From a272d4c3ca03c923851213a4d522d532d353e0c3 Mon Sep 17 00:00:00 2001 From: Henry Mercer Date: Tue, 4 Aug 2026 14:39:19 +0100 Subject: [PATCH 1/5] Align ESLint dependencies on v9 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/dependabot.yml | 8 ++++++++ package-lock.json | 44 +++++------------------------------------- package.json | 2 +- 3 files changed, 14 insertions(+), 40 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3b5eefe0..58b17d83 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -29,6 +29,14 @@ updates: labels: - "Rebuild" groups: + eslint: + patterns: + - "eslint" + - "@eslint/js" + update-types: + - "major" + - "minor" + - "patch" actions: patterns: - "@actions/*" diff --git a/package-lock.json b/package-lock.json index 778f634b..2a94e78e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -32,7 +32,7 @@ "@babel/preset-react": "^7.29.7", "@babel/preset-typescript": "^7.29.7", "@eslint/eslintrc": "^3.3.6", - "@eslint/js": "^10.0.1", + "@eslint/js": "^9.39.5", "@octokit/types": "^16.0.0", "@types/archiver": "^8.0.0", "@types/node": "^26.1.2", @@ -2541,24 +2541,16 @@ "license": "MIT" }, "node_modules/@eslint/js": { - "version": "10.0.1", - "resolved": "https://registry.npmjs.org/@eslint/js/-/js-10.0.1.tgz", - "integrity": "sha512-zeR9k5pd4gxjZ0abRoIaxdc7I3nDktoXZk2qOv9gCNWx3mVwEn32VRhyLaRsDiJjTs0xq/T8mfPtyuXu7GWBcA==", + "version": "9.39.5", + "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.5.tgz", + "integrity": "sha512-QywQuszQh77pIXCsq998c8hbhSTI/azTty1Z6N53dmAudKHhy573j3yvRLsX2BSp8YpLtoCEG8E9DJe+8zUh4A==", "dev": true, "license": "MIT", "engines": { - "node": "^20.19.0 || ^22.13.0 || >=24" + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" }, "funding": { "url": "https://eslint.org/donate" - }, - "peerDependencies": { - "eslint": "^10.0.0" - }, - "peerDependenciesMeta": { - "eslint": { - "optional": true - } } }, "node_modules/@eslint/object-schema": { @@ -6032,19 +6024,6 @@ "eslint": "^8 || ^9 || ^10" } }, - "node_modules/eslint-plugin-github/node_modules/@eslint/js": { - "version": "9.39.4", - "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.4.tgz", - "integrity": "sha512-nE7DEIchvtiFTwBw4Lfbu59PG+kCofhjsKaCWzxTpt4lfRjRMqG6uMBzKXuEcyXhOHoUp9riAm7/aWYGhXZ9cw==", - "dev": true, - "license": "MIT", - "engines": { - "node": "^18.18.0 || ^20.9.0 || >=21.1.0" - }, - "funding": { - "url": "https://eslint.org/donate" - } - }, "node_modules/eslint-plugin-github/node_modules/globals": { "version": "17.7.0", "resolved": "https://registry.npmjs.org/globals/-/globals-17.7.0.tgz", @@ -6239,19 +6218,6 @@ "url": "https://opencollective.com/eslint" } }, - "node_modules/eslint/node_modules/@eslint/js": { - "version": "9.39.5", - "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.5.tgz", - "integrity": "sha512-QywQuszQh77pIXCsq998c8hbhSTI/azTty1Z6N53dmAudKHhy573j3yvRLsX2BSp8YpLtoCEG8E9DJe+8zUh4A==", - "dev": true, - "license": "MIT", - "engines": { - "node": "^18.18.0 || ^20.9.0 || >=21.1.0" - }, - "funding": { - "url": "https://eslint.org/donate" - } - }, "node_modules/eslint/node_modules/ajv": { "version": "6.15.0", "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.15.0.tgz", diff --git a/package.json b/package.json index e7b03c16..17b91151 100644 --- a/package.json +++ b/package.json @@ -40,7 +40,7 @@ "@babel/preset-react": "^7.29.7", "@babel/preset-typescript": "^7.29.7", "@eslint/eslintrc": "^3.3.6", - "@eslint/js": "^10.0.1", + "@eslint/js": "^9.39.5", "@octokit/types": "^16.0.0", "@types/archiver": "^8.0.0", "@types/node": "^26.1.2", From 6d5fdd3d29033bf9a8718e5c209af0ea40f6bb55 Mon Sep 17 00:00:00 2001 From: Henry Mercer Date: Tue, 4 Aug 2026 14:42:41 +0100 Subject: [PATCH 2/5] Ignore @eslint/js major updates Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/dependabot.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 58b17d83..46d416a4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -28,6 +28,9 @@ updates: - "@actions/*" labels: - "Rebuild" + ignore: + - dependency-name: "@eslint/js" + update-types: ["version-update:semver-major"] groups: eslint: patterns: From 46bef271d993949ba6e524ba6f7291fc514a31a4 Mon Sep 17 00:00:00 2001 From: Henry Mercer Date: Tue, 4 Aug 2026 14:45:21 +0100 Subject: [PATCH 3/5] Pin ESLint majors in Dependabot Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/dependabot.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 46d416a4..6de66ab3 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -28,7 +28,12 @@ updates: - "@actions/*" labels: - "Rebuild" + # ESLint 10 is blocked only by eslint-plugin-github's transitive + # eslint-plugin-import and eslint-plugin-jsx-a11y peers; this repo itself + # lints clean on ESLint 10. Lift both ignores once those plugins support it. ignore: + - dependency-name: "eslint" + update-types: ["version-update:semver-major"] - dependency-name: "@eslint/js" update-types: ["version-update:semver-major"] groups: From 5db539310d3de578f1d3aed791317fc6288c7158 Mon Sep 17 00:00:00 2001 From: Henry Mercer Date: Tue, 4 Aug 2026 14:48:12 +0100 Subject: [PATCH 4/5] Clarify ESLint major pin rationale Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/dependabot.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6de66ab3..f8ea5fcd 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -29,8 +29,9 @@ updates: labels: - "Rebuild" # ESLint 10 is blocked only by eslint-plugin-github's transitive - # eslint-plugin-import and eslint-plugin-jsx-a11y peers; this repo itself - # lints clean on ESLint 10. Lift both ignores once those plugins support it. + # eslint-plugin-import and eslint-plugin-jsx-a11y peers, with no upstream + # support currently signaled. This repo itself lints clean on ESLint 10; + # lift both ignores together once those plugins support it. ignore: - dependency-name: "eslint" update-types: ["version-update:semver-major"] From 0640a413e9f6fb421ead39bc4edb00697f43d230 Mon Sep 17 00:00:00 2001 From: Henry Mercer Date: Tue, 4 Aug 2026 15:01:01 +0100 Subject: [PATCH 5/5] Limit ESLint group to major updates Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/dependabot.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f8ea5fcd..f39b9313 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -44,8 +44,6 @@ updates: - "@eslint/js" update-types: - "major" - - "minor" - - "patch" actions: patterns: - "@actions/*"