Repository navigation
chore(deps-dev): bump eslint from 10.10.0 to 10.12.0 - #869
Conversation
dependabot
Bot
added
dependencies
Bumps [eslint](https://github.com/eslint/eslint) from 10.10.0 to 10.12.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.10.0...v10.12.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
88f23e8 to
2bd68e4
Compare
green-dalii
left a comment
green-dalii
left a comment
There was a problem hiding this comment.
Merge audit, recorded before the squash. Administrative bypass on explicit instruction; ruleset added, used, restored, re-read field by field.
Why bypass. A dependabot PR cannot carry a review, and the ruleset requires one.
Pre-merge scans. No closing keyword. Two commits: the bump and the lockfile sync. The only trailer is Signed-off-by: dependabot[bot]; the squash uses an explicit message, so it is not carried onto the merge commit.
What was checked beyond Gate 1. eslint is pinned exactly ("eslint": "10.12.0", not a range), so this is a minor bump with no resolution ambiguity. The pnpm lockfile changes 192 lines for it, which is large for a minor and matches the dependency's own transitive set rather than a resolution shift — pnpm-lock.yaml shows the same package names, with versions moving under the new eslint.
The one thing worth naming: this is the linter that Gate 1 runs, so a behaviour change in eslint would show up as new or missing findings rather than as a test failure. Gate 1 is green here, and the Obsidian Bot runs its own ruleset separately, which is why lint-clean locally is not the same as Bot-approved.
Bumps eslint from 10.10.0 to 10.12.0.
Release notes
Sourced from eslint's releases.
... (truncated)
Commits
a438ec310.12.032a73f1Build: changelog update for 10.12.0bc51eeefix:prefer-arrow-callbackfalse positive in conditional test (#21373)bbff86cfix: skip lines with multiple comments inmax-lines-per-function(#21332)152067fchore: update ecosystem plugins (#21362)b56d58echore: update github/codeql-action action to v4.38.2 (#21376)67eb586docs: Update READMEbfaea12perf: cache normalized config globals per languageOptions (#21364)322209eci: avoid Nx cache in ecosystem tests and disable failing test (#21369)d166567chore: update dependency prettier to v3.9.9 (#21371)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)