chore(deps-dev): bump the linters group across 1 directory with 5 updates by dependabot[bot] · Pull Request #2423 · expressjs/expressjs.com

dependabot · 2026-07-01T03:07:14Z

Bumps the linters group with 5 updates in the / directory:

Package	From	To
@eslint/js	`9.39.2`	`10.0.1`
eslint	`9.39.2`	`10.6.0`
eslint-plugin-astro	`1.5.0`	`2.1.1`
globals	`17.4.0`	`17.7.0`
prettier	`3.8.1`	`3.9.3`

Updates @eslint/js from 9.39.2 to 10.0.1

Release notes

Sourced from @eslint/js's releases.

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

84fb885 chore: package.json update for @eslint/js release
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
b4b3127 chore: package.json update for @eslint/js release
0b14059 chore: package.json update for @eslint/js release
fa31a60 feat!: add name to configs (#20015)
1e2cad5 chore: package.json update for @eslint/js release
454a292 feat!: update eslint:recommended configuration (#20210)
c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
See full diff in compare view

Updates eslint from 9.39.2 to 10.6.0

Release notes

Sourced from eslint's releases.

v10.6.0

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)

bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)

8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)

5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)

9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)

d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)

2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)

63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)

7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)

399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)

f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)

bea49f7 docs: Update README (GitHub Actions Bot)

e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)

8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)

3eb3d9b docs: Update README (GitHub Actions Bot)

c5bb59c docs: Update README (GitHub Actions Bot)

eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)

3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])

c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)

a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)

27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)

865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])

27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)

970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)

b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])

6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

v10.5.0

Features

5ca8c52 feat: correct stack tracking in max-nested-callbacks (#20973) (Pixel998)

b565783 feat: report no-with violations at the with keyword (#20971) (Pixel998)

2ce032f feat: report max-lines-per-function violations at function head (#20966) (Pixel998)

732cb3e feat: report max-nested-callbacks violations at function head (#20967) (Pixel998)

f9c138a feat: report max-depth violations on keywords (#20943) (Pixel998)

bdb496c feat: correct max-depth handling for else-if chains (#20944) (Pixel998)

c296873 feat: update error loc in max-statements to function header (#20907) (Taejin Kim)

Documentation

... (truncated)

Commits

5d12a04 10.6.0
f7ca54b Build: changelog update for 10.6.0
6a42034 ci: run ecosystem tests on main branch (#20891)
b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014)
c3abfca chore: correct JSDoc param types in html formatter (#21018)
a83683d docs: Update README
a832320 ci: split ecosystem tests into separate jobs (#21001)
6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013)
Additional commits viewable in compare view

Updates eslint-plugin-astro from 1.5.0 to 2.1.1

Release notes

Sourced from eslint-plugin-astro's releases.

v2.1.1

Patch Changes

#588 3a04d1e Thanks @ota-meshi! - Fix false positives in astro/no-omitted-end-tags for component names that overlap with HTML tag names, such as <Head>, while preserving reported source offsets.

v2.1.0

Minor Changes

#585 bd92f3b Thanks @ota-meshi! - Add astro/no-omitted-end-tags rule

v2.0.0

Major Changes

#571 adfce70 Thanks @ota-meshi! - Require Node.js ^22.22.3 || ^24.16.0 || >=26.3.0.

#574 db26988 Thanks @ota-meshi! - Drop support for ESLint v8 and v9. ESLint v10.0.0 or later is now required.

#569 f0e1756 Thanks @ota-meshi! - Drop CommonJS entry points and support ESM-only package usage.

#477 cf6ff71 Thanks @ota-meshi! - feat! update configs

#479 805fffa Thanks @ota-meshi! - Update and reorganize dependencies for the ESLint v10 release line.

The minimum optional @typescript-eslint/parser peer dependency is now 8.61.0, matching the first supported range used here that declares compatibility with ESLint v10 and TypeScript 6.

#580 919a837 Thanks @ota-meshi! - Add astro/no-prerender-export-outside-pages to the recommended config.

#579 efd5988 Thanks @ota-meshi! - feat!: update astro-eslint-parser to v2.0.0

Minor Changes

#478 46106bb Thanks @ota-meshi! - feat! clarification Versioning policy

v1.7.0

Minor Changes

#550 40fef30 Thanks @jp-knj! - add astro/no-prerender-export-outside-pages rule that disallow prerender export outside of pages/ directory

v1.6.0

Minor Changes

#531 ce02cf2 Thanks @ota-meshi! - feat: improve compatibility with eslint v10

Patch Changes

#529 8f172be Thanks @ota-meshi! - fix: error when used with @eslint/json

Changelog

Sourced from eslint-plugin-astro's changelog.

2.1.1

Patch Changes

#588 3a04d1e Thanks @ota-meshi! - Fix false positives in astro/no-omitted-end-tags for component names that overlap with HTML tag names, such as <Head>, while preserving reported source offsets.

2.1.0

Minor Changes

#585 bd92f3b Thanks @ota-meshi! - Add astro/no-omitted-end-tags rule

2.0.0

Major Changes

#571 adfce70 Thanks @ota-meshi! - Require Node.js ^22.22.3 || ^24.16.0 || >=26.3.0.

#574 db26988 Thanks @ota-meshi! - Drop support for ESLint v8 and v9. ESLint v10.0.0 or later is now required.

#569 f0e1756 Thanks @ota-meshi! - Drop CommonJS entry points and support ESM-only package usage.

#477 cf6ff71 Thanks @ota-meshi! - feat! update configs

#479 805fffa Thanks @ota-meshi! - Update and reorganize dependencies for the ESLint v10 release line.

The minimum optional @typescript-eslint/parser peer dependency is now 8.61.0, matching the first supported range used here that declares compatibility with ESLint v10 and TypeScript 6.

#580 919a837 Thanks @ota-meshi! - Add astro/no-prerender-export-outside-pages to the recommended config.

#579 efd5988 Thanks @ota-meshi! - feat!: update astro-eslint-parser to v2.0.0

Minor Changes

#478 46106bb Thanks @ota-meshi! - feat! clarification Versioning policy

1.7.0

Minor Changes

#550 40fef30 Thanks @jp-knj! - add astro/no-prerender-export-outside-pages rule that disallow prerender export outside of pages/ directory

1.6.0

Minor Changes

#531 ce02cf2 Thanks @ota-meshi! - feat: improve compatibility with eslint v10

... (truncated)

Commits

bf962d8 Version Packages (#589)
1892392 chore: fix site
3a04d1e fix: false positives in astro/no-omitted-end-tags for component names that ...
5dff8da Version Packages (#587)
150f16d fix(deps): update dependency parse5 to v8 (#586)
bd92f3b Add astro/no-omitted-end-tags rule (#585)
4d2d29a chore(deps): update astro monorepo (#584)
cbad7b7 chore(deps): update astro monorepo (#583)
aeabff5 chore(deps): update astro monorepo to v0.3.1 (#582)
45fa39d chore(deps): update dependency eslint-plugin-astro to v2 (#581)
Additional commits viewable in compare view

Updates globals from 17.4.0 to 17.7.0

Release notes

Sourced from globals's releases.

v17.7.0

Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

v17.6.0

Update globals (2026-05-01) (#343) 00a4dd9

sindresorhus/globals@v17.5.0...v17.6.0

v17.5.0

Update globals (2026-04-12) (#342) 5d84602

sindresorhus/globals@v17.4.0...v17.5.0

Commits

a19670c 17.7.0
9611620 Update actions (#346)
33b75f9 Update globals (2026-06-22) (#345)
887dd52 Fix build script (#344)
6b15870 17.6.0
00a4dd9 Update globals (2026-05-01) (#343)
b8170c8 17.5.0
5d84602 Update globals (2026-04-12) (#342)
1b727e5 Fix build script for ES globals (#341)
See full diff in compare view

Updates prettier from 3.8.1 to 3.9.3

Release notes

Sourced from prettier's releases.

3.9.3

Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @seiyab)

TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @evoactivity)

🔗 Changelog

3.9.1

CLI: Fix ignored file has been cached incorrectly (#19483 by @kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

Fix Flow variance annotation print (#19022 by @marcoww6)

🔗 Changelog

3.8.4

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @byplayer)

🔗 Changelog

3.8.3

SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @kovsu)

🔗 Changelog

3.8.2

Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.3

diff

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @seiyab)
// Input

{{ page.title
}} text

{{ page.title
text

{{ page.title
}} text
TypeScript: Allow decorators to be used with declare on class fields (#19492 by @evoactivity)

Extensively used within the Ember ecosystem, decorators with declare on class fields will ignore the babel parser error and allow Prettier to format the code without breaking it.
// Input
export default class ProjectStatusComponent extends Component<ProjectStatusSig> {
  @service declare server: ServerService;
}
// Prettier 3.9.1
// SyntaxError: Decorators can't be used with a declare field. (2:3)
//  1 | export default class ProjectStatusComponent extends Component<ProjectStatusSig> {
//> 2 |   @service declare server: ServerService;
//    |   ^
//  3 | }
// Prettier 3.9.3
export default class ProjectStatusComponent extends Component<ProjectStatusSig> {
@service declare server: ServerService;
}
3.9.1

diff

... (truncated)

Commits

3732e1d Release 3.9.3
a74a7b0 Allow decorators to be used with declare on class fields (#19492)
bd9e11a Correct text identification in liquid syntax (#19489)
269eee3 Bump Prettier dependency to 3.9.1
ec7ccd1 Clean changelog_unreleased
c47654c Release 3.9.1
06159aa Fix bug in release script
4bc5ab4 Update file-entry-cache to 11.1.5 (#19483)
b7fd58b Release @prettier/plugin-oxc@0.2.0 and @prettier/plugin-hermes@0.2.0
3006400 Revert changes in release script
Additional commits viewable in compare view

netlify · 2026-07-01T03:07:38Z

❌ Deploy Preview for expressjscom-preview failed.

Name	Link
🔨 Latest commit	`2a492bc`
🔍 Latest deploy log	https://app.netlify.com/projects/expressjscom-preview/deploys/6a4546f83771d900085145d6

socket-security · 2026-07-01T03:08:02Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
globals@17.4.0 ⏵ 17.7.0	⁺¹	⁺¹
@eslint/js@9.39.2 ⏵ 10.0.1
eslint-plugin-astro@1.5.0 ⏵ 2.1.1			^-1
eslint@9.39.2 ⏵ 10.6.0	⁺¹
prettier@3.8.1 ⏵ 3.9.3	⁺¹	⁺¹

View full report

…ates Bumps the linters group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.2` | `10.0.1` | | [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.6.0` | | [eslint-plugin-astro](https://github.com/ota-meshi/eslint-plugin-astro) | `1.5.0` | `2.1.1` | | [globals](https://github.com/sindresorhus/globals) | `17.4.0` | `17.7.0` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.3` | Updates `@eslint/js` from 9.39.2 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `eslint` from 9.39.2 to 10.6.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.2...v10.6.0) Updates `eslint-plugin-astro` from 1.5.0 to 2.1.1 - [Release notes](https://github.com/ota-meshi/eslint-plugin-astro/releases) - [Changelog](https://github.com/ota-meshi/eslint-plugin-astro/blob/main/CHANGELOG.md) - [Commits](ota-meshi/eslint-plugin-astro@v1.5.0...v2.1.1) Updates `globals` from 17.4.0 to 17.7.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.4.0...v17.7.0) Updates `prettier` from 3.8.1 to 3.9.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.9.3) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: linters - dependency-name: eslint dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: linters - dependency-name: eslint-plugin-astro dependency-version: 2.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: linters - dependency-name: globals dependency-version: 17.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: linters - dependency-name: prettier dependency-version: 3.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: linters ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026

dependabot Bot requested a review from a team as a code owner July 1, 2026 03:07

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/linters-8806236189 branch from 80e1f25 to 5dd7e27 Compare July 1, 2026 03:32

dependabot Bot force-pushed the dependabot/npm_and_yarn/linters-8806236189 branch from 5dd7e27 to 2a492bc Compare July 1, 2026 16:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps-dev): bump the linters group across 1 directory with 5 updates#2423

chore(deps-dev): bump the linters group across 1 directory with 5 updates#2423
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/linters-8806236189

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.0.1

Bug Fixes

Documentation

Chores

v10.0.0

Breaking Changes

Features

v10.6.0

Features

Bug Fixes

Documentation

Chores

v10.5.0

Features

Documentation

v2.1.1

Patch Changes

v2.1.0

Minor Changes

v2.0.0

Major Changes

Minor Changes

v1.7.0

Minor Changes

v1.6.0

Minor Changes

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

2.0.0

Major Changes

Minor Changes

1.7.0

Minor Changes

1.6.0

Minor Changes

v17.7.0

v17.6.0

v17.5.0

3.9.3

3.9.1

3.9.0

3.8.5

3.8.4

3.8.3

3.8.2

3.9.3

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @​seiyab)

TypeScript: Allow decorators to be used with declare on class fields (#19492 by @​evoactivity)

3.9.1

Uh oh!

netlify Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy Preview for expressjscom-preview failed.

Uh oh!

socket-security Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by `@seiyab`)

TypeScript: Allow decorators to be used with declare on class fields (#19492 by `@evoactivity`)

netlify Bot commented Jul 1, 2026 •

edited

Loading

socket-security Bot commented Jul 1, 2026 •

edited

Loading