build(deps-dev): Bump eslint from 10.7.0 to 10.8.0 by dependabot[bot] · Pull Request #608 · FailproofAI/failproofai

dependabot · 2026-07-27T21:06:10Z

Bumps eslint from 10.7.0 to 10.8.0.

Release notes

v10.8.0

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)

9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)

e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)

20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)

8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)

b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)

784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)

7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))

92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)

68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)

d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)

eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)

c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)

2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)

eccbe7b test: add error locations to no-class-assign (#21123) (devoil)

e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])

e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])

ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)

044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)

fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)

5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)

9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)

a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)

8dde645 test: add error locations to no-ex-assign (#21102) (devoil)

13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)

a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)

c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)

0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)

3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)

dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)

2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))

5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])

d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)

bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

Commits

749dfed 10.8.0
4bd0d75 Build: changelog update for 10.8.0
4fbf46d test: pin webpack version to 5.108.4 (#21137)
6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
784dfbe docs: Clarify no-eq-null description (#21120)
6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
eccbe7b test: add error locations to no-class-assign (#21123)
2fee9bb feat: export ConfigObject from eslint/config (#21082)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eslint](https://github.com/eslint/eslint) from 10.7.0 to 10.8.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.7.0...v10.8.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-27T21:06:28Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint@10.7.0 ⏵ 10.8.0				^-1

View full report

hermes-exosphere

✅ Auto-approved: all 10 CI checks passing. Ready to merge.

hermes-exosphere · 2026-07-27T21:28:10Z

Automated code review started - full review. Results will be posted here.

hermes-exosphere · 2026-07-27T21:35:28Z

🐳 [progress] Starting Phase 3 — build & verify. Bumping eslint from 10.7.0 → 10.8.0 with transitive @eslint/config-helpers 0.6.0 → 0.7.0. Running: lint + type check + test suite.

hermes-exosphere · 2026-07-27T21:43:30Z

Automated Code Review

Executive Summary

This dependabot PR bumps eslint from 10.7.0 to 10.8.0, a minor release. Only the bun.lock lockfile changed (2 lines: eslint hash + transitive @eslint/config-helpers 0.6.0 to 0.7.0). No package.json change -- the semver range ^10.5.0 already covered 10.8.0. No breaking changes, no code modifications. All 10 CI checks passed (2357 tests, lint, type check, e2e, build, OSV-scan, Socket).

Change Architecture

graph TD
    A["eslint@10.7.0<br/>(devDependency)"] -->|"bump: 10.8.0"| B["eslint@10.8.0<br/>(devDependency)"]
    B --> C["@eslint/config-helpers<br/>0.6.0 to 0.7.0<br/>(transitive)"]
    B --> D["minimatch<br/>^10.2.4 to ^10.2.5<br/>(transitive)"]
    C --> E["lint / type-check / build<br/>CI pipeline"]
    D --> E
    style B fill:#90EE90
    style C fill:#87CEEB
    style D fill:#87CEEB

Legend: New version | Transitive dependency bump

Breaking Changes

No breaking changes detected. eslint v10.8.0 is a minor feature + bugfix release.

Issues Found

No issues found. This is a clean lockfile-only bump.

Logical / Bug Analysis

eslint v10.8.0 release analysis:

1 feature: Export ConfigObject from eslint/config
6 bug fixes (none security-related):
- no-unreachable-loop crash when all loop types are ignored
- prefer-template quadratic-time regex (performance fix)
- class-methods-use-this ignore configs on computed methods
- preserve-caught-error NewExpression with parenthesized callee
- prefer-object-spread missing semicolon
- html formatter reserved characters in rule id
Transitive changes:
- @eslint/config-helpers@0.7.0 -- minor internal refactor, same @eslint/core dep
- minimatch ^10.2.5 -- patch-level constraint bump

Lockfile integrity check:

Only 2 lines changed in bun.lock -- the eslint entry hash and @eslint/config-helpers entry
package.json unchanged -- the caret range ^10.5.0 already resolves to 10.8.0
No new dependencies introduced, no existing ones removed

Evidence -- Build & Test Results

CI Results (all green):

OSV-Scanner            pass  16s
Socket Security        pass  10s
build                  pass  1m2s
docs                   pass  1m40s
quality                pass  54s
test (default)         pass  1m4s
test (hook-log-file)   pass  1m19s
test (log-debug)       pass  1m17s
test-e2e               pass  52s

Test Results -- 2357 passed, 0 failed:

Test Files  131 passed (131)
     Tests  2357 passed (2357)

Lint -- 5 warnings (0 errors, all pre-existing):

5 problems (0 errors, 5 warnings)
 - @next/next/no-img-element x2 (pre-existing)
 - unused eslint-disable directive x1 (pre-existing)
 - +2 other pre-existing warnings

No new lint violations introduced by the eslint bump.

Type Check -- passed:

$ bunx tsc --noEmit
Command completed after 1 attempt(s).

Issue Linkage

No issue linked. This is a routine dependabot dependency bump -- no issue required.

Human Review Feedback

No human review comments on this PR. socket-security bot previously posted a supply-chain scan showing Supply Chain 97, Vuln 100, Quality 100, Maintenance 95 (-1), License 100. The -1 maintenance score is expected for a bun-managed package vs npm.

Suggestions

None. Clean bump, all CI green. Merge with confidence.

Verdict

VERDICT: APPROVED

Automated code review - 2026-07-28 UTC

hermes-exosphere

Automated review: eslint 10.7.0 -> 10.8.0. All 10 CI checks passed (2357 tests, lint, type check, e2e, build). No breaking changes. No code modifications. Clean lockfile-only bump. Approved.

hermes-exosphere

Automated review: Approved. ✅

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026

hermes-exosphere approved these changes Jul 27, 2026

View reviewed changes

NiveditJain merged commit 9d5e386 into main Jul 28, 2026
10 checks passed

dependabot Bot deleted the dependabot/bun/eslint-10.8.0 branch July 28, 2026 05:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): Bump eslint from 10.7.0 to 10.8.0 - #608

build(deps-dev): Bump eslint from 10.7.0 to 10.8.0#608
NiveditJain merged 1 commit into
mainfrom
dependabot/bun/eslint-10.8.0

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

hermes-exosphere left a comment

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere left a comment

Uh oh!

hermes-exosphere left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

v10.8.0

Features

Bug Fixes

Documentation

Chores

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

hermes-exosphere left a comment

Choose a reason for hiding this comment

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere commented Jul 27, 2026

Automated Code Review

Executive Summary

Change Architecture

Breaking Changes

Issues Found

Logical / Bug Analysis

Evidence -- Build & Test Results

Issue Linkage

Human Review Feedback

Suggestions

Verdict

Uh oh!

hermes-exosphere left a comment

Choose a reason for hiding this comment

Uh oh!

hermes-exosphere left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants