Bump tmp and eslint#3
Conversation
Removes [tmp](https://github.com/raszi/node-tmp). It's no longer used after updating ancestor dependency [eslint](https://github.com/eslint/eslint). These dependencies need to be updated together. Removes `tmp` Updates `eslint` from 5.1.0 to 10.4.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v5.1.0...v10.4.0) --- updated-dependencies: - dependency-name: tmp dependency-version: dependency-type: indirect - dependency-name: eslint dependency-version: 10.4.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 21ffe47. Configure here.
| "camelcase": "^5.0.0", | ||
| "documentation": "^14.0.0", | ||
| "eslint": "^5.1.0", | ||
| "eslint": "^10.4.0", |
There was a problem hiding this comment.
ESLint 10 doesn't support the .eslintrc.json config format
High Severity
ESLint 10 completely removed support for .eslintrc.* configuration files — only the flat config format (eslint.config.js) is supported. This project uses .eslintrc.json, so upgrading to eslint ^10.4.0 will break eslint . (the lint-js script), which in turn breaks lint, pretest, test, and the lint-staged pre-commit hook. Additionally, eslint-plugin-node v6 is unmaintained and incompatible with ESLint 10's flat config system; it needs to be replaced with eslint-plugin-n.
Reviewed by Cursor Bugbot for commit 21ffe47. Configure here.
Removes tmp. It's no longer used after updating ancestor dependency eslint. These dependencies need to be updated together.
Removes
tmpUpdates
eslintfrom 5.1.0 to 10.4.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
452c40110.4.0b6417e8Build: changelog update for 10.4.06616856chore: upgrade knip to v6 (#20875)d13b084ci: ensure auto-created PRs run CI (#20860)7e52a71docs: add mention of@eslint-react/eslint-plugin(#20869)e71c7afci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862)544c0c3fix: escape code path DOT labels in debug output (#20866)db3468bdocs: tweak wording around ambiguous CJS-vs-ESM config (#20865)d84393dtest: add unit tests for SuppressionsService.applySuppressions() (#20863)9084664docs: Update READMEMaintainer changes
This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Major dev-tooling jump (eslint 5→10) with possible lint/CI breakage from Node engine mismatch and legacy .eslintrc vs eslint 10; no production runtime impact.
Overview
This PR bumps the dev dependency
eslintfrom 5.1.0 to 10.4.0 inpackage.jsonand refreshespackage-lock.jsonaccordingly. The lockfile change is dominated by ESLint’s new dependency tree (e.g.@eslint/*,@humanfs/*, updatedespree/eslint-scope) and drops packages that only existed under ESLint 5, including the transitivetmpchain (via old interactive CLI deps likeinquirer).There are no application or lint-rule source edits in the diff—only dependency manifests. Reviewers should confirm
npm run lintstill passes on the CI Node version: ESLint 10’s engine requirement is much newer than the repo’s statedengines.node:>=6, and the project still uses legacy.eslintrc.jsonwitheslint-plugin-node^6, which may need a flat-config migration or plugin upgrades to work with ESLint 10.Reviewed by Cursor Bugbot for commit 21ffe47. Bugbot is set up for automated code reviews on this repo. Configure here.