build(deps-dev): bump eslint to v9.39.5

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
eslint (source)	9.6.0 → 9.39.5

---

Release Notes

eslint/eslint (eslint)

v9.39.5

Compare Source

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #​20812 to v9.x) (#​21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#​20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#​20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

v9.39.4

Compare Source

Bug Fixes

• f18f6c8 fix: update dependency minimatch to ^3.1.5 (#​20564) (Milos Djermanovic)
• a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#​20554) (Milos Djermanovic)
• 234d005 fix: minimatch security vulnerability patch for v9.x (#​20549) (Andrej Beles)
• b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#​20538) (루밀LuMir)

Documentation

• 4675152 docs: add deprecation notice partial (#​20520) (Milos Djermanovic)

Chores

• b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#​20596) (Francesco Trotta)
• 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
• 1d16c2f ci: pin Node.js 25.6.1 (#​20563) (Milos Djermanovic)

v9.39.3

Compare Source

Bug Fixes

• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

• 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#​20529) (Milos Djermanovic)
• 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
• af498c6 chore: ignore /docs/v9.x in link checker (#​20453) (Milos Djermanovic)

v9.39.2

Compare Source

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#​20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#​20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#​20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#​20382) (Milos Djermanovic)

v9.39.1

Compare Source

Bug Fixes

• 650753e fix: Only pass node to JS lang visitor methods (#​20283) (Nicholas C. Zakas)

Documentation

• 51b51f4 docs: add a section on when to use extends vs cascading (#​20268) (Tanuj Kanti)
• b44d426 docs: Update README (GitHub Actions Bot)

Chores

• 92db329 chore: update @eslint/js version to 9.39.1 (#​20284) (Francesco Trotta)
• c7ebefc chore: package.json update for @​eslint/js release (Jenkins)
• 61778f6 chore: update eslint-config-eslint dependency @​eslint/js to ^9.39.0 (#​20275) (renovate[bot])
• d9ca2fc ci: Add rangeStrategy to eslint group in renovate config (#​20266) (唯然)
• 009e507 test: fix version tests for ESLint v10 (#​20274) (Milos Djermanovic)

v9.39.0

Compare Source

Features

• cc57d87 feat: update error loc to key in no-dupe-class-members (#​20259) (Tanuj Kanti)
• 126552f feat: update error location in for-direction and no-dupe-args (#​20258) (Tanuj Kanti)
• 167d097 feat: update complexity rule to highlight only static block header (#​20245) (jaymarvelz)

Bug Fixes

• 15f5c7c fix: forward traversal step.args to visitors (#​20253) (jaymarvelz)
• 5a1a534 fix: allow JSDoc comments in object-shorthand rule (#​20167) (Nitin Kumar)
• e86b813 fix: Use more types from @​eslint/core (#​20257) (Nicholas C. Zakas)
• 927272d fix: correct Scope typings (#​20198) (jaymarvelz)
• 37f76d9 fix: use AST.Program type for Program node (#​20244) (Francesco Trotta)
• ae07f0b fix: unify timing report for concurrent linting (#​20188) (jaymarvelz)
• b165d47 fix: correct Rule typings (#​20199) (jaymarvelz)
• fb97cda fix: improve error message for missing fix function in suggestions (#​20218) (jaymarvelz)

Documentation

• d3e81e3 docs: Always recommend to include a files property (#​20158) (Percy Ma)
• 0f0385f docs: use consistent naming recommendation (#​20250) (Alex M. Spieslechner)
• a3b1456 docs: Update README (GitHub Actions Bot)
• cf5f2dd docs: fix correct tag of no-useless-constructor (#​20255) (Tanuj Kanti)
• 10b995c docs: add TS options and examples for nofunc in no-use-before-define (#​20249) (Tanuj Kanti)
• 2584187 docs: remove repetitive word in comment (#​20242) (reddaisyy)
• 637216b docs: update CLI flags migration instructions (#​20238) (jaymarvelz)
• e7cda3b docs: Update README (GitHub Actions Bot)
• 7b9446f docs: handle empty flags sections on the feature flags page (#​20222) (sethamus)

Chores

• dfe3c1b chore: update @eslint/js version to 9.39.0 (#​20270) (Francesco Trotta)
• 2375a6d chore: package.json update for @​eslint/js release (Jenkins)
• a1f4e52 chore: update @eslint dependencies (#​20265) (Francesco Trotta)
• c7d3229 chore: update dependency @​eslint/core to ^0.17.0 (#​20256) (renovate[bot])
• 27549bc chore: update fuzz testing to not error if code sample minimizer fails (#​20252) (Milos Djermanovic)
• a1370ee ci: bump actions/setup-node from 5 to 6 (#​20230) (dependabot[bot])
• 9e7fad4 chore: add script to auto-generate eslint:recommended configuration (#​20208) (唯然)

v9.38.0

Compare Source

Features

• ce40f74 feat: update complexity rule to only highlight function header (#​20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#​20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#​20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode typings (#​20114) (Pixel998)

Documentation

• 462675a docs: improve web accessibility by hiding non-semantic character (#​20205) (루밀LuMir)
• c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#​20203) (루밀LuMir)
• b39e71a docs: Update README (GitHub Actions Bot)
• cd39983 docs: move custom-formatters type descriptions to nodejs-api (#​20190) (Percy Ma)

Chores

• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#​20221) (Milos Djermanovic)
• 25d0e33 chore: package.json update for @​eslint/js release (Jenkins)
• c82b5ef refactor: Use types from @​eslint/core (#​20168) (Nicholas C. Zakas)
• ff31609 ci: add Node.js 25 to ci.yml (#​20220) (루밀LuMir)
• 004577e ci: bump github/codeql-action from 3 to 4 (#​20211) (dependabot[bot])
• eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#​20206) (Milos Djermanovic)
• 4168a18 chore: fix typo in legacy-eslint.js (#​20202) (Sweta Tanwar)
• 205dbd2 chore: fix typos (#​20200) (ntnyq)
• dbb200e chore: use team member's username when name is not available in data (#​20194) (Milos Djermanovic)
• 8962089 chore: mark deprecated rules as available until v11.0.0 (#​20184) (Pixel998)

v9.37.0

Compare Source

Features

• 39f7fb4 feat: preserve-caught-error should recognize all static "cause" keys (#​20163) (Pixel998)
• f81eabc feat: support TS syntax in no-restricted-imports (#​19562) (Nitin Kumar)

Bug Fixes

• a129cce fix: correct no-loss-of-precision false positives for leading zeros (#​20164) (Francesco Trotta)
• 09e04fc fix: add missing AST token types (#​20172) (Pixel998)
• 861c6da fix: correct ESLint typings (#​20122) (Pixel998)

Documentation

• b950359 docs: fix typos across the docs (#​20182) (루밀LuMir)
• 42498a2 docs: improve ToC accessibility by hiding non-semantic character (#​20181) (Percy Ma)
• 29ea092 docs: Update README (GitHub Actions Bot)
• 5c97a04 docs: show availableUntil in deprecated rule banner (#​20170) (Pixel998)
• 90a71bf docs: update README files to add badge and instructions (#​20115) (루밀LuMir)
• 1603ae1 docs: update references from master to main (#​20153) (루밀LuMir)

Chores

• afe8a13 chore: update @eslint/js dependency to version 9.37.0 (#​20183) (Francesco Trotta)
• abee4ca chore: package.json update for @​eslint/js release (Jenkins)
• fc9381f chore: fix typos in comments (#​20175) (overlookmotel)
• e1574a2 chore: unpin jiti (#​20173) (renovate[bot])
• e1ac05e refactor: mark ESLint.findConfigFile() as async, add missing docs (#​20157) (Pixel998)
• 347906d chore: update eslint (#​20149) (renovate[bot])
• 0cb5897 test: remove tmp dir created for circular fixes in multithread mode test (#​20146) (Milos Djermanovic)
• bb99566 ci: pin jiti to version 2.5.1 (#​20151) (Pixel998)
• 177f669 perf: improve worker count calculation for "auto" concurrency (#​20067) (Francesco Trotta)
• 448b57b chore: Mark deprecated formatting rules as available until v11.0.0 (#​20144) (Milos Djermanovic)

v9.36.0

Compare Source

Features

• 47afcf6 feat: correct preserve-caught-error edge cases (#​20109) (Francesco Trotta)

Bug Fixes

• 75b74d8 fix: add missing rule option types (#​20127) (ntnyq)
• 1c0d850 fix: update eslint-all.js to use Object.freeze for rules object (#​20116) (루밀LuMir)
• 7d61b7f fix: add missing scope types to Scope.type (#​20110) (Pixel998)
• 7a670c3 fix: correct rule option typings in rules.d.ts (#​20084) (Pixel998)

Documentation

• b73ab12 docs: update examples to use defineConfig (#​20131) (sethamus)
• 31d9392 docs: fix typos (#​20118) (Pixel998)
• c7f861b docs: Update README (GitHub Actions Bot)
• 6b0c08b docs: Update README (GitHub Actions Bot)
• 91f97c5 docs: Update README (GitHub Actions Bot)

Chores

• 12411e8 chore: upgrade @​eslint/js@​9.36.0 (#​20139) (Milos Djermanovic)
• 488cba6 chore: package.json update for @​eslint/js release (Jenkins)
• bac82a2 ci: simplify renovate configuration (#​19907) (唯然)
• c00bb37 ci: bump actions/labeler from 5 to 6 (#​20090) (dependabot[bot])
• fee751d refactor: use defaultOptions in rules (#​20121) (Pixel998)
• 1ace67d chore: update example to use defineConfig (#​20111) (루밀LuMir)
• 4821963 test: add missing loc information to error objects in rule tests (#​20112) (루밀LuMir)
• b42c42e chore: disallow use of deprecated type property in core rule tests (#​20094) (Milos Djermanovic)
• 7bb498d test: remove deprecated type property from core rule tests (#​20093) (Pixel998)
• e10cf2a ci: bump actions/setup-node from 4 to 5 (#​20089) (dependabot[bot])
• 5cb0ce4 refactor: use meta.defaultOptions in preserve-caught-error (#​20080) (Pixel998)
• f9f7cb5 chore: package.json update for eslint-config-eslint release (Jenkins)
• 81764b2 chore: update eslint peer dependency in eslint-config-eslint (#​20079) (Milos Djermanovic)

v9.35.0

Compare Source

Features

• 42761fa feat: implement suggestions for no-empty-function (#​20057) (jaymarvelz)
• 102f444 feat: implement suggestions for no-empty-static-block (#​20056) (jaymarvelz)
• e51ffff feat: add preserve-caught-error rule (#​19913) (Amnish Singh Arora)

Bug Fixes

• 10e7ae2 fix: update uncloneable options error message (#​20059) (soda-sorcery)
• bfa4601 fix: ignore empty switch statements with comments in no-empty rule (#​20045) (jaymarvelz)
• dfd11de fix: add before and after to test case types (#​20049) (Francesco Trotta)
• dabbe95 fix: correct types for no-restricted-imports rule (#​20034) (Milos Djermanovic)
• ea789c7 fix: no-loss-of-precision false positive with uppercase exponent (#​20032) (sethamus)

Documentation

• d265515 docs: improve phrasing - "if" → "even if" from getting-started section (#​20074) (jjangga0214)
• a355a0e docs: invert comparison logic for example in no-var doc page (#​20064) (OTonGitHub)
• 5082fc2 docs: Update README (GitHub Actions Bot)
• 99cfd7e docs: add missing "the" in rule deprecation docs (#​20050) (Josh Goldberg ✨)
• 6ad8973 docs: update --no-ignore and --ignore-pattern documentation (#​20036) (Francesco Trotta)
• 8033b19 docs: add documentation for --no-config-lookup (#​20033) (Francesco Trotta)

Chores

• da87f2f chore: upgrade @​eslint/js@​9.35.0 (#​20077) (Milos Djermanovic)
• af2a087 chore: package.json update for @​eslint/js release (Jenkins)
• 7055764 test: remove tests/lib/eslint/eslint.config.js (#​20065) (Milos Djermanovic)
• 84ffb96 chore: update @eslint-community/eslint-utils (#​20069) (Francesco Trotta)
• d5ef939 refactor: remove deprecated context.parserOptions usage across rules (#​20060) (sethamus)
• 1b3881d chore: remove redundant word (#​20058) (pxwanglu)

v9.34.0

Compare Source

Features

• 0bb777a feat: multithread linting (#​19794) (Francesco Trotta)
• 43a5f9e feat: add eslint-plugin-regexp to eslint-config-eslint base config (#​19951) (Pixel998)

Bug Fixes

• 9b89903 fix: default value of accessor-pairs option in rule.d.ts file (#​20024) (Tanuj Kanti)
• 6c07420 fix: fix spurious failure in neostandard integration test (#​20023) (Kirk Waiblinger)
• 676f4ac fix: allow scientific notation with trailing zeros matching exponent (#​20002) (Sweta Tanwar)

Documentation

• 0b4a590 docs: make rulesdir deprecation clearer (#​20018) (Domenico Gemoli)
• 327c672 docs: Update README (GitHub Actions Bot)
• bf26229 docs: Fix typo in core-concepts/index.md (#​20009) (Tobias Hernstig)
• 2309327 docs: fix typo in the "Configuring Rules" section (#​20001) (ghazi-git)
• 2b87e21 docs: [no-else-return] clarify sample code. (#​19991) (Yuki Takada (Yukinosuke Takada))
• c36570c docs: Update README (GitHub Actions Bot)

Chores

• f19ad94 chore: upgrade to @eslint/js@9.34.0 (#​20030) (Francesco Trotta)
• b48fa20 chore: package.json update for @​eslint/js release (Jenkins)
• 4bce8a2 chore: package.json update for eslint-config-eslint release (Jenkins)
• 0c9999c refactor: prefer default options in grouped-accessor-pairs (#​20028) (루밀LuMir)
• d503f19 ci: fix stale.yml (#​20010) (루밀LuMir)
• e2dc67d ci: centralize stale.yml (#​19994) (루밀LuMir)
• 7093cb8 ci: bump actions/checkout from 4 to 5 (#​20005) (dependabot[bot])

v9.33.0

Compare Source

Features

• e07820e feat: add global object access detection to no-restricted-globals (#​19939) (sethamus)
• 90b050e feat: support explicit resource management in one-var (#​19941) (Sweta Tanwar)

Bug Fixes

• 732433c fix: allow any type for meta.docs.recommended in custom rules (#​19995) (Francesco Trotta)
• e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#​19975) (諏訪原慶斗)

Documentation

• 34f0723 docs: playground button for TypeScript code example (#​19671) (Tanuj Kanti)
• dc942a4 docs: Update README (GitHub Actions Bot)
• 5a4b6f7 docs: Update no-multi-assign.md (#​19979) (Yuki Takada (Yukinosuke Takada))
• 247e156 docs: add missing let declarations in no-plusplus (#​19980) (Yuki Takada (Yukinosuke Takada))
• 0d17242 docs: Update README (GitHub Actions Bot)
• fa20b9d docs: Clarify when to open an issue for a PR (#​19974) (Nicholas C. Zakas)

Build Related

• 27fa865 build: use ESLint class to generate formatter examples (#​19972) (Milos Djermanovic)

Chores

• 4258046 chore: update dependency @​eslint/js to v9.33.0 (#​19998) (renovate[bot])
• ad28371 chore: package.json update for @​eslint/js release (Jenkins)
• 06a22f1 test: resolve flakiness in --mcp flag test (#​19993) (Pixel998)
• 54920ed test: switch to Linter.Config in ESLintRules type tests (#​19977) (Francesco Trotta)

v9.32.0

Compare Source

Features

• 1245000 feat: support explicit resource management in core rules (#​19828) (fnx)
• 0e957a7 feat: support typescript types in accessor rules (#​19882) (fnx)

Bug Fixes

• 960fd40 fix: Upgrade @​eslint/js (#​19971) (Nicholas C. Zakas)
• bbf23fa fix: Refactor reporting into FileReport (#​19877) (Nicholas C. Zakas)
• d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#​19965) (Milos Djermanovic)
• f46fc6c fix: report only global references in no-implied-eval (#​19932) (Nitin Kumar)
• 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#​19944) (ntnyq)
• 3173305 fix: update execScript message in no-implied-eval rule (#​19937) (TKDev7)

Documentation

• 86e7426 docs: Update README (GitHub Actions Bot)

Chores

• 50de1ce chore: package.json update for @​eslint/js release (Jenkins)
• 74f01a3 ci: unpin jiti to version ^2.5.1 (#​19970) (루밀LuMir)
• 2ab1381 ci: pin jiti to version 2.4.2 (#​19964) (Francesco Trotta)
• b7f7545 test: switch to flat config mode in SourceCode tests (#​19953) (Milos Djermanovic)
• f5a35e3 test: switch to flat config mode in eslint-fuzzer (#​19960) (Milos Djermanovic)
• e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#​19949) (Francesco Trotta)
• e855717 chore: switch performance tests to hyperfine (#​19919) (Francesco Trotta)
• 2f73a23 test: switch to flat config mode in ast-utils tests (#​19948) (Milos Djermanovic)
• c565a53 chore: exclude further_reading_links.json from Prettier formatting (#​19943) (Milos Djermanovic)

v9.31.0

Compare Source

Features

• 35cf44c feat: output full actual location in rule tester if different (#​19904) (ST-DDT)
• a6a6325 feat: support explicit resource management in no-loop-func (#​19895) (Milos Djermanovic)
• 4682cdc feat: support explicit resource management in no-undef-init (#​19894) (Milos Djermanovic)
• 5848216 feat: support explicit resource management in init-declarations (#​19893) (Milos Djermanovic)
• bb370b8 feat: support explicit resource management in no-const-assign (#​19892) (Milos Djermanovic)

Bug Fixes

• 07fac6c fix: retry on EMFILE when writing autofix results (#​19926) (TKDev7)
• 28cc7ab fix: Remove incorrect RuleContext types (#​19910) (Nicholas C. Zakas)

Documentation

• 664cb44 docs: Update README (GitHub Actions Bot)
• 40dbe2a docs: fix mismatch between globalIgnores() code and text (#​19914) (MaoShizhong)
• 5a0069d docs: Update README (GitHub Actions Bot)
• fef04b5 docs: Update working on issues info (#​19902) (Nicholas C. Zakas)

Chores

• 3ddd454 chore: upgrade to @eslint/js@9.31.0 (#​19935) (Francesco Trotta)
• d5054e5 chore: package.json update for @​eslint/js release (Jenkins)
• 0f4a378 chore: update eslint (#​19933) (renovate[bot])
• 76c2340 chore: bump mocha to v11 (#​19917) (루밀LuMir)

v9.30.1

Compare Source

Bug Fixes

• e91bb87 fix: allow separate default and named type imports (#​19899) (xbinaryx)

Documentation

• ab7c625 docs: Update README (GitHub Actions Bot)
• dae1e5b docs: update jsdoc's link (#​19896) (JamesVanWaza)

Chores

• b035f74 chore: upgrade to @eslint/js@9.30.1 (#​19906) (Francesco Trotta)
• b3dbc16 chore: package.json update for @​eslint/js release (Jenkins)

v9.30.0

Compare Source

Features

• 52a5fca feat: Support basePath property in config objects (#​19879) (Milos Djermanovic)
• 4ab4482 feat: add allowSeparateTypeImports option to no-duplicate-imports (#​19872) (sethamus)
• b8a7e7a feat: throw error when column is negative in getIndexFromLoc (#​19831) (루밀LuMir)

Bug Fixes

• 6a0f164 fix: handle null type loc in getIndexFromLoc method (#​19862) (루밀LuMir)
• 3fbcd70 fix: update error message for no-restricted-properties (#​19855) (Tanuj Kanti)
• 7ef4cf7 fix: remove unnecessary semicolon from fixes (#​19857) (Francesco Trotta)
• [7dabc38](https://redirect.github.com/eslint/eslint/commit/7dabc38a8406d470fb2389eec

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​eslint@​9.39.5

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report