting ESLint 10**. The page does not contain information about ESLint 10 compatibility for any version.

## Peer Dependencies for v0.13.0
The release notes do not explicitly list peer dependencies. However, the following information is provided ab...

🔷 Executed:

search_web(query="\"neostandard\" \"eslint 10\" peer dependency")

Length of output: 65 chars

No results found for: ""neostandard" "eslint 10" peer dependency"

🔷 Executed:

fetch_url(extraction_prompt="What is the status of eslint 10 support? Is it implemented? What version will support it?", url="https://github.com/neostandard/neostandard/issues/350")

Length of output: 1281 chars

*Content from https://github.com/neostandard/neostandard/issues/350:*

# ESLint 10 Support Status for Neostandard

## Current Status
**Not yet implemented** - ESLint 10 support is still in progress as of the issue discussion (March 2026).

## Implementation Timeline
According to the lead maintainer (voxpelli), the roadmap is:
1. ✅ Ship 0.13.0 - **completed**
2. Reconcile with StandardJS - **in progress** (work started in #355)
3. **Upgrade to ESLint 10** - **planned next**

## Key Details

- **V...

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-10.2.1 branch 4 times, most recently from e162122 to f95c25b Compare April 22, 2026 11:35
Bumps [eslint](https://github.com/eslint/eslint) from 9.39.4 to 10.2.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.2.1)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-10.2.1 branch from f95c25b to 993632e Compare April 28, 2026 11:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants