chore(deps-dev): bump eslint-plugin-unicorn from 56.0.1 to 61.0.0 by dependabot[bot] · Pull Request #620 · react-component/cascader

dependabot · 2025-09-05T21:02:29Z

Bumps eslint-plugin-unicorn from 56.0.1 to 61.0.0.

Release notes

Sourced from eslint-plugin-unicorn's releases.

v61.0.0

New rules

prefer-bigint-literals (#2722) 1f4cb8a2

prefer-classlist-toggle (#2731) 5f27ec2a

require-module-attributes (#2725) 5f275e25

no-array-sort (#2713) b70d1e8e

Improvements

Add unopinionated config (#2715) c13d09b8

Improve compatibility with optional chaining (#2727) 60b2ec5e

no-array-reduce: Report optional chaining and calling of .reduce() (#2721) caa1f8b8

prefer-type-error: Ignore error type check (#2729) d12fc01c

Fixes

prefer-includes: Fix compatibility with Vue SFC (#2704) 540a4d4b

sindresorhus/eslint-plugin-unicorn@v60.0.0...v61.0.0

v60.0.0

Breaking

Require Node.js 20.10 (#2698) 2dc27d90

New rules

prefer-class-fields (#2512) 4c82dc12

no-array-reverse (#2677) b051302f

require-module-specifiers (#2686) 2a8e152e

no-useless-error-capture-stack-trace (#2676) fc900b61

Improvements

prefer-string-replace-all: Preserve escape (#2667) 2310b507

Support SuppressedError (#2669) f51aeb9a

Fixes

no-array-callback-reference: Fix optional chaining expressions being ignored (#2694) ad27922e

no-unnecessary-await: Fix handling of experimental pipeline operator (#2658) 2b8ebe57

sindresorhus/eslint-plugin-unicorn@v59.0.1...v60.0.0

v59.0.1

... (truncated)

Commits

5774925 61.0.0
c13d09b Add unopinionated config (#2715)
60b2ec5 Improve compatibility with optional chaining (#2727)
5f27ec2 Add prefer-classlist-toggle rule (#2731)
5f275e2 Add require-module-attributes rule (#2725)
d12fc01 prefer-type-error: Ignore error type check (#2729)
caa1f8b no-array-reduce: Report optional chaining and calling of .reduce() (#2721)
494dfda Remove useless ecmaVersion in tests (#2724)
1f4cb8a Add prefer-bigint-literals rule (#2722)
d96dfb7 Rename isNumberLiteral to isNumericLiteral (#2723)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) from 56.0.1 to 61.0.0. - [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases) - [Commits](sindresorhus/eslint-plugin-unicorn@v56.0.1...v61.0.0) --- updated-dependencies: - dependency-name: eslint-plugin-unicorn dependency-version: 61.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2025-09-05T21:02:32Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
cascader	Error			Sep 5, 2025 9:05pm

coderabbitai · 2025-09-05T21:02:40Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

socket-security · 2025-09-05T21:03:04Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance	License
rc-test@7.1.2
less@4.1.3 ⏵ 4.4.1	⁺¹	⁺¹
glob@10.4.5 ⏵ 7.2.3				^-30
enzyme-to-json@3.6.2
father@4.6.3
gh-pages@6.3.0
react@19.1.1
rc-field-form@1.44.0
eslint-plugin-unicorn@61.0.0
typescript@5.9.2
prettier@3.6.2
eslint-plugin-jest@27.2.3 ⏵ 28.14.0	⁺¹	⁺¹	⁺¹
react-dom@18.3.1 ⏵ 19.1.1	⁺¹	⁺¹
eslint@8.57.1

View full report

socket-security · 2025-09-05T21:03:06Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		`safer-buffer@2.1.2` has Obfuscated code. Confidence: 0.94 Location: Package overview From: `?` → `npm/@rc-component/np@1.0.4` → `npm/safer-buffer@2.1.2` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/safer-buffer@2.1.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2025-09-08T21:12:19Z

Superseded by #621.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 5, 2025

dependabot bot mentioned this pull request Sep 5, 2025

chore(deps-dev): bump eslint-plugin-unicorn from 56.0.1 to 60.0.0 #611

Closed

vercel bot had a problem deploying to Preview September 5, 2025 21:05 Failure

dependabot bot closed this Sep 8, 2025

dependabot bot deleted the dependabot/npm_and_yarn/eslint-plugin-unicorn-61.0.0 branch September 8, 2025 21:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump eslint-plugin-unicorn from 56.0.1 to 61.0.0#620

chore(deps-dev): bump eslint-plugin-unicorn from 56.0.1 to 61.0.0#620
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/eslint-plugin-unicorn-61.0.0

dependabot bot commented on behalf of github Sep 5, 2025

Uh oh!

vercel bot commented Sep 5, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Sep 5, 2025

Review skipped

Uh oh!

socket-security bot commented Sep 5, 2025

Uh oh!

socket-security bot commented Sep 5, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 5, 2025

v61.0.0

New rules

Improvements

Fixes

v60.0.0

Breaking

New rules

Improvements

Fixes

v59.0.1

Uh oh!

vercel bot commented Sep 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai bot commented Sep 5, 2025

Review skipped

Uh oh!

socket-security bot commented Sep 5, 2025

Uh oh!

socket-security bot commented Sep 5, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

vercel bot commented Sep 5, 2025 •

edited

Loading