chore(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 - #5017
chore(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0#5017dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) from 2.31.0 to 2.32.0. - [Release notes](https://github.com/import-js/eslint-plugin-import/releases) - [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md) - [Commits](import-js/eslint-plugin-import@v2.31.0...v2.32.0) --- updated-dependencies: - dependency-name: eslint-plugin-import dependency-version: 2.32.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
|
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: af1245d536
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| @@ -127,7 +127,7 @@ importers: | |||
| version: 6.0.1(rollup@4.62.2) | |||
| '@rslib/core': | |||
| specifier: ^0.23.2 | |||
| version: 0.23.2(@microsoft/api-extractor@7.57.7(@types/node@20.19.5))(@module-federation/runtime-tools@2.8.2)(core-js@3.36.1)(typescript@6.0.3) | |||
| version: 0.23.2(@microsoft/api-extractor@7.57.7(@types/node@20.19.5))(@module-federation/runtime-tools@2.9.0)(core-js@3.36.1)(typescript@6.0.3) | |||
There was a problem hiding this comment.
Limit the lockfile update to eslint-plugin-import
Regenerate this as a targeted dependency update: the lockfile now resolves the unrelated @module-federation/runtime-tools suite from 2.8.2 to 2.9.0 for root @rslib/core/@rstest/core consumers (with similar changes across many workspace importers), so every frozen install also rolls out a runtime/build-tool upgrade that is absent from the manifest and unrelated to the requested ESLint plugin bump. This makes the supposedly lint-only change alter build and experiment dependencies without their corresponding validation; retain only eslint-plugin-import and its dependency-closure changes.
AGENTS.md reference: AGENTS.md:L284-L286
Useful? React with 👍 / 👎.
@module-federation/devtools
@module-federation/cli
create-module-federation
@module-federation/dts-plugin
@module-federation/enhanced
@module-federation/error-codes
@module-federation/esbuild
@module-federation/managers
@module-federation/manifest
@module-federation/metro
@module-federation/metro-plugin-rnc-cli
@module-federation/metro-plugin-rnef
@module-federation/metro-plugin-rock
@module-federation/modern-js
@module-federation/modern-js-v3
@module-federation/native-federation-tests
@module-federation/native-federation-typescript
@module-federation/nextjs-mf
@module-federation/node
@module-federation/observability-plugin
@module-federation/playground
@module-federation/retry-plugin
@module-federation/rsbuild-plugin
@module-federation/rspack
@module-federation/rspress-plugin
@module-federation/rstest
@module-federation/runtime
@module-federation/runtime-core
@module-federation/runtime-tools
@module-federation/sdk
@module-federation/storybook-addon
@module-federation/third-party-dts-extractor
@module-federation/treeshake-frontend
@module-federation/treeshake-server
@module-federation/typescript
@module-federation/utilities
@module-federation/webpack-bundler-runtime
@module-federation/bridge-react
@module-federation/bridge-react-webpack-plugin
@module-federation/bridge-shared
@module-federation/bridge-vue3
@module-federation/inject-external-runtime-core-plugin
commit: |
Bundle Size Report8 package(s) changed, 35 unchanged. Package dist + ESM entry
Bundle targets
Consumer scenarios
Total dist (raw): 36.16 MB (-720 B (-0.0%)) Bundle sizes are generated with rslib (Rspack). Package-root metrics preserve the historical report. Tracked subpath exports such as |
Bumps eslint-plugin-import from 2.31.0 to 2.32.0.
Release notes
Sourced from eslint-plugin-import's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-import's changelog.
Commits
01c9eb0v2.32.0ae57cc1[Deps] updatearray-includes,array.prototype.findlastindex, `eslint-modu...9e1ad6b[Fix]order: codify invariants from docs into config schemaf017790[Docs]no-restricted-paths: clarify wording and fix errors7d83a57[Docs]no-unused-modules: add missing double quote519eb94[utils] v2.12.171ad145[actions] split out tests into new vs old eslint9b096c4[utils] [dev deps] update@arethetypeswrong/cli,@ljharb/tsconfig, `@type...da5f6ec[Fix]enforce-node-protocol-usage: avoid a crash with some TS code6e49a58[Refactor]order: remove unnecessary negative checkDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)