fix(deps): update all minor updates by renovate[bot] · Pull Request #98 · tinywaves/eslint-config

renovate · 2026-07-08T16:19:59Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint-react/eslint-plugin (source)	`^5.11.3` → `^5.17.2`
@eslint/config-inspector	`^3.0.4` → `^3.1.0`
@typescript-eslint/types (source)	`^8.63.0` → `^8.64.0`
eslint (source)	`^10.5.0` → `^10.7.0`
eslint (source)	`^10.6.0` → `^10.7.0`
eslint-plugin-better-tailwindcss	`^4.6.1` → `^4.7.0`
eslint-plugin-package-json	`^1.5.0` → `^1.6.0`
lint-staged	`^17.0.8` → `^17.1.0`
pnpm (source)	`11.10.0` → `11.15.1`
pnpm (source)	`11.10.0` → `11.15.1`
typescript-eslint (source)	`^8.63.0` → `^8.64.0`

Release Notes

Rel1cx/eslint-react (@eslint-react/eslint-plugin)

`v5.17.2`

Compare Source

📝 Documentation

@eslint-react/kit: added a README with quick start and API overview.

🏗️ Internal

@eslint-react/core: migrated JsxDetectionHint and related JSX detection helpers from @eslint-react/jsx. (#1913)
@eslint-react/jsx: consolidated helpers into focused attribute, children, element, and text modules. (#1914)
@eslint-react/var: renamed computeObjectType to resolveObjectType.
@local/testkit: extracted shared test helpers into a new local package. (#1915)
Bumped tsdown to 0.22.9, eslint-plugin-jsdoc to 63.0.14, and pnpm to 11.13.1.

Full Changelog: Rel1cx/eslint-react@v5.17.1...v5.17.2

`v5.17.1`

Compare Source

🏗️ Internal

react-jsx/no-key-after-spread: reworked the attribute scan to a pipeline style using dropWhile and not from @local/eff, Check.is from @eslint-react/ast, and the new isAttribute helper from @eslint-react/jsx. (#1912)
@eslint-react/jsx: added isAttribute for matching JSX attributes by name.
@local/eff: added dropWhile and takeWhile.
Bumped tsdown to 0.22.8, tsl-dx to 0.13.3, import-integrity-lint to 1.1.4, fumadocs to 16.11.5, and fumadocs-mdx to 15.2.0.

Full Changelog: Rel1cx/eslint-react@v5.17.0...v5.17.1

`v5.17.0`

Compare Source

🐞 Fixes

react-jsx/no-leaked-dollar: the intentional-$ exemption (e.g. <div>${price}</div>) is no longer defeated by surrounding whitespace or empty siblings — a lone $ before a single expression is now allowed whenever all other siblings are non-substantive. (#1911)
react-jsx/no-leaked-semicolon: consecutive leaked semicolons (e.g. ;;) at the start of a JSX text node are now detected. (#1911)

📝 Documentation

react-x/no-unnecessary-use-prefix: reorganized the rule examples.

🏗️ Internal

react-jsx: extracted the shared find-create-element-children-prop and remove-jsx-attribute rule helpers, removed dead Literal visitors from no-comment-textnodes and no-leaked-semicolon, simplified the no-key-after-spread attribute scan, and hoisted no-useless-fragment detection and fix helpers to module level. (#1911)
@local/eff: synced the Function module with effect and added missing @category tags.
Unified JSDoc comment style across packages.

Full Changelog: Rel1cx/eslint-react@v5.16.1...v5.17.0

`v5.16.1`

Compare Source

🐞 Fixes

react-jsx/no-children-prop: React.createElement calls whose props argument is wrapped in a TypeScript type assertion (e.g. { children: "x" } as Props) are now reported; computed property keys written as template literals (e.g. { [children]: "x" }) are now recognized as the children prop; fixed a false positive where a computed identifier key in a createElement props object (e.g. { [propName]: "Children" }) was treated as the static children prop; the suggestion fix now escapes JSX-sensitive characters (<, >, {, }, &) when moving a string children prop value into element content. (#1910)
react-jsx/no-children-prop-with-children: same createElement edge-case fixes as no-children-prop. (#1910)
react-jsx/no-useless-fragment: allowExpressions: false now only flags fragments with a single expression child, matching the option's documented behavior, instead of flagging any fragment inside a JSX element; fragments with spread attributes (e.g. <Fragment {...props}>) are no longer auto-fixed; the auto-fixer now removes leading indentation when collapsing whitespace-only fragments. (#1910)
react-jsx/no-leaked-dollar: $ character references (&#36;, $) are no longer treated as leaked dollar signs; only a literal $ in the source is reported. (#1910)
react-jsx/no-leaked-semicolon: leaked semicolons followed by spaces or tabs before a newline, including CRLF line endings, are now detected. (#1910)
react-x/immutability: added useHistory to known navigation hooks, so navigation methods such as .push() are not treated as in-place mutations inside frozen callbacks.

🏗️ Internal

@eslint-react/ast: added Extract.getStaticPropertyName for resolving static property names from object properties. (#1910)

Full Changelog: Rel1cx/eslint-react@v5.16.0...v5.16.1

`v5.16.0`

Compare Source

✨ New

@eslint-react/core: added support for hook calls written as tagged template literals. (#1909)

const x = useMotionValue(100);
const transform = useMotionTemplate`transform(${x}px)`;
//                ^^^ tagged template literal hook call

@eslint-react/jsx: findAttribute now resolves nested spread identifiers and nested object expression spreads. (#1908)

🏗️ Internal

Added tests and per-rule changelogs for tagged template literal hook calls. (#1909)

Full Changelog: Rel1cx/eslint-react@v5.15.0...v5.16.0

`v5.15.0`

Compare Source

📝 Documentation

Added a FAQ entry on improving analyzer accuracy to the website. (#1907)
Fixed inconsistencies and omissions in internal documentation.

🏗️ Internal

Bumped typescript-eslint to 8.64.0, nx to 23.1.0, eslint-plugin-package-json to 1.6.0, and pnpm to 11.13.0.
Enabled strictBooleanExpressions in TSL and synchronized sample rule configurations. (#1907)
Removed the website-specific changelog file.
Switched CI workflows to use pnpm/action-setup instead of installing pnpm globally via npm.

Full Changelog: Rel1cx/eslint-react@v5.14.10...v5.15.0

`v5.14.10`

Compare Source

🐞 Fixes

@eslint-react/ast: Extract.getCalleeName now returns null for computed member expressions (e.g. obj[foo](), obj["foo"](), obj[foo]()) instead of the property name, so callers don't treat dynamically chosen methods as static method names. (#1906)

🏗️ Internal

Added unit tests for Extract.getCalleeName.

Full Changelog: Rel1cx/eslint-react@v5.14.9...v5.14.10

`v5.14.9`

Compare Source

🐞 Fixes

@eslint-react/ast: removed Extract.getPropertyName and added Extract.getCalleeName for simpler callee name resolution. (#1905)
Rules that match calls by method name no longer treat computed string-literal property access as a static match (e.g. obj["foo"]() is no longer resolved to "foo"). This avoids relying on the runtime value of computed keys and aligns callee matching across the codebase. Affected rules:
- react-dom/no-dangerously-set-innerhtml
- react-dom/no-find-dom-node
- react-dom/no-flush-sync
- react-web-api/no-leaked-event-listener
- react-web-api/no-leaked-fetch
- react-x/globals
- react-x/immutability
core.isJsxLike: no longer treats React['createElement'] calls as JSX-like, since the callee is accessed through a computed member expression.

🏗️ Internal

Simplified callee name checks across core, react-dom, react-web-api, and react-x rules using Extract.getCalleeName.
Bumped @effect/platform, effect, fumadocs-core, fumadocs-mdx, fumadocs-ui, postcss, pnpm, and tsdown.

Full Changelog: Rel1cx/eslint-react@v5.14.8...v5.14.9

`v5.14.8`

Compare Source

📝 Documentation

react-x: refreshed the React Compiler diff reports. (#1903)

🏗️ Internal

react-x: moved the purity and refs resolvers into lib.ts. (#1902)
Bumped tsdown, postcss, and fumadocs.

Full Changelog: Rel1cx/eslint-react@v5.14.7...v5.14.8

`v5.14.7`

Compare Source

🐞 Fixes

react-x/immutability: ignore navigation hook methods (e.g. useNavigate, useNavigation) as mutations. (#1901)

🏗️ Internal

Refreshed pnpm lockfile.

Full Changelog: Rel1cx/eslint-react@v5.14.6...v5.14.7

`v5.14.6`

Compare Source

🐞 Fixes

react-x/immutability: ignore useRouter() navigation methods (e.g. .push()) as mutations when they appear inside frozen callbacks; aliases created through variable declarators are also recognized. (#1898)

🏗️ Internal

Added Check.isExpression to @eslint-react/ast along with unit tests.
Bumped eslint, nx, dompurify, and pnpm.
Restored standalone quality workflows.
Simplified react-x/immutability analysis helpers by sharing initializer provenance checks for useRef() and useRouter() and using AST parent traversal for function-boundary detection.
Started running CI tests on Node.js 26.

Full Changelog: Rel1cx/eslint-react@v5.14.5...v5.14.6

`v5.14.5`

Compare Source

📝 Documentation

Temporarily disabled the Bluesky embed on the community page to avoid API rate limits.

🏗️ Internal

Consolidated the check:configs and check:docs scripts into a single check:rules script.

Full Changelog: Rel1cx/eslint-react@v5.14.4...v5.14.5

`v5.14.2`

Compare Source

🐞 Fixes

react-x/globals: added detection for global writes through destructuring assignments and property deletion with delete. (#1896)
react-x/globals: propagated render-time global mutation effects through directly called helpers and stable local aliases. (#1896)

🏗️ Internal

Expanded behavior-boundary coverage for react-debug component and source detection, react-naming-convention naming rules, and react-x/immutability React Compiler fixtures.
Strengthened documentation verification and added formatting, configuration, architecture, MDX, website type, and production build checks to CI.
Gated publishing on the check, test, and workflow security jobs, including for application, example, and configuration changes.

Full Changelog: Rel1cx/eslint-react@v5.14.1...v5.14.2

`v5.14.1`

Compare Source

🐞 Fixes

@eslint-react/ast: Extract.getCalleeName now returns null for computed member expressions (e.g. obj[foo](), obj["foo"](), obj[foo]()) instead of the property name, so callers don't treat dynamically chosen methods as static method names. (#1906)

🏗️ Internal

Added unit tests for Extract.getCalleeName.

Full Changelog: Rel1cx/eslint-react@v5.14.9...v5.14.10

`v5.14.0`

Compare Source

✨ New

react-x/refs: added render-reachability support for function declarations, IIFEs, synchronous array callbacks, and render-time callbacks passed to useMemo and useReducer. (#1895)
react-x/refs: added lazy-initialization support for explicit undefined guards and for null guards enclosing additional nested conditions. (#1895)

🐞 Fixes

react-x/refs: reworked render-time call analysis as an unbounded fixed-point propagation, removing the previous 50-iteration cap. (#1895)
react-x/refs: tightened inverted lazy-initialization handling so the non-null branch must unconditionally return or throw. (#1895)
react-x/refs: stopped treating !ref.current as a null guard because initialized refs may contain falsy values. (#1895)

🏗️ Internal

react-x/refs: refactored ref aliases, function bindings, JSX refs, and duplicate initialization tracking to use scoped ESLint variable identities and position-aware binding events instead of file-wide identifier names. (#1895)
Added behavior-boundary tests for react-x/immutability and documented them in the spec diff report.
Updated build scripts.
Bumped @effect/language-service to ^0.86.5.
Bumped preact to ^10.29.7.
Bumped vite to ^8.1.4 in example apps.
Bumped dprint JSON plugin to ^0.23.0.

Full Changelog: Rel1cx/eslint-react@v5.13.2...v5.14.0

`v5.13.2`

Compare Source

🐞 Fixes

react-x/immutability: fixed false positive on ref.current write inside useEffect. (#1894)

🏗️ Internal

Bumped @types/node to ^26.1.1.
Bumped preact to ^10.29.6.
Bumped tsdown to ^0.22.4.

Full Changelog: Rel1cx/eslint-react@v5.13.1...v5.13.2

`v5.13.1`

Compare Source

🐞 Fixes

react-x/refs: aligned error message wording for readDuringRender, writeDuringRender, and refPassedToFunction with the React Compiler specification.

Full Changelog: Rel1cx/eslint-react@v5.13.0...v5.13.1

`v5.13.0`

Compare Source

✨ New

react-x/refs now detects nested property writes on a ref's value (e.g. ref.current.inner = value), which are now reported as writeDuringRender instead of being misclassified as a read.
react-x/refs now tracks functions bound to (and called through) simple object-member-expression targets (e.g. object.foo = () => ref.current; object.foo();), closing a gap in the render-reachability analysis that previously only covered plain variable bindings.
react-x/refs now detects ref.current accesses inside the lazy initializer function passed directly as useState's first argument, since it runs synchronously during the initial render unlike other hook-callback arguments.
react-x/refs now exempts calls to a function named render (e.g. props.render(ref), a common render-prop pattern) from the refPassedToFunction diagnostic, alongside the existing mergeRefs/hook exemptions.

🐞 Fixes

Improved react-x/refs lazy-init guard-block detection so it is direction-aware: inside the branch of an if (ref.current == null)-style guard that is guaranteed to see ref.current as null, only a direct write is treated as the (single) valid initialization; reads or values passed to a function there are still reported.

🏗️ Internal

Refactored react-x/refs internals, replacing isRefCurrentNullCheck with getRefCurrentNullCheckBranch in lib.ts.
Upgraded fumadocs packages and preact.
Cleaned up redundant code in the react-debug/jsx rule.

Full Changelog: Rel1cx/eslint-react@v5.12.2...v5.13.0

eslint/config-inspector (@eslint/config-inspector)

`v3.1.0`

Compare Source

Features

add Storybook with component stories and CI tests (#292) (5d9488a)
migrate devframe to v0.6.0 (#298) (6efcd30)

typescript-eslint/typescript-eslint (@typescript-eslint/types)

`v8.64.0`

Compare Source

This was a version bump only for types to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

eslint/eslint (eslint)

`v10.7.0`

Compare Source

Features

cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

c30d808 docs: Update README (GitHub Actions Bot)
5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
04174cb docs: Update README (GitHub Actions Bot)
026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
9d42fef docs: Update README (GitHub Actions Bot)
b230159 docs: Update README (GitHub Actions Bot)
0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

9489379 chore: update dependency @eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
81a4774 chore: updates for v9.39.5 release (Jenkins)
9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
993539f chore: update dependency @eslint/json to ^2.0.1 (#21042) (renovate[bot])
53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

`v10.6.0`

Compare Source

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)
f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)
8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)
5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)
9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)
d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)
2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)
63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)
7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)
399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)
f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)
bea49f7 docs: Update README (GitHub Actions Bot)
e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)
8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)
3eb3d9b docs: Update README (GitHub Actions Bot)
c5bb59c docs: Update README (GitHub Actions Bot)
eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])
c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)
a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)
27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)
865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])
27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)
970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)
b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])
6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

schoero/eslint-plugin-better-tailwindcss (eslint-plugin-better-tailwindcss)

`v4.7.0`

Compare Source

compare changes

Features

No concatenated classes (#389)
enforce-consistent-line-wrapping: Add vueConvertToBinding option (#388)

Fixes

Strict sorting order should be based on official sorting order (#391)

Documentation

Add AGENTS.md (1fdd988)

❤️ Contributors

Peter Chuang (@peterchuang1111101)

michaelfaith/eslint-plugin-package-json (eslint-plugin-package-json)

`v1.6.0`

Compare Source

🚀 Features

deprecate recommended-publishable config (#2001) (a67a8de)

🩹 Bug Fixes

start bundling entry points (#2008) (e9766b1)

lint-staged/lint-staged (lint-staged)

`v17.1.0`

Compare Source

Minor Changes

#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:

✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...

After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:

⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write

✔ oxfmt --write
✔ oxlint --fix

✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!

Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.
#1818 efb23a2 - Console output colors are enabled/disabled more consistently.
#1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

pnpm/pnpm (pnpm)

`v11.15.1`

Compare Source

`v11.15.0`: pnpm 11.15

Compare Source

Minor Changes

Optional peer dependencies declared only via peerDependenciesMeta (for example debug's supports-color peer) are now resolved from a satisfying version already present in the dependency graph, the same way explicitly declared optional peer dependencies are. Previously such peers were only resolved this way when the package's metadata was read back from the lockfile, so an unrelated dependency change could rewrite peer resolutions across the whole lockfile.

Patch Changes

Updated adm-zip to prevent crafted ZIP archives from causing excessive memory allocation.
pnpm version -r no longer writes a versioning-ledger entry with no consumed intents as a bare intents: key, which the next run failed to read with ERR_PNPM_INVALID_VERSIONING_LEDGER. Empty intent lists are now written as intents: [], and the ledger reader accepts the bare form left by earlier releases.
Fixed pnpr workspace resolution to preserve project names and versions for workspace: dependencies.

Platinum Sponsors

Gold Sponsors

`v11.14.0`: pnpm 11.14

Compare Source

Minor Changes

peerDependencies now accept dependency specifiers that carry a scheme — a named-registry spec (<registry>:<version>), an npm: alias, or a file:/git/URL spec — instead of rejecting them with ERR_PNPM_INVALID_PEER_DEPENDENCY_SPECIFICATION #13095. Such a peer is matched against the semver range carried by the specifier (work:5.x.x is checked as 5.x.x, npm:bar@^5 as ^5), or against * when it carries no version, while the original specifier still selects the package to auto-install. Bare name@version values, which are almost always a mistake, are still rejected.
Added pnpm doctor, which diagnoses the pnpm installation and the environment it runs in: the versions and install method, whether the global bin directory is on PATH, whether the store and cache are writable, which link strategies (reflink, hardlink, symlink) the store's filesystem supports, registry connectivity, and an offline file: install that exercises the resolve/store/link path end to end. Each check reports how to fix what it finds, and the command exits non-zero when any check fails.

Use --offline to skip the checks that need network access, --json for machine-readable output, and --benchmark to time the filesystem and install checks.
Added support for executing multiple scripts matching a RegExp passed to pnpm run (e.g., pnpm run "/^build:.*/"), running matched scripts in deterministic lexicographical order. Restored the --sequential (-s) CLI option for pnpm run, which forces workspaceConcurrency to 1 so that matched scripts run sequentially one by one across and within packages.

Patch Changes

Fixed pnpm install failing with ERR_PNPM_LOCKFILE_IS_SYMLINK when pnpm-lock.yaml is a symlink, as build sandboxes such as Bazel and Nix stage it #13073. Reading a lockfile through a symlink is allowed again, and an install that leaves the lockfile unchanged no longer rewrites it, so --frozen-lockfile no longer needs to write at all. Writing a changed lockfile through a symlink is still refused, as that would redirect the write onto the symlink's target.
Fixed frozen installs incorrectly treating equivalent Git dependency specifiers as a stale lockfile. See #13039.
pnpm owner ls now reports authentication and authorization failures (401/403) as dedicated errors that include the registry's response body, matching pnpm owner add/rm, instead of a generic Failed to fetch owners message.
Recover from a metadata cache entry that disappears (concurrent cache cleanup, antivirus) after the registry has already answered the conditional request with 304 Not Modified. The metadata is re-requested once without cache validators instead of failing the install with ERR_PNPM_CACHE_MISSING_AFTER_304.
A project pinned to a broken pnpm release via packageManager or devEngines.packageManager

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cloudflare-workers-and-pages · 2026-07-08T16:24:51Z

Deploying eslint-config with Cloudflare Pages

Latest commit:	`0b17870`
Status:	✅ Deploy successful!
Preview URL:	https://81565fbd.eslint-config-6oz.pages.dev
Branch Preview URL:	https://renovate-all-minor-updates.eslint-config-6oz.pages.dev

View logs

renovate Bot added the dependencies Pull requests that update a dependency file label Jul 8, 2026

renovate Bot changed the title ~~fix(deps): update all minor updates~~ chore(deps): update dependency eslint to ^10.6.0 Jul 8, 2026

renovate Bot force-pushed the renovate/all-minor-updates branch from 4083806 to d8f60df Compare July 8, 2026 16:23

renovate Bot force-pushed the renovate/all-minor-updates branch from d8f60df to 0fac6f3 Compare July 9, 2026 06:17

renovate Bot changed the title ~~chore(deps): update dependency eslint to ^10.6.0~~ fix(deps): update all minor updates Jul 9, 2026

renovate Bot force-pushed the renovate/all-minor-updates branch 17 times, most recently from d15ef48 to d62aaa6 Compare July 16, 2026 00:49

renovate Bot force-pushed the renovate/all-minor-updates branch 6 times, most recently from 219f952 to e9a880d Compare July 19, 2026 16:06

fix(deps): update all minor updates

0b17870

renovate Bot force-pushed the renovate/all-minor-updates branch from e9a880d to 0b17870 Compare July 20, 2026 02:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all minor updates#98

fix(deps): update all minor updates#98
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-updates

renovate Bot commented Jul 8, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

📝 Documentation

🏗️ Internal

🏗️ Internal

🐞 Fixes

📝 Documentation

🏗️ Internal

🐞 Fixes

🏗️ Internal

✨ New

🏗️ Internal

📝 Documentation

🏗️ Internal

🐞 Fixes

🏗️ Internal

🐞 Fixes

🏗️ Internal

📝 Documentation

🏗️ Internal

🐞 Fixes

🏗️ Internal

🐞 Fixes

🏗️ Internal

📝 Documentation

🏗️ Internal

🐞 Fixes

🏗️ Internal

🐞 Fixes

🏗️ Internal

✨ New

🐞 Fixes

🏗️ Internal

🐞 Fixes

🏗️ Internal

🐞 Fixes

✨ New

🐞 Fixes

🏗️ Internal

Features

Features

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Features

Fixes

Documentation

❤️ Contributors

🚀 Features

🩹 Bug Fixes

Minor Changes

Patch Changes

v11.15.0: pnpm 11.15

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

v11.14.0: pnpm 11.14

Minor Changes

Patch Changes

Configuration

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying eslint-config with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 8, 2026 •

edited

Loading

`v11.15.0`: pnpm 11.15

`v11.14.0`: pnpm 11.14

cloudflare-workers-and-pages Bot commented Jul 8, 2026 •

edited

Loading