ESLint 10 compatibility request for @microsoft/eslint-plugin-sdl

[Nick2bad4u]

Summary

We're upgrading to ESLint 10.0.0 and currently have to disable @microsoft/eslint-plugin-sdl due to runtime incompatibility.

Observed behavior

The plugin pulls an incompatible runtime chain via deprecated APIs/dependencies and cannot be used safely in our ESLint 10 setup.

Expected behavior

@microsoft/eslint-plugin-sdl should run normally under ESLint 10.

Environment

• ESLint: 10.0.0
• Node: 25.x
• Flat config: yes

Temporary workaround

We disabled the plugin entirely until an ESLint 10-compatible release is available.

[Standard8]

See my PR here. I believe the plugin should be working with ESLint 10, as long as you override the peer dependencies or use the legacy ones.

The only changes needed to get it passing tests was to adjust some of the parameters in the tests themselves, as they no longer support the same options.

[Nick2bad4u]

See my PR here. I believe the plugin should be working with ESLint 10, as long as you override the peer dependencies or use the legacy ones.

The only changes needed to get it passing tests was to adjust some of the parameters in the tests themselves, as they no longer support the same options.

Thanks!

[Nick2bad4u]

I'm thinking of forking this and giving it a modern face lift.

Unless Microsoft says they're going to update it? Seems abandoned though?

[Nick2bad4u]

I'm forking this and will update back when I have a release ready for eslint 10. Should be within a day or two.

[Standard8]

As I said above, there's no functional changes needed, you can override the peer dependencies easily enough if you need to.

[Nick2bad4u]

As I said above, there's no functional changes needed, you can override the peer dependencies easily enough if you need to.

Oh I know

I was adding a ton of new rules and improvements;

https://github.com/Nick2bad4u/eslint-plugin-SDL-2

Since Microsoft seems to have abandoned it, figured I'd just fix it and improve it before it breaks for good.

[BearCooder]

Hello Martin Kačmar (@mkacmar) could we get a version bump with widening eslint dependency range fpor v10? So we do not need to do an override? There is already PR open for this- Thank you