Skip to content

deps: Bump @typescript-eslint/eslint-plugin from 8.65.0 to 8.66.0 - #85

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-8.66.0
Closed

deps: Bump @typescript-eslint/eslint-plugin from 8.65.0 to 8.66.0#85
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-8.66.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps @typescript-eslint/eslint-plugin from 8.65.0 to 8.66.0.

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

  • typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)
  • eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)
  • eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)
  • eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)
  • eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)
  • website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.66.0 (2026-08-03)

🩹 Fixes

  • eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)
  • eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)
  • eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)
  • eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)
  • eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • e51b11b chore(release): publish 8.66.0
  • 20cb15e chore(eslint-plugin): split prefer-optional-chain.test.ts in multiple files (...
  • 780a8c5 docs(eslint-plugin): [member-ordering] add lacking commas in default member t...
  • 08dd427 fix(eslint-plugin): [class-literal-property-style] preserve type annotations ...
  • 6be25d3 fix(eslint-plugin): [no-unnecessary-type-parameters] check MappedType key rem...
  • 8826d0e fix(eslint-plugin): [no-useless-default-assignment] don't report defaults use...
  • 7aecc1c fix(eslint-plugin): [prefer-nullish-coalescing] handle shadowed Boolean calls...
  • 5ffa760 fix(eslint-plugin): [no-unnecessary-type-conversion] ignore shadowed built-in...
  • f282f84 chore(eslint-plugin): fix all eslint-plugin/require-test-error-positions (#...
  • c8cafa4 docs: [unified-signatures] caveats regarding signatures merging (#12581)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 8.65.0 to 8.66.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@gnjoseph

Copy link
Copy Markdown
Collaborator

Dependabot triage: unsupported-major.

  • Evidence: Security / audit failed at npm audit --audit-level=high (run). The recorded run reports high-severity nanoid and brace-expansion advisories. Revalidation against the current advisory DB gives nanoid <3.3.18 (GHSA-2v37-7h3g-55p8) with No fix available. The compatible chain is vitest -> vite -> postcss@8.5.x -> nanoid@^3.3.17; PostCSS 8.5.26 still declares nanoid: ^3.3.17, the registry's newest 3.x is 3.3.17, and nanoid@6.0.1 is outside that constraint. brace-expansion can move to 5.0.9, but the nanoid gate remains unsatisfied.
  • Action: defer and close this bump. No major override, --legacy-peer-deps, or check bypass will be used.
  • Unblock condition: recreate/reopen after either a compatible nanoid >=3.3.18 is published or PostCSS/Vite moves to a safe nanoid line, and Security / audit passes.

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-8.66.0 branch August 13, 2026 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant