Skip to content

chore(deps-dev): bump the dev-deps group with 6 updates#170

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-deps-41a6f66c45
Closed

chore(deps-dev): bump the dev-deps group with 6 updates#170
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-deps-41a6f66c45

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-deps group with 6 updates:

Package From To
@eslint/js 9.39.3 10.0.1
@types/node 25.3.3 25.3.5
eslint 9.39.3 10.0.3
lint-staged 16.3.1 16.3.2
rollup-plugin-visualizer 7.0.0 7.0.1
satori 0.19.2 0.25.0

Updates @eslint/js from 9.39.3 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

  • c87d5bd fix: update eslint (#20531) (renovate[bot])
  • d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
  • 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
  • 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

  • 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
  • 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
  • b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

  • e5c281f chore: updates for v9.39.3 release (Jenkins)
  • 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
  • 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
  • 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
  • da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
  • 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

  • f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
  • a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
  • c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
  • fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
  • 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
  • 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
  • ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
  • 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
  • c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
  • 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
  • a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
  • a89059d feat!: Program range span entire source text (#20133) (Pixel998)
  • 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
  • f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
  • aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
  • f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
  • 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
  • 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
  • 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
  • 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
  • f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

  • bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
  • 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
  • 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits
  • 84fb885 chore: package.json update for @​eslint/js release
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
  • f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
  • b4b3127 chore: package.json update for @​eslint/js release
  • 0b14059 chore: package.json update for @​eslint/js release
  • fa31a60 feat!: add name to configs (#20015)
  • 1e2cad5 chore: package.json update for @​eslint/js release
  • 454a292 feat!: update eslint:recommended configuration (#20210)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
  • See full diff in compare view

Updates @types/node from 25.3.3 to 25.3.5

Commits

Updates eslint from 9.39.3 to 10.0.3

Release notes

Sourced from eslint's releases.

v10.0.3

Bug Fixes

  • e511b58 fix: update eslint (#20595) (renovate[bot])
  • f4c9cf9 fix: include variable name in no-useless-assignment message (#20581) (sethamus)
  • ee9ff31 fix: update dependency minimatch to ^10.2.4 (#20562) (Milos Djermanovic)

Documentation

  • 9fc31b0 docs: Update README (GitHub Actions Bot)
  • 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570) (DesselBane)
  • 23b2759 docs: add v10 migration guide link to Use docs index (#20577) (Pixel998)
  • 80259a9 docs: Remove deprecated eslintrc documentation files (#20472) (Copilot)
  • 9b9b4ba docs: fix typo in no-await-in-loop documentation (#20575) (Pixel998)
  • e7d72a7 docs: document TypeScript 5.3 minimum supported version (#20547) (sethamus)

Chores

  • ef8fb92 chore: package.json update for eslint-config-eslint release (Jenkins)
  • e8f2104 chore: updates for v9.39.4 release (Jenkins)
  • 5cd1604 refactor: simplify isCombiningCharacter helper (#20524) (Huáng Jùnliàng)
  • 70ff1d0 chore: eslint-config-eslint require Node ^20.19.0 || ^22.13.0 || >=24 (#20586) (Milos Djermanovic)
  • e32df71 chore: update eslint-plugin-eslint-comments, remove legacy-peer-deps (#20576) (Milos Djermanovic)
  • 53ca6ee chore: disable eslint-comments/no-unused-disable rule (#20578) (Milos Djermanovic)
  • e121895 ci: pin Node.js 25.6.1 (#20559) (Milos Djermanovic)
  • efc5aef chore: update tsconfig.json in eslint-config-eslint (#20551) (Francesco Trotta)

v10.0.2

Bug Fixes

  • 2b72361 fix: update ajv to 6.14.0 to address security vulnerabilities (#20537) (루밀LuMir)

Documentation

  • 13eeedb docs: link rule type explanation to CLI option --fix-type (#20548) (Mike McCready)
  • 98cbf6b docs: update migration guide per Program range change (#20534) (Huáng Jùnliàng)
  • 61a2405 docs: add missing semicolon in vars-on-top rule example (#20533) (Abilash)

Chores

  • 951223b chore: update dependency @​eslint/eslintrc to ^3.3.4 (#20553) (renovate[bot])
  • 6aa1afe chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (#20536) (Milos Djermanovic)

v10.0.1

Bug Fixes

  • c87d5bd fix: update eslint (#20531) (renovate[bot])
  • d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
  • 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
  • 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

  • 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
  • 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
  • b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

... (truncated)

Commits
  • bfce7ea 10.0.3
  • d44ced8 Build: changelog update for 10.0.3
  • e511b58 fix: update eslint (#20595)
  • ef8fb92 chore: package.json update for eslint-config-eslint release
  • e8f2104 chore: updates for v9.39.4 release
  • 5cd1604 refactor: simplify isCombiningCharacter helper (#20524)
  • 9fc31b0 docs: Update README
  • 70ff1d0 chore: eslint-config-eslint require Node ^20.19.0 || ^22.13.0 || >=24 (#20586)
  • f4c9cf9 fix: include variable name in no-useless-assignment message (#20581)
  • 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570)
  • Additional commits viewable in compare view

Updates lint-staged from 16.3.1 to 16.3.2

Release notes

Sourced from lint-staged's releases.

v16.3.2

Patch Changes

  • #1735 2adaf6c Thanks @​iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.
Changelog

Sourced from lint-staged's changelog.

16.3.2

Patch Changes

  • #1735 2adaf6c Thanks @​iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.
Commits
  • dfd6a7a chore(changeset): release
  • 2adaf6c fix(Windows): do not spawn tasks as detached since it opens a cmd window on ...
  • 60957ce docs: add CONTRIBUTING.md
  • See full diff in compare view

Updates rollup-plugin-visualizer from 7.0.0 to 7.0.1

Changelog

Sourced from rollup-plugin-visualizer's changelog.

7.0.1

  • Fancy treemap
  • Correct main entry in package.json
Commits

Updates satori from 0.19.2 to 0.25.0

Release notes

Sourced from satori's releases.

0.25.0

0.25.0 (2026-03-05)

Features

0.24.1

0.24.1 (2026-03-03)

Bug Fixes

  • Consistent text positioning when embedFont is false (#723) (dc07b70)

0.24.0

0.24.0 (2026-03-03)

Features

0.23.0

0.23.0 (2026-03-03)

Features

0.22.0

0.22.0 (2026-03-03)

Features

  • Support for object-fit fill and scale-down (#732) (453fd91)

0.21.0

0.21.0 (2026-03-02)

Features

  • 10% perf improvements in the core lib (#729) (4e761c6)

0.20.0

0.20.0 (2026-03-02)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-deps group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.3` | `10.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.3.5` |
| [eslint](https://github.com/eslint/eslint) | `9.39.3` | `10.0.3` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.3.1` | `16.3.2` |
| [rollup-plugin-visualizer](https://github.com/btd/rollup-plugin-visualizer) | `7.0.0` | `7.0.1` |
| [satori](https://github.com/vercel/satori) | `0.19.2` | `0.25.0` |


Updates `@eslint/js` from 9.39.3 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

Updates `@types/node` from 25.3.3 to 25.3.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 9.39.3 to 10.0.3
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.3...v10.0.3)

Updates `lint-staged` from 16.3.1 to 16.3.2
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.3.1...v16.3.2)

Updates `rollup-plugin-visualizer` from 7.0.0 to 7.0.1
- [Changelog](https://github.com/btd/rollup-plugin-visualizer/blob/master/CHANGELOG.md)
- [Commits](btd/rollup-plugin-visualizer@v7.0.0...v7.0.1)

Updates `satori` from 0.19.2 to 0.25.0
- [Release notes](https://github.com/vercel/satori/releases)
- [Commits](vercel/satori@0.19.2...0.25.0)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-deps
- dependency-name: "@types/node"
  dependency-version: 25.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: eslint
  dependency-version: 10.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-deps
- dependency-name: lint-staged
  dependency-version: 16.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: rollup-plugin-visualizer
  dependency-version: 7.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: satori
  dependency-version: 0.25.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 8, 2026
@fossabot

fossabot Bot commented Mar 8, 2026

Copy link
Copy Markdown
Contributor

fossabot is Thinking

@netlify

netlify Bot commented Mar 8, 2026

Copy link
Copy Markdown

Deploy Preview for mvlanga-v2 failed. Why did it fail? →

Name Link
🔨 Latest commit d696b26
🔍 Latest deploy log https://app.netlify.com/projects/mvlanga-v2/deploys/69ad3214f59d100008468642

@fossabot

fossabot Bot commented Mar 8, 2026

Copy link
Copy Markdown
Contributor

Needs Review

I recommend reviewing this upgrade before merging because it introduces a hard-blocking peer dependency conflict: eslint-plugin-jsx-a11y@​6.10.2 declares a peer range of eslint@"^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9" — explicitly excluding eslint@​10 — which causes npm to abort with ERESOLVE and prevents both CI jobs (validate and test) from completing any step beyond npm i. The fix is to upgrade eslint-plugin-jsx-a11y to a release whose peer range includes ESLint v10 (run npm install eslint-plugin-jsx-a11y@​latest --save-dev), downgrade eslint to ^9.x, or temporarily add --legacy-peer-deps to the npm i commands in both workflow files as a short-term workaround. Once the conflict is resolved, teams should also expect new lint errors from three rules (no-unassigned-vars, no-useless-assignment, preserve-caught-error) now included in eslint:recommended — the config at eslint.config.mjs spreads eslint.configs.recommended directly. The remaining four packages (satori, rollup-plugin-visualizer, @​types/node, lint-staged) carry only additive improvements — new CSS features, a 3D treemap visualization mode, improved type definitions, and minor documentation changes — with no breaking API changes detected in the project's usage patterns. The ESLint upgrade does bring meaningful security fixes (patching minimatch, ajv, and @​eslint/plugin-kit vulnerabilities) and the Node.js runtime (v24.14.0 per .nvmrc) satisfies the new >=24 minimum requirement, so those concerns are already addressed.

Tip: Comment @​fossabot fix to attempt automatic fixes.

Fix Suggestions

We identified 4 fixable issues in this upgrade.

  • Upgrade eslint-plugin-jsx-a11y to a version that supports ESLint v10 in its peer dependency range. Run 'npm install eslint-plugin-jsx-a11y@​latest --save-dev' to install the latest version. If no version supports ESLint v10 yet, this will fail and the manual workaround (option 2 or 3) must be used instead. After running, verify the installed version's peer dependency range includes eslint@​10 by checking 'npm info eslint-plugin-jsx-a11y peerDependencies'.
    Run: cd . && npm install eslint-plugin-jsx-a11y@​latest --save-dev
    Files: package.json
  • If no eslint-plugin-jsx-a11y version supports ESLint v10 yet, add --legacy-peer-deps to npm install commands in both CI workflow files as a temporary workaround. In .github/workflows/ci.yml line 21, change 'npm i' to 'npm i --legacy-peer-deps'. In .github/workflows/playwright.yml line 22, change 'npm i' to 'npm i --legacy-peer-deps'. Manual alternative: open each file and find the 'npm i' step, append ' --legacy-peer-deps' to the command.
    Files: .github/workflows/ci.yml, .github/workflows/playwright.yml
  • After resolving the peer dependency conflict, search all .ts and .tsx files for patterns that would trigger the three new ESLint v10 recommended rules: (1) 'no-unassigned-vars' — search for variable declarations whose values are never read, e.g. 'const x = someFunction()' where x is never used afterward. (2) 'no-useless-assignment' — search for variables that are assigned a value that is immediately overwritten before being read. (3) 'preserve-caught-error' — search for catch blocks like 'catch (e) { throw new Error(...) }' where the caught error is not included in the rethrown error. Run 'npx eslint src/' after the peer dep fix to identify all violations, then fix with 'npx eslint --fix src/' for auto-fixable ones. Manual alternative: grep -rn 'catch' src/ --include='.ts' --include='.tsx' to find catch blocks that may need updating.
    Run: cd . && npx eslint src/
    Files: eslint.config.mjs
  • If new ESLint v10 recommended rules cause too many errors to fix immediately, temporarily disable them in eslint.config.mjs by adding rule overrides. In eslint.config.mjs, after the spread of eslint.configs.recommended (around line 11), add a config object: { rules: { 'no-unassigned-vars': 'warn', 'no-useless-assignment': 'warn', 'preserve-caught-error': 'warn' } } to downgrade errors to warnings while the team addresses them. Manual alternative: open eslint.config.mjs and add the rules object in the exported config array.
    Files: eslint.config.mjs

AI Assistant Prompt

Copy prompt for AI assistant
Help me fix dependency upgrade issues after upgrading `eslint` to v10 and `@​eslint/js` to v10 in my Astro project. The upgrade is in PR #170 and CI is completely broken.

## Critical Problem

Both CI jobs (`validate` and `test`) fail at `npm i` with `ERESOLVE` because `eslint-plugin-jsx-a11y@​6.10.2` declares a peer dependency of `eslint@"^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9"` — explicitly excluding ESLint v10. No downstream steps (lint, type-check, Playwright tests) run at all.

## Fix Steps (in order)

### Step 1: Resolve the peer dependency conflict

Try upgrading `eslint-plugin-jsx-a11y` to a version that supports ESLint v10:

```bash
npm install eslint-plugin-jsx-a11y@​latest --save-dev
```

After installing, verify the peer range includes ESLint v10:

```bash
npm info eslint-plugin-jsx-a11y peerDependencies
```

Update `package.json` with the new version. If no version supports ESLint v10 yet, proceed to Step 2 instead.

### Step 2 (fallback only): Add --legacy-peer-deps to CI workflows

Only do this if Step 1 fails (no compatible `eslint-plugin-jsx-a11y` version exists yet).

In `.github/workflows/ci.yml` around line 21, change:
```yaml
- run: npm i
```
to:
```yaml
- run: npm i --legacy-peer-deps
```

In `.github/workflows/playwright.yml` around line 22, make the same change:
```yaml
- run: npm i --legacy-peer-deps
```

Also add to the project root `.npmrc` (create if needed):
```
legacy-peer-deps=true
```

This is a temporary workaround — remove it once `eslint-plugin-jsx-a11y` officially supports ESLint v10.

### Step 3: Handle new ESLint v10 recommended rules

ESLint v10 adds three new rules to `eslint:recommended`, which is spread in `eslint.config.mjs` (around line 11). After the peer dep fix, run:

```bash
npx eslint src/
```

This will reveal violations from these new rules:
- `no-unassigned-vars` — variables declared but never read
- `no-useless-assignment` — values assigned then immediately overwritten
- `preserve-caught-error` — catch blocks that discard the original error

Fix auto-fixable issues:
```bash
npx eslint --fix src/
```

For remaining issues, fix them manually in the reported files.

### Step 4 (optional): Temporarily downgrade new rules to warnings

If Step 3 reveals too many violations to fix right now, add rule overrides in `eslint.config.mjs`. After the `eslint.configs.recommended` spread in the config array, add:

```js
{
  rules: {
    'no-unassigned-vars': 'warn',
    'no-useless-assignment': 'warn',
    'preserve-caught-error': 'warn',
  },
},
```

This downgrades errors to warnings so CI passes while the team addresses violations incrementally.

## Files to modify

1. `package.json` — update `eslint-plugin-jsx-a11y` version (Step 1)
2. `.github/workflows/ci.yml` — add `--legacy-peer-deps` if Step 1 fails (Step 2)
3. `.github/workflows/playwright.yml` — add `--legacy-peer-deps` if Step 1 fails (Step 2)
4. `eslint.config.mjs` — add rule overrides if needed (Step 4)
5. Various `.ts`/`.tsx` files in `src/` — fix lint violations (Step 3)

## Context

- Runtime: Node.js v24.14.0 (per `.nvmrc`), satisfies ESLint v10's `>=24` requirement
- The ESLint upgrade includes important security patches (minimatch ReDoS, ajv, @​eslint/plugin-kit vulnerabilities)
- Other packages in this PR (`satori`, `rollup-plugin-visualizer`, `@​types/node`, `lint-staged`) have no breaking changes
- `lint-staged` in `package.json` triggers `eslint` on staged `.ts` files at commit time

Please start with Step 1 and proceed through the steps in order. After each step, verify the fix by running `npm i` and `npx eslint src/` to confirm CI would pass.

What we checked

  • "eslint-plugin-jsx-a11y": "^6.10.2" declares a peer dependency of eslint@"^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9", which explicitly excludes eslint@​10. Combined with eslint@"^10.0.3" at line 48, npm cannot resolve a valid dependency tree and throws ERESOLVE, aborting both CI jobs at the npm i step. [1]
  • "eslint": "^10.0.3" is the newly upgraded version that triggers the ERESOLVE conflict with eslint-plugin-jsx-a11y@​6.10.2. npm identifies eslint@​9.39.4 as the last compatible version for the plugin, so any ^10.x pin is irreconcilable without updating or removing the plugin. [2]
  • The validate job runs npm i (bare, without --legacy-peer-deps). The peer dependency conflict causes this step to fail with exit code 1, preventing astro check from ever running. [3]
  • The test job also runs npm i without flags, hitting the same ERESOLVE failure. All downstream steps — Playwright browser installation, test execution, and artifact upload — are skipped as a result. [4]
  • eslint.configs.recommended is spread directly into the flat config. ESLint v10 adds three new rules to eslint:recommendedno-unassigned-vars, no-useless-assignment, and preserve-caught-error — all at error level. Once the peer dep conflict is fixed, the build may fail linting due to these previously absent rules. [5]
  • "@​eslint/js": "^10.0.1" is the source of the updated eslint.configs.recommended ruleset. The tarball analysis confirms no-unassigned-vars and preserve-caught-error were added to the all config and no-useless-assignment was added to recommended, which is imported at eslint.config.mjs:11. [6]
  • jsxA11y.flatConfigs.recommended is applied to the flat config. The plugin already exposes a flat config API in v6, so the ESLint flat config usage pattern itself is fine — the breakage is purely the peer dependency version range mismatch, not an API incompatibility. [7]
  • The official ESLint v10 migration guide confirms: (1) Legacy .eslintrc system fully removed — not applicable here since the project already uses eslint.config.mjs. (2) eslint-env inline comments now reported as errors — no such comments found in src/. (3) Deprecated context and SourceCode methods removed — only affects custom rule authors, not this project's config-only usage. (4) Config lookup is now file-based by default — low risk since eslint.config.mjs sits at the project root. [8]
  • The project pins Node.js to v24.14.0. ESLint v10 requires ^20.19.0 || ^22.13.0 || >=24, and Node 24.14.0 satisfies >=24, so there is no runtime version incompatibility for this upgrade. [9]
  • import satori from "satori" — the upgrade introduces CSS Variables support, enhanced backgroundSize/objectPosition handling, and textIndent. All changes are purely additive. The existing usage at line 51 (satori(content, { width, height, debug, fonts })) uses only stable, unchanged API surface — no migration needed. [10]
  • visualizer({ emitFile: true, filename: "stats.html" }) — the rollup-plugin-visualizer upgrade adds a new treemap-3d template and an explicit main entry point for CommonJS compatibility. The existing call uses no template-specific options, so it is unaffected by these additions. [11]
  • The lint-staged configuration runs eslint --cache --fix on all staged *.{ts,tsx} files. The lint-staged package upgrade carries only a README change (removed community contribution note) — no CLI, API, or configuration-format changes detected. [12]
  • "@​types/node": "^25.3.5" — the upgrade includes improved JSDoc for ZlibOptions, explicit constructor definitions for BrotliCompress, Gzip, and ZstdCompress, and a corrected markdown link in http.d.ts. All changes are purely additive type improvements with no breaking API surface changes. [13]
  • The ESLint v10.0.0 release announcement confirms multiple high-severity security fixes are bundled: minimatch vulnerability patch, ajv updated to 6.14.0, and @​eslint/plugin-kit bumped to resolve a reported vulnerability. These security improvements are a strong motivation to complete the upgrade once the eslint-plugin-jsx-a11y peer dependency conflict is resolved. [14]

Dependency Usage

These six dependencies collectively support two distinct concerns: developer tooling and content generation. The code quality stack — eslint, @​eslint/js, lint-staged, and @​types/node — forms an automated enforcement pipeline configured in eslint.config.mjs and package.json, where lint-staged triggers eslint on all staged TypeScript files at commit time, enforcing accessibility, React, and TypeScript rules before code ever reaches the repository. On the product side, satori powers dynamic Open Graph image generation in src/utils/og-image/utils.ts by rendering React components directly to SVG, enabling rich social media preview cards, while rollup-plugin-visualizer integrates into the Astro build pipeline via astro.config.ts to produce bundle size reports that inform performance optimization decisions. Overall, the dependency set reflects a mature Astro-based content site with a strong emphasis on automated code quality gates and user-facing SEO/social sharing features.

  • The validate job runs npm i (bare, without --legacy-peer-deps). The peer dependency conflict causes this step to fail with exit code 1, preventing astro check from ever running.
  • The test job also runs npm i without flags, hitting the same ERESOLVE failure. All downstream steps — Playwright browser installation, test execution, and artifact upload — are skipped as a result.
View 5 more usages
  • eslint.configs.recommended is spread directly into the flat config. ESLint v10 adds three new rules to eslint:recommendedno-unassigned-vars, no-useless-assignment, and preserve-caught-error — all at error level. Once the peer dep conflict is fixed, the build may fail linting due to these previously absent rules.
    eslint.configs.recommended,
  • jsxA11y.flatConfigs.recommended is applied to the flat config. The plugin already exposes a flat config API in v6, so the ESLint flat config usage pattern itself is fine — the breakage is purely the peer dependency version range mismatch, not an API incompatibility.
    jsxA11y.flatConfigs.recommended,
  • The project pins Node.js to v24.14.0. ESLint v10 requires ^20.19.0 || ^22.13.0 || >=24, and Node 24.14.0 satisfies >=24, so there is no runtime version incompatibility for this upgrade.
    v24.14.0
  • import satori from "satori" — the upgrade introduces CSS Variables support, enhanced backgroundSize/objectPosition handling, and textIndent. All changes are purely additive. The existing usage at line 51 (satori(content, { width, height, debug, fonts })) uses only stable, unchanged API surface — no migration needed.
    import satori from "satori";
  • visualizer({ emitFile: true, filename: "stats.html" }) — the rollup-plugin-visualizer upgrade adds a new treemap-3d template and an explicit main entry point for CommonJS compatibility. The existing call uses no template-specific options, so it is unaffected by these additions.
    visualizer({
Less Important Usages (3)

These usages were analyzed but no breaking changes were detected:

@​eslint/js

eslint

rollup-plugin-visualizer

Changes

eslint and @​eslint/js received security patches addressing vulnerabilities in their dependencies minimatch (ReDoS via PRISMA-2022-0039), ajv, and @​eslint/plugin-kit, along with a fix removing a catastrophic backtracking regex vulnerability in ESLint's own rule parser. These are development tooling updates with no runtime impact, but the security fixes warrant prompt adoption.

  • 7ab77a2 fix: correct breaking deprecation of FlatConfig type (#19826) (Logicer) (v9.39.3-9.39.4, changelog)
  • 5687ce7 fix: correct mismatched removed rules (#19734) (루밀LuMir) (v9.39.3-9.39.4, changelog)
  • 959d360 build: Support updates to previous major versions (#18871) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
View 29506 more changes
  • 234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles) (v9.39.3-9.39.4, changelog)
  • b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir) (v9.39.3-9.39.4, changelog)
  • d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 50a8efd docs: report a sec vulnerability page (#16808) (Ben Perlmutter) (v9.39.3-9.39.4, changelog)
  • 8167aa7 chore: bump version of minimatch due to security issue PRISMA-2022-0039 (#15774) (Jan Opravil) (v9.39.3-9.39.4, changelog)
  • 9250d16 Upgrade: Bump lodash to fix security issue (#13993) (Frederik Prijck) (v9.39.3-9.39.4, changelog)
  • 0f1f5ed Docs: Add security policy link to README (#13403) (Nicholas C. Zakas) (v9.39.3-9.39.4, changelog)
  • 3396c3e Upgrade: karma@^4.0.1, drops Node 6 support, fixes vulnerability (#11570) (Kevin Partington) (v9.39.3-9.39.4, changelog)
  • afe3d25 Upgrade: Bump js-yaml dependency to fix Denial of Service vulnerability (#11550) (Vernon de Goede) (v9.39.3-9.39.4, changelog)
  • d3f3994 Docs: add information about reporting security issues (#10889) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • f6901d0 Fix: remove catastrophic backtracking vulnerability (fixes #10002) (#10019) (Jamie Davis) (v9.39.3-9.39.4, changelog)
  • Upgrade: Handlebars to >= 4.0.5 for security reasons (fixes #4642) (Jacques Favreau) (v9.39.3-9.39.4, changelog)
  • 113f51e docs: Mention package.json config support dropped (#18305) (Nicholas C. Zakas) (v9.39.3-9.39.4, changelog)
  • 7c78576 docs: Add more removed context methods to migrate to v9 guide (#17951) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 3a877d6 docs: Update removed CLI flags migration (#17939) (Nicholas C. Zakas) (v9.39.3-9.39.4, changelog)
  • 74794f5 chore: removed unused eslintrc modules (#17938) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • fffca5c docs: remove "Open in Playground" buttons for removed rules (#17791) (Francesco Trotta) (v9.39.3-9.39.4, changelog)
  • becfdd3 docs: Make clear when rules are removed (#17728) (Nicholas C. Zakas) (v9.39.3-9.39.4, changelog)
  • ce4f5ff docs: Replace removed related rules with a valid rule (#16800) (Ville Saalo) (v9.39.3-9.39.4, changelog)
  • c9efb5f Fix: preserve formatting when rules are removed from disable directives (#15081) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 7cf96cf Breaking: Disallow reserved words in ES3 (fixes #15017) (#15046) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 305e14a Breaking: remove meta.docs.category in core rules (fixes #13398) (#14594) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • 24c9f2a Breaking: Strict package exports (refs #13654) (#14706) (Nicholas C. Zakas) (v9.39.3-9.39.4, changelog)
  • 86d31a4 Breaking: disallow SourceCode#getComments() in RuleTester (refs #14744) (#14769) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 1d2213d Breaking: Fixable disable directives (fixes #11815) (#14617) (Josh Goldberg) (v9.39.3-9.39.4, changelog)
  • 4a7aab7 Breaking: require meta for fixable rules (fixes #13349) (#14634) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • d6a761f Breaking: Require meta.hasSuggestions for rules with suggestions (#14573) (Bryan Mishkin) (v9.39.3-9.39.4, changelog)
  • 6bd747b Breaking: support new regex d flag (fixes #14640) (#14653) (Yosuke Ota) (v9.39.3-9.39.4, changelog)
  • 8b4f3ab Breaking: fix comma-dangle schema (fixes #13739) (#14030) (Joakim Nilsson) (v9.39.3-9.39.4, changelog)
  • b953a4e Breaking: upgrade espree and support new class features (refs #14343) (#14591) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 8cce06c Breaking: add some rules to eslint:recommended (refs #14673) (#14691) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • 86bb63b Breaking: Drop codeframe and table formatters (#14316) (Federico Brigante) (v9.39.3-9.39.4, changelog)
  • f3cb320 Breaking: drop node v10/v13/v15 (fixes #14023) (#14592) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • 4c841b8 Breaking: allow all directives in line comments (fixes #14575) (#14656) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • c29bd9f Chore: Add breaking/core change link to issue templates (#13344) (Kai Cataldo) (v9.39.3-9.39.4, changelog)
  • 4ef6158 Breaking: espree@​7.0.0 (#13270) (Kai Cataldo) (v9.39.3-9.39.4, changelog)
  • 78c8cda Breaking: RuleTester Improvements (refs Update: RuleTester Improvements eslint/rfcs#25) (#12955) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 185982d Breaking: improve plugin resolving (refs New: Plugin Loading Improvement eslint/rfcs#47) (#12922) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 48b122f Breaking: change relative paths with --config (refs New: Changing Base Path of overrides and ignorePatterns eslint/rfcs#37) (#12887) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 0de91f3 Docs: removed correct code from incorrect eg (#13060) (Anix) (v9.39.3-9.39.4, changelog)
  • 4af06fc Breaking: Test with an unknown error property should fail in RuleTester (#12096) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • afa9aac Breaking: class default true computed-property-spacing (fixes #12812) (#12915) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 7d52151 Breaking: classes default true in accessor-pairs (fixes #12811) (#12919) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 78182e4 Breaking: Add new rules to eslint:recommended (fixes #12911) (#12920) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 6423e11 Breaking: check unnamed default export in func-names (fixes #12194) (#12195) (Chiawen Chen) (v9.39.3-9.39.4, changelog)
  • 4293229 Breaking: use-isnan enforceForSwitchCase default true (fixes #12810) (#12913) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • cf38d0d Breaking: change default ignore pattern (refs New: Update Default Ignore Patterns eslint/rfcs#51) (#12888) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • bfe1dc4 Breaking: no-dupe-class-members checks some computed keys (fixes #12808) (#12837) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • 95e0586 Fix: id-blacklist false positives on renamed imports (#12831) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • c2217c0 Breaking: make radix rule stricter (#12608) (fisker Cheung) (v9.39.3-9.39.4, changelog)
  • 1aa021d Breaking: lint overrides files (fixes #10828, refs New: Configuring Additional Lint Targets with .eslintrc eslint/rfcs#20) (#12677) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • b50179d Breaking: Check assignment targets in no-extra-parens (#12490) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • d86a5bb Breaking: Check flatMap in array-callback-return (fixes #12235) (#12765) (Milos Djermanovic) (v9.39.3-9.39.4, changelog)
  • cf46df7 Breaking: description in directive comments (refs New: Description in directive comments eslint/rfcs#33) (#12699) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 7350589 Breaking: some rules recognize bigint literals (fixes #11803) (#12701) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 1118fce Breaking: runtime-deprecation on '~/.eslintrc' (refs Update: Deprecating Personal Config eslint/rfcs#32) (#12678) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 2c28fbb Breaking: drop Node.js 8 support (refs New: Drop supports for Node.js 8.x and 11.x eslint/rfcs#44) (#12700) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 20908a3 Docs: removed '>' prefix from docs/working-with-rules (#11818) (Alok Takshak) (v9.39.3-9.39.4, changelog)
  • 2d32a9e Breaking: stricter rule config validating (fixes #9505) (#11742) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • 6ae21a4 Breaking: fix config loading (fixes #11510, fixes #11559, fixes #11586) (#11546) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • adc6585 Docs: update status of breaking changes in migration guide (#11652) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 0fc8e62 Breaking: eslint:recommended changes (fixes #10768) (#11518) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • 20364cc Breaking: make no-redeclare stricter (fixes #11370, fixes #11405) (#11509) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 9e49b56 Breaking: upgrade espree to 6.0.0-alpha.0 (fixes #9687) (#11610) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • ef7801e Breaking: disallow invalid rule defaults in RuleTester (fixes #11473) (#11599) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 4e7cdca Breaking: comma-dangle enable functions: "never" (fixes #11502) (#11519) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • 12f256f Breaking: no-confusing-arrow enable allowParens: true (fixes #11503) (#11520) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • 25cc63d Breaking: simplify config/plugin/parser resolution (fixes #10125) (#11388) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • fd1c91b Breaking: throw an error for invalid global configs (refs #11338) (#11517) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • be83322 Breaking: Remove extra rules from eslint:recommended (fixes #10873) (#11357) (Kevin Partington) (v9.39.3-9.39.4, changelog)
  • 2543f11 Breaking: remove deprecated experimentalObjectRestSpread option (#11420) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 0fb5fd4 Breaking: interpret rule options as unicode regexes (fixes #11423) (#11516) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 6e7da57 Breaking: drop Node.js 6 support (fixes #11456) (#11557) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 258b654 Upgrade: require-uncached renamed to import-fresh (#11066) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • d56c39d Fix: ESLint cache no longer stops autofix (fixes #10679) (#10694) (Kevin Partington) (v9.39.3-9.39.4, changelog)
  • 41f0f6e Breaking: report multiline eslint-disable-line directives (fixes #10334) (#10335) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 09dde26 Breaking: new object-curly-newline/no-self-assign default (fixes #10215) (#10337) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 02e44a5 Breaking: remove TDZ scopes (fixes #10245) (#10270) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • c74933b Breaking: remove extra check in getScope (fixes #10246, fixes #10247) (#10252) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • 8b7c6ea Breaking: report fatal error for linting nonexistent files (fixes #7390) (#10143) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 9100819 Breaking: fix plugin resolver in extends (fixes #9904) (#10236) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • c45f1d0 Breaking: add rules to recommended (fixes #8865) (#10158) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • b2a48a9 Breaking: stop using fake context._linter property (fixes #10140) (#10209) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • a039956 Breaking: remove deprecated browser/jest/node globals (fixes #10141) (#10210) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 2324570 Breaking: no-unused-vars reports all after-used params (fixes #9909) (#10119) (Kevin Partington) (v9.39.3-9.39.4, changelog)
  • b77846d Breaking: drop supporting Node.js 4 (fixes #10052) (#10074) (薛定谔的猫) (v9.39.3-9.39.4, changelog)
  • f4b3af5 Breaking: Upgrade to Espree v4 alpha (refs #9990) (#10152) (Brandon Mills) (v9.39.3-9.39.4, changelog)
  • d440e84 Breaking: support @​scope shorthand in plugins (fixes #9903) (#9905) (Toru Nagashima) (v9.39.3-9.39.4, changelog)
  • a9ee9ae Breaking: require rules to provide report messages (fixes #10011) (#10057) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • c383bc5 Breaking: Make require('eslint').linter non-enumerable (fixes #9270) (#9692) (Jed Fox) (v9.39.3-9.39.4, changelog)
  • 4eaebe5 Breaking: set parent of AST nodes before rules run (fixes #9122) (#10014) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 91ece32 Breaking: remove special exception for linting empty files (fixes #9534) (#10013) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 27e3f24 Breaking: remove source property from linting messages (fixes #7358) (#10012) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • e4c3b3c Breaking: use an exit code of 2 for fatal config problems (fixes #9384) (#10009) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 2a7ecaa Breaking: Use strict equality in RuleTester comparisons (fixes #9417) (#10008) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • 1bbac51 Fix: avoid breaking eslint-plugin-eslint-comments (fixes #9193) (#9196) (Teddy Katz) (v9.39.3-9.39.4, changelog)
  • f00854e Fix: --quiet no longer fixes warnings (fixes #8675) (#8858) (Kevin Partington) (v9.39.3-9.39.4, changelog)

View 29409 more changes in the full analysis

References (14)

[1]: "eslint-plugin-jsx-a11y": "^6.10.2" declares a peer dependency of eslint@"^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9", which explicitly excludes eslint@​10. Combined with eslint@"^10.0.3" at line 48, npm cannot resolve a valid dependency tree and throws ERESOLVE, aborting both CI jobs at the npm i step.

"eslint-plugin-jsx-a11y": "^6.10.2",

[2]: "eslint": "^10.0.3" is the newly upgraded version that triggers the ERESOLVE conflict with eslint-plugin-jsx-a11y@​6.10.2. npm identifies eslint@​9.39.4 as the last compatible version for the plugin, so any ^10.x pin is irreconcilable without updating or removing the plugin.

"eslint": "^10.0.3",

[3]: The validate job runs npm i (bare, without --legacy-peer-deps). The peer dependency conflict causes this step to fail with exit code 1, preventing astro check from ever running.

[4]: The test job also runs npm i without flags, hitting the same ERESOLVE failure. All downstream steps — Playwright browser installation, test execution, and artifact upload — are skipped as a result.

[5]: eslint.configs.recommended is spread directly into the flat config. ESLint v10 adds three new rules to eslint:recommendedno-unassigned-vars, no-useless-assignment, and preserve-caught-error — all at error level. Once the peer dep conflict is fixed, the build may fail linting due to these previously absent rules.

eslint.configs.recommended,

[6]: "@​eslint/js": "^10.0.1" is the source of the updated eslint.configs.recommended ruleset. The tarball analysis confirms no-unassigned-vars and preserve-caught-error were added to the all config and no-useless-assignment was added to recommended, which is imported at eslint.config.mjs:11.

"@eslint/js": "^10.0.1",

[7]: jsxA11y.flatConfigs.recommended is applied to the flat config. The plugin already exposes a flat config API in v6, so the ESLint flat config usage pattern itself is fine — the breakage is purely the peer dependency version range mismatch, not an API incompatibility.

jsxA11y.flatConfigs.recommended,

[8]: The official ESLint v10 migration guide confirms: (1) Legacy .eslintrc system fully removed — not applicable here since the project already uses eslint.config.mjs. (2) eslint-env inline comments now reported as errors — no such comments found in src/. (3) Deprecated context and SourceCode methods removed — only affects custom rule authors, not this project's config-only usage. (4) Config lookup is now file-based by default — low risk since eslint.config.mjs sits at the project root. (source link)

[9]: The project pins Node.js to v24.14.0. ESLint v10 requires ^20.19.0 || ^22.13.0 || >=24, and Node 24.14.0 satisfies >=24, so there is no runtime version incompatibility for this upgrade.

v24.14.0

[10]: import satori from "satori" — the upgrade introduces CSS Variables support, enhanced backgroundSize/objectPosition handling, and textIndent. All changes are purely additive. The existing usage at line 51 (satori(content, { width, height, debug, fonts })) uses only stable, unchanged API surface — no migration needed.

import satori from "satori";

[11]: visualizer({ emitFile: true, filename: "stats.html" }) — the rollup-plugin-visualizer upgrade adds a new treemap-3d template and an explicit main entry point for CommonJS compatibility. The existing call uses no template-specific options, so it is unaffected by these additions.

visualizer({

[12]: The lint-staged configuration runs eslint --cache --fix on all staged *.{ts,tsx} files. The lint-staged package upgrade carries only a README change (removed community contribution note) — no CLI, API, or configuration-format changes detected.

"lint-staged": {

[13]: "@​types/node": "^25.3.5" — the upgrade includes improved JSDoc for ZlibOptions, explicit constructor definitions for BrotliCompress, Gzip, and ZstdCompress, and a corrected markdown link in http.d.ts. All changes are purely additive type improvements with no breaking API surface changes.

"@types/node": "^25.3.5",

[14]: The ESLint v10.0.0 release announcement confirms multiple high-severity security fixes are bundled: minimatch vulnerability patch, ajv updated to 6.14.0, and @​eslint/plugin-kit bumped to resolve a reported vulnerability. These security improvements are a strong motivation to complete the upgrade once the eslint-plugin-jsx-a11y peer dependency conflict is resolved. (source link)


fossabot analyzed this PR using static analysis and dependency research. View this analysis on the web

@dependabot @github

dependabot Bot commented on behalf of github Mar 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 13, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/dev-deps-41a6f66c45 branch March 13, 2026 10:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants