Bump the major group across 1 directory with 3 updates by dependabot[bot] · Pull Request #310 · dmno-dev/varlock

dependabot · 2026-02-23T14:25:39Z

Bumps the major group with 3 updates in the / directory: @eslint/js, eslint and eslint-plugin-jsonc.

Updates @eslint/js from 9.32.0 to 10.0.1

Release notes

Sourced from @eslint/js's releases.

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

84fb885 chore: package.json update for @eslint/js release
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
b4b3127 chore: package.json update for @eslint/js release
0b14059 chore: package.json update for @eslint/js release
fa31a60 feat!: add name to configs (#20015)
1e2cad5 chore: package.json update for @eslint/js release
454a292 feat!: update eslint:recommended configuration (#20210)
c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
c7ebefc chore: package.json update for @eslint/js release
Additional commits viewable in compare view

Updates eslint from 9.32.0 to 10.0.1

Release notes

Sourced from eslint's releases.

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

0bd5497 10.0.1
ddb80ef Build: changelog update for 10.0.1
c87d5bd fix: update eslint (#20531)
e5c281f chore: updates for v9.39.3 release
d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519)
8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514)
5b3dbce docs: add AI acknowledgement section to templates (#20431)
04c2147 fix: update error message for unused suppressions (#20496)
8330d23 test: add tests for config-api (#20493)
37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494)
Additional commits viewable in compare view

Updates eslint-plugin-jsonc from 2.20.1 to 3.1.0

Release notes

Sourced from eslint-plugin-jsonc's releases.

v3.1.0

Minor Changes

#487 8a1f4b9 Thanks @ota-meshi! - feat(object-curly-spacing): add emptyObjects option to control spacing in empty objects

v3.0.1

Patch Changes

#484 8bef6fc Thanks @ota-meshi! - update @ota-meshi/ast-token-store to v0.3.0

v3.0.0

Major Changes

#471 d30112b Thanks @copilot-swe-agent! - Add ESLint language plugin support. The plugin now exports a languages object that provides language implementations for json, jsonc, json5, and x. The shared configurations (base, recommended-with-json, etc.) now use the jsonc-based language implementation by default (via language: "jsonc/x" in ESLint flat config) and have been updated to use the new language plugin approach instead of the parser approach.

#468 8c87c6c Thanks @copilot-swe-agent! - Drop support for legacy config. The plugin now exports flat configs as the main configuration format. The previous flat/* namespace is kept for backward compatibility.

#465 62b2127 Thanks @copilot-swe-agent! - Drop support for older ESLint versions. The new minimum supported version is ESLint 9.38.0 or later.

#460 cc949e3 Thanks @copilot-swe-agent! - Drop support for older Node.js versions. The new minimum supported versions are: ^20.19.0 || ^22.13.0 || >=24

#469 ee27486 Thanks @copilot-swe-agent! - Convert to ESM-only package. The plugin now uses tsdown for bundling and is distributed as pure ESM. The package no longer supports CommonJS require() syntax. Users need to use import statements or dynamic import() to load the plugin.

#466 29e47c4 Thanks @renovate! - Update dependency jsonc-eslint-parser to v3

#473 0f6d480 Thanks @ota-meshi! - feat: include "no-irregular-whitespace" rule in recommended configs

#477 75304cf Thanks @ota-meshi! - Removed re-export from jsonc-eslint-parser

Minor Changes
#474 90c0d61 Thanks @ota-meshi! - fix: replace espree with jsonc-eslint-parser for tokenization
#476 633b7d1 Thanks @ota-meshi! - The JSONCSourceCode, JSONCToken, and JSONCComment types are now provided. Using these types, you can define a RuleContext type that is useful for creating JSON rules.

e.g.
import type * as core from "@eslint/core";
export type RuleContext<RuleOptions extends unknown[] = unknown[]> =
  core.RuleContext<{
    LangOptions: JSONCLanguageOptions;
    Code: JSONCSourceCode;
    RuleOptions: RuleOptions;
    Node: JSONCNodeOrToken;
    MessageIds: string;
  }>;
v2.21.1

... (truncated)

Changelog

Sourced from eslint-plugin-jsonc's changelog.

3.1.0

Minor Changes

#487 8a1f4b9 Thanks @ota-meshi! - feat(object-curly-spacing): add emptyObjects option to control spacing in empty objects

3.0.1

Patch Changes

#484 8bef6fc Thanks @ota-meshi! - update @ota-meshi/ast-token-store to v0.3.0

3.0.0

Major Changes

#471 d30112b Thanks @copilot-swe-agent! - Add ESLint language plugin support. The plugin now exports a languages object that provides language implementations for json, jsonc, json5, and x. The shared configurations (base, recommended-with-json, etc.) now use the jsonc-based language implementation by default (via language: "jsonc/x" in ESLint flat config) and have been updated to use the new language plugin approach instead of the parser approach.

#468 8c87c6c Thanks @copilot-swe-agent! - Drop support for legacy config. The plugin now exports flat configs as the main configuration format. The previous flat/* namespace is kept for backward compatibility.

#465 62b2127 Thanks @copilot-swe-agent! - Drop support for older ESLint versions. The new minimum supported version is ESLint 9.38.0 or later.

#460 cc949e3 Thanks @copilot-swe-agent! - Drop support for older Node.js versions. The new minimum supported versions are: ^20.19.0 || ^22.13.0 || >=24

#469 ee27486 Thanks @copilot-swe-agent! - Convert to ESM-only package. The plugin now uses tsdown for bundling and is distributed as pure ESM. The package no longer supports CommonJS require() syntax. Users need to use import statements or dynamic import() to load the plugin.

#466 29e47c4 Thanks @renovate! - Update dependency jsonc-eslint-parser to v3

#473 0f6d480 Thanks @ota-meshi! - feat: include "no-irregular-whitespace" rule in recommended configs

#477 75304cf Thanks @ota-meshi! - Removed re-export from jsonc-eslint-parser

Minor Changes
#474 90c0d61 Thanks @ota-meshi! - fix: replace espree with jsonc-eslint-parser for tokenization
#476 633b7d1 Thanks @ota-meshi! - The JSONCSourceCode, JSONCToken, and JSONCComment types are now provided. Using these types, you can define a RuleContext type that is useful for creating JSON rules.

e.g.
import type * as core from "@eslint/core";
export type RuleContext<RuleOptions extends unknown[] = unknown[]> =
  core.RuleContext<{
    LangOptions: JSONCLanguageOptions;
    Code: JSONCSourceCode;
    RuleOptions: RuleOptions;
    Node: JSONCNodeOrToken;
    MessageIds: string;
  }>;

... (truncated)

Commits

ebbba90 chore: release eslint-plugin-jsonc (#488)
8a1f4b9 feat(object-curly-spacing): add emptyObjects option to control spacing in e...
16447f1 chore: release eslint-plugin-jsonc (#486)
8bef6fc update @ota-meshi/ast-token-store to v0.3.0 (#484)
64a85fc chore(deps): update dependency eslint-plugin-node-dependencies to v2 (#481)
e7034f8 docs: update configuration references in rule documentation to use `configs["...
893621b chore(deps): update dependency eslint-plugin-jsonc to v3 (#478)
813e326 chore: fix broken link in docs
ead4b7c chore: release eslint-plugin-jsonc (#467)
75304cf Removed re-export from jsonc-eslint-parser (#477)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eslint-plugin-jsonc since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the major group with 3 updates in the / directory: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [eslint](https://github.com/eslint/eslint) and [eslint-plugin-jsonc](https://github.com/ota-meshi/eslint-plugin-jsonc). Updates `@eslint/js` from 9.32.0 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `eslint` from 9.32.0 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.32.0...v10.0.1) Updates `eslint-plugin-jsonc` from 2.20.1 to 3.1.0 - [Release notes](https://github.com/ota-meshi/eslint-plugin-jsonc/releases) - [Changelog](https://github.com/ota-meshi/eslint-plugin-jsonc/blob/master/CHANGELOG.md) - [Commits](ota-meshi/eslint-plugin-jsonc@v2.20.1...v3.1.0) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major - dependency-name: eslint dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major - dependency-name: eslint-plugin-jsonc dependency-version: 3.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-02-23T14:25:45Z

⚠️ No Changeset found

Latest commit: be8461c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-02-23T14:26:03Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@eslint/js@9.32.0 ⏵ 10.0.1			⁺¹⁰	^-2

View full report

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 23, 2026

github-actions bot added the community label Feb 23, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Bump the major group across 1 directory with 3 updates#310

Bump the major group across 1 directory with 3 updates#310
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/major-bbc4e7e99f

dependabot bot commented on behalf of github Feb 23, 2026

Uh oh!

changeset-bot bot commented Feb 23, 2026

Uh oh!

socket-security bot commented Feb 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 23, 2026

v10.0.1

Bug Fixes

Documentation

Chores

v10.0.0

Breaking Changes

Features

v10.0.1

Bug Fixes

Documentation

Chores

v10.0.0

Breaking Changes

Features

v3.1.0

Minor Changes

v3.0.1

Patch Changes

v3.0.0

Major Changes

Minor Changes

v2.21.1

3.1.0

Minor Changes

3.0.1

Patch Changes

3.0.0

Major Changes

Minor Changes

Uh oh!

changeset-bot bot commented Feb 23, 2026

⚠️ No Changeset found

Uh oh!

socket-security bot commented Feb 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants