fix(deps): update eslint (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@typescript-eslint/parser (source)	8.54.0 → 8.55.0
@typescript-eslint/types (source)	8.54.0 → 8.55.0
eslint (source)	>=9.38.0 → >=9.39.2
eslint-plugin-antfu	3.1.3 → 3.2.1
eslint-plugin-es-x	^9.3.0 → ^9.4.0
eslint-plugin-format	1.3.1 → 1.4.0
eslint-plugin-react-refresh	0.4.26 → 0.5.0
eslint-plugin-unused-imports	^4.3.0 → ^4.4.1
eslint-plugin-zod	3.0.2 → 3.1.0

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.55.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/types)

v8.55.0

Compare Source

This was a version bump only for types to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

eslint/eslint (eslint)

v9.39.2

Compare Source

v9.39.1

Compare Source

v9.39.0

Compare Source

antfu/eslint-plugin-antfu (eslint-plugin-antfu)

v3.2.1

Compare Source

   🐞 Bug Fixes

• consistent-list-newline: Correct end range for if statement  -  by @​hyoban in #​48 (b4911)

    View changes on GitHub

v3.2.0

Compare Source

   🚀 Features

• Support eslint v10  -  by @​antfu (efe08)
• consistent-list-newline: Support if statement  -  by @​hyoban in #​47 (884ac)

   🐞 Bug Fixes

• Eslint v10 compat  -  by @​antfu (189ff)

    View changes on GitHub

eslint-community/eslint-plugin-es-x (eslint-plugin-es-x)

v9.4.0

Compare Source

Minor Changes

• Add es-x/no-map-prototype-getorinsert rule (#​311)

• Add es-x/no-map-prototype-getorinsertcomputed rule (#​311)

• Add es-x/no-weakmap-prototype-getorinsert rule (#​311)

• Add es-x/no-weakmap-prototype-getorinsertcomputed rule (#​311)

• Add no-upsert config (#​311)

antfu/eslint-plugin-format (eslint-plugin-format)

v1.4.0

Compare Source

   🐞 Bug Fixes

• Prefer context.sourceCode.ast.type  -  by @​hyoban in #​16 (d31ed)

    View changes on GitHub

ArnaudBarre/eslint-plugin-react-refresh (eslint-plugin-react-refresh)

v0.5.0

Compare Source

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig(
  /* Main config */
  reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig({
  files: ["**/*.ts", "**/*.tsx"],
  plugins: {
    // other plugins
    "react-refresh": reactRefresh.plugin,
  },
  rules: {
    // other rules
    "react-refresh/only-export-components": [
      "warn",
      { extraHOCs: ["someLibHOC"] },
    ],
  },
});

Why

This version follows a revamp of the internal logic to better make the difference between random call expressions like export const Enum = Object.keys(Record) and actual React HOC calls like export const MemoComponent = memo(Component). (fixes #​93)

The rule now handles ternaries and patterns like export default customHOC(props)(Component) which makes it able to correctly support files like this one given this config:

{
  "react-refresh/only-export-components": [
    "warn",
    { "extraHOCs": ["createRootRouteWithContext"] }
  ]
}

[!NOTE]
Actually createRoute functions from TanStack Router are not React HOCs, they return route objects that fake to be a memoized component but are not. When only doing createRootRoute({ component: Foo }), HMR will work fine, but as soon as you add a prop to the options that is not a React component, HMR will not work. I would recommend to avoid adding any TanStack function to extraHOCs it you want to preserve good HMR in the long term. Bluesky thread.

Because I'm not 100% sure this new logic doesn't introduce any false positive, this is done in a major-like version. This also give me the occasion to remove the hardcoded connect from the rule. If you are using connect from react-redux, you should now add it to extraHOCs like this:

{
  "react-refresh/only-export-components": ["warn", { "extraHOCs": ["connect"] }]
}

sweepline/eslint-plugin-unused-imports (eslint-plugin-unused-imports)

v4.4.1

Compare Source

No significant changes

    View changes on GitHub

marcalexiei/eslint-plugin-zod (eslint-plugin-zod)

v3.1.0

Compare Source

Minor Changes

• #​201 6b1eece Thanks @​marcalexiei! - feat(prefer-namespace-import): deprecate rule in favour of zod/consistent-import

• #​179 51563cf Thanks @​marcalexiei! - feat(consistent-import): add new rule

---

Configuration

📅 Schedule: Branch creation - "after 1am and before 5am every weekend" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Thank you for following the naming conventions! 🙏

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​typescript-eslint/​parser@​8.55.0
	@​typescript-eslint/​types@​8.55.0
	eslint-plugin-antfu@​3.2.1
	eslint-plugin-es-x@​9.4.0
	eslint-plugin-format@​1.3.1 ⏵ 1.4.0

View full report