Skip to content

fix(deps): bump flatted, eslint and eslint-plugin-unicorn#1444

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-cb5d66fe6d
Open

fix(deps): bump flatted, eslint and eslint-plugin-unicorn#1444
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-cb5d66fe6d

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 20, 2026

Bumps flatted to 3.4.2 and updates ancestor dependencies flatted, eslint and eslint-plugin-unicorn. These dependencies need to be updated together.

Updates flatted from 2.0.1 to 3.4.2

Commits
  • 3bf0909 3.4.2
  • 885ddcc fix CWE-1321
  • 0bdba70 added flatted-view to the benchmark
  • 2a02dce 3.4.1
  • fba4e8f Merge pull request #89 from WebReflection/python-fix
  • 5fe8648 added "when in Rome" also a test for PHP
  • 53517ad some minor improvement
  • b3e2a0c Fixing recursion issue in Python too
  • c4b46db Add SECURITY.md for security policy and reporting
  • f86d071 Create dependabot.yml for version updates
  • Additional commits viewable in compare view

Updates eslint from 6.8.0 to 10.1.0

Release notes

Sourced from eslint's releases.

v10.1.0

Features

  • ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)
  • 0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

  • 2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)
  • e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

  • b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)
  • 58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)
  • 7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)
  • 035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)
  • e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)
  • 7f10d84 docs: Update README (GitHub Actions Bot)
  • aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)
  • a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

  • a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584) (Milos Djermanovic)
  • 1f42bd7 chore: update prettier to 3.8.1 (#20651) (루밀LuMir)
  • c0a6f4a chore: update dependency @​eslint/json to ^1.2.0 (#20652) (renovate[bot])
  • cc43f79 chore: update dependency c8 to v11 (#20650) (renovate[bot])
  • 2ce4635 chore: update dependency @​eslint/json to v1 (#20649) (renovate[bot])
  • f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646) (renovate[bot])
  • dbb4c95 chore: remove trunk (#20478) (sethamus)
  • c672a2a test: fix CLI test for empty output file (#20640) (kuldeep kumar)
  • c7ada24 ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (#20636) (dependabot[bot])
  • 07c4b8b test: fix RuleTester test without test runners (#20631) (Francesco Trotta)
  • 079bba7 test: Add tests for isValidWithUnicodeFlag (#20601) (Manish chaudhary)
  • 5885ae6 ci: unpin Node.js 25.x in CI (#20615) (Copilot)
  • f65e5d3 chore: update pnpm/action-setup digest to b906aff (#20610) (renovate[bot])

v10.0.3

Bug Fixes

  • e511b58 fix: update eslint (#20595) (renovate[bot])
  • f4c9cf9 fix: include variable name in no-useless-assignment message (#20581) (sethamus)
  • ee9ff31 fix: update dependency minimatch to ^10.2.4 (#20562) (Milos Djermanovic)

Documentation

  • 9fc31b0 docs: Update README (GitHub Actions Bot)
  • 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570) (DesselBane)
  • 23b2759 docs: add v10 migration guide link to Use docs index (#20577) (Pixel998)
  • 80259a9 docs: Remove deprecated eslintrc documentation files (#20472) (Copilot)
  • 9b9b4ba docs: fix typo in no-await-in-loop documentation (#20575) (Pixel998)
  • e7d72a7 docs: document TypeScript 5.3 minimum supported version (#20547) (sethamus)

Chores

  • ef8fb92 chore: package.json update for eslint-config-eslint release (Jenkins)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.


Updates eslint-plugin-unicorn from 19.0.1 to 63.0.0

Release notes

Sourced from eslint-plugin-unicorn's releases.

v63.0.0

New rules

Improvements

  • Support ESLint 10 (#2823) bd0901b1
  • prefer-set-size: Add Array.from() support (#2857) e556143b
  • prefer-bigint-literals: Support signed numbers and strings (#2784) a332a509
  • prefer-export-from: Fix type-import being removed when using namespace import (#2771) ab4b779a
  • prefer-spread: Fix: Skip TypedArray and ArrayBuffer constructor calls (#2871) 42a558f7
  • no-array-sort: Ignore .sort() calls with non-function arguments (#2862) cbb23774
  • prefer-add-event-listener: Don't autofix non-function assignments (#2865) 989ec61a
  • explicit-length-check: Ignore || with string fallback value (#2861) 4806f7e6
  • no-unnecessary-polyfills: Fix false positive for graduated esnext features (#2864) d6c13ab1
  • no-for-loop: Skip auto-fix for string types when .entries() would be needed (#2869) 08a591a9
  • import-style: Fix crash on export {x} without from clause (#2868) 141c8c50
  • expiring-todo-comments: Should not flag ESLint disable comments (#2828) 3568dafb
  • no-useless-collection-argument: Use suggestions to remove empty array with comments (#2838) c0d06879
  • prefer-set-has: Check Iterator#toArray() and String#split() (#2829) ab8970ec
  • no-useless-spread: Fix false positive on Iterator (#2831) 994e31ca
  • isolated-functions: Ignore TypeScript types (#2822) c3479c0d
  • prefer-string-raw: Exclude inline snapshot (#2811) 6e7f93c4
  • consistent-assert: Explicitly check specifier node type (#2803) 396a8fa2

sindresorhus/eslint-plugin-unicorn@v62.0.0...v63.0.0

v62.0.0

New rules

Improvements

  • text-encoding-identifier-case: Add withDash option (#2780) 90253860
  • no-useless-undefined: Check one undefined at a time (#2792) 27f75099
  • prefer-single-call: Check optional chaining (#2788) 8a132ace
  • text-encoding-identifier-case: Enforce 'utf-8' in form[acceptCharset] and TextDecoder (#2785) 46b39741
  • prefer-node-protocol: Handle TypeScript import types (#2774) 13a37a0d
  • no-array-for-each: Ignore forEach for Effect library (#2783) 2ef6f831
  • prefer-string-raw: Ignore more places that requires a string (#2776) 43bc4299
  • prefer-string-raw: Add support for template literals (#2691) 52723a24
  • prefer-global-this: Add navigation to windowSpecificAPIs (#2770) 0c939985
  • prefer-code-point: Report cases where String.fromCharCode is not called directly (#2766) 1d682a18
  • no-useless-spread: Safely remove empty array and object (#2764) 7aeabab3

... (truncated)

Commits
  • 2c4b3dd 63.0.0
  • e556143 prefer-set-size: Add Array.from() support (#2857)
  • a332a50 prefer-bigint-literals: Support signed numbers and strings (#2784)
  • ab4b779 prefer-export-from: Fix type-import being removed when using namespace impo...
  • f6a281f Update ESLint to v10.0.0 (#2848)
  • 42a558f prefer-spread: Fix: Skip TypedArray and ArrayBuffer constructor calls (#2871)
  • cbb2377 no-array-sort: Ignore .sort() calls with non-function arguments (#2862)
  • 989ec61 prefer-add-event-listener: Don't autofix non-function assignments (#2865)
  • 80ff1b7 Fix meta.deprecated.replacedBy to use ReplacedByInfo objects per ESLint s...
  • 4806f7e explicit-length-check: Ignore || with string fallback value (#2861)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [flatted](https://github.com/WebReflection/flatted) to 3.4.2 and updates ancestor dependencies [flatted](https://github.com/WebReflection/flatted), [eslint](https://github.com/eslint/eslint) and [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn). These dependencies need to be updated together.


Updates `flatted` from 2.0.1 to 3.4.2
- [Commits](WebReflection/flatted@v2.0.1...v3.4.2)

Updates `eslint` from 6.8.0 to 10.1.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v6.8.0...v10.1.0)

Updates `eslint-plugin-unicorn` from 19.0.1 to 63.0.0
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](sindresorhus/eslint-plugin-unicorn@v19.0.1...v63.0.0)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
- dependency-name: eslint
  dependency-version: 10.1.0
  dependency-type: direct:development
- dependency-name: eslint-plugin-unicorn
  dependency-version: 63.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants