chore(deps): Bump the dev-dependencies group across 1 directory with 2 updates by dependabot[bot] · Pull Request #481 · nullvariant/nullvariant-vscode-extensions

dependabot · 2026-04-27T07:14:55Z

Bumps the dev-dependencies group with 2 updates in the / directory: eslint and eslint-plugin-sonarjs.

Updates eslint from 10.2.0 to 10.2.1

Release notes

v10.2.1

Bug Fixes

14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)

84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)

af764af fix: clarify language and processor validation errors (#20729) (Pixel998)

e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)

57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)

c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)

1418d52 docs: Update README (GitHub Actions Bot)

39771e6 docs: Update README (GitHub Actions Bot)

71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)

22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)

8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])

fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])

7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)

4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])

51080eb test: processor service (#20731) (kuldeep kumar)

e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)

4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)

066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)

Commits

4d1d8f9 10.2.1
3e33105 Build: changelog update for 10.2.1
ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768)
7ddfea9 chore: update dependency prettier to v3.8.2 (#20770)
57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767)
c1621b9 docs: fix typos in code-path-analyzer.js (#20700)
fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763)
7246f92 test: add tests for SuppressionsService.load() error handling (#20734)
4f34b1e chore: update pnpm/action-setup action to v5 (#20762)
1418d52 docs: Update README
Additional commits viewable in compare view

Updates eslint-plugin-sonarjs from 4.0.2 to 4.0.3

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-sonarjs since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…2 updates Bumps the dev-dependencies group with 2 updates in the / directory: [eslint](https://github.com/eslint/eslint) and [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS). Updates `eslint` from 10.2.0 to 10.2.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.2.0...v10.2.1) Updates `eslint-plugin-sonarjs` from 4.0.2 to 4.0.3 - [Release notes](https://github.com/SonarSource/SonarJS/releases) - [Commits](https://github.com/SonarSource/SonarJS/commits) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: eslint-plugin-sonarjs dependency-version: 4.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-27T07:14:56Z

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

nullvariant-blaze · 2026-04-27T07:15:12Z

🐗 Blaze's Release Review 📦

No version bump. Just dependency changes... boring. Wake me up when it's deploy time! 😤

よっしゃ！デプロイしまくるぞ！

This review was ENTHUSIASTICALLY filed by nullvariant-blaze[bot]

nullvariant-mimi · 2026-04-27T07:15:14Z

🐰 Mimi's Validation Report ✅

All checks are looking good! Great job! 🎉

⏳ Some checks are still running. I will keep watching!

バリデーターを通してくださいね

This report was carefully prepared by nullvariant-mimi[bot]

nullvariant-luna · 2026-04-27T07:15:14Z

👧 Luna's Exploration Report 📦

No new dependencies added. Just version bumps! Nothing to explore here... 😴

Botに418返そうよ！

This report was curiously compiled by nullvariant-luna[bot]

github-actions · 2026-04-27T07:15:15Z

VEX Assessment: `not_affected`

This dependency update modifies devDependencies only.

Status: not_affected
Justification: vulnerable_code_not_in_execute_path
Impact: Zero production dependencies. No third-party code is included in the published VSIX.

Any CVEs in updated devDependencies do not affect end users. The VEX document will be automatically updated by the weekly VEX Auto-Update workflow.

🤖 Automated VEX assessment

github-actions · 2026-04-27T07:15:16Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/eslint

^10.2.1

Unknown

npm/eslint-plugin-sonarjs

^4.0.3

Unknown

npm/@eslint/config-array

0.23.5

Unknown

npm/@eslint/config-helpers

0.5.5

Unknown

npm/@eslint/core

1.2.1

Unknown

npm/@eslint/object-schema

3.0.5

Unknown

npm/@eslint/plugin-kit

0.7.1

Unknown

npm/eslint

10.2.1

🟢 6.4

Details

Check	Score	Reason
Code-Review	🟢 7	Found 16/21 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 9	SAST tool detected but not run on all commits

npm/eslint-plugin-sonarjs

4.0.3

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 9	Found 9/10 approved changesets -- score normalized to 9
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	🟢 3	detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow	⚠️ 0	dangerous workflow patterns detected
License	🟢 9	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	🟢 10	packaging workflow detected
Signed-Releases	⚠️ -1	no releases found
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

extensions/git-id-switcher/package.json
package-lock.json

socket-security · 2026-04-27T07:15:18Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint-plugin-sonarjs@4.0.2 ⏵ 4.0.3			⁺¹	⁺²
	eslint@10.2.0 ⏵ 10.2.1	⁺¹

View full report

nullvariant-ciel · 2026-04-27T07:15:34Z

🕊️ Ciel's Mediation ☀️

*~~ gliding on a gentle breeze ~~ How serene!*

3 zoo members have reviewed this PR.

Zoo Member	Status
🐰 Mimi	Commented
👧 Luna	Commented
🐗 Blaze	Commented

☀️ The zoo is in harmony. Everything looks peaceful from up here.

まあまあ、ほどほどに。

This mediation was peacefully delivered by nullvariant-ciel[bot]

codecov · 2026-04-27T07:16:11Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

nullvariant-justice

⚖️ Justice grants passage. CI checks passed — this code meets the garden's standards.

…d0b3347

sonarqubecloud · 2026-04-29T08:47:53Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 27, 2026

nullvariant-justice Bot approved these changes Apr 27, 2026

View reviewed changes

Merge branch 'main' into dependabot/npm_and_yarn/dev-dependencies-c02…

2493e88

…d0b3347

nullvariant approved these changes Apr 29, 2026

View reviewed changes

nullvariant merged commit d7a936a into main Apr 29, 2026
39 of 40 checks passed

nullvariant deleted the dependabot/npm_and_yarn/dev-dependencies-c02d0b3347 branch April 29, 2026 09:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the dev-dependencies group across 1 directory with 2 updates#481

chore(deps): Bump the dev-dependencies group across 1 directory with 2 updates#481
nullvariant merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-c02d0b3347

dependabot Bot commented on behalf of github Apr 27, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 27, 2026

Uh oh!

nullvariant-blaze Bot commented Apr 27, 2026 •

edited

Loading

Uh oh!

nullvariant-mimi Bot commented Apr 27, 2026 •

edited

Loading

Uh oh!

nullvariant-luna Bot commented Apr 27, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 27, 2026

Uh oh!

github-actions Bot commented Apr 27, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Apr 27, 2026 •

edited

Loading

Uh oh!

nullvariant-ciel Bot commented Apr 27, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Apr 27, 2026

Uh oh!

nullvariant-justice Bot left a comment

Uh oh!

sonarqubecloud Bot commented Apr 29, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.2.1

Bug Fixes

Documentation

Chores

Uh oh!

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

Uh oh!

nullvariant-blaze Bot commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🐗 Blaze's Release Review 📦

Uh oh!

nullvariant-mimi Bot commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🐰 Mimi's Validation Report ✅

Uh oh!

nullvariant-luna Bot commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

👧 Luna's Exploration Report 📦

Uh oh!

github-actions Bot commented Apr 27, 2026

VEX Assessment: not_affected

Uh oh!

github-actions Bot commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

socket-security Bot commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nullvariant-ciel Bot commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🕊️ Ciel's Mediation ☀️

Uh oh!

codecov Bot commented Apr 27, 2026

Codecov Report

Uh oh!

nullvariant-justice Bot left a comment

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud Bot commented Apr 29, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Apr 27, 2026 •

edited

Loading

nullvariant-blaze Bot commented Apr 27, 2026 •

edited

Loading

nullvariant-mimi Bot commented Apr 27, 2026 •

edited

Loading

nullvariant-luna Bot commented Apr 27, 2026 •

edited

Loading

VEX Assessment: `not_affected`

github-actions Bot commented Apr 27, 2026 •

edited

Loading

socket-security Bot commented Apr 27, 2026 •

edited

Loading

nullvariant-ciel Bot commented Apr 27, 2026 •

edited

Loading