Packages

@eslint/js

10.0.1 · 6 Feb 2026MIT148.4M / weekRepositoryHomepagenpmAtom feed

Upgrading @eslint/js from 8.45.0 to 10.0.1

65 releases in betweennotes for 52

Other targets from 8.45.0Newest 8.x8.57.1
9.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
25+
changes to make
0
advisories fixed
136+
new
156+
fixes

Counted from 52 of 65 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking10.0.0
  • breaking10.0.0
  • breaking10.0.0
  • breaking10.0.0
  • breaking10.0.0
  • breaking10.0.0
  • breaking10.0.0
  • breaking10.0.0
  • breaking10.0.0
  • breaking10.0.0

Security

  • Update minimatch to 10.2.1 to address security vulnerabilities

    10.0.1

  • Minimatch security vulnerability patch for v9.x

    9.39.4

  • Update ajv to 6.14.0 to address security vulnerabilities

    9.39.4

  • Bump @eslint/plugin-kit to 0.3.4 to resolve vulnerability

    9.32.0

Release by release

  1. 10.0.1

    6 Feb 20262 fixes
    • fixed

      Update eslint

    • fixed

      Update error message for unused suppressions

  2. 10.0.0

    26 Jul 20248 new · 15 fixes
    • new

      Handle Array.fromAsync in array-callback-return

    • new

      Add self to no-implied-eval rule

    • new

      Fix handling of function and class expression names in no-shadow

    • new

      Rule tester add assertion option requireData

  3. 9.39.5

    10 Jul 20261 fix
    • fixed

      Handle unavailable require cache (backport of #20812 to v9.x)

  4. 9.39.4nothing new or fixed in the note

  5. 9.39.3

    20 Feb 20261 fix
    • fixed

      Restore TypeScript 4.0 compatibility in types

  6. 9.39.2

    12 Dec 20251 fix
    • fixed

      Warn when eslint-env configuration comments are found

  7. 9.39.1

    3 Nov 20251 fix
    • fixed

      Only pass node to JS lang visitor methods

  8. 9.39.0

    31 Oct 20253 new · 7 fixes
    • new

      Update error loc to key in no-dupe-class-members

    • new

      Update error location in for-direction and no-dupe-args

    • new

      Update complexity rule to highlight only static block header

    • fixed

      Forward traversal step.args to visitors

693 internal lines (docs, tests, tooling) left out.