chore(deps-dev): bump the npm-dependencies group with 4 updates by dependabot[bot] · Pull Request #992 · react-component/picker

dependabot · 2026-07-03T12:43:57Z

Bumps the npm-dependencies group with 4 updates: @eslint/js, date-fns, eslint and moment-timezone.

Updates @eslint/js from 9.39.4 to 10.0.1

Release notes

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

84fb885 chore: package.json update for @eslint/js release
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
b4b3127 chore: package.json update for @eslint/js release
0b14059 chore: package.json update for @eslint/js release
fa31a60 feat!: add name to configs (#20015)
1e2cad5 chore: package.json update for @eslint/js release
454a292 feat!: update eslint:recommended configuration (#20210)
c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
See full diff in compare view

Updates date-fns from 2.30.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @ImRodry and @puneetdixit200 for their contributions.

Fixed

Fixed missing modularized optimization fallback (for Next.js and others). See #4193.

Fixed pt locale first day of week to be Sunday. See #4195 by @ImRodry.

Fixed zh-CN, zh-HK, and zh-TW locale month parsing for October, November, and December. See #4194 by @puneetdixit200.

v4.2.1

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

v4.1.0

This release adds time zone support to format functions (that I somehow missed when working on the feature) and fixes a few bugs.

Make sure also upgrade TZDate to v1.0.2 as it includes a bunch of critical bug fixes.

Fixed

Fixed internal constructFrom throwing an exception on null arguments. While null isn't allowed, the functions should rather return Invalid Date or NaN in such cases. See #3885.

Added

... (truncated)

Commits

cd53d25 Promote to v4.4.0
d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
ee65753 Add root mise :format task
9f5bdf5 Add positional argument to test/smoke.sh script
651ead6 Split CDN bundles into separate @date-fns/cdn package
224c1a2 Deprecate type tests as attw hangs on date-fns package
7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
b6ad5ac Add flags to control package build script
424a783 Fix docs release after moving to monorepo setup
f95bcf1 (docs): Add missing tsx dependency
Additional commits viewable in compare view

Updates eslint from 9.39.4 to 10.6.0

Release notes

Sourced from eslint's releases.

v10.6.0

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)

bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)

8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)

5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)

9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)

d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)

2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)

63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)

7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)

399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)

f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)

bea49f7 docs: Update README (GitHub Actions Bot)

e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)

8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)

3eb3d9b docs: Update README (GitHub Actions Bot)

c5bb59c docs: Update README (GitHub Actions Bot)

eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)

3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])

c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)

a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)

27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)

865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])

27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)

970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)

b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])

6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

v10.5.0

Features

5ca8c52 feat: correct stack tracking in max-nested-callbacks (#20973) (Pixel998)

b565783 feat: report no-with violations at the with keyword (#20971) (Pixel998)

2ce032f feat: report max-lines-per-function violations at function head (#20966) (Pixel998)

732cb3e feat: report max-nested-callbacks violations at function head (#20967) (Pixel998)

f9c138a feat: report max-depth violations on keywords (#20943) (Pixel998)

bdb496c feat: correct max-depth handling for else-if chains (#20944) (Pixel998)

c296873 feat: update error loc in max-statements to function header (#20907) (Taejin Kim)

Documentation

... (truncated)

Commits

5d12a04 10.6.0
f7ca54b Build: changelog update for 10.6.0
6a42034 ci: run ecosystem tests on main branch (#20891)
b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014)
c3abfca chore: correct JSDoc param types in html formatter (#21018)
a83683d docs: Update README
a832320 ci: split ecosystem tests into separate jobs (#21001)
6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013)
Additional commits viewable in compare view

Updates moment-timezone from 0.5.48 to 0.6.2

Release notes

Sourced from moment-timezone's releases.

Release 0.6.2

Updated data to IANA TZDB 2026b. #1145

Release 0.6.1

Updated data to IANA TZDB 2026a. #1140

NOTE: This release does not include recently-announced DST changes for British Columbia, Canada. Those changes will likely be in 2026b.

Release 0.6.0

Fixed and updated TypeScript definitions. #1132

Updated types to more accurately match the code implementation.

Added definitions for pre-built files (e.g. moment-timezone-with-data.js).

This release is a potential breaking change for TypeScript projects only. The types are now more accurate, but consumers might hit errors if they were relying on the more relaxed types.

No implementation code has changed in this release.

Changelog

Sourced from moment-timezone's changelog.

0.6.2 2026-04-26

Updated data to IANA TZDB 2026b. #1145

0.6.1 2026-03-18

Updated data to IANA TZDB 2026a. #1140

0.6.0 2025-05-25

Fixed and updated TypeScript definitions. #1132

Updated types to more accurately match the code implementation.

Added definitions for pre-built files (e.g. moment-timezone-with-data.js).

This release is a potential breaking change for TypeScript projects only. The types are now more accurate, but consumers might hit errors if they were relying on the more relaxed types.

No implementation code has changed in this release.

Commits

466c890 Bump version and build moment-timezone 0.6.2
e311deb Merge pull request #1145 from moment/data/2026b
3270009 data: Add 2026b
f498d96 build(deps): bump picomatch from 2.3.1 to 2.3.2 (#1143)
13e724c Build moment-timezone 0.6.1
22070ff Bump version to 0.6.1
b4ebddb Merge pull request #1140 from moment/automated/data-update
cb47a65 data: Add 2026a
026466a build(deps): bump lodash from 4.17.21 to 4.17.23 (#1137)
6dc5413 Update Antarctica guess tests for 2026
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 4 updates: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [date-fns](https://github.com/date-fns/date-fns), [eslint](https://github.com/eslint/eslint) and [moment-timezone](https://github.com/moment/moment-timezone). Updates `@eslint/js` from 9.39.4 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `date-fns` from 2.30.0 to 4.4.0 - [Release notes](https://github.com/date-fns/date-fns/releases) - [Commits](date-fns/date-fns@v2.30.0...v4.4.0) Updates `eslint` from 9.39.4 to 10.6.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.6.0) Updates `moment-timezone` from 0.5.48 to 0.6.2 - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](moment/moment-timezone@0.5.48...0.6.2) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: date-fns dependency-version: 4.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: moment-timezone dependency-version: 0.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-07-03T12:44:00Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
picker	Error		Jul 6, 2026 1:47am

socket-security · 2026-07-03T12:44:38Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/eslint@10.6.0

View full report

socket-security · 2026-07-03T12:44:40Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

github-actions · 2026-07-05T07:41:32Z

❌ Deploy failed

	❌ Failed
	🔗 Preview ~~https://react-component-picker-preview-pr-992.surge.sh~~ _{(may be unavailable)}
	📝 Commit	`eaa4939`
	🪵 Logs	View logs

📋 Build log (last lines)

npm error
npm error Could not resolve dependency:
npm error peer eslint@"^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9.7" from eslint-plugin-react@7.37.5
npm error node_modules/eslint-plugin-react
npm error   dev eslint-plugin-react@"^7.37.5" from the root project
npm error   eslint-plugin-react@"^7.32.2" from @umijs/fabric@4.0.1
npm error   node_modules/@umijs/fabric
npm error     @umijs/fabric@"^4.0.0" from rc-test@7.1.3
npm error     node_modules/rc-test
npm error       dev rc-test@"^7.1.3" from the root project
npm error
npm error Conflicting peer dependency: eslint@9.39.4
npm error node_modules/eslint
npm error   peer eslint@"^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9.7" from eslint-plugin-react@7.37.5
npm error   node_modules/eslint-plugin-react
npm error     dev eslint-plugin-react@"^7.37.5" from the root project
npm error     eslint-plugin-react@"^7.32.2" from @umijs/fabric@4.0.1
npm error     node_modules/@umijs/fabric
npm error       @umijs/fabric@"^4.0.0" from rc-test@7.1.3
npm error       node_modules/rc-test
npm error         dev rc-test@"^7.1.3" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /home/runner/.npm/_logs/2026-07-06T01_49_10_313Z-eresolve-report.txt
npm error A complete log of this run can be found in: /home/runner/.npm/_logs/2026-07-06T01_49_10_313Z-debug-0.log

_{🤖 Powered by surge-preview}

codecov · 2026-07-06T01:49:29Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.81%. Comparing base (9ff9450) to head (eaa4939).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #992   +/-   ##
=======================================
  Coverage   98.81%   98.81%           
=======================================
  Files          66       66           
  Lines        2698     2698           
  Branches      724      744   +20     
=======================================
  Hits         2666     2666           
  Misses         29       29           
  Partials        3        3

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 3, 2026

This was referenced Jul 3, 2026

chore(deps-dev): bump date-fns from 2.30.0 to 4.4.0 #981

Closed

chore(deps-dev): bump eslint from 8.57.1 to 10.6.0 #983

Closed

vercel Bot had a problem deploying to Preview – picker July 3, 2026 13:29 Failure

fix: support eslint 10 dependency update

d3da0f0

vercel Bot had a problem deploying to Preview – picker July 5, 2026 07:39 Failure

fix: resolve eslint 10 lint errors

db49822

vercel Bot had a problem deploying to Preview – picker July 6, 2026 01:33 Failure

fix: support date-fns typed localizers

eaa4939

vercel Bot had a problem deploying to Preview – picker July 6, 2026 01:47 Failure

afc163 merged commit dc1644d into master Jul 6, 2026
14 of 15 checks passed

afc163 deleted the dependabot/npm_and_yarn/npm-dependencies-ba0efb95ae branch July 6, 2026 01:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps-dev): bump the npm-dependencies group with 4 updates#992

chore(deps-dev): bump the npm-dependencies group with 4 updates#992
afc163 merged 4 commits into
masterfrom
dependabot/npm_and_yarn/npm-dependencies-ba0efb95ae

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

vercel Bot commented Jul 3, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 3, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 3, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 5, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Jul 6, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 3, 2026

v10.0.1

Bug Fixes

Documentation

Chores

v10.0.0

Breaking Changes

Features

v4.4.0

Changed

v4.3.0

Fixed

v4.2.1

Fixed

v4.2.0

Changed

v4.1.0

Fixed

Added

v10.6.0

Features

Bug Fixes

Documentation

Chores

v10.5.0

Features

Documentation

Release 0.6.2

Release 0.6.1

Release 0.6.0

0.6.2 2026-04-26

0.6.1 2026-03-18

0.6.0 2025-05-25

Uh oh!

vercel Bot commented Jul 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy failed

Uh oh!

codecov Bot commented Jul 6, 2026

Codecov Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`0.6.2` 2026-04-26

`0.6.1` 2026-03-18

`0.6.0` 2025-05-25

vercel Bot commented Jul 3, 2026 •

edited

Loading

socket-security Bot commented Jul 3, 2026 •

edited

Loading

socket-security Bot commented Jul 3, 2026 •

edited

Loading

github-actions Bot commented Jul 5, 2026 •

edited

Loading