Migrate ESLint 8 -> 9, Prettier 2 -> 3

[mcmire]

We want to align this repo with our module template. Migrating to ESLint v9 and Prettier v3 will unlock migrating to Vitest.

• Update dependencies
• Update .depcheckrc.json
• Fix new lint violations

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​unrs/​resolver-binding-android-arm-eabi@​1.9.2
	@​unrs/​resolver-binding-android-arm64@​1.9.2
	@​unrs/​resolver-binding-darwin-arm64@​1.9.2
	@​unrs/​resolver-binding-darwin-x64@​1.9.2
	@​unrs/​resolver-binding-freebsd-x64@​1.9.2
	@​unrs/​resolver-binding-linux-arm-gnueabihf@​1.9.2
	@​unrs/​resolver-binding-linux-arm-musleabihf@​1.9.2
	@​unrs/​resolver-binding-linux-arm64-gnu@​1.9.2
	@​unrs/​resolver-binding-linux-arm64-musl@​1.9.2
	@​unrs/​resolver-binding-linux-ppc64-gnu@​1.9.2
	@​unrs/​resolver-binding-linux-riscv64-gnu@​1.9.2
	@​unrs/​resolver-binding-linux-riscv64-musl@​1.9.2
	@​unrs/​resolver-binding-linux-s390x-gnu@​1.9.2
	@​unrs/​resolver-binding-linux-x64-gnu@​1.9.2
	@​unrs/​resolver-binding-linux-x64-musl@​1.9.2
	@​unrs/​resolver-binding-win32-arm64-msvc@​1.9.2
	@​unrs/​resolver-binding-win32-ia32-msvc@​1.9.2
	@​unrs/​resolver-binding-win32-x64-msvc@​1.9.2
	@​nolyfill/​is-core-module@​1.0.39
	isarray@​2.0.5
	hasown@​2.0.2
	array-buffer-byte-length@​1.0.0 ⏵ 1.0.2			+3
	globalthis@​1.0.3 ⏵ 1.0.4			+1
	which-collection@​1.0.2
	has-tostringtag@​1.0.0 ⏵ 1.0.2			+1
	has-property-descriptors@​1.0.0 ⏵ 1.0.2
	object.groupby@​1.0.3
	is-set@​2.0.3
	is-weakmap@​2.0.2
See 171 more rows in the dashboard

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• @tybys/wasm-util@0.9.0
• async-function@1.0.0
• @emnapi/core@1.4.3
• napi-postinstall@0.2.4
• tapable@2.2.2
• @unrs/resolver-binding-wasm32-wasi@1.9.2
• unrs-resolver@1.9.2
• prettier@3.6.0

View full report

[mcmire]

@SocketSecurity ignore npm/@emnapi/core@1.4.3
@SocketSecurity ignore npm/@tybys/wasm-util@0.9.0
@SocketSecurity ignore npm/@unrs/resolver-binding-wasm32-wasi@1.9.2
@SocketSecurity ignore npm/napi-postinstall@0.2.4

Network access is OK, these libraries are used to interact with and load WASM files.

[mcmire]

@SocketSecurity ignore npm/prettier@3.6.0

Network access is OK — fetch is used in development scripts but I can't find where this is used in prod code.

[mcmire]

@SocketSecurity ignore npm/unrs-resolver@1.9.2

This is a dependency of the WASM libraries above.

[mcmire]

@SocketSecurity ignore npm/async-function@1.0.0

New author is OK, ljharb maintains a bunch of packages.

[mcmire]

@SocketSecurity ignore npm/tapable@2.2.2

New author is OK, evilebottnawi is https://github.com/alexander-akait on GitHub.