Update dependency eslint to v10 by renovate[bot] · Pull Request #150 · nvuillam/node-java-caller

renovate · 2026-02-07T02:03:05Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
eslint (source)	`^9.0.0` → `^10.0.0`

Release Notes

eslint/eslint (eslint)

`v10.8.0`

Compare Source

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

`v10.7.0`

Compare Source

Features

cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

c30d808 docs: Update README (GitHub Actions Bot)
5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
04174cb docs: Update README (GitHub Actions Bot)
026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
9d42fef docs: Update README (GitHub Actions Bot)
b230159 docs: Update README (GitHub Actions Bot)
0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

9489379 chore: update dependency @eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
81a4774 chore: updates for v9.39.5 release (Jenkins)
9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
993539f chore: update dependency @eslint/json to ^2.0.1 (#21042) (renovate[bot])
53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

`v10.6.0`

Compare Source

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)
f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)
8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)
5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)
9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)
d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)
2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)
63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)
7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)
399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)
f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)
bea49f7 docs: Update README (GitHub Actions Bot)
e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)
8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)
3eb3d9b docs: Update README (GitHub Actions Bot)
c5bb59c docs: Update README (GitHub Actions Bot)
eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])
c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)
a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)
27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)
865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])
27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)
970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)
b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])
6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

`v10.5.0`

Compare Source

Features

5ca8c52 feat: correct stack tracking in max-nested-callbacks (#20973) (Pixel998)
b565783 feat: report no-with violations at the with keyword (#20971) (Pixel998)
2ce032f feat: report max-lines-per-function violations at function head (#20966) (Pixel998)
732cb3e feat: report max-nested-callbacks violations at function head (#20967) (Pixel998)
f9c138a feat: report max-depth violations on keywords (#20943) (Pixel998)
bdb496c feat: correct max-depth handling for else-if chains (#20944) (Pixel998)
c296873 feat: update error loc in max-statements to function header (#20907) (Taejin Kim)

Documentation

8ae1b5b docs: Update README (GitHub Actions Bot)
ca7eb90 docs: update Node.js prerequisites to include ICU support (#20962) (Francesco Trotta)
f99b47a docs: Update README (GitHub Actions Bot)
acf03d4 docs: clarify precedence of parserOptions over languageOptions (#20926) (sethamus)

Chores

b18bf58 chore: update ecosystem plugins (#20959) (ESLint Bot)
c2d1444 refactor: replace areAllSegmentsUnreachable with !isAnySegmentReachable (#20951) (Taejin Kim)
243b8c5 chore: enhance config-rule to support oneOf, anyOf, and nested schemas (#20788) (kuldeep kumar)
217b2a9 test: add unit tests for ParserService (#20949) (Taejin Kim)
72003e7 test: add location information to error messages in max-statements (#20945) (lumir)
7797c26 refactor: deduplicate isAnySegmentReachable across rules (#20890) (Taejin Kim)
67c46fa chore: update ecosystem plugins (#20938) (ESLint Bot)
95d8c7a chore: update dependency @eslint/json to v2 (#20934) (renovate[bot])
cf9e496 chore: update @arethetypeswrong/cli to 0.18.3 (#20933) (Pixel998)
fb6d396 test: run type tests with TypeScript 7 (#20868) (sethamus)

`v10.4.1`

Compare Source

Bug Fixes

e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)
d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)
f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)
c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)
27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)
305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)
49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)
9067f94 docs: switch build to Node.js 24 (#20893) (Milos Djermanovic)
c91b041 docs: Update README (GitHub Actions Bot)
e349265 docs: clarify semver strings in rule deprecation objects (#20885) (Milos Djermanovic)

Chores

b0e466b test: add data property to invalid tests cases for rules (#20924) (Tanuj Kanti)
f78838b test: add CodePath type coverage (#20904) (Pixel998)
1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20922) (Francesco Trotta)
002942c ci: declare contents:read on update-readme workflow (#20919) (Arpit Jain)
64bca24 chore: update ecosystem plugins (#20912) (ESLint Bot)
6d7c832 chore: ignore fflate updates in renovate (#20908) (Pixel998)
b2c8638 ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (#20889) (dependabot[bot])
a9b8d7f chore: increase maxBuffer for ecosystem tests (#20881) (sethamus)
b702ead chore: update ecosystem update PR settings (#20884) (Pixel998)
507f60e chore: update ecosystem plugins (#20882) (ESLint Bot)
92f5c5b test: add unit test for message-count (#20878) (kuldeep kumar)
df32108 chore: add @eslint/markdown and typescript-eslint ecosystem tests (#20837) (sethamus)
327f91d chore: use includeIgnoreFile internally (#20876) (Kirk Waiblinger)
f0dc4bd chore: pin fflate@0.8.2 (#20877) (Milos Djermanovic)
0f4bd25 ci: run Discord alert for ecosystem test failures (#20873) (Copilot)

`v10.4.0`

Compare Source

Features

1a45ec5 feat: check sequence expressions in for-direction (#20701) (kuldeep kumar)
450040b feat: add includeIgnoreFile() to eslint/config (#20735) (Kirk Waiblinger)

Bug Fixes

544c0c3 fix: escape code path DOT labels in debug output (#20866) (Pixel998)
6799431 fix: update dependency @eslint/config-helpers to ^0.6.0 (#20850) (renovate[bot])
f078fef fix: handle non-array deprecated rule replacements (#20825) (xbinaryx)

Documentation

7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869) (Pavel)
db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865) (Kirk Waiblinger)
9084664 docs: Update README (GitHub Actions Bot)
9cc7387 docs: Update README (GitHub Actions Bot)
3d7b548 docs: Update README (GitHub Actions Bot)
191ec3c docs: Update README (GitHub Actions Bot)

Chores

6616856 chore: upgrade knip to v6 (#20875) (Pixel998)
d13b084 ci: ensure auto-created PRs run CI (#20860) (lumir)
e71c7af ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862) (dependabot[bot])
d84393d test: add unit tests for SuppressionsService.applySuppressions() (#20863) (kuldeep kumar)
24db8cb test: add tests for SuppressionsService.save() (#20802) (kuldeep kumar)
2ef0549 chore: update ecosystem plugins (#20857) (github-actions[bot])
a429791 ci: remove eslint-webpack-plugin types integration test (#20668) (Milos Djermanovic)
9e37386 chore: replace recast with range approach in code-sample-minimizer (#20682) (Copilot)
0dd1f9f test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#20845) (Francesco Trotta)
9da3c7b refactor: remove deprecated meta.language and migrate meta.dialects (#20716) (Pixel998)
2099ed1 refactor: add meta.defaultOptions to more rules, enable linting (#20800) (xbinaryx)
f1dfbc9 chore: update ecosystem plugins (#20836) (github-actions[bot])
c759413 ci: bump pnpm/action-setup from 6.0.3 to 6.0.5 (#20843) (dependabot[bot])
5b817d6 test: add unit tests for lib/shared/ast-utils (#20838) (kuldeep kumar)
1c13ae3 test: add unit tests for lib/shared/severity (#20835) (kuldeep kumar)

`v10.3.0`

Compare Source

Features

379571a feat: add suggestions for no-unused-private-class-members (#20773) (sethamus)

Bug Fixes

b6ae5cf fix: handle unavailable require cache (#20812) (Simon Podlipsky)
6fb3685 fix: rule suggestions cause continuation in class body (#20787) (Milos Djermanovic)

Documentation

32cc7ab docs: fix typos in docs and comments (#20809) (Tanuj Kanti)
7f47937 docs: Update README (GitHub Actions Bot)

Chores

d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#20826) (Francesco Trotta)
3ffb14e chore: clean up typos in comments and JSDoc (#20821) (Pixel998)
22eb58a chore: add missing continue-on-error to ecosystem-tests.yml (#20818) (Josh Goldberg ✨)
88bf002 ci: bump pnpm/action-setup from 6.0.1 to 6.0.3 (#20815) (dependabot[bot])
97c8c33 chore: update ilshidur/action-discord action to v0.4.0 (#20811) (renovate[bot])
2f58136 chore: pin peter-evans/create-pull-request action to 5f6978f (#20810) (renovate[bot])
77add7f chore: add initial ecosystem plugin tests workflow (#19643) (Josh Goldberg ✨)
4023b55 test: Add unit tests for SuppressionsService.prune() (#20797) (kuldeep kumar)
54080da test: add unit tests for ForkContext (#20778) (kuldeep kumar)
f0e2bcc test: add unit tests for SuppressionsService.suppress() method (#20765) (kuldeep kumar)
a7f0b94 chore: update dependency prettier to v3.8.3 (#20782) (renovate[bot])
7bf93d9 chore: update TypeScript to v6 (#20677) (sethamus)
b42dd72 ci: bump pnpm/action-setup from 6.0.0 to 6.0.1 (#20781) (dependabot[bot])
2b252be test: add unit tests for IdGenerator (#20775) (kuldeep kumar)

`v10.2.1`

Compare Source

Bug Fixes

14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)
84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)
af764af fix: clarify language and processor validation errors (#20729) (Pixel998)
e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)
57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)
c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)
1418d52 docs: Update README (GitHub Actions Bot)
39771e6 docs: Update README (GitHub Actions Bot)
71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)
22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)
8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])
fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])
7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)
4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])
51080eb test: processor service (#20731) (kuldeep kumar)
e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)
4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)
066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)

`v10.2.0`

Compare Source

Features

586ec2f feat: Add meta.languages support to rules (#20571) (Copilot)
14207de feat: add Temporal to no-obj-calls (#20675) (Pixel998)
bbb2c93 feat: add Temporal to ES2026 globals (#20672) (Pixel998)

Bug Fixes

542cb3e fix: update first-party dependencies (#20714) (Francesco Trotta)

Documentation

a2af743 docs: add language to configuration objects (#20712) (Francesco Trotta)
845f23f docs: Update README (GitHub Actions Bot)
5fbcf59 docs: remove sourceType from ts playground link (#20477) (Tanuj Kanti)
8702a47 docs: Update README (GitHub Actions Bot)
ddeaded docs: Update README (GitHub Actions Bot)
2b44966 docs: add Major Releases section to Manage Releases (#20269) (Milos Djermanovic)
eab65c7 docs: update eslint versions in examples (#20664) (루밀LuMir)
3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#20660) (Milos Djermanovic)

Chores

8120e30 refactor: extract no unmodified loop condition (#20679) (kuldeep kumar)
46e8469

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-02-07T02:05:01Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Errors	Warnings	Elapsed time
⚠️ ACTION	actionlint	4	2	0	0.07s
❌ ACTION	zizmor	4	23	0	2.41s
✅ COPYPASTE	jscpd	yes	no	no	0.64s
✅ JAVASCRIPT	eslint	11	0	0	0.81s
✅ JSON	jsonlint	8	0	0	0.08s
✅ JSON	npm-package-json-lint	yes	no	no	0.54s
✅ JSON	prettier	8	0	0	0.39s
✅ JSON	v8r	8	0	0	14.4s
⚠️ MARKDOWN	markdownlint	10	30	0	0.87s
⚠️ MARKDOWN	markdown-table-formatter	10	1	0	0.27s
✅ REPOSITORY	betterleaks	yes	no	no	0.8s
✅ REPOSITORY	checkov	yes	no	no	23.61s
✅ REPOSITORY	gitleaks	yes	no	no	0.83s
✅ REPOSITORY	git_diff	yes	no	no	0.01s
✅ REPOSITORY	grype	yes	no	no	63.63s
❌ REPOSITORY	osv-scanner	yes	4	no	0.7s
✅ REPOSITORY	secretlint	yes	no	no	1.07s
✅ REPOSITORY	syft	yes	no	no	2.18s
❌ REPOSITORY	trivy	yes	1	no	14.06s
✅ REPOSITORY	trivy-sbom	yes	no	no	0.52s
✅ REPOSITORY	trufflehog	yes	no	no	4.54s
✅ SPELL	cspell	46	0	0	4.57s
⚠️ SPELL	lychee	29	4	0	1.3s
✅ TYPESCRIPT	eslint	1	0	0	0.36s
✅ TYPESCRIPT	prettier	1	0	0	0.5s
⚠️ TYPESCRIPT	ts-standard	1	1	0	0.46s
✅ YAML	prettier	9	0	0	0.57s
✅ YAML	v8r	9	0	0	8.41s
✅ YAML	yamllint	9	0	0	0.6s

Detailed Issues

❌ REPOSITORY / osv-scanner - 4 errors

Scanning dir .
Starting filesystem walk for root: /
Scanned package-lock.json file and found 151 packages
End status: 52 dirs visited, 151 inodes visited, 1 Extract calls, 6.486789ms elapsed, 6.48702ms wall time

Total 3 packages affected by 4 known vulnerabilities (0 Critical, 2 High, 2 Medium, 0 Low, 0 Unknown) from 1 ecosystem.
4 vulnerabilities can be fixed.

+-------------------------------------+------+-----------+-----------------------+---------+---------------+-------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE               | VERSION | FIXED VERSION | SOURCE            |
+-------------------------------------+------+-----------+-----------------------+---------+---------------+-------------------+
| https://osv.dev/GHSA-mh99-v99m-4gvg | 7.5  | npm       | brace-expansion (dev) | 5.0.7   | 5.0.8         | package-lock.json |
| https://osv.dev/GHSA-724g-mxrg-4qvm | 5.3  | npm       | js-yaml (dev)         | 5.2.0   | 5.2.1         | package-lock.json |
| https://osv.dev/GHSA-pm4m-ph32-ghv5 | 7.5  | npm       | js-yaml (dev)         | 5.2.0   | 5.2.2         | package-lock.json |
| https://osv.dev/GHSA-r292-9mhp-454m | 5.3  | npm       | tar                   | 7.5.19  | 7.5.21        | package-lock.json |
+-------------------------------------+------+-----------+-----------------------+---------+---------------+-------------------+

❌ REPOSITORY / trivy - 1 error

------------------------------------->] 100.00% 86.20 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 86.20 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 80.64 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 80.64 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 80.64 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 75.43 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 75.43 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 75.43 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 70.57 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 70.57 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 70.57 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 66.01 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 66.01 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 66.01 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-------------------------------------------->] 100.00% 61.76 MiB p/s ETA 0s102.36 MiB / 102.36 MiB [-----------------------------------------------] 100.00% 15.18 MiB p/s 6.9s2026-07-25T23:33:05Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-07-25T23:33:05Z	INFO	[vuln] Vulnerability scanning is enabled
2026-07-25T23:33:05Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-07-25T23:33:05Z	INFO	[checks-client] Need to update the checks bundle
2026-07-25T23:33:05Z	INFO	[checks-client] Downloading the checks bundle...
234.65 KiB / 234.65 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-07-25T23:33:10Z	INFO	[npm] Run "npm install" to collect the license information of packages	dir="node_modules"
2026-07-25T23:33:10Z	INFO	Suppressing dependencies for development and testing. To display them, try the '--include-dev-deps' flag.
2026-07-25T23:33:10Z	INFO	Number of language-specific files	num=1
2026-07-25T23:33:10Z	INFO	[npm] Detecting vulnerabilities...
2026-07-25T23:33:10Z	INFO	Detected config files	num=0

Report Summary

┌───────────────────┬──────┬─────────────────┬───────────────────┐
│      Target       │ Type │ Vulnerabilities │ Misconfigurations │
├───────────────────┼──────┼─────────────────┼───────────────────┤
│ package-lock.json │ npm  │        1        │         -         │
└───────────────────┴──────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.71/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


package-lock.json (npm)
=======================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────┬─────────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────┐
│ Library │    Vulnerability    │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                          │
├─────────┼─────────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────┤
│ tar     │ GHSA-r292-9mhp-454m │ MEDIUM   │ fixed  │ 7.5.19            │ 7.5.21        │ node-tar: Uncontrolled recursion in mapHas/filesFilter │
│         │                     │          │        │                   │               │ allows uncatchable stack-overflow DoS via crafted      │
│         │                     │          │        │                   │               │ long-path...                                           │
│         │                     │          │        │                   │               │ https://github.com/advisories/GHSA-r292-9mhp-454m      │
└─────────┴─────────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────┘

📣 Notices:
  - Version 0.72.0 of Trivy is now available, current version is 0.71.2

To suppress version checks, run Trivy scans with the --skip-version-check flag

(Truncated to last 5000 characters out of 7151)

❌ ACTION / zizmor - 23 errors

= help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/deploy.yml:34:77
   |
34 |       - uses: actions/setup-node@HIDDEN_BY_MEGALINTER# v6
   |         -----------------------------------------------------------------   ^^ points to commit 249970729cb0
   |         |
   |         is pointed to by tag v6.4.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/deploy.yml:61:75
   |
61 |       - uses: actions/checkout@HIDDEN_BY_MEGALINTER# v7
   |         ---------------------------------------------------------------   ^^ points to commit 3d3c42e5aac5
   |         |
   |         is pointed to by tag v7.0.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/deploy.yml:64:77
   |
64 |       - uses: actions/setup-node@HIDDEN_BY_MEGALINTER# v6
   |         -----------------------------------------------------------------   ^^ points to commit 249970729cb0
   |         |
   |         is pointed to by tag v6.4.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/github-dependents-info.yml:33:75
   |
33 |         uses: actions/checkout@HIDDEN_BY_MEGALINTER# v7
   |         ---------------------------------------------------------------   ^^ points to commit 3d3c42e5aac5
   |         |
   |         is pointed to by tag v7.0.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/mega-linter.yml:27:75
   |
27 |         uses: actions/checkout@HIDDEN_BY_MEGALINTER# v7
   |         ---------------------------------------------------------------   ^^ points to commit 3d3c42e5aac5
   |         |
   |         is pointed to by tag v7.0.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/test.yml:37:75
   |
37 |         uses: actions/checkout@HIDDEN_BY_MEGALINTER# v7
   |         ---------------------------------------------------------------   ^^ points to commit 3d3c42e5aac5
   |         |
   |         is pointed to by tag v7.0.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/test.yml:41:77
   |
41 |         uses: actions/setup-node@HIDDEN_BY_MEGALINTER# v6
   |         -----------------------------------------------------------------   ^^ points to commit 249970729cb0
   |         |
   |         is pointed to by tag v6.4.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/test.yml:45:77
   |
45 |         uses: actions/setup-java@HIDDEN_BY_MEGALINTER# v5
   |         -----------------------------------------------------------------   ^^ points to commit 03ad4de0992f
   |         |
   |         is pointed to by tag v5.4.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/test.yml:69:75
   |
69 |         uses: actions/checkout@HIDDEN_BY_MEGALINTER# v7
   |         ---------------------------------------------------------------   ^^ points to commit 3d3c42e5aac5
   |         |
   |         is pointed to by tag v7.0.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

23 findings (3 ignored, 10 suppressed, 10 unsafe fixes): 0 informational, 0 low, 10 medium, 0 high

(Truncated to last 5000 characters out of 5744)

⚠️ ACTION / actionlint - 2 errors

.github/workflows/github-dependents-info.yml:55:9: shellcheck reported issue in this script: SC2086:info:1:15: Double quote to prevent globbing and word splitting [shellcheck]
   |
55 |         run: sudo chown -R $USER:$USER .
   |         ^~~~
.github/workflows/github-dependents-info.yml:55:9: shellcheck reported issue in this script: SC2086:info:1:21: Double quote to prevent globbing and word splitting [shellcheck]
   |
55 |         run: sudo chown -R $USER:$USER .
   |         ^~~~

⚠️ SPELL / lychee - 4 errors

📝 Summary
---------------------
🔍 Total...........74
🔗 Unique..........62
✅ Successful......23
⏳ Timeouts.........0
🔀 Redirected.......6
👻 Excluded........47
❓ Unknown..........0
🚫 Errors...........4
⛔ Unsupported......4

Errors in README.md
[403] https://npmjs.org/package/java-caller (at 5:1) | Rejected status code: 403 Forbidden | Followed 1 redirect. Redirects: https://npmjs.org/package/java-caller --[301]--> https://www.npmjs.com/package/java-caller
[403] https://npmjs.org/package/java-caller (at 6:1) | Rejected status code: 403 Forbidden | Followed 1 redirect. Redirects: https://npmjs.org/package/java-caller --[301]--> https://www.npmjs.com/package/java-caller
[403] https://www.npmjs.com/package/java-caller (at 4:1) | Rejected status code: 403 Forbidden
[403] https://www.npmjs.com/package/njre (at 16:145) | Rejected status code: 403 Forbidden

Hint: Followed 6 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

⚠️ MARKDOWN / markdown-table-formatter - 1 error

1 files contain markdown tables to format:
- README.md

⚠️ MARKDOWN / markdownlint - 30 errors

.claude/agents/pr-fix.md:9:401 error MD013/line-length Line length [Expected: 400; Actual: 406]
.claude/agents/pr-fix.md:9 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "You are the smart fixer for **..."]
.claude/agents/pr-fix.md:11:401 error MD013/line-length Line length [Expected: 400; Actual: 458]
.claude/agents/pr-fix.md:19:401 error MD013/line-length Line length [Expected: 400; Actual: 511]
.claude/agents/pr-fix.md:27:401 error MD013/line-length Line length [Expected: 400; Actual: 712]
.claude/agents/pr-fix.md:44 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.claude/agents/pr-watch.md:9 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "You collect data about a GitHu..."]
.claude/agents/pr-watch.md:65:9 error MD038/no-space-in-code Spaces inside code span elements [Context: "`error  `"]
.claude/agents/pr-watch.md:77 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.claude/skills/pr-watch-fix/SKILL.md:9 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "Watch the open PR for the curr..."]
.claude/skills/pr-watch-fix/SKILL.md:52 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.claude/skills/pr-watch-fix/SKILL.md:81:401 error MD013/line-length Line length [Expected: 400; Actual: 448]
.claude/skills/pr-watch-fix/SKILL.md:105 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
CODE_OF_CONDUCT.md:58:44 error MD034/no-bare-urls Bare URL used [Context: "nicolas.vuillamy@gmail.com"]
CODE_OF_CONDUCT.md:71:14 error MD034/no-bare-urls Bare URL used [Context: "https://www.contributor-covena..."]
CODE_OF_CONDUCT.md:76:1 error MD034/no-bare-urls Bare URL used [Context: "https://www.contributor-covena..."]
README.md:66:13 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:27 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:37 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:47 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:1 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:13 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:27 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:37 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:67:361 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:69:123 error MD060/table-column-style Table column style [Table pipe has extra space to the left for style "compact"]
README.md:73:315 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:74:310 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:75:208 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:76:233 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]

⚠️ TYPESCRIPT / ts-standard - 1 error

Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,JAVASCRIPT_ES,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,TYPESCRIPT_ES,TYPESCRIPT_STANDARD,TYPESCRIPT_PRETTIER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

socket-security · 2026-07-10T22:51:26Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint@9.39.4 ⏵ 10.8.0	⁺¹

View full report

renovate Bot force-pushed the renovate/major-eslint-monorepo branch from 679be53 to c16a4d9 Compare February 12, 2026 15:06

renovate Bot force-pushed the renovate/major-eslint-monorepo branch 3 times, most recently from 91a105b to 4c82c7e Compare March 5, 2026 14:05

renovate Bot force-pushed the renovate/major-eslint-monorepo branch 2 times, most recently from d36f5a0 to c15760b Compare April 1, 2026 20:09

renovate Bot changed the title ~~chore(deps): update dependency eslint to v10~~ Update dependency eslint to v10 Apr 8, 2026

renovate Bot changed the title ~~Update dependency eslint to v10~~ Update eslint monorepo to v10 Jun 2, 2026

renovate Bot changed the title ~~Update eslint monorepo to v10~~ Update eslint monorepo (major) Jun 22, 2026

renovate Bot changed the title ~~Update eslint monorepo (major)~~ Update dependency eslint to v10 Jun 25, 2026

renovate Bot force-pushed the renovate/major-eslint-monorepo branch from c15760b to 4a75094 Compare July 10, 2026 22:51

Update dependency eslint to v10

97d1cd8

renovate Bot force-pushed the renovate/major-eslint-monorepo branch from 4a75094 to 97d1cd8 Compare July 25, 2026 23:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update dependency eslint to v10#150

Update dependency eslint to v10#150
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-eslint-monorepo

renovate Bot commented Feb 7, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Feb 7, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 10, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Feb 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Features

Documentation

Chores

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Configuration

Uh oh!

github-actions Bot commented Feb 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

Detailed Issues

Notices

Uh oh!

socket-security Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Feb 7, 2026 •

edited

Loading

github-actions Bot commented Feb 7, 2026 •

edited

Loading

socket-security Bot commented Jul 10, 2026 •

edited

Loading