build(deps-dev): bump @eslint-react/eslint-plugin from 5.23.5 to 5.24.0

[dependabot]

Bumps @eslint-react/eslint-plugin from 5.23.5 to 5.24.0.

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.24.0 (2026-10-04)

What's Changed

🐞 Fixes

• react-x/set-state-in-effect: more value shapes are recognized as ref-derived setState arguments: interpolations in template literals (ex: setData(`${ref.current}`)), tagged templates (both the quasi and a ref-derived tag), object and array literals (ex: setData({ value: ref.current })), and spreads (ex: setData({ ...ref.current })) — previously these fell through to the default case and were reported. (#1988)

📝 Documentation

• Added eslint-config-xo-react to the website's community presets.

🏗️ Internal

• @local/eff: added predicate combinators and type guards synced with effect, and migrated call sites across the workspace to them. (#1989)
• react-x/set-state-in-effect, react-x/set-state-in-render, and react-x/use-memo: reworked to the fact-based implementation pattern — fact collection (collect.ts), provenance resolution (origins.ts), and violation inference (effects.ts) are now separate modules, with lib.ts replaced by a pure-AST helpers.ts; set-state-in-effect again classifies a hook name configured as both additionalStateHooks and additionalEffectHooks as a state hook first. (#1983, #1985, #1986)
• react-x/use-state: aligned the nested-expression collectors' visitor keys to callee-first order, matching eslint-visitor-keys; no behavior change. (#1988)
• Migrated package unit tests to the shared @local/testkit helpers. (#1987)
• Renamed message ids to kebab-case across all plugins. (#1984)
• Bumped fumadocs-core and fumadocs-ui to 16.15.18, fumadocs-mdx to 15.4.6, lucide-react to 1.50.0, and @types/node to 26.6.4.

Full Changelog: Rel1cx/eslint-react@v5.23.5...v5.24.0

Attestation

https://github.com/Rel1cx/eslint-react/attestations/52483752

v5.24.0-beta.2 (2026-10-04)

What's Changed

🏗️ Internal

• @local/eff: added predicate combinators (and, or, not, nand, nor, xor, implies, eqv, every, some) and type guards (isString, isNumber, isNullish, isNotNullish, isPromise, etc.) synced with effect; migrated call sites in @eslint-react/ast, @eslint-react/jsx, the react-dom, react-web-api, and react-x plugins, @local/testkit, and the rules check script to them. (#1989)

Full Changelog: Rel1cx/eslint-react@v5.24.0-beta.1...v5.24.0-beta.2

Attestation

https://github.com/Rel1cx/eslint-react/attestations/52467226

v5.24.0-beta.1 (2026-10-04)

What's Changed

🐞 Fixes

• react-x/set-state-in-effect: more value shapes are recognized as ref-derived setState arguments: interpolations in template literals (ex: setData(`${ref.current}`)), tagged templates (both the quasi and a ref-derived tag), object and array literals (ex: setData({ value: ref.current })), and spreads (ex: setData({ ...ref.current })) — previously these fell through to the default case and were reported. (#1988)

... (truncated)

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.24.0 (2026-10-04)

🐞 Fixes

• react-x/set-state-in-effect: more value shapes are recognized as ref-derived setState arguments: interpolations in template literals (ex: setData(`${ref.current}`)), tagged templates (both the quasi and a ref-derived tag), object and array literals (ex: setData({ value: ref.current })), and spreads (ex: setData({ ...ref.current })) — previously these fell through to the default case and were reported. (#1988)

📝 Documentation

• Added eslint-config-xo-react to the website's community presets.

🏗️ Internal

• @local/eff: added predicate combinators and type guards synced with effect, and migrated call sites across the workspace to them. (#1989)
• react-x/set-state-in-effect, react-x/set-state-in-render, and react-x/use-memo: reworked to the fact-based implementation pattern — fact collection (collect.ts), provenance resolution (origins.ts), and violation inference (effects.ts) are now separate modules, with lib.ts replaced by a pure-AST helpers.ts; set-state-in-effect again classifies a hook name configured as both additionalStateHooks and additionalEffectHooks as a state hook first. (#1983, #1985, #1986)
• react-x/use-state: aligned the nested-expression collectors' visitor keys to callee-first order, matching eslint-visitor-keys; no behavior change. (#1988)
• Migrated package unit tests to the shared @local/testkit helpers. (#1987)
• Renamed message ids to kebab-case across all plugins. (#1984)
• Bumped fumadocs-core and fumadocs-ui to 16.15.18, fumadocs-mdx to 15.4.6, lucide-react to 1.50.0, and @types/node to 26.6.4.

Full Changelog: Rel1cx/eslint-react@v5.23.5...v5.24.0

Commits

• d4e5844 release: 5.24.0
• ca1e3c1 release: 5.24.0-beta.2
• 7084c40 release: 5.24.0-beta.1
• 3614d70 release: 5.24.0-beta.0
• d3cbf0a test: migrate package unit tests to shared testkit helpers (#1987)
• 1fe9714 style: prefer single-line function parameters in dprint config
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[mergify]

Automatically approving dependabot

[mergify]

This pull request does not currently match the merge queue conditions, so it cannot be queued from here. The box comes back if it matches again.