build(deps-dev): Bump eslint from 10.6.0 to 10.7.0 in /webui - #335
Merged
github-actions[bot] merged 1 commit intoJul 12, 2026
Merged
Conversation
Bumps [eslint](https://github.com/eslint/eslint) from 10.6.0 to 10.7.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.6.0...v10.7.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Bug Scan Summary
Date: 2026-07-12
Commits inspected: 0b71d17..ae6d5df (1 commit — eslint 10.6.0→10.7.0 devDependency bump)
Result: No critical bugs found.
Investigation
- Diff scope:
webui/package.jsonandwebui/package-lock.jsononly. No application or runtime code changes. - Production path: ESLint is a
devDependencyused bynpm run lintand CI. It is not bundled into the production SPA served by Torrentarr Host. - ESLint 10.7.0: Minor release (2026-07-10) with new rule options and bug fixes; no breaking changes per release notes.
- Config compatibility:
eslint.config.jsuses@eslint/js,typescript-eslint,eslint-plugin-react-hooks, andeslint-plugin-react-refresh— none of the changed rules (max-nested-callbacks,preserve-caught-error,eqeqeq,radix, etc.) are enabled in this project. - Validation on PR branch:
npm run lintpasses cleanly;npx vitest run— 154/154 tests pass.
Deduplication check
- Open PRs searched:
eslint,import finalize,IsFileFiltered,IsImportedAsync— found draft PR #330 (import finalize fix, unrelated to this dep bump); other open PRs are dep-only (#322, #329, #332, #334, #336). - Recently merged PRs (14d): #311 (eslint 10.5.0→10.6.0), #331, #333, and other dep bumps — no overlapping fix.
- Open issues: 0.
- Conclusion: No existing fix needed; safe dev-only maintenance bump.
Notes (below critical bar)
- Known v6.12.4 import-finalize regressions remain on master; fix already tracked in draft PR #330 — not introduced or affected by this PR.
Sent by Cursor Automation: Torrentarr - Find critical bugs
Contributor
There was a problem hiding this comment.
PR Validation (Cursor Automation)
Recommendation: Merge
Primary reason: Dependency-only ESLint bump merges cleanly with master and all requested build/test gates pass.
Gates
| Gate | Status | Notes |
|---|---|---|
| Merge conflicts | Pass | dependabot/npm_and_yarn/webui/eslint-10.7.0 merged cleanly with origin/master; conflicts: none. |
dotnet build |
Pass | dotnet build -c Release succeeded with 0 warnings and 0 errors using .NET SDK 10.0.301. |
dotnet test (non-live) |
Pass | dotnet test -c Release --no-build --filter "Category!=Live" passed: 779 total (Core 173, Infrastructure 403, Host 203), 0 failed, 0 skipped. |
vitest |
Pass | npx vitest run passed: 16 files, 154 tests. |
npm run build (webui) |
Pass | tsc -b && vite build completed successfully. |
Validation
| Axis | Score | Notes |
|---|---|---|
| Purpose | Pass | Keeps the direct frontend dev dependency eslint current from 10.6.0 to 10.7.0. |
| Correctness | Pass | Scope is limited to webui/package.json and webui/package-lock.json; lockfile resolves ESLint 10.7.0 consistently. No Torrentarr runtime/parity surfaces are touched. |
| Tests | Pass | Source tests are unchanged; post-merge test totals exceed the stated baseline and all executed suites passed. |
| Hygiene | Pass | Small Dependabot dependency update only; no generated wwwroot output, SDK junk, temp files, or unrelated changes left in the working tree. |
| Overlap | Pass | No duplicate open PR found for the ESLint 10.7.0 bump; known 2026-06-15 winner themes are not touched. |
Why
This PR is a narrow dev-dependency update for the web UI. The branch merges cleanly into current master, installs cleanly with npm ci, builds successfully in Release, passes the non-live .NET suite, passes the frontend Vitest suite, and produces the frontend production bundle. No platform-specific or Torrentarr-specific behavioral areas are affected.
Note: the required docs/audits/pr-triage-*.md audit file was not present in this checkout or on origin/master; overlap was checked via open PR search and the provided known-winner list.
Overlap
None.
Commands run
git fetch origin mastergit fetch origin dependabot/npm_and_yarn/webui/eslint-10.7.0git checkout -B pr-validate origin/dependabot/npm_and_yarn/webui/eslint-10.7.0git merge origin/mastergit diff origin/master...origin/dependabot/npm_and_yarn/webui/eslint-10.7.0 -- webui/package.json webui/package-lock.jsondotnet restore(via temporary/tmp/dotnetSDK install)dotnet build -c Releasedotnet test -c Release --no-build --filter "Category!=Live"cd webui && npm cicd webui && npx vitest runcd webui && npm run buildgh pr list --repo Feramance/Torrentarr --state open --search "eslint 10.7.0"gh pr view 335 --repo Feramance/Torrentarr --json files,commits,mergeable,state,title,author,url
Sent by Cursor Automation: Torrentarr PR validation triage
This was referenced Jul 19, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps eslint from 10.6.0 to 10.7.0.
Release notes
Sourced from eslint's releases.
Commits
fabd99b10.7.037c5e75Build: changelog update for 10.7.09489379chore: update dependency@eslint/eslintrcto ^3.3.6 (#21076)81a4774chore: updates for v9.39.5 release3e7bf15fix: applyignoreClassesWithImplementsto class expressions (#21069)9835414chore: enable$ExpectTypeannotations in all TypeScript files (#21071)cf2a9bffeat: add errorClassNames option to preserve-caught-error rule (#21032)c30d808docs: Update READMEf8b873afeat: max-nested-callbacks option for constructor callbacks (#21063)72adf6bchore: restrictmarkdownlint-cli2updates in renovate (#21067)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)