chore(deps): bump eslint from 9.39.4 to 10.4.0 in /extension/secureflow by dependabot[bot] · Pull Request #710 · shivasurya/code-pathfinder

dependabot · 2026-05-22T01:26:45Z

Bumps eslint from 9.39.4 to 10.4.0.

Release notes

v10.4.0

Features

1a45ec5 feat: check sequence expressions in for-direction (#20701) (kuldeep kumar)

450040b feat: add includeIgnoreFile() to eslint/config (#20735) (Kirk Waiblinger)

Bug Fixes

544c0c3 fix: escape code path DOT labels in debug output (#20866) (Pixel998)

6799431 fix: update dependency @eslint/config-helpers to ^0.6.0 (#20850) (renovate[bot])

f078fef fix: handle non-array deprecated rule replacements (#20825) (xbinaryx)

Documentation

7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869) (Pavel)

db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865) (Kirk Waiblinger)

9084664 docs: Update README (GitHub Actions Bot)

9cc7387 docs: Update README (GitHub Actions Bot)

3d7b548 docs: Update README (GitHub Actions Bot)

191ec3c docs: Update README (GitHub Actions Bot)

Chores

6616856 chore: upgrade knip to v6 (#20875) (Pixel998)

d13b084 ci: ensure auto-created PRs run CI (#20860) (lumir)

e71c7af ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862) (dependabot[bot])

d84393d test: add unit tests for SuppressionsService.applySuppressions() (#20863) (kuldeep kumar)

24db8cb test: add tests for SuppressionsService.save() (#20802) (kuldeep kumar)

2ef0549 chore: update ecosystem plugins (#20857) (github-actions[bot])

a429791 ci: remove eslint-webpack-plugin types integration test (#20668) (Milos Djermanovic)

9e37386 chore: replace recast with range approach in code-sample-minimizer (#20682) (Copilot)

0dd1f9f test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#20845) (Francesco Trotta)

9da3c7b refactor: remove deprecated meta.language and migrate meta.dialects (#20716) (Pixel998)

2099ed1 refactor: add meta.defaultOptions to more rules, enable linting (#20800) (xbinaryx)

f1dfbc9 chore: update ecosystem plugins (#20836) (github-actions[bot])

c759413 ci: bump pnpm/action-setup from 6.0.3 to 6.0.5 (#20843) (dependabot[bot])

5b817d6 test: add unit tests for lib/shared/ast-utils (#20838) (kuldeep kumar)

1c13ae3 test: add unit tests for lib/shared/severity (#20835) (kuldeep kumar)

v10.3.0

Features

379571a feat: add suggestions for no-unused-private-class-members (#20773) (sethamus)

Bug Fixes

b6ae5cf fix: handle unavailable require cache (#20812) (Simon Podlipsky)

6fb3685 fix: rule suggestions cause continuation in class body (#20787) (Milos Djermanovic)

Documentation

32cc7ab docs: fix typos in docs and comments (#20809) (Tanuj Kanti)

7f47937 docs: Update README (GitHub Actions Bot)

Chores

d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#20826) (Francesco Trotta)

3ffb14e chore: clean up typos in comments and JSDoc (#20821) (Pixel998)

... (truncated)

Commits

452c401 10.4.0
b6417e8 Build: changelog update for 10.4.0
6616856 chore: upgrade knip to v6 (#20875)
d13b084 ci: ensure auto-created PRs run CI (#20860)
7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869)
e71c7af ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862)
544c0c3 fix: escape code path DOT labels in debug output (#20866)
db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865)
d84393d test: add unit tests for SuppressionsService.applySuppressions() (#20863)
9084664 docs: Update README
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eslint](https://github.com/eslint/eslint) from 9.39.4 to 10.4.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.4.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

safedep · 2026-05-22T01:26:49Z

SafeDep Report Summary

Package Details

Package	Malware	Vulnerability	Risky License	Report
`@eslint/config-array @ 0.23.5` _{extension/secureflow/package-lock.json}				🔗
`@eslint/config-helpers @ 0.6.0` _{extension/secureflow/package-lock.json}				🔗
`@eslint/core @ 1.2.1` _{extension/secureflow/package-lock.json}				🔗
`@eslint/object-schema @ 3.0.5` _{extension/secureflow/package-lock.json}				🔗
`@eslint/plugin-kit @ 0.7.1` _{extension/secureflow/package-lock.json}				🔗
`@types/esrecurse @ 4.3.1` _{extension/secureflow/package-lock.json}				🔗
`ajv @ 6.15.0` _{extension/secureflow/package-lock.json}				🔗
`eslint @ 10.4.0` _{extension/secureflow/package-lock.json}				🔗
`eslint-scope @ 9.1.2` _{extension/secureflow/package-lock.json}				🔗
`eslint-visitor-keys @ 5.0.1` _{extension/secureflow/package-lock.json}				🔗
`espree @ 11.2.0` _{extension/secureflow/package-lock.json}				🔗
`esquery @ 1.7.0` _{extension/secureflow/package-lock.json}				🔗
`minimatch @ 10.2.4` _{extension/secureflow/package-lock.json}				🔗

View complete scan results →

_{This report is generated by SafeDep Github App}

CLAassistant · 2026-05-22T01:26:54Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

github-actions · 2026-05-22T01:28:00Z

Code Pathfinder Security Scan

No security issues detected.

Metric	Value
Files Scanned	2
Rules	205

_{Powered by Code Pathfinder}

code-pathfinder · 2026-05-22T01:34:27Z

Pathfinder Report

✅ No security findings on the changed files. This pull request is clean.

View report on the dashboard

Powered by Code Pathfinder.

shivasurya · 2026-05-22T02:08:49Z

Closing as part of switching Dependabot to security-only mode (see #713). Routine version-bump PRs are suppressed via open-pull-requests-limit: 0; security update PRs for actual advisories will continue to open automatically. Reopen if a specific bump here is needed urgently.

dependabot · 2026-05-22T02:08:52Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot Bot added the dependencies Pull requests that update a dependency file label May 22, 2026

shivasurya closed this May 22, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/extension/secureflow/eslint-10.4.0 branch May 22, 2026 02:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump eslint from 9.39.4 to 10.4.0 in /extension/secureflow#710

chore(deps): bump eslint from 9.39.4 to 10.4.0 in /extension/secureflow#710
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/extension/secureflow/eslint-10.4.0

dependabot Bot commented on behalf of github May 22, 2026

Uh oh!

safedep Bot commented May 22, 2026 •

edited

Loading

Uh oh!

CLAassistant commented May 22, 2026

Uh oh!

github-actions Bot commented May 22, 2026

Uh oh!

code-pathfinder Bot commented May 22, 2026

Uh oh!

shivasurya commented May 22, 2026

Uh oh!

dependabot Bot commented on behalf of github May 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github May 22, 2026

v10.4.0

Features

Bug Fixes

Documentation

Chores

v10.3.0

Features

Bug Fixes

Documentation

Chores

Uh oh!

safedep Bot commented May 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

SafeDep Report Summary

Uh oh!

CLAassistant commented May 22, 2026

Uh oh!

github-actions Bot commented May 22, 2026

Code Pathfinder Security Scan

Uh oh!

code-pathfinder Bot commented May 22, 2026

Pathfinder Report

Uh oh!

shivasurya commented May 22, 2026

Uh oh!

dependabot Bot commented on behalf of github May 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

safedep Bot commented May 22, 2026 •

edited

Loading