chore(deps-dev): Bump eslint from 9.39.4 to 10.2.0 by dependabot[bot] · Pull Request #15 · NeiRo21/solidmarks

dependabot · 2026-04-09T15:25:15Z

Bumps eslint from 9.39.4 to 10.2.0.

Release notes

v10.2.0

Features

586ec2f feat: Add meta.languages support to rules (#20571) (Copilot)

14207de feat: add Temporal to no-obj-calls (#20675) (Pixel998)

bbb2c93 feat: add Temporal to ES2026 globals (#20672) (Pixel998)

Bug Fixes

542cb3e fix: update first-party dependencies (#20714) (Francesco Trotta)

Documentation

a2af743 docs: add language to configuration objects (#20712) (Francesco Trotta)

845f23f docs: Update README (GitHub Actions Bot)

5fbcf59 docs: remove sourceType from ts playground link (#20477) (Tanuj Kanti)

8702a47 docs: Update README (GitHub Actions Bot)

ddeaded docs: Update README (GitHub Actions Bot)

2b44966 docs: add Major Releases section to Manage Releases (#20269) (Milos Djermanovic)

eab65c7 docs: update eslint versions in examples (#20664) (루밀LuMir)

3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#20660) (Milos Djermanovic)

Chores

8120e30 refactor: extract no unmodified loop condition (#20679) (kuldeep kumar)

46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697) (renovate[bot])

01ed3aa test: add unit tests for unicode utilities (#20622) (Manish chaudhary)

811f493 ci: remove --legacy-peer-deps from types integration tests (#20667) (Milos Djermanovic)

6b86fcf chore: update dependency npm-run-all2 to v8 (#20663) (renovate[bot])

632c4f8 chore: add prettier update commit to .git-blame-ignore-revs (#20662) (루밀LuMir)

b0b0f21 chore: update dependency eslint-plugin-regexp to ^3.1.0 (#20659) (Milos Djermanovic)

228a2dd chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (#20661) (Milos Djermanovic)

3ab4d7e test: Add tests for eslintrc-style keys (#20645) (kuldeep kumar)

v10.1.0

Features

ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)

0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)

e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)

58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)

7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)

035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)

e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)

7f10d84 docs: Update README (GitHub Actions Bot)

aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)

a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

... (truncated)

Commits

000128c 10.2.0
1988fad Build: changelog update for 10.2.0
542cb3e fix: update first-party dependencies (#20714)
a2af743 docs: add language to configuration objects (#20712)
845f23f docs: Update README
5fbcf59 docs: remove sourceType from ts playground link (#20477)
8702a47 docs: Update README
ddeaded docs: Update README
8120e30 refactor: extract no unmodified loop condition (#20679)
46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697)
Additional commits viewable in compare view

github-actions · 2026-04-09T15:25:32Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 828ca45.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@eslint/config-array

0.23.5

Unknown

npm/@eslint/config-helpers

0.5.5

Unknown

npm/@eslint/core

1.2.1

Unknown

npm/@eslint/object-schema

3.0.5

Unknown

npm/@eslint/plugin-kit

0.7.1

Unknown

npm/@types/esrecurse

4.3.1

🟢 6.5

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 8	Found 26/29 approved changesets -- score normalized to 8
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Binary-Artifacts	🟢 10	no binaries found in the repo
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed

npm/balanced-match

4.0.4

🟢 5.7

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 4/17 approved changesets -- score normalized to 2
Maintained	🟢 10	13 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/brace-expansion

5.0.5

🟢 6.3

Details

Check	Score	Reason
Maintained	🟢 10	16 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Code-Review	⚠️ 2	Found 7/24 approved changesets -- score normalized to 2
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
License	🟢 9	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/eslint

10.2.0

🟢 6.3

Details

Check	Score	Reason
Code-Review	🟢 6	Found 18/27 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
License	🟢 10	license file detected
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 9	SAST tool detected but not run on all commits

npm/eslint-scope

9.1.2

Unknown

npm/esquery

1.7.0

🟢 3.6

Details

Check	Score	Reason
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 5	Found 8/14 approved changesets -- score normalized to 5
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/minimatch

10.2.5

🟢 6.2

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	29 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Code-Review	⚠️ 0	Found 1/28 approved changesets -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

package-lock.json

Bumps [eslint](https://github.com/eslint/eslint) from 9.39.1 to 10.2.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.1...v10.2.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.2.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 9, 2026

dependabot bot changed the title ~~chore(deps-dev): Bump eslint from 9.39.1 to 10.2.0~~ chore(deps-dev): Bump eslint from 9.39.4 to 10.2.0 Apr 9, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/eslint-10.2.0 branch from df2575d to 9d341cc Compare April 9, 2026 15:51

dependabot bot force-pushed the dependabot/npm_and_yarn/eslint-10.2.0 branch from 9d341cc to 828ca45 Compare April 9, 2026 15:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): Bump eslint from 9.39.4 to 10.2.0#15

chore(deps-dev): Bump eslint from 9.39.4 to 10.2.0#15
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/eslint-10.2.0

dependabot bot commented on behalf of github Apr 9, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Apr 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Apr 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.2.0

Features

Bug Fixes

Documentation

Chores

v10.1.0

Features

Bug Fixes

Documentation

Chores

Uh oh!

github-actions bot commented Apr 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Snapshot Warnings

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Apr 9, 2026 •

edited

Loading

github-actions bot commented Apr 9, 2026 •

edited

Loading