Repository navigation
chore(deps-dev): bump eslint from 10.13.0 to 10.14.0 - #978
Conversation
Bumps [eslint](https://github.com/eslint/eslint) from 10.13.0 to 10.14.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.13.0...v10.14.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.14.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Thanks @dependabot[bot] for keeping our dependencies current! 🙌 |
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
hermes-exosphere
left a comment
hermes-exosphere
left a comment
There was a problem hiding this comment.
Automated approval: trivial dependency update.
The ESLint 10.13.0 → 10.14.0 update is suitable for automatic merging after reviewing upstream release notes, published code, and repository usage. Neither version has install-time scripts or native build artifacts, and no new transitive dependencies or unexpected registry URLs appear. No GitHub Actions pins changed.
Bumps
eslint10.13.0 → 10.14.0 (Minor)
Findings
- info
eslint: The func-name-matching behavior change affects a rule this repository does not enable. Published code and release notes show no API removals, changed defaults, Node requirement increase, or license change. - info
eslint: Only ESLint changes in bun.lock. Raised dependency floors introduce no package updates: @humanfs/node is already 0.16.8, and minimatch remains overridden to 11.0.3. The npm tarball's SHA-512 matches the lockfile.
Checked: allowlisted bot author, only dependency files, patch/minor bumps, green CI on this commit, no merge conflicts; then a supply-chain review by gpt-6.1-sol (changelogs, install scripts, lockfile, action pins).
pr-autopilot · Codex in a locked-down container · traced by failproofai
Bumps eslint from 10.13.0 to 10.14.0.
Release notes
Sourced from eslint's releases.
Commits
12cbff410.14.06b696e7Build: changelog update for 10.14.00e2ab70ci: disableeslint-plugin-unicornecosystem test (#21462)4a12580fix: require minimatch10.2.6to avoid vulnerable brace-expansion (#21460)0f94f47docs: removezh-hansfrom docs language switcher (#21437)dab466edocs: Update README827a8f3fix:no-restricted-globalscrash on global objects as property values (#21449)97431f8docs: replace--rulesdirwith a virtual plugin in custom rules docs (#21452)6e3f988chore: update github/codeql-action action to v4.39.1 (#21450)161558afix: handle LS, PS and empty hashbang comments (#21419)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)