Update dependency @convex-dev/eslint-plugin to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@convex-dev/eslint-plugin (source)	2.0.0 → 5.0.0

---

Release Notes

get-convex/convex-backend (@​convex-dev/eslint-plugin)

v5.0.0

• Add a new rule @convex-dev/no-process-env (enabled by default as an error)
  that flags process.env in Convex code and, where it can, autofixes it to the
  typed env object exported by _generated/server. This is a major version
  bump because the new default-enabled rule can surface new errors in existing
  codebases.
• Add a new rule @convex-dev/no-duplicate-indexes (enabled by default as an
  error) that detects cases where indexes duplicate the same order of fields and
  can be combined.
• Add a new rule @convex-dev/require-access-control (disabled by default) that
  ensures that every public Convex function calls an access control helper (e.g.
  requireAdmin, assertIsLoggedIn, etc).

v4.0.0

• Add a new rule @convex-dev/no-schema-import-cycle (enabled by default as an
  error) that detects cases where schema.ts imports files that themselves
  depend on the schema.

v3.0.0

• Add a new rule @convex-dev/no-top-of-hour-crons (enabled by default as a
  warning) that flags cron jobs scheduled exactly on the hour. The top of the
  hour is the busiest time on the clock for most apps, so moving background work
  off-peak (or omitting minuteUTC to let Convex pick a minute) helps your app
  scale. This is a major version bump because the new default-enabled rule can
  surface new warnings in existing codebases.
• The @convex-dev/no-collect-in-query and @convex-dev/explicit-table-ids
  rules now work when type-aware linting is disabled.
• When type-aware linting is disabled, error messages now recommend enabling it.

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Monday through Friday (* * * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: e1a1c984-8c94-429f-9476-a759ff0bda5c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@convex-dev/r2@82

commit: bd484be