Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 11, 2025

Bumps @metamask/eslint-config-jest from 11.1.0 to 14.1.0.

Release notes

Sourced from @​metamask/eslint-config-jest's releases.

14.1.0

@​metamask/eslint-config 14.1.0

Changed

  • Loosen promise/catch-or-return and promise/param-names rules (#384)

@​metamask/eslint-config-jest 14.1.0

Changed

  • Replace @typescript-eslint/unbound-method rule with jest/unbound-method in Jest tests (#391)
    • jest/unbound-method is looser than @typescript-eslint/unbound-method, so this should be a non-breaking change unless @typescript-eslint/unbound-method is disabled.
  • Remove jest/no-conditional-in-test rule (#383)

@​metamask/eslint-config-typescript 14.1.0

Added

  • Add support for TypeScript 5.6.x-5.8.x (#395)

Changed

  • Disable @typescript-eslint/no-unsafe-enum-comparison rule (#387)
  • Loosen @typescript-eslint/prefer-promise-reject-errors rule to allow rejecting with unknown (#389)
  • Loosen @typescript-eslint/naming-convention rule to allow more formats for import names (#388)
  • Loosen @typescript-eslint/switch-exhaustiveness-check rule to allow default case (#390)

14.0.0

@​metamask/eslint-config 14.0.0

Changed

  • BREAKING: Bump minimum Node.js version from 16 to 18.18 (#371)
  • BREAKING: Bump peer dependency on ESLint from ^8.57.0 to ^9.11.0 (#370)
    • ESLint 9 requires flat configs, so this change also rewrites the configs to use flat configs. The legacy config format is no longer supported.
  • BREAKING: Bump peer dependency on @metamask/eslint-config from ^13.0.0 to ^14.0.0 (#377)
  • BREAKING: Bump peer dependency on eslint-config-prettier from ^8.5.0 to ^9.1.0 (#370)
  • BREAKING: Bump peer dependency on eslint-plugin-import-x from ^0.5.1 to ^4.3.0 (#370)
  • BREAKING: Bump peer dependency on eslint-plugin-jsdoc from >=43.0.7 <48 to ^50.2.4 (#370)
  • BREAKING: Bump peer dependency on eslint-plugin-prettier from ^4.2.1 to ^5.2.1 (#370)
  • BREAKING: Bump peer dependency on eslint-plugin-promise from ^6.1.1 to ^7.1.0 (#370)
  • BREAKING: Bump peer dependency on prettier from ^2.7.1 to ^3.3.3 (#370)
  • BREAKING: Change package to be pure ESM (#370)
    • ESLint 9 supports ESM out-of-the-box, so this change updates the package to be pure ESM. This means that the package can no longer be used with CommonJS require syntax.

@​metamask/eslint-config-browser 14.0.0

Changed

  • BREAKING: Bump minimum Node.js version from 16 to 18.18 (#371)
  • BREAKING: Bump peer dependency on ESLint from ^8.57.0 to ^9.11.0 (#370)
    • ESLint 9 requires flat configs, so this change also rewrites the configs to

... (truncated)

Commits
  • a948d02 Release/14.1.0 (#421)
  • e3b8fa7 ci: Fix publish workflow (#420)
  • ddd0557 Revert "Release/14.1.0" (#419)
  • fe384a0 Release/14.1.0 (#411)
  • 26bae79 chore: Add dependency lint and fix lint issues (#412)
  • 6ac9442 chore: Update release documentation (#408)
  • e214271 chore: Update @metamask/create-release-branch to ^4.1.3 (#409)
  • cd9425a Revert "feat(typescript): Update type import specifier rules" (#407)
  • bf6fe5b Update codeowners to @MetaMask/core-platform (#406)
  • 773e3bf Bump vite from 5.4.18 to 5.4.19 in the npm_and_yarn group across 1 directory ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Upgrade @metamask/eslint-config-jest to 14.1.0 and refresh yarn.lock with new transitive deps.

  • Dev tooling:
    • Upgrade @metamask/eslint-config-jest from ^11.1.0 to ^14.1.0 in package.json.
    • Update yarn.lock to reflect new dependencies, adding @eslint/js@^9.11.0 and globals@^15.9.0, and replacing the previous Jest config lock entry.

Written by Cursor Bugbot for commit ecee84e. This will update automatically on new commits. Configure here.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 11, 2025 06:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2025
@socket-security
Copy link

socket-security bot commented Nov 11, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​metamask/​eslint-config-jest@​11.1.0 ⏵ 14.1.099 +110079 +688 +7100

View full report

"@lavamoat/allow-scripts": "^2.1.0",
"@metamask/eslint-config": "^11.1.0",
"@metamask/eslint-config-jest": "^11.1.0",
"@metamask/eslint-config-jest": "^14.1.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Metamask ESLint Upgrade Causes Dependency Hell

Bumping @metamask/eslint-config-jest to ^14.1.0 creates unmet peer dependency conflicts. Version 14.1.0 requires @metamask/eslint-config@^14.1.0, eslint@^9.11.0, and eslint-plugin-jest@^28.8.3, but the project has @metamask/eslint-config@^11.1.0, eslint@^8.40.0, and eslint-plugin-jest@^27.1.5. Additionally, other eslint config packages (@metamask/eslint-config-nodejs and @metamask/eslint-config-typescript) at version ^11.1.0 also require the older versions, creating incompatible peer dependencies that will prevent installation and cause ESLint to fail.

Fix in Cursor Fix in Web

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/main/metamask/eslint-config-jest-14.1.0 branch from 7f84bfd to 283b51b Compare November 26, 2025 17:50
Bumps [@metamask/eslint-config-jest](https://github.com/MetaMask/eslint-config) from 11.1.0 to 14.1.0.
- [Release notes](https://github.com/MetaMask/eslint-config/releases)
- [Commits](https://github.com/MetaMask/eslint-config/compare/@metamask/[email protected]...@metamask/[email protected])

---
updated-dependencies:
- dependency-name: "@metamask/eslint-config-jest"
  dependency-version: 14.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/main/metamask/eslint-config-jest-14.1.0 branch from 283b51b to ecee84e Compare December 3, 2025 13:21
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 4, 2025

Superseded by #263.

@dependabot dependabot bot closed this Dec 4, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/main/metamask/eslint-config-jest-14.1.0 branch December 4, 2025 06:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant