chore(deps-dev): bump the npm-dev-tooling group in /ui with 7 updates by dependabot[bot] · Pull Request #190 · agentevals-dev/agentevals

dependabot · 2026-08-26T16:43:00Z

Bumps the npm-dev-tooling group in /ui with 7 updates:

Package	From	To
@eslint/js	`9.39.2`	`9.39.5`
@types/node	`24.10.13`	`24.13.3`
@vitejs/plugin-react	`5.1.4`	`5.2.0`
eslint-plugin-react-hooks	`7.0.1`	`7.1.1`
eslint-plugin-react-refresh	`0.4.26`	`0.5.4`
typescript-eslint	`8.56.0`	`8.67.0`
vite	`7.3.3`	`7.3.6`

Updates @eslint/js from 9.39.2 to 9.39.5

Release notes

Sourced from @eslint/js's releases.

v9.39.5

Bug Fixes

253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)

eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)

202117b chore: package.json update for @eslint/js release (Jenkins)

d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)

7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)

daf7791 chore: pin [email protected] (#20895) (Milos Djermanovic)

daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)

116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

v9.39.4

Bug Fixes

f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)

a3c868f fix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)

234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)

b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)

71b2f6b chore: package.json update for @eslint/js release (Jenkins)

1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)

v9.39.3

Bug Fixes

791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)

Chores

8594a43 chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)

9ceef92 chore: package.json update for @eslint/js release (Jenkins)

af498c6 chore: ignore /docs/v9.x in link checker (#20453) (Milos Djermanovic)

Commits

202117b chore: package.json update for @eslint/js release
71b2f6b chore: package.json update for @eslint/js release
9ceef92 chore: package.json update for @eslint/js release
See full diff in compare view

Updates @types/node from 24.10.13 to 24.13.3

Commits

See full diff in compare view

Updates @vitejs/plugin-react from 5.1.4 to 5.2.0

Release notes

Sourced from @vitejs/plugin-react's releases.

[email protected]

Add Vite 8 to peerDependencies range #1143

This plugin is compatible with Vite 8.

Changelog

Sourced from @vitejs/plugin-react's changelog.

5.2.0 (2026-03-12)

Add Vite 8 to peerDependencies range #1143

This plugin is compatible with Vite 8.

Commits

fda3a86 release: [email protected]
99ab1b6 feat(react): add Vite 8 to peer dependency (#1143)
See full diff in compare view

Updates eslint-plugin-react-hooks from 7.0.1 to 7.1.1

Release notes

Sourced from eslint-plugin-react-hooks's releases.

[email protected] (April 17, 2026)

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

Add deprecated no-op component-hook-factories rule for backwards compatibility. (@mofeiZ in #36307)

[email protected] (April 16, 2026)

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

Add ESLint v10 support. (@azat-io in #35720)

Skip compilation for non-React files to improve performance. (@josephsavona in #35589)

Fix exhaustive deps bug with Flow type casting. (@jorge-cab in #35691)

Fix useEffectEvent checks in component syntax. (@jbrown215 in #35041)

Improved set-state-in-effect validation with fewer false negatives. (@jorge-cab in #35134, @josephsavona in #35147, @jackpope in #35214, @chesnokov-tony in #35419, @jsleitor in #36107)

Improved ref validation for non-mutating functions and event handler props. (@josephsavona in #35893, @kolvian in #35062)

Compiler now reports all errors instead of stopping at the first. (@josephsavona in #35873–#35884)

Improved source locations and error display in compiler diagnostics. (@nathanmarks in #35348, @josephsavona in #34963)

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.1.1

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

Add deprecated no-op component-hook-factories rule for backwards compatibility. (@mofeiZ in #36307)

7.1.0

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

Add ESLint v10 support. (@azat-io in #35720)

Skip compilation for non-React files to improve performance. (@josephsavona in #35589)

Fix exhaustive deps bug with Flow type casting. (@jorge-cab in #35691)

Fix useEffectEvent checks in component syntax. (@jbrown215 in #35041)

Improved set-state-in-effect validation with fewer false negatives. (@jorge-cab in #35134, @josephsavona in #35147, @jackpope in #35214, @chesnokov-tony in #35419, @jsleitor in #36107)

Improved ref validation for non-mutating functions and event handler props. (@josephsavona in #35893, @kolvian in #35062)

Compiler now reports all errors instead of stopping at the first. (@josephsavona in #35873–#35884)

Improved source locations and error display in compiler diagnostics. (@nathanmarks in #35348, @josephsavona in #34963)

Commits

See full diff in compare view

Updates eslint-plugin-react-refresh from 0.4.26 to 0.5.4

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.4

Add instant to allowExportNames in Next config #112

v0.5.3

Fix check for non component class exported via export { } #110 (fixes #109)

v0.5.2

Support nested function calls for extraHOCs (actually fixes #104)

v0.5.1

Mark ESLint v10 as supported

Support false positives with TypeScript function overloading (fixes #105)

Support nested function calls for extraHOCs (fixes #104)

v0.5.0

Breaking changes

The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config

A new reactRefresh export is available and prefered over the default export. It's an object with two properties:

plugin: The plugin object with the rules

configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.

customHOCs option was renamed to extraHOCs

Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option (like connect or styled)

Config example:
import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);
Config example without config:
import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
// other rules
</tr></table>

... (truncated)

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.4

Add instant to allowExportNames in Next config #112

0.5.3

Fix check for non component class exported via export { } #110 (fixes #109)

0.5.2

Support nested function calls for extraHOCs (actually fixes #104)

0.5.1

Mark ESLint v10 as supported

Support false positives with TypeScript function overloading (fixes #105)

Support nested function calls for extraHOCs (fixes #104)

0.5.0

Breaking changes

The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config

A new reactRefresh export is available and prefered over the default export. It's an object with two properties:

plugin: The plugin object with the rules

configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.

customHOCs option was renamed to extraHOCs

Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:
import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);
Config example without config:
import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
</tr></table>

... (truncated)

Commits

e316617 [publish] Add instant to allowExportNames in Next config (#112)
00818e9 v0.5.3 [publish]
202fc4a Fix PascalCase class exported via export { Name } incorrectly treated as Re...
c0317bf Fix support for nested function calls for extraHOCs [publish]
42a1805 Explicit v10 support (fixes #106) [publish]
199793e Support nested function calls for extraHOCs (fixes #104)
26b3c15 Support false positives with TypeScript function overloading (fixes #105)
daa2efb Revamp logic to catch more cases [publish] (#97)
See full diff in compare view

Updates typescript-eslint from 8.56.0 to 8.67.0

Release notes

Sourced from typescript-eslint's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)

eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)

eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)

website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

Evyatar Daud @StyleShit

Kirk Waiblinger @kirkwaiblinger

Steffen Schroeder

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Claude Sonnet 5

Evyatar Daud @StyleShit

Josh Goldberg

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

❤️ Thank You

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

... (truncated)

Commits

20a261f chore(release): publish 8.67.0
c245fbb feat(typescript-eslint): export basic globs for using tseslint (#12105)
3b155bb chore: use typescript 7 for typechecking (#12601)
e51b11b chore(release): publish 8.66.0
63ba81b chore(release): publish 8.65.0
eaf4576 feat: add warning when TS 7 is detected (#12529)
0d06406 chore: add attw validation to repo (#12437)
c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
414d9ab chore(release): publish 8.64.0
290cf6c chore(release): publish 8.63.0
Additional commits viewable in compare view

Updates vite from 7.3.3 to 7.3.6

Release notes

Sourced from vite's releases.

v7.3.6

Please refer to CHANGELOG.md for details.

v7.3.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.6 (2026-06-25)

Features

allow esbuild 0.28 (#22743) (a24931e)

7.3.5 (2026-06-01)

Bug Fixes

backport #22572, reject windows alternate paths (#22574) (8c18556)

deps: backport #22571, reject UNC paths for launch-editor-middleware (#22573) (f20d64b)

Miscellaneous Chores

skip v7.3.4 release (8a6a0c9)

7.3.4 (2026-06-01)

Bug Fixes

backport #22572, reject windows alternate paths (#22574) (8c18556)

deps: backport #22571, reject UNC paths for launch-editor-middleware (#22573) (f20d64b)

Commits

0a7b53b release: v7.3.6
a24931e feat: allow esbuild 0.28 (#22743)
077945c release: v7.3.5
8a6a0c9 chore: skip v7.3.4 release
8c18556 fix: backport #22572, reject windows alternate paths (#22574)
f20d64b fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#2...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot · 2026-08-26T16:43:02Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-08-27T08:29:00Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added the UI label Aug 26, 2026

krisztianfekete closed this Aug 27, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/ui/npm-dev-tooling-11b1c18a07 branch August 27, 2026 08:29

krisztianfekete mentioned this pull request Aug 27, 2026

chore(ci): group dependabot updates and pin actions to SHAs #196

Merged

Navigation Menu

Repository navigation

chore(deps-dev): bump the npm-dev-tooling group in /ui with 7 updates - #190

chore(deps-dev): bump the npm-dev-tooling group in /ui with 7 updates#190
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ui/npm-dev-tooling-11b1c18a07

dependabot Bot commented on behalf of github Aug 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 26, 2026

v9.39.5

Bug Fixes

Documentation

Chores

v9.39.4

Bug Fixes

Documentation

Chores

v9.39.3

Bug Fixes

Chores

[email protected]

Add Vite 8 to peerDependencies range #1143

5.2.0 (2026-03-12)

Add Vite 8 to peerDependencies range #1143

[email protected] (April 17, 2026)

[email protected] (April 16, 2026)

7.1.1

7.1.0

v0.5.4

v0.5.3

v0.5.2

v0.5.1

v0.5.0

Breaking changes

0.5.4

0.5.3

0.5.2

0.5.1

0.5.0

Breaking changes

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

8.66.0 (2026-08-03)

8.65.0 (2026-07-20)

🚀 Features

❤️ Thank You

8.64.0 (2026-07-13)

8.63.0 (2026-07-06)

v7.3.6

v7.3.5

7.3.6 (2026-06-25)

Features

7.3.5 (2026-06-01)

Bug Fixes

Miscellaneous Chores

7.3.4 (2026-06-01)

Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Aug 26, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Aug 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant