Skip to content

build(eslint-config-fluid): update dependencies#27247

Open
tylerbutler wants to merge 2 commits intomicrosoft:mainfrom
tylerbutler:eslint-dep-upgrade
Open

build(eslint-config-fluid): update dependencies#27247
tylerbutler wants to merge 2 commits intomicrosoft:mainfrom
tylerbutler:eslint-dep-upgrade

Conversation

@tylerbutler
Copy link
Copy Markdown
Member

Updates eslint dependencies.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 6, 2026

Hi! Thank you for opening this PR. Want me to review it?

Based on the diff (642 lines, 9 files), I've queued these reviewers:

  • Correctness — logic errors, race conditions, lifecycle issues
  • Security — vulnerabilities, secret exposure, injection
  • API Compatibility — breaking changes, release tags, type design
  • Performance — algorithmic regressions, memory leaks
  • Testing — coverage gaps, hollow tests

How this works

  • Adjust the reviewer set by ticking/unticking boxes above. Reviewer toggles alone don't trigger anything.

  • Tick Start review below to dispatch the review fleet.

  • After review finishes, tick Start review again to request another run — it auto-resets after each dispatch.

  • This comment updates as new commits land; your reviewer selections are preserved.

  • Start review

@tylerbutler tylerbutler marked this pull request as ready for review May 7, 2026 19:20
Copilot AI review requested due to automatic review settings May 7, 2026 19:20
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates the eslint-config-fluid package’s linting toolchain dependencies and regenerates the printed ESLint configs to align with those updates.

Changes:

  • Bump versions for ESLint core packages and several ESLint plugins (e.g., import-x, depend, react-hooks, no-only-tests, unused-imports).
  • Refresh printed config outputs to reflect updated plugin versions and rule sets.
  • Adjust pnpm workspace trust policy exclusions.

Reviewed changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
common/build/eslint-config-fluid/printed-configs/test.json Updates printed plugin versions and modifies the no-only-tests plugin entry.
common/build/eslint-config-fluid/printed-configs/strict.json Updates printed plugin versions (import-x, depend).
common/build/eslint-config-fluid/printed-configs/strict-biome.json Updates printed plugin versions (import-x, depend).
common/build/eslint-config-fluid/printed-configs/recommended.json Updates printed plugin versions (import-x, depend).
common/build/eslint-config-fluid/printed-configs/react.json Updates printed plugin versions and removes a react-hooks rule from the printed ruleset.
common/build/eslint-config-fluid/printed-configs/default.json Updates printed plugin versions (import-x, depend).
common/build/eslint-config-fluid/pnpm-workspace.yaml Adds semver to trustPolicyExclude.
common/build/eslint-config-fluid/package.json Bumps dependency/devDependency versions, pnpm version, and reorders/adjusts overrides.
Files not reviewed (1)
  • common/build/eslint-config-fluid/pnpm-lock.yaml: Language not supported

"depend:eslint-plugin-depend@1.4.0",
"no-only-tests"
"depend:eslint-plugin-depend@1.5.0",
"no-only-tests:no-only-tests"
# package (including later major versions) which had better provenance information.
# ALWAYS REVIEW CAREFULLY BEFORE ADDING SOMETHING TO THIS LIST.
trustPolicyExclude: []
trustPolicyExclude: ["semver"]
Comment on lines 2066 to 2071
"error",
"always"
],
"react-hooks/component-hook-factories": [
"error"
],
"react-hooks/config": [
"error"
],
Copy link
Copy Markdown
Contributor

@ChumpChief ChumpChief left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a nit but you might want a second opinion on the trust policy change.

"chokidar": "^5",
"diff@>=5 <6": "^5.2.2",
"js-yaml": "^4.1.1",
"minimatch@>=10 <11": "^10.2.4",
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bad sort?

# package (including later major versions) which had better provenance information.
# ALWAYS REVIEW CAREFULLY BEFORE ADDING SOMETHING TO THIS LIST.
trustPolicyExclude: []
trustPolicyExclude: ["semver"]
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I know @TommyBrosman has been looking at the trust policy stuff lately (e.g. #27254) - might want to get an opinion from someone who knows about that stuff more than I do.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good point - I won't commit this way.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants