Skip to content
This repository was archived by the owner on Feb 23, 2026. It is now read-only.

⬆️(deps-dev): Bump @eslint/js from 9.27.0 to 9.32.0 - #67

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/eslint/js-9.32.0
Closed

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/eslint/js-9.32.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2025

Copy link
Copy Markdown

Bumps @eslint/js from 9.27.0 to 9.32.0.

Release notes

Sourced from @​eslint/js's releases.

v9.32.0

Features

  • 1245000 feat: support explicit resource management in core rules (#19828) (fnx)
  • 0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)

Bug Fixes

  • 960fd40 fix: Upgrade @​eslint/js (#19971) (Nicholas C. Zakas)
  • bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)
  • d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)
  • f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)
  • 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)
  • 3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

Documentation

  • 86e7426 docs: Update README (GitHub Actions Bot)

Chores

  • 50de1ce chore: package.json update for @​eslint/js release (Jenkins)
  • 74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)
  • 2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)
  • b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)
  • f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)
  • e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)
  • e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)
  • 2f73a23 test: switch to flat config mode in ast-utils tests (#19948) (Milos Djermanovic)
  • c565a53 chore: exclude further_reading_links.json from Prettier formatting (#19943) (Milos Djermanovic)

v9.31.0

Features

  • 35cf44c feat: output full actual location in rule tester if different (#19904) (ST-DDT)
  • a6a6325 feat: support explicit resource management in no-loop-func (#19895) (Milos Djermanovic)
  • 4682cdc feat: support explicit resource management in no-undef-init (#19894) (Milos Djermanovic)
  • 5848216 feat: support explicit resource management in init-declarations (#19893) (Milos Djermanovic)
  • bb370b8 feat: support explicit resource management in no-const-assign (#19892) (Milos Djermanovic)

Bug Fixes

  • 07fac6c fix: retry on EMFILE when writing autofix results (#19926) (TKDev7)
  • 28cc7ab fix: Remove incorrect RuleContext types (#19910) (Nicholas C. Zakas)

Documentation

  • 664cb44 docs: Update README (GitHub Actions Bot)
  • 40dbe2a docs: fix mismatch between globalIgnores() code and text (#19914) (MaoShizhong)
  • 5a0069d docs: Update README (GitHub Actions Bot)
  • fef04b5 docs: Update working on issues info (#19902) (Nicholas C. Zakas)

Chores

  • 3ddd454 chore: upgrade to @eslint/js@9.31.0 (#19935) (Francesco Trotta)
  • d5054e5 chore: package.json update for @​eslint/js release (Jenkins)
  • 0f4a378 chore: update eslint (#19933) (renovate[bot])
  • 76c2340 chore: bump mocha to v11 (#19917) (루밀LuMir)

... (truncated)

Changelog

Sourced from @​eslint/js's changelog.

v9.32.0 - July 25, 2025

  • 960fd40 fix: Upgrade @​eslint/js (#19971) (Nicholas C. Zakas)
  • 50de1ce chore: package.json update for @​eslint/js release (Jenkins)
  • bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)
  • 74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)
  • d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)
  • 2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)
  • b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)
  • f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)
  • f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)
  • 86e7426 docs: Update README (GitHub Actions Bot)
  • e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)
  • 1245000 feat: support explicit resource management in core rules (#19828) (fnx)
  • e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)
  • 0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)
  • 2f73a23 test: switch to flat config mode in ast-utils tests (#19948) (Milos Djermanovic)
  • 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)
  • c565a53 chore: exclude further_reading_links.json from Prettier formatting (#19943) (Milos Djermanovic)
  • 3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

v9.31.0 - July 11, 2025

  • 3ddd454 chore: upgrade to @eslint/js@9.31.0 (#19935) (Francesco Trotta)
  • d5054e5 chore: package.json update for @​eslint/js release (Jenkins)
  • 0f4a378 chore: update eslint (#19933) (renovate[bot])
  • 664cb44 docs: Update README (GitHub Actions Bot)
  • 07fac6c fix: retry on EMFILE when writing autofix results (#19926) (TKDev7)
  • 35cf44c feat: output full actual location in rule tester if different (#19904) (ST-DDT)
  • 40dbe2a docs: fix mismatch between globalIgnores() code and text (#19914) (MaoShizhong)
  • 76c2340 chore: bump mocha to v11 (#19917) (루밀LuMir)
  • 28cc7ab fix: Remove incorrect RuleContext types (#19910) (Nicholas C. Zakas)
  • a6a6325 feat: support explicit resource management in no-loop-func (#19895) (Milos Djermanovic)
  • 4682cdc feat: support explicit resource management in no-undef-init (#19894) (Milos Djermanovic)
  • 5848216 feat: support explicit resource management in init-declarations (#19893) (Milos Djermanovic)
  • bb370b8 feat: support explicit resource management in no-const-assign (#19892) (Milos Djermanovic)
  • 5a0069d docs: Update README (GitHub Actions Bot)
  • fef04b5 docs: Update working on issues info (#19902) (Nicholas C. Zakas)

v9.30.1 - July 1, 2025

  • b035f74 chore: upgrade to @eslint/js@9.30.1 (#19906) (Francesco Trotta)
  • b3dbc16 chore: package.json update for @​eslint/js release (Jenkins)
  • e91bb87 fix: allow separate default and named type imports (#19899) (xbinaryx)
  • ab7c625 docs: Update README (GitHub Actions Bot)
  • dae1e5b docs: update jsdoc's link (#19896) (JamesVanWaza)

v9.30.0 - June 27, 2025

  • 2b6491c chore: upgrade to @eslint/js@9.30.0 (#19889) (Francesco Trotta)

... (truncated)

Commits
  • 50de1ce chore: package.json update for @​eslint/js release
  • d5054e5 chore: package.json update for @​eslint/js release
  • b3dbc16 chore: package.json update for @​eslint/js release
  • 5a5d526 chore: package.json update for @​eslint/js release
  • acf2201 chore: package.json update for @​eslint/js release
  • 844f5a6 chore: package.json update for @​eslint/js release
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.27.0 to 9.32.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.32.0/packages/js)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 9.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown

🐱 PR Analysis

📊 Size Metrics

  • Files changed: 2
  • Lines added: +18
  • Lines deleted: -5
  • Total changes: 23

💡 Small PR - Easy to review


This analysis is automatically generated.

@github-actions

Copy link
Copy Markdown

🔍 ESLint Analysis Results

📊 Summary

  • Errors: 0
  • Warnings: 3
  • Status: ✅ Passed

🚨 Issues Found

{
  "filePath": "/home/runner/work/letstalk-webapp/letstalk-webapp/src/components/SEOHead.jsx",
  "messages": [
    {
      "line": 139,
      "column": 14,
      "severity": 1,
      "message": "Fast refresh only works when a file only exports components. Use a new file to share constants or functions between components.",
      "ruleId": "react-refresh/only-export-components"
    }
  ]
}
{
  "filePath": "/home/runner/work/letstalk-webapp/letstalk-webapp/src/components/SEOMonitoring.jsx",
  "messages": [
    {
      "line": 266,
      "column": 14,
      "severity": 1,
      "message": "Fast refresh only works when a file only exports components. Use a new file to share constants or functions between components.",
      "ruleId": "react-refresh/only-export-components"
    },
    {
      "line": 293,
      "column": 14,
      "severity": 1,
      "message": "Fast refresh only works when a file only exports components. Use a new file to share constants or functions between components.",
      "ruleId": "react-refresh/only-export-components"
    }
  ]
}

ESLint analysis completed automatically

@github-actions

Copy link
Copy Markdown

🔒 Security Scan Results

🔒 Security Audit Results

⚠️ Security vulnerabilities detected!

Detailed Report:

# npm audit report

@eslint/plugin-kit  <0.3.3
Severity: high
@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser - https://github.com/advisories/GHSA-xffm-g5w8-qvg7
fix available via `npm audit fix`
node_modules/@eslint/plugin-kit

brace-expansion  1.0.0 - 1.1.11
brace-expansion Regular Expression Denial of Service vulnerability - https://github.com/advisories/GHSA-v6h2-p8h4-qcjw
fix available via `npm audit fix`
node_modules/brace-expansion

2 vulnerabilities (1 low, 1 high)

To address all issues, run:
  npm audit fix

🔍 Sensitive File Check

⚠️ Warning: Potential sensitive files found:
./.env.local
./.env.maintenance.example

🔐 Hardcoded Secrets Check

⚠️ Warning: Potential hardcoded secrets found in source code
Please review the above matches and ensure no actual secrets are committed


This security scan was automatically generated. Please address any vulnerabilities before merging.

@github-actions

Copy link
Copy Markdown

🧪 Test Coverage Report

✅ All tests passed!

Coverage Summary:

- 68.26%
- 58.97%
- 57.89%
- 69.13%

Test coverage analysis completed automatically

@github-actions

Copy link
Copy Markdown

📦 Bundle Size Analysis

📊 Current Bundle Metrics

  • Total Bundle Size: 10.10 MB (10592072 bytes)
  • Build Date: Fri Jul 25 22:47:14 UTC 2025
  • Commit: b3342b7

📁 File Breakdown

-rw-r--r-- 1 runner docker 346K Jul 25 22:47 dist/assets/index--Kf9MvXO.js
-rw-r--r-- 1 runner docker 312K Jul 25 22:47 dist/assets/mui-BVBBaSsr.js
-rw-r--r-- 1 runner docker 139K Jul 25 22:47 dist/assets/vendor-BtP0CW_r.js
-rw-r--r-- 1 runner docker 134K Jul 25 22:47 dist/assets/index-CCO-lkcF.css
-rw-r--r-- 1 runner docker  99K Jul 25 22:47 dist/assets/fontawesome-Dk5zBJFW.js
-rw-r--r-- 1 runner docker  56K Jul 25 22:47 dist/assets/aws-Doxyi4lI.js
-rw-r--r-- 1 runner docker  34K Jul 25 22:47 dist/assets/router-_lZlQKO3.js
-rw-r--r-- 1 runner docker  27K Jul 25 22:47 dist/assets/redux-FavBV1HY.js
-rw-r--r-- 1 runner docker  11K Jul 25 22:47 dist/index.html
-rw-r--r-- 1 runner docker  844 Jul 25 22:47 dist/google-site-verification.html

🔍 Largest Assets

  • twitter-card.jpg: 1448.96 KB
  • og-image.jpg: 1448.96 KB
  • app-screenshot.jpg: 1448.96 KB
  • index--Kf9MvXO.js: 345.00 KB
  • mui-BVBBaSsr.js: 311.40 KB
  • blog_community_stories-2.jpg: 153.76 KB
  • sa_cities-5.jpg: 147.47 KB
  • logo.png: 145.78 KB
  • favicon.png: 145.78 KB
  • lets-talk-logo-CK0mdlFV.png: 145.78 KB

📈 Size Comparison (vs base branch)

  • Base Size: 10.10 MB
  • Current Size: 10.10 MB
  • Difference: 0 MB (0%)

✅ Bundle Size Improved

Great! Bundle size decreased or stayed the same.

📏 Size Limit Analysis

�[31mInstall Size Limit preset depends on type of the project�[39m

For application, where you send JS bundle directly to users
  �[33mnpm install --save-dev @size-limit/preset-app�[39m

For frameworks, components and big libraries
  �[33mnpm install --save-dev @size-limit/preset-big-lib�[39m

For small (< 10 kB) libraries
  �[33mnpm install --save-dev @size-limit/preset-small-lib�[39m

Check out docs for more complicated cases
  �[33mhttps://github.com/ai/size-limit/�[39m

You need to add size-limit dependency: �[33mnpm install --save-dev size-limit�[39m
Size limit check completed with warnings

🧩 Bundle Composition

File Type Breakdown:

  • JavaScript: 1009.51 KB
  • CSS: 133.56 KB
  • HTML: 11.07 KB
  • Assets: 9189.66 KB

Bundle size analysis completed automatically

@github-actions

Copy link
Copy Markdown

🛡️ OWASP Dependency Check Results

📊 Scan Information

  • Project: letstalk-webapp
  • Scan Date: Fri Jul 25 22:51:06 UTC 2025
  • Scan Type: OWASP Dependency Check

📋 Vulnerability Summary

  • High Severity: 1
  • Medium Severity: 10
  • Low Severity: 0

⚠️ Vulnerabilities Detected

Total Vulnerabilities: 11

Please review the detailed report and update vulnerable dependencies.

📁 Available Reports

  • HTML Report: reports/dependency-check-report.html
  • JSON Report: reports/dependency-check-report.json
  • XML Report: reports/dependency-check-report.xml

OWASP Dependency Check completed automatically

@dependabot @github

dependabot Bot commented on behalf of github Aug 8, 2025

Copy link
Copy Markdown
Author

Superseded by #68.

@dependabot dependabot Bot closed this Aug 8, 2025
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/develop/eslint/js-9.32.0 branch August 8, 2025 23:02
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants