Skip to content

chore(deps): bump eslint from 9.39.2 to 10.1.0#1708

Merged
pethers merged 15 commits intomainfrom
dependabot/npm_and_yarn/eslint-10.1.0
Mar 24, 2026
Merged

chore(deps): bump eslint from 9.39.2 to 10.1.0#1708
pethers merged 15 commits intomainfrom
dependabot/npm_and_yarn/eslint-10.1.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 20, 2026

Bumps eslint from 9.39.2 to 10.1.0.

Release notes

Sourced from eslint's releases.

v10.1.0

Features

  • ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)
  • 0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

  • 2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)
  • e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

  • b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)
  • 58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)
  • 7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)
  • 035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)
  • e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)
  • 7f10d84 docs: Update README (GitHub Actions Bot)
  • aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)
  • a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

  • a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584) (Milos Djermanovic)
  • 1f42bd7 chore: update prettier to 3.8.1 (#20651) (๋ฃจ๋ฐ€LuMir)
  • c0a6f4a chore: update dependency @โ€‹eslint/json to ^1.2.0 (#20652) (renovate[bot])
  • cc43f79 chore: update dependency c8 to v11 (#20650) (renovate[bot])
  • 2ce4635 chore: update dependency @โ€‹eslint/json to v1 (#20649) (renovate[bot])
  • f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646) (renovate[bot])
  • dbb4c95 chore: remove trunk (#20478) (sethamus)
  • c672a2a test: fix CLI test for empty output file (#20640) (kuldeep kumar)
  • c7ada24 ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (#20636) (dependabot[bot])
  • 07c4b8b test: fix RuleTester test without test runners (#20631) (Francesco Trotta)
  • 079bba7 test: Add tests for isValidWithUnicodeFlag (#20601) (Manish chaudhary)
  • 5885ae6 ci: unpin Node.js 25.x in CI (#20615) (Copilot)
  • f65e5d3 chore: update pnpm/action-setup digest to b906aff (#20610) (renovate[bot])

v10.0.3

Bug Fixes

  • e511b58 fix: update eslint (#20595) (renovate[bot])
  • f4c9cf9 fix: include variable name in no-useless-assignment message (#20581) (sethamus)
  • ee9ff31 fix: update dependency minimatch to ^10.2.4 (#20562) (Milos Djermanovic)

Documentation

  • 9fc31b0 docs: Update README (GitHub Actions Bot)
  • 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570) (DesselBane)
  • 23b2759 docs: add v10 migration guide link to Use docs index (#20577) (Pixel998)
  • 80259a9 docs: Remove deprecated eslintrc documentation files (#20472) (Copilot)
  • 9b9b4ba docs: fix typo in no-await-in-loop documentation (#20575) (Pixel998)
  • e7d72a7 docs: document TypeScript 5.3 minimum supported version (#20547) (sethamus)

Chores

  • ef8fb92 chore: package.json update for eslint-config-eslint release (Jenkins)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eslint](https://github.com/eslint/eslint) from 9.39.2 to 10.1.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.2...v10.1.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Dependency updates label Mar 20, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 20, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot requested a review from pethers as a code owner March 20, 2026 23:07
@dependabot dependabot bot added the dependencies Dependency updates label Mar 20, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 20, 2026

Dependency Review

โœ… No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

โš ๏ธ: No snapshots were found for the head SHA 2442f80.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@eslint/config-array 0.23.3 UnknownUnknown
npm/@eslint/config-helpers 0.5.3 UnknownUnknown
npm/@eslint/core 1.1.1 UnknownUnknown
npm/@eslint/js 10.0.1 ๐ŸŸข 6.5
Details
CheckScoreReason
Maintained๐ŸŸข 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow๐ŸŸข 10no dangerous workflow patterns detected
Packagingโš ๏ธ -1packaging workflow not detected
Code-Review๐ŸŸข 7Found 18/24 approved changesets -- score normalized to 7
CII-Best-Practicesโš ๏ธ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissionsโš ๏ธ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts๐ŸŸข 10no binaries found in the repo
Pinned-Dependenciesโš ๏ธ 1dependency not pinned by hash detected -- score normalized to 1
License๐ŸŸข 10license file detected
Signed-Releasesโš ๏ธ -1no releases found
Branch-Protection๐ŸŸข 5branch protection is not maximal on development and all release branches
Security-Policy๐ŸŸข 10security policy file detected
Fuzzingโš ๏ธ 0project is not fuzzed
SAST๐ŸŸข 10SAST tool is run on all commits
npm/@eslint/object-schema 3.0.3 UnknownUnknown
npm/@eslint/plugin-kit 0.6.1 UnknownUnknown
npm/@types/esrecurse 4.3.1 ๐ŸŸข 6.5
Details
CheckScoreReason
Packagingโš ๏ธ -1packaging workflow not detected
Code-Review๐ŸŸข 8Found 26/30 approved changesets -- score normalized to 8
Maintained๐ŸŸข 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practicesโš ๏ธ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow๐ŸŸข 10no dangerous workflow patterns detected
Token-Permissionsโš ๏ธ 0detected GitHub workflow tokens with excessive permissions
License๐ŸŸข 9license file detected
Security-Policy๐ŸŸข 10security policy file detected
Signed-Releasesโš ๏ธ -1no releases found
Branch-Protectionโš ๏ธ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SASTโš ๏ธ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies๐ŸŸข 8dependency not pinned by hash detected -- score normalized to 8
Binary-Artifacts๐ŸŸข 10no binaries found in the repo
Fuzzingโš ๏ธ 0project is not fuzzed
npm/ajv 6.14.0 ๐ŸŸข 5.3
Details
CheckScoreReason
Code-Review๐ŸŸข 9Found 28/30 approved changesets -- score normalized to 9
Dangerous-Workflow๐ŸŸข 10no dangerous workflow patterns detected
Maintained๐ŸŸข 32 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 3
Packagingโš ๏ธ -1packaging workflow not detected
Security-Policy๐ŸŸข 10security policy file detected
Token-Permissionsโš ๏ธ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts๐ŸŸข 10no binaries found in the repo
Pinned-Dependenciesโš ๏ธ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practicesโš ๏ธ 2badge detected: InProgress
License๐ŸŸข 10license file detected
Fuzzingโš ๏ธ 0project is not fuzzed
Signed-Releasesโš ๏ธ -1no releases found
Branch-Protectionโš ๏ธ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SASTโš ๏ธ 0SAST tool is not run on all commits -- score normalized to 0
npm/eslint 10.1.0 ๐ŸŸข 6.5
Details
CheckScoreReason
Maintained๐ŸŸข 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow๐ŸŸข 10no dangerous workflow patterns detected
Packagingโš ๏ธ -1packaging workflow not detected
Code-Review๐ŸŸข 7Found 18/24 approved changesets -- score normalized to 7
CII-Best-Practicesโš ๏ธ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissionsโš ๏ธ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts๐ŸŸข 10no binaries found in the repo
Pinned-Dependenciesโš ๏ธ 1dependency not pinned by hash detected -- score normalized to 1
License๐ŸŸข 10license file detected
Signed-Releasesโš ๏ธ -1no releases found
Branch-Protection๐ŸŸข 5branch protection is not maximal on development and all release branches
Security-Policy๐ŸŸข 10security policy file detected
Fuzzingโš ๏ธ 0project is not fuzzed
SAST๐ŸŸข 10SAST tool is run on all commits
npm/eslint-scope 9.1.2 UnknownUnknown
npm/espree 11.2.0 UnknownUnknown
npm/strip-ansi 7.2.0 ๐ŸŸข 4
Details
CheckScoreReason
Binary-Artifacts๐ŸŸข 10no binaries found in the repo
Code-Reviewโš ๏ธ 2Found 6/30 approved changesets -- score normalized to 2
Pinned-Dependenciesโš ๏ธ 0dependency not pinned by hash detected -- score normalized to 0
Maintained๐ŸŸข 34 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3
Packagingโš ๏ธ -1packaging workflow not detected
Security-Policy๐ŸŸข 10security policy file detected
Dangerous-Workflow๐ŸŸข 10no dangerous workflow patterns detected
Token-Permissionsโš ๏ธ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practicesโš ๏ธ 0no effort to earn an OpenSSF best practices badge detected
Fuzzingโš ๏ธ 0project is not fuzzed
License๐ŸŸข 10license file detected
Signed-Releasesโš ๏ธ -1no releases found
Branch-Protectionโš ๏ธ 0branch protection not enabled on development/release branches
SASTโš ๏ธ 0SAST tool is not run on all commits -- score normalized to 0
npm/@testing-library/dom ^10.4.1 UnknownUnknown

Scanned Files

  • package-lock.json
  • package.json

@github-actions github-actions bot added the infrastructure CI/CD and build infrastructure label Mar 20, 2026
@pethers
Copy link
Copy Markdown
Member

pethers commented Mar 24, 2026

@copilot fix all issues want to move to latest eslint, remove any incompatible plugins unless completly necessary.
Screenshot Analysis / Capture UI/UX Screenshots (pull_request)
Screenshot Analysis / Capture UI/UX Screenshots (pull_request)Failing after 1m
Test and Report / prepare (pull_request)
Test and Report / prepare (pull_request)Failing after 33s
Test and Report / report (pull_request)
Test and Report / report (pull_request)Failing after 45s

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 24, 2026

@pethers I've opened a new pull request, #1719, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot AI and others added 2 commits March 24, 2026 12:22
โ€ฆ errors

- Remove eslint-plugin-import (incompatible with ESLint 10, unused in flat config)
- Remove eslint-plugin-react (incompatible with ESLint 10, unused in flat config)
- Remove @typescript-eslint/eslint-plugin (transitive via typescript-eslint)
- Remove @typescript-eslint/parser (transitive via typescript-eslint)
- Update @eslint/js from ^9.39.2 to ^10.0.0
- Add npm overrides for eslint-plugin-react-hooks peer dep
- Remove legacy .eslintrc.cjs (unused with flat config)
- Fix 4 no-useless-assignment errors from new ESLint 10 rules

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>
Agent-Logs-Url: https://github.com/Hack23/blacktrigram/sessions/dcef49f3-353c-4167-a2e8-39086e36a91f
chore(deps): bump eslint from 9.39.2 to 10.1.0
@pethers
Copy link
Copy Markdown
Member

pethers commented Mar 24, 2026

@dependabot rebase

@github-actions github-actions bot added audio Audio and sound effects needs-tests Needs test coverage labels Mar 24, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Signed-off-by: James Pether Sรถrling <pethers@users.noreply.github.com>
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repositoryโ€™s linting toolchain to ESLint 10.x and aligns the project configuration/dependency set with the flat-config setup already used in eslint.config.js.

Changes:

  • Bump eslint to ^10.1.0 and update @eslint/js to ^10.0.0, adding an override related to eslint-plugin-react-hooks.
  • Remove legacy .eslintrc.cjs and drop unused ESLint-era plugins/parsers from devDependencies.
  • Minor TypeScript adjustments (variable initialization/type annotations) to satisfy updated lint/type analysis behavior.

Reviewed changes

Copilot reviewed 6 out of 7 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
src/systems/vitalpoint/KoreanAnatomy.ts Tweaks local variable initialization for effect intensity calculation.
src/systems/ai/AdaptiveDifficulty.ts Adjusts message variable declaration in difficulty recommendation logic.
src/hooks/useSkeletalAnimation.ts Refines local variable declarations used during animation selection.
src/audio/VariantSelector.ts Refines local variable declaration for variant selection index.
package.json Upgrades ESLint-related deps, removes legacy lint deps, adds override.
package-lock.json Lockfile changes reflecting ESLint 10 upgrade and removed packages.
.eslintrc.cjs Removes legacy ESLint config file.

package.json Outdated
"devDependencies": {
"@aws-sdk/client-bedrock-runtime": "^3.1015.0",
"@eslint/js": "^9.39.2",
"@aws-sdk/client-bedrock-runtime": "^3.1014.0",
Copy link

Copilot AI Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@aws-sdk/client-bedrock-runtime is being downgraded from ^3.1015.0 to ^3.1014.0, which is unrelated to the ESLint bump and could unintentionally remove fixes. Please revert this to the previous (or newer) version unless thereโ€™s a specific reason to downgrade.

Suggested change
"@aws-sdk/client-bedrock-runtime": "^3.1014.0",
"@aws-sdk/client-bedrock-runtime": "^3.1015.0",

Copilot uses AI. Check for mistakes.
Comment on lines +140 to +143
"overrides": {
"eslint-plugin-react-hooks": {
"eslint": "$eslint"
}
Copy link

Copilot AI Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

eslint-plugin-react-hooks@7.0.1 still declares a peer dependency on ESLint only up to ^9 (as reflected in package-lock). With eslint@^10.1.0 this becomes an unmet peer dependency that can break npm install/npm ci under strict peer-deps. Please resolve by upgrading to a react-hooks plugin release that supports ESLint 10, or otherwise ensure CI installs are guaranteed to succeed (the current override may not be sufficient).

Copilot uses AI. Check for mistakes.
Comment on lines +111 to 113
"eslint": "^10.1.0",
"eslint-plugin-react-hooks": "^7.0.1",
"eslint-plugin-react-refresh": "^0.5.2",
Copy link

Copilot AI Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR removes .eslintrc.cjs, but knip.json still references it as the ESLint config (eslint.config: ['.eslintrc.cjs']). That will break npm run knip / npm run find:unused. Please update Knip to use eslint.config.js (flat config) or remove the stale reference.

Copilot uses AI. Check for mistakes.
@github-actions
Copy link
Copy Markdown
Contributor

๐Ÿ“ธ Automated UI Screenshots

๐Ÿ“‹ Screenshots Captured (8)

# Screenshot
1 01-splash-screen.png - 01 splash screen.png
2 02-intro-screen-menu.png - 02 intro screen menu.png
3 03-intro-screen-archetype-selector.png - 03 intro screen archetype selector.png
4 04-controls-screen.png - 04 controls screen.png
5 05-philosophy-screen.png - 05 philosophy screen.png
6 06-training-screen.png - 06 training screen.png
7 07-combat-screen-practice.png - 07 combat screen practice.png
8 08-combat-screen-versus.png - 08 combat screen versus.png

๐Ÿ“ฆ Download Screenshots

๐Ÿ“ฅ Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.


๐Ÿค– Generated by Playwright automation

@pethers
Copy link
Copy Markdown
Member

pethers commented Mar 24, 2026

@copilot open a new pull request to apply changes based on the comments in this thread

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 24, 2026

@pethers I've opened a new pull request, #1720, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot AI and others added 2 commits March 24, 2026 13:40
fix: address ESLint 10 migration review comments
@github-actions
Copy link
Copy Markdown
Contributor

๐Ÿ“ธ Automated UI Screenshots

๐Ÿ“‹ Screenshots Captured (8)

# Screenshot
1 01-splash-screen.png - 01 splash screen.png
2 02-intro-screen-menu.png - 02 intro screen menu.png
3 03-intro-screen-archetype-selector.png - 03 intro screen archetype selector.png
4 04-controls-screen.png - 04 controls screen.png
5 05-philosophy-screen.png - 05 philosophy screen.png
6 06-training-screen.png - 06 training screen.png
7 07-combat-screen-practice.png - 07 combat screen practice.png
8 08-combat-screen-versus.png - 08 combat screen versus.png

๐Ÿ“ฆ Download Screenshots

๐Ÿ“ฅ Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.


๐Ÿค– Generated by Playwright automation

@pethers
Copy link
Copy Markdown
Member

pethers commented Mar 24, 2026

@copilot analyse and fix

This branch has conflicts that must be resolved
Use the web editor or the command line to resolve conflicts before continuing.

package-lock.json
package.json

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 24, 2026

@pethers I've opened a new pull request, #1721, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot AI and others added 2 commits March 24, 2026 15:12
# Conflicts:
#	package-lock.json
#	package.json
fix: resolve merge conflicts with main, add missing @testing-library/dom
@github-actions
Copy link
Copy Markdown
Contributor

โŒ Asset audit failed! Please check the workflow logs for missing asset references.

@pethers
Copy link
Copy Markdown
Member

pethers commented Mar 24, 2026

@copilot analyse and fix
failing checks
Asset Audit / audit-assets (pull_request)
Asset Audit / audit-assets (pull_request)Failing after 36s
Screenshot Analysis / Capture UI/UX Screenshots (pull_request)
Screenshot Analysis / Capture UI/UX Screenshots (pull_request)Failing after 1m
Test and Report / prepare (pull_request)
Test and Report / prepare (pull_request)Failing after 36s

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 24, 2026

@pethers I've opened a new pull request, #1722, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot AI and others added 2 commits March 24, 2026 15:39
fix: sync package-lock.json after ESLint 10 merge
@github-actions
Copy link
Copy Markdown
Contributor

๐Ÿ“ธ Automated UI Screenshots

๐Ÿ“‹ Screenshots Captured (8)

# Screenshot
1 01-splash-screen.png - 01 splash screen.png
2 02-intro-screen-menu.png - 02 intro screen menu.png
3 03-intro-screen-archetype-selector.png - 03 intro screen archetype selector.png
4 04-controls-screen.png - 04 controls screen.png
5 05-philosophy-screen.png - 05 philosophy screen.png
6 06-training-screen.png - 06 training screen.png
7 07-combat-screen-practice.png - 07 combat screen practice.png
8 08-combat-screen-versus.png - 08 combat screen versus.png

๐Ÿ“ฆ Download Screenshots

๐Ÿ“ฅ Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.


๐Ÿค– Generated by Playwright automation

@pethers pethers merged commit 97e1424 into main Mar 24, 2026
13 checks passed
@pethers pethers deleted the dependabot/npm_and_yarn/eslint-10.1.0 branch March 24, 2026 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

audio Audio and sound effects dependencies Dependency updates infrastructure CI/CD and build infrastructure needs-tests Needs test coverage

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants