Skip to content

chore(deps): update dependency @lobehub/eslint-config to v2.1.7 - #2865

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/lobehub-eslint-config-2.1.x-lockfile
Open

renovate[bot] wants to merge 1 commit into
masterfrom
renovate/lobehub-eslint-config-2.1.x-lockfile

Conversation

@renovate

@renovate renovate Bot commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@lobehub/eslint-config (source) 2.1.5 → 2.1.7 age confidence

Release Notes

lobehub/lobe-lint (@​lobehub/eslint-config)

v2.1.7

Compare Source

Released on 2026-10-21

✨ Features
  • skill: Check every workspace package in check-release.
🐛 Bug Fixes
  • eslint-config: Resolve zod-validation-error v4 for eslint-plugin-react-hooks.
  • eslint-config: Allow require() in commonjs and rc config files.
  • eslint-config: Report missing hook dependencies and other react-hooks violations once.
  • eslint-config: Stop circular regex autofixes.
  • eslint-config: Report un-aborted fetch requests as errors.
  • eslint-config: Require typescript 5 or 6 as a peer.
  • semantic-release-config: Show perf commits in release notes.
  • stylelint-config: Leave transition and will-change values to the author.
  • create-lint: Install typescript 6 instead of the latest 7.
📝 Documentation
  • skill: Document the zod-validation-error ./v4 load failure, release lock pitfalls and formatting after fixes.
  • misc: List the react rules that changed in 2.1.6.
  • misc: Document leaked fetch errors, deduped react-hooks rules and keeping typescript below 7.
⚠️ Upgrade notes
  • Fix: the config no longer fails with ERR_PACKAGE_PATH_NOT_EXPORTED … zod-validation-error/v4 (react-compiler plugin dropped, zod-validation-error ^4 pinned). pnpm lockfiles that already hold 3.5.4 still need pnpm update zod-validation-error.
  • Fix: .cjs / rc / config files no longer fail no-require-imports; unicorn/better-regex off (fix cycle with regexp/strict); perf commits appear in release notes; liberty/use-logical-spec leaves transition / will-change alone; check-release.mjs checks workspace packages.
  • Changed: react-hooks violations are reported once. The 9 @eslint-react copies (error-boundaries, exhaustive-deps, purity, rules-of-hooks, set-state-in-effect, set-state-in-render, static-components, unsupported-syntax, use-memo) are off; use react-hooks/* ids in disable comments.
  • Changed (new error): @eslint-react/web-api-no-leaked-fetch is error. Abort the request on cleanup with an AbortController; the let ignore = false pattern from the React docs is a known false positive.
  • Changed: @lobehub/eslint-config and @lobehub/lint require the peer typescript >=5 <7 (was >=5, optional). TypeScript 7.0 has no JS API, so typescript-eslint cannot run on it; install typescript@^6. create-lobe-lint installs typescript@^6.
  • Docs: 2.1.5 → 2.1.6 rule changes (jsx-no-key-after-spread etc.) and the upgrade steps above in the migration guide.

Improvements and Fixes
What's improved
  • skill: Check every workspace package in check-release (8ed6aee)
What's fixed
  • create-lint: Install typescript 6 instead of the latest 7 (6f9db53)
  • eslint-config: Require typescript 5 or 6 as a peer (6afb82d)
  • eslint-config: Report un-aborted fetch requests as errors (31bc328)
  • eslint-config: Report react-hooks violations once (eb7eaf4)
  • stylelint-config: Leave transition and will-change values to the author (b840cf8)
  • semantic-release-config: Show perf commits in release notes (b28ffa2)
  • eslint-config: Stop circular regex autofixes (76009ee)
  • eslint-config: Report missing hook dependencies once (443a8ba)
  • eslint-config: Allow require() in commonjs and rc config files (8c0e647)
  • eslint-config: Resolve zod-validation-error v4 for eslint-plugin-react-hooks (1b3521b)
Documentation
  • misc: Keep typescript below 7 (a507bd0)
  • misc: Document leaked fetch errors and deduped react-hooks rules (1232c23)
  • skill: Document release lock pitfalls and formatting after fixes (a8e98a2)
  • misc: List the react rules that changed in 2.1.6 (4115c43)
  • skill: Document the zod-validation-error ./v4 load failure (df942b1)

v2.1.6

Compare Source

Released on 2026-10-21

✨ Features
  • lint: Add commonjs @lobehub/lint/release and @lobehub/lint/release-monorepo entries.
  • lint: Add commonjs @lobehub/lint/changelog entry.
  • misc: ESLint 10, toolchain bump, and MDX plugin patch.
  • eslint-config: Add MDX support to ESLint configuration.
🐛 Bug Fixes
  • eslint-config: Stop import-x/no-duplicates from merging into invalid type imports.
  • stylelint-config: Keep css-in-js interpolations when fixing logical properties.
  • skill: Always write .releaserc.cjs and verify it with getConfig.
  • skill: Write .changelogrc.cjs and migrate workspace packages.
  • deps: Upgrade dependencies and adapt eslint-config.
📝 Documentation
  • misc: Add docs site with rules explorer and refresh docs.
  • misc: Add lobe-lint v2 migration skill.
  • skill: Document semantic-release ignoring .releaserc.mjs, 2.1.5 autofixes, release notes and peer warnings.
⚠️ Rule changes (added after the release)

2.1.6 upgrades @eslint-react/eslint-plugin from ^2.12.4 to ^5.8.1 (installs 5.28.x) and eslint-plugin-react-hooks from 5.2.0 to 7.1.1. Only .jsx / .tsx files are affected; no rule changed for .js, .mjs, .cjs or .ts files. New errors:

  • @eslint-react/jsx-no-key-after-spread (replaces the jsx-key-before-spread warning): <div {...props} key="x" /> → <div key="x" {...props} />. Not autofixable.
  • @eslint-react/jsx-no-children-prop-with-children: an element with both a children prop and children content. Remove one (editor suggestion only).
  • @eslint-react/rules-of-hooks: the same check as react-hooks/rules-of-hooks (still an error), so each violation is reported twice.

Renamed with the same level (disable comments with the old id become unused directives): @eslint-react/dom/no-* → dom-no-*, dom/no-namespace → jsx-no-namespace, rsc/function-definition → rsc-function-definition, web-api/no-leaked-* → web-api-no-leaked-*, naming-convention/* → naming-convention-*. New warnings: the React Compiler rules of react-hooks 7 and their @eslint-react counterparts, jsx-no-children-prop, jsx-no-leaked-dollar, jsx-no-leaked-semicolon, web-api-no-leaked-fetch, web-api-no-leaked-intersection-observer. Full list: migration guide.


Improvements and Fixes
What's improved
  • lint: Add commonjs @​lobehub/lint/release entries (4f5d2a8)
  • lint: Add commonjs @​lobehub/lint/changelog entry (7eb9d7e)
  • misc: ESLint 10, toolchain bump, and MDX plugin patch (73813e4)
  • eslint-config: Add MDX support to ESLint configuration (70bca28)
What's fixed
  • eslint-config: Stop import-x/no-duplicates from merging into invalid type imports (0a1dc91)
  • stylelint-config: Keep css-in-js interpolations when fixing logical properties (67c5269)
  • skill: Always write .releaserc.cjs and verify it with getConfig (f7fbacc)
  • skill: Write .releaserc.cjs when semantic-release is below 22 (d1b6c74)
  • skill: Write .changelogrc.cjs and migrate workspace packages (09db266)
  • deps: Upgrade dependencies and adapt eslint-config (a25a984)
Documentation
  • misc: Check the resolved cosmiconfig before keeping .releaserc.mjs (90570ed)
  • skill: Document semantic-release ignoring .releaserc.mjs (5a88f33)
  • skill: Document 2.1.5 autofix, release-notes and peer warnings (2d6bd56)
  • misc: Drop default-export codemod from v2 migration skill (180a0d6)
  • misc: Add lobe-lint v2 migration skill (add4f16)
  • misc: Add docs site with rules explorer and refresh docs (66c0e8f)


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@safedep

safedep Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

SafeDep Report Summary

Green Malicious Packages Badge Green Vulnerable Packages Badge Green Risky License Badge

Package Details
Package Malware Vulnerability Risky License Report
@dual-bundle/import-meta-resolve @ 4.2.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@eslint-react/ast @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@eslint-react/core @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@eslint-react/eslint @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@eslint-react/eslint-plugin @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@eslint-react/jsx @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@eslint-react/shared @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@eslint-react/var @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@lobehub/eslint-config @ 2.1.7
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@npmcli/config @ 8.3.4
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@npmcli/git @ 5.0.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@npmcli/map-workspaces @ 3.0.6
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@npmcli/name-from-folder @ 2.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@npmcli/package-json @ 5.2.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@npmcli/promise-spawn @ 7.0.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@pkgr/core @ 0.3.6
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@types/concat-stream @ 2.0.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@types/is-empty @ 1.2.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@types/node @ 22.20.5
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@types/supports-color @ 8.1.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@typescript-eslint/project-service @ 8.72.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@typescript-eslint/scope-manager @ 8.72.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@typescript-eslint/tsconfig-utils @ 8.72.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@typescript-eslint/types @ 8.72.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@typescript-eslint/typescript-estree @ 8.72.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@typescript-eslint/utils @ 8.72.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
@typescript-eslint/visitor-keys @ 8.72.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
abbrev @ 2.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
acorn @ 8.19.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
concat-stream @ 2.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
emoji-regex @ 10.6.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
err-code @ 2.0.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-config-prettier @ 10.1.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-mdx @ 3.8.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-mdx @ 3.8.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-react-dom @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-react-hooks @ 7.1.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-react-jsx @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-react-naming-convention @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-react-rsc @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-react-web-api @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-react-x @ 5.28.8
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-simple-import-sort @ 13.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
eslint-plugin-unicorn @ 64.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
estree-util-visit @ 2.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
hosted-git-info @ 7.0.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
ignore @ 6.0.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
ini @ 4.1.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
is-empty @ 1.2.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
isexe @ 3.1.5
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
json-parse-even-better-errors @ 3.0.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
lines-and-columns @ 2.0.4
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
load-plugin @ 6.0.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
mdast-util-mdx @ 3.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
micromark-extension-mdx-expression @ 3.0.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
micromark-extension-mdx-jsx @ 3.0.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
micromark-extension-mdx-md @ 2.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
micromark-extension-mdxjs @ 3.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
micromark-extension-mdxjs-esm @ 3.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
micromark-factory-mdx-expression @ 2.0.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
micromark-util-events-to-acorn @ 2.0.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
nopt @ 7.2.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
normalize-package-data @ 6.0.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
npm-install-checks @ 6.3.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
npm-normalize-package-bin @ 3.0.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
npm-package-arg @ 11.0.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
npm-pick-manifest @ 9.1.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
parse-json @ 7.1.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
proc-log @ 4.2.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
promise-inflight @ 1.0.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
promise-retry @ 2.0.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
read-package-json-fast @ 3.0.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
remark-mdx @ 3.1.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
spdx-correct @ 3.2.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
spdx-exceptions @ 2.5.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
spdx-expression-parse @ 3.0.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
spdx-license-ids @ 3.0.24
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
string-width @ 6.1.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
supports-color @ 9.4.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
synckit @ 0.12.3
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
ts-pattern @ 5.9.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
type-fest @ 3.13.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
typedarray @ 0.0.6
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
undici-types @ 6.21.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
unified-engine @ 11.2.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
unist-util-inspect @ 8.1.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
unist-util-position-from-estree @ 2.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
validate-npm-package-license @ 3.0.4
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
validate-npm-package-name @ 5.0.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
vfile-reporter @ 8.1.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
vfile-sort @ 4.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
vfile-statistics @ 3.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
walk-up-path @ 3.0.1
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
which @ 4.0.0
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗
zod-validation-error @ 4.0.2
npm pnpm-lock.yaml
✔️ ✔️ ✔️ 🔗

View complete scan results →

This report is generated by SafeDep GitHub App

@renovate
renovate Bot force-pushed the renovate/lobehub-eslint-config-2.1.x-lockfile branch 26 times, most recently from 9489bfc to 637d6e9 Compare October 28, 2026 08:37
@renovate
renovate Bot force-pushed the renovate/lobehub-eslint-config-2.1.x-lockfile branch from 637d6e9 to 994c459 Compare October 28, 2026 08:45

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants