[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
eslint (source)	10.13.0 → 10.14.0
knip (source)	6.42.0 → 6.44.1

---

Release Notes

eslint/eslint (eslint)

v10.14.0

Compare Source

Features

• d23a7f9 feat: fix property descriptor handling in func-name-matching (#​21400) (xbinaryx)

Bug Fixes

• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#​21460) (lumir)
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#​21449) (xbinaryx)
• 161558a fix: handle LS, PS and empty hashbang comments (#​21419) (lumir)
• 6194939 fix: no-invalid-this crash on accessor fields without initializer (#​21442) (xbinaryx)
• 9155e14 fix: Update @​humanfs/node dependency version (#​21434) (Nicholas C. Zakas)
• cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#​21323) (dvd233)
• 5ee3915 fix: yoda invalid autofix at statement start (#​21424) (Daniel Pinto)

Documentation

• 0f94f47 docs: remove zh-hans from docs language switcher (#​21437) (lumir)
• dab466e docs: Update README (GitHub Actions Bot)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#​21452) (Pixel)
• 7697550 docs: Update README (GitHub Actions Bot)
• 0c699d5 docs: Remove Tidelift commercial support (#​21416) (Milos Djermanovic)
• 0880666 docs: update loadESLint() documentation for v10 (#​21374) (Minseon Kim)
• e06fe87 docs: Revise AI acknowledgment options in PR template (#​21414) (Nicholas C. Zakas)

Chores

• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#​21462) (Francesco Trotta)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#​21450) (renovate[bot])
• a031c40 chore: update ecosystem plugins (#​21445) (ESLint Bot)
• 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#​21429) (Milos Djermanovic)
• 276021d chore: update github/codeql-action action to v4.39.0 (#​21432) (renovate[bot])
• 449724e chore: update ecosystem plugins (#​21420) (ESLint Bot)
• 8ffeb8c chore: update dependency prettier to v3.9.10 (#​21417) (renovate[bot])

webpro-nl/knip (knip)

v6.44.1: Release 6.44.1

Compare Source

• Narrow the docs package Node.js engine range to Astro's requirement (60589c4)
• Follow resolve.alias in the Rsbuild plugin (#​2251) (4dc61d2) - thanks @​fixfon!
• Read SWC plugins from tools.swc in the Rsbuild plugin (#​2253) (ad2227a) - thanks @​fixfon!
• Read .release-it.mjs and other c12 extensions in the Release It plugin (#​2258) (87816e6) - thanks @​SwastikTripathi!
• Read .mocharc.mjs in the Mocha plugin (#​2259) (16fee14) - thanks @​SwastikTripathi!
• Restart the language server on config changes after a failed start (#​2257) (f7db448) - thanks @​fixfon!
• Keep the command after boolean flags in the Bun resolver (resolve #​2262) (3c84caf)
• Read babel.config.mts in the Babel plugin (#​2267) (04abfd8) - thanks @​clean99!
• Track import().then() callback member usage (#​2264) (14565eb) - thanks @​gioboa!
• Reload the knip config file when the language server restarts (#​2261) (fa9ca71) - thanks @​fixfon!
• Read all supported CSpell configuration locations (#​2265) (c6c5b2c) - thanks @​clean99!
• Read SVGR configs from cosmiconfig search locations (#​2266) (47082a8) - thanks @​clean99!
• Handle extends arrays in the npm-package-json-lint plugin (#​2269) (83c8c80) - thanks @​clean99!
• Read Relay configuration from package.json (#​2270) (6ce8b00) - thanks @​clean99!
• Read dependencies from SWC config arrays (#​2271) (5ffe927) - thanks @​clean99!
• Recognize CJS and ESM data files in the Eleventy plugin (#​2272) (d939417) - thanks @​clean99!
• Unroll case iterations in the SolidJS Vite, Buf, Eve and Nx plugin tests (5f87aab)
• Hoist remark to the root for the VS Code remark extension (e777270)
• Format root Markdown and package READMEs with pnpm remark (58c7670)
• Write readable tests (393b348)
• Format Markdown with remark (10c0133)
• Fix local links in Markdown (a3fd031)
• Treat cloudflare: specifiers as runtime built-ins (#​2268) (e7f261e) - thanks @​SwastikTripathi!

v6.44.0: Release 6.44.0

Compare Source

• Clarify that custom entry still adds entry files from package.json (#​2206) (4099dde) - thanks @​MannXo!
• Resolve expanded package scripts against the directory of their manifest (#​2209) (9d8464d) - thanks @​fixfon!
• Track exports through namespace member chains of any depth (#​2210) (7569702) - thanks @​fixfon!
• Do not treat Windows drive letters as package names (#​2217) (d412c5b) - thanks @​Cherry!
• Generate built-in compilers list from source (#​2216) (d6f594c) - thanks @​abrahamguo!
• Update to pnpm@^11 + pnpm dedupe (ef5b819)
• Stop growing and rewriting the analysis cache on warm runs (close #​2213) (54b02dd)
• Use entry in plugins that do not resolve their config files (0b0e328)
• Reuse graph reachability for incremental sessions (#​2190) (38d926a) - thanks @​jakeleventhal!
• fix: reload discovered configuration in watch sessions (#​2211) (cefef30) - thanks @​jakeleventhal!
• Keep editor sessions and views current (#​2215) (cfe91ab) - thanks @​jakeleventhal!
• Add Lingui plugin (#​2212) (611e7db) - thanks @​clean99!
• Update dependency bun to v1.4.4 (#​2219) (3f35bbd) - thanks @​renovate[bot]!
• Read CSpell configuration from package.json (#​2228) (86ab963) - thanks @​clean99!
• Ignore file discovery order in session configuration test (51a8d33)
• Fix strict mode for caught optional peer imports (#​2218) (e535f40) - thanks @​jay23606!
• Add kysely-codegen plugin (#​2223) (a50e842) - thanks @​clean99!
• Add PurgeCSS plugin (#​2224) (668aea6) - thanks @​clean99!
• Document plugin args and path bases, issue key order and real-world fixes (8e48df6)
• Add Mastra plugin (#​2227) (dd4e1f7) - thanks @​ashokram-si!
• Count findPackageJSON() bare specifiers as dependencies (#​2235) (d4e387b) - thanks @​abrahamguo!
• Add universal hooks file to SvelteKit entries (#​2237) (f286584) - thanks @​APX403!
• Attribute extended tsconfig plugins correctly (#​2230) (8d1d1d1) - thanks @​gioboa!
• Resolve reporter in the Mocha plugin (#​2232) (c413715) - thanks @​X-Guardian!
• Read nyc.config.cjs and nyc.config.mjs in the nyc plugin (#​2240) (724c3c9) - thanks @​SwastikTripathi!
• Read hidden .biome.json and .biome.jsonc in the Biome plugin (#​2239) (dde22a7) - thanks @​SwastikTripathi!
• fix: narrow Remix plugin enabler to @​remix-run/dev (#​2242) (5e10c52) - thanks @​gioboa!
• Document alsoReferenceOwner on Input (387e97f)
• Document path bases and the dir option per input type (98180d3)
• Emit the Gatsby production entries from resolveConfig (c224f16)
• Emit the TanStack Router entry files from resolveConfig (c2598a3)
• Discover Marko tag files when only marko-tag.json files exist (c264697)
• Remove the static public/sw.js production entry from the vite-plugin-pwa plugin (b3f9a56)
• Keep absolute build.lib.entry paths in the Vitest plugin (5d974fa)
• Resolve Vite alias targets from the workspace without prefixing absolute paths (8f93e9d)
• Keep absolute testDir paths in the Playwright plugin (4e3e6b3)
• Keep absolute stories paths in the Storybook plugin (321decc)
• Resolve an absolute basePath in the Karma plugin (64e8b1b)
• Keep absolute local plugin paths in the Docusaurus plugin (058930d)
• Keep absolute local plugin paths in the Serverless Framework plugin (0176d78)
• Resolve Nx run-commands cwd from the workspace root (39c08aa)
• Resolve package specifiers in Marko tag definitions (168ee52)
• Keep absolute include paths in the Taskfile plugin (7945ec1)
• Resolve Lefthook root from the repository root (f28fae6)
• Pass specifiers with dir instead of absolutizing them in the webpack, Nx and textlint plugins (1ad804d)
• Drop redundant relative calls on entry patterns in the rstest and Marko plugins (9096f25)
• Use toAbsolute in the Jasmine, Lunaria and electron-vite plugins (b4266ef)
• Mark inputs from the start script as production (2fb1024)
• Mark inputs from scripts in production files as production (af469e9)
• Apply directory gitignore patterns to static-only globs (efe514f)
• Glob plugin config files once per workspace (b515677)
• Resolve Mocha require and file from the working directory (c6850eb)
• Cover the owning workspace of jsxImportSource in the tsconfig plugins test (0442096)
• List nyc.config.{js,cjs,mjs} in the nyc plugin example (671e5fb)
• Fold agent lessons into the tracked guides (e6cbfe3)
• Ignore development script inputs that the start script repeats in production mode (15cd870)
• Resolve Taskfile script entry patterns from the workspace directory (2730ffa)
• Resolve plugin entry patterns from dir (6df9c4e)
• Add GitHub Actions working-directory fixtures for mocha spec patterns (95efd3a)
• Pin the scope of negations and workspace exclusions for plugin entry patterns with dir (2070464)
• Parse GitHub Actions step scripts against their working directory (98d0b98)
• Parse MCP server commands against their cwd (381e3e3)
• Let core resolve script entries from dir in the Playwright, Railway and mise plugins (5d10668)
• Add --output-file option to write reporter output to a file (#​2243) (1a58eb5) - thanks @​X-Guardian!
• Treat packageExtensions peers as optional (#​2246) (e118ef4) - thanks @​gioboa!
• Support pnpm workspace config includes (#​2238) (acbbbf5) - thanks @​gioboa!
• Detect SWC plugins in options set directly on a webpack rule (#​2252) (624da93) - thanks @​fixfon!
• Escape pipes in symbols in the markdown reporter (#​2254) (153ba1e) - thanks @​NgoQuocViet2001!
• More than two hundred plugins (e68eaa5)
• Update dependencies (8b06f9a)

v6.43.0: Release 6.43.0

Compare Source

• Document and pin exports that only keep each other alive (#​2160) (39af70a)
• Don't add config files without an extension as entry files (resolve #​2168) (46a825d)
• Recognize unscoped ~name workspace packages (resolve #​2172) (ba527f7)
• Follow imports and re-exports in ambient modules (resolve #​2174) (dbd3a8b) - thanks @​tlq5l!
• Follow @reference in Tailwind CSS compiler (#​2177) (219f16d) - thanks @​mkantautas!
• Support { find, replacement } array form of Vite alias (#​2179) (5d0779b) - thanks @​mkantautas!
• fix(expo): treat local config plugins as entry files (#​2176) (100ef49) - thanks @​Cayan!
• fix(next): detect Turbopack loaders in shared config factories (#​2161) (9cf928b) - thanks @​jakeleventhal!
• Ignore osascript as global binary (#​2182) (c301e44) - thanks @​abrahamguo!
• Skip --fix for exports in multi-declarator variable statements (#​2178) (326afd9) - thanks @​mkantautas!
• Watch the project directory instead of process.cwd() (#​2183) (16d9932) - thanks @​abrahamguo!
• Follow directory paths in tsconfig references (#​2186) (d741c46) - thanks @​mkantautas!
• Handle @plugin options blocks in Tailwind CSS compiler (#​2187) (9fae773) - thanks @​mkantautas!
• Remove anonymous default-exported functions and classes in --fix (#​2188) (6748259) - thanks @​mkantautas!
• Recognize bun fmt as a built-in command (#​2189) (e971b09) - thanks @​TomasHubelbauer!
• Add plugin for @​bufbuild/buf (#​2142) (90216c2) - thanks @​ryanquinn3!
• Pass isSsrBuild to Vite config functions (#​2191) (d2aa101) - thanks @​mkantautas!
• Follow src of <script> and <style> blocks in Vue SFCs (#​2193) (3d14839) - thanks @​mkantautas!
• Remove import attributes with emptied re-exports in --fix (#​2192) (231026c) - thanks @​mkantautas!
• Update npmx.dev snapshot (b2cc439)
• Read string parserOptions.parser in ESLint flat configs (#​2198) (302f908) - thanks @​mkantautas!
• Resolve directory matches in Vitest test.projects to their config (#​2195) (4d38613) - thanks @​fixfon!
• Ignore custom elements named script-* when extracting script blocks (#​2199) (23e6479) - thanks @​mkantautas!
• feat(mcp): add MCP plugin (#​2180) (fc92470) - thanks @​jakeleventhal!
• Handle non-Error plugin config failures (8f21ea2)
• Update articles list (6569cdc)
• Skip --fix export ranges inside a larger removal (204a809)
• Detect .travis.yml with a stat instead of a glob (3601c6e)
• Mark YAML catalog entries fixed only when their line is removed (#​2201) (813fa30) - thanks @​mkantautas!
• Add Electron Forge plugin (#​2158) (12e4355) - thanks @​mehdimirzafaruk!
• Resolve function and promise entries in Vitest test.projects (#​2197) (ec293d1) - thanks @​mkantautas!
• Follow npm lifecycle scripts and run-script aliases (#​2202) (89dfdc8) - thanks @​sushanta-neupane!
• Follow pnpm t, tst and run-script aliases (ce91e23)
• Treat vitest-environment-nuxt as optional (it comes with @nuxt/test-utils) (db9aa74)
• Ignore tool output before the first report section in ecosystem snapshots (9434bf6)
• Update dependencies (21c3b75)
• Bump engines.node to follow Astro's (9d7a5e0)

v6.42.1: Release 6.42.1

Compare Source

• fix(semantic-release): resolve shareable configs from extends (#​2159) (4c4a5ec) - thanks @​giaBaoJS!
• fix(jest): load projects entries as Jest configs (#​2167) (4c22593) - thanks @​Cayan!
• Update npmx.dev snapshot (4b19797)
• fix(tailwind): track packages referenced from CSS url() (#​2166) (949da00) - thanks @​agustincastaing!
• Add .otf to foreign file extensions (fcff4db)
• Match quoted SCSS url() values within a single line (2c5c2a2)
• fix(bun): treat bun test arguments as path filters (#​2165) (5f3a7fb) - thanks @​jakeleventhal!
• fix(vitest): use default test entries when config has no test key (#​2170) (7ee576c) - thanks @​fixfon!

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coldtea-pr-lens]

Note

renovate[bot] opened this pull request, so PR Lens left it undrawn. Comment @pr-lens draw to draw it

_{github.comment.notice: false in .github/pr-lens.yml turns this note off}

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords: 1

• chore(deps)

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7e106c8e-70e6-4dcc-9e65-d3716f4ee5b2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	knip@​6.42.0 ⏵ 6.44.1	-6			+1
	eslint@​10.13.0 ⏵ 10.14.0	+1

View full report