Bump @metamask/eslint-config from 11.1.0 to 14.1.0 #256

dependabot · 2025-11-11T06:02:45Z

Bumps @metamask/eslint-config from 11.1.0 to 14.1.0.

Release notes

Sourced from @metamask/eslint-config's releases.

14.1.0

@metamask/eslint-config 14.1.0

Changed

Loosen promise/catch-or-return and promise/param-names rules (#384)

@metamask/eslint-config-jest 14.1.0

Changed

Replace @typescript-eslint/unbound-method rule with jest/unbound-method in Jest tests (#391)

jest/unbound-method is looser than @typescript-eslint/unbound-method, so this should be a non-breaking change unless @typescript-eslint/unbound-method is disabled.

Remove jest/no-conditional-in-test rule (#383)

@metamask/eslint-config-typescript 14.1.0

Added

Add support for TypeScript 5.6.x-5.8.x (#395)

Changed

Disable @typescript-eslint/no-unsafe-enum-comparison rule (#387)

Loosen @typescript-eslint/prefer-promise-reject-errors rule to allow rejecting with unknown (#389)

Loosen @typescript-eslint/naming-convention rule to allow more formats for import names (#388)

Loosen @typescript-eslint/switch-exhaustiveness-check rule to allow default case (#390)

14.0.0

@metamask/eslint-config 14.0.0

Changed

BREAKING: Bump minimum Node.js version from 16 to 18.18 (#371)

BREAKING: Bump peer dependency on ESLint from ^8.57.0 to ^9.11.0 (#370)

ESLint 9 requires flat configs, so this change also rewrites the configs to use flat configs. The legacy config format is no longer supported.

BREAKING: Bump peer dependency on @metamask/eslint-config from ^13.0.0 to ^14.0.0 (#377)

BREAKING: Bump peer dependency on eslint-config-prettier from ^8.5.0 to ^9.1.0 (#370)

BREAKING: Bump peer dependency on eslint-plugin-import-x from ^0.5.1 to ^4.3.0 (#370)

BREAKING: Bump peer dependency on eslint-plugin-jsdoc from >=43.0.7 <48 to ^50.2.4 (#370)

BREAKING: Bump peer dependency on eslint-plugin-prettier from ^4.2.1 to ^5.2.1 (#370)

BREAKING: Bump peer dependency on eslint-plugin-promise from ^6.1.1 to ^7.1.0 (#370)

BREAKING: Bump peer dependency on prettier from ^2.7.1 to ^3.3.3 (#370)

BREAKING: Change package to be pure ESM (#370)

ESLint 9 supports ESM out-of-the-box, so this change updates the package to be pure ESM. This means that the package can no longer be used with CommonJS require syntax.

@metamask/eslint-config-browser 14.0.0

Changed

BREAKING: Bump minimum Node.js version from 16 to 18.18 (#371)

BREAKING: Bump peer dependency on ESLint from ^8.57.0 to ^9.11.0 (#370)

ESLint 9 requires flat configs, so this change also rewrites the configs to

... (truncated)

Commits

a948d02 Release/14.1.0 (#421)
e3b8fa7 ci: Fix publish workflow (#420)
ddd0557 Revert "Release/14.1.0" (#419)
fe384a0 Release/14.1.0 (#411)
26bae79 chore: Add dependency lint and fix lint issues (#412)
6ac9442 chore: Update release documentation (#408)
e214271 chore: Update @metamask/create-release-branch to ^4.1.3 (#409)
cd9425a Revert "feat(typescript): Update type import specifier rules" (#407)
bf6fe5b Update codeowners to @MetaMask/core-platform (#406)
773e3bf Bump vite from 5.4.18 to 5.4.19 in the npm_and_yarn group across 1 directory ...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Upgrade @metamask/eslint-config to v14.1.0 and refresh lockfile with ESLint 9-related dependencies.

Dependencies:
- Upgrade @metamask/eslint-config in package.json to ^14.1.0.
- Update yarn.lock to resolve new transitive deps:
  - Add @eslint/js@^9.11.0 and globals@^15.9.0.
  - Reflect updated peer deps: eslint@^9.11.0, eslint-config-prettier@^9.1.0, eslint-plugin-import-x@^4.3.0, eslint-plugin-jsdoc@^50.2.4, eslint-plugin-prettier@^5.2.1, eslint-plugin-promise@^7.1.0, prettier@^3.3.3.

^{Written by Cursor Bugbot for commit 4584ecc. This will update automatically on new commits. Configure here.}

socket-security · 2025-11-11T06:03:07Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@metamask/eslint-config@11.1.0 ⏵ 14.1.0			⁺³	⁺⁷

View full report

cursor · 2025-11-11T06:04:23Z

package.json

    "@arethetypeswrong/cli": "^0.15.3",
    "@lavamoat/allow-scripts": "^2.1.0",
-    "@metamask/eslint-config": "^11.1.0",
+    "@metamask/eslint-config": "^14.1.0",


Bug: ESLint Config Upgrade: Major Incompatibilities

Upgrading @metamask/eslint-config to ^14.1.0 introduces breaking incompatibilities. Version 14.x requires ESLint ^9.11.0 (currently ^8.40.0), eslint-plugin-import-x ^4.3.0 (currently has eslint-plugin-import ^2.26.0), eslint-plugin-jsdoc ^50.2.4 (currently ^39.6.2), and eslint-plugin-promise ^7.1.0 (not installed). Additionally, ESLint 9 only supports flat configs, but the project uses .eslintrc.js legacy format. The config is also now pure ESM, incompatible with the CommonJS .eslintrc.js file.

Bumps [@metamask/eslint-config](https://github.com/MetaMask/eslint-config) from 11.1.0 to 14.1.0. - [Release notes](https://github.com/MetaMask/eslint-config/releases) - [Commits](https://github.com/MetaMask/eslint-config/compare/@metamask/[email protected]...@metamask/[email protected]) --- updated-dependencies: - dependency-name: "@metamask/eslint-config" dependency-version: 14.1.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

cursor · 2025-12-03T13:22:31Z

package.json

    "@arethetypeswrong/cli": "^0.15.3",
    "@lavamoat/allow-scripts": "^2.1.0",
-    "@metamask/eslint-config": "^11.1.0",
+    "@metamask/eslint-config": "^14.1.0",


Bug: Incompatible peer dependencies with updated eslint-config

The @metamask/eslint-config was bumped to v14.1.0 while the related configs (@metamask/eslint-config-jest, @metamask/eslint-config-nodejs, @metamask/eslint-config-typescript) remain at v11.1.0. These v11 packages have peer dependencies requiring @metamask/eslint-config: ^11.0.0, which is incompatible with v14. Additionally, v14.1.0 requires eslint: ^9.11.0, eslint-plugin-import-x, eslint-plugin-jsdoc: ^50.2.4, and eslint-plugin-promise: ^7.1.0, but the package.json still has eslint: ^8.40.0, eslint-plugin-import (not import-x), and eslint-plugin-jsdoc: ^39.6.2 with no eslint-plugin-promise.

dependabot · 2025-12-04T06:03:01Z

Superseded by #265.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2025

dependabot bot requested a review from a team as a code owner November 11, 2025 06:02

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2025

dependabot bot mentioned this pull request Nov 11, 2025

Bump @metamask/eslint-config from 11.1.0 to 14.0.0 #231

Closed

cursor bot reviewed Nov 11, 2025

View reviewed changes

dependabot bot force-pushed the dependabot/npm_and_yarn/main/metamask/eslint-config-14.1.0 branch from 4b4f4df to 5f8ce95 Compare November 26, 2025 17:50

dependabot bot force-pushed the dependabot/npm_and_yarn/main/metamask/eslint-config-14.1.0 branch from 5f8ce95 to 4584ecc Compare December 3, 2025 13:21

cursor bot reviewed Dec 3, 2025

View reviewed changes

dependabot bot closed this Dec 4, 2025

dependabot bot deleted the dependabot/npm_and_yarn/main/metamask/eslint-config-14.1.0 branch December 4, 2025 06:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump @metamask/eslint-config from 11.1.0 to 14.1.0 #256

Bump @metamask/eslint-config from 11.1.0 to 14.1.0 #256

dependabot bot commented on behalf of github Nov 11, 2025 •

edited by cursor bot

Loading

Uh oh!

socket-security bot commented Nov 11, 2025 •

edited

Loading

Uh oh!

cursor bot Nov 11, 2025

Uh oh!

cursor bot Dec 3, 2025

Uh oh!

dependabot bot commented on behalf of github Dec 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Bump @metamask/eslint-config from 11.1.0 to 14.1.0 #256

Bump @metamask/eslint-config from 11.1.0 to 14.1.0 #256

Conversation

dependabot bot commented on behalf of github Nov 11, 2025 • edited by cursor bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

14.1.0

@​metamask/eslint-config 14.1.0

Changed

@​metamask/eslint-config-jest 14.1.0

Changed

@​metamask/eslint-config-typescript 14.1.0

Added

Changed

14.0.0

@​metamask/eslint-config 14.0.0

Changed

@​metamask/eslint-config-browser 14.0.0

Changed

Uh oh!

socket-security bot commented Nov 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor bot Nov 11, 2025

Choose a reason for hiding this comment

Bug: ESLint Config Upgrade: Major Incompatibilities

Uh oh!

cursor bot Dec 3, 2025

Choose a reason for hiding this comment

Bug: Incompatible peer dependencies with updated eslint-config

Uh oh!

dependabot bot commented on behalf of github Dec 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Nov 11, 2025 •

edited by cursor bot

Loading

`@metamask/eslint-config` 14.1.0

`@metamask/eslint-config-jest` 14.1.0

`@metamask/eslint-config-typescript` 14.1.0

`@metamask/eslint-config` 14.0.0

`@metamask/eslint-config-browser` 14.0.0

socket-security bot commented Nov 11, 2025 •

edited

Loading