build(deps-dev): bump eslint-plugin-solid from 0.17.0 to 0.18.0

[dependabot]

Bumps eslint-plugin-solid from 0.17.0 to 0.18.0.

Release notes

Sourced from eslint-plugin-solid's releases.

v0.18.0

Four new correctness rules (from #219, thanks @​brenelz), a revived community rule (#145, thanks @​SarguelUnda), extensions to existing rules, and a batch of reactivity false-positive fixes. Verified against the official Solid 2.0 templates (zero findings).

New rules (enabled in v2/v2-strict)

• solid/no-write-in-pure-computation (error) — setter calls in createMemo callbacks, the compute half of createEffect(compute, effect), and component bodies, all pure owned scopes that throw on writes in Solid 2.0 dev. Honors ownedWrite: true; onSettled/createTrackedEffect/handlers/effect halves exempt by function boundary. Closes #79.
• solid/no-store-mutation-outside-setter (error) — mutating a store's read proxy is silently ignored by core (no error, no update); lint is the only guardrail today.
• solid/no-unused-signal (warn) — never-written or never-read createSignal/createStore/createOptimistic tuples, which unused-variable rules can't see.
• solid/no-boolean-enumerated-attribute (error) — booleans on enumerated attributes (draggable, spellcheck, contenteditable, translate, tristate aria-*) produce a different state than the string tokens; literals autofix. Closes #144/#145.

Reactivity false-positive fixes

• untrack(async () => ...) no longer reports an async tracked scope (#188)
• this.state = state is a reference escape, not a snapshot (#184)
• makePersisted(createSignal(...))-style wrappers analyze as pass-through (#190)

New setting

• settings.solid.moduleSources registers custom renderers/re-export wrappers as Solid primitive sources (#183)

Full details in the changelog.

v0.17.1

Bug fixes only. Thanks to @​jynxio and @​brenelz for the reports and PRs.

Fixes

• solid/reactivity regression from 0.16.1 (#223). The staleCapture check flagged captures read inside synchronous array-method callbacks (items.filter((item) => item.includes(q))) within createMemo/createEffect bodies. A function passed as a call argument doesn't escape through a return below it — only the call's result does — so these callbacks run during the computation, where the capture is fresh. IIFEs are exempt for the same reason.
• solid/imports type mappings for Solid 2.0 (#220, #221, #222). The JSX namespace only exists in @solidjs/web in 2.0; the rule was autofixing correct imports into a module that doesn't export it. ValidComponent/ComponentProps are now accepted from both solid-js (DOM-independent) and @solidjs/web (DOM-aware) since the two packages export genuinely different types. The fixer also no longer produces a duplicate type modifier (import type { type JSX }) when moving inline type specifiers.
• renderToStringAsync is a removed API, not a misplaced one. It no longer exists in Solid 2.0 (renderToString awaits async content). Dropped from the v2 imports map — which was autofixing imports into a dead end — and added to solid/removed-api with migration guidance. solid/removed-api now also scans @solidjs/web imports, so a mechanically source-rewritten import of a removed API is still reported.

Also verified fixed and closed: #193 (signals passed as create* arguments stopped warning with the 0.16.1 accessor-passing work).

Commits

• 84ddb05 v0.18.0
• 061eee0 Merge 0.18.0: four correctness rules (#219 by @​brenelz), no-boolean-enumerate...
• 3100db5 chore: release 0.18.0
• 8b4b59d feat: 0.18.0 rule batch — component-body writes, enumerated attributes, store...
• fbd900f no-write-in-pure-computation: resolve ownedWrite through const indirection
• b9f13d5 review amendments: drop no-async-effect-half, honor ownedWrite, correct store...
• e3f7b1c Merge pull request #224 from solidjs-community/patch-0.17.1
• 893c5f7 v0.17.1
• abc08ea fix: 0.17.1 patch bucket — staleCapture regression, imports type maps, render...
• d3cc0d9 Merge pull request #220 from jynxio/main
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
bridget	Ready	Preview	Sep 14, 2026 11:33pm UTC