Skip to content

build(deps-dev): bump @eslint-react/eslint-plugin from 5.30.1 to 5.30.2 in /frontend - #240

Merged
YusukeKato merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/eslint-react/eslint-plugin-5.30.1
Nov 15, 2026
Merged

YusukeKato merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/eslint-react/eslint-plugin-5.30.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @eslint-react/eslint-plugin from 5.30.1 to 5.30.2.

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.30.2 (2026-11-12)

What's Changed

🐞 Fixes

  • react-web-api/no-leaked-fetch: non-global fetch calls are no longer checked: a bare fetch(...) whose name is bound by an enclosing scope (ex: a local function fetch() {}) and member calls on non-global objects (ex: api.fetch(...)) are ignored, while window.fetch(...), globalThis.fetch(...), and self.fetch(...) are still recognized. (#2116, closes #2072)

Full Changelog: Rel1cx/eslint-react@v5.30.1...v5.30.2

Attestation

https://github.com/Rel1cx/eslint-react/attestations/66354611

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.30.2 (2026-11-12)

🐞 Fixes

  • react-web-api/no-leaked-fetch: non-global fetch calls are no longer checked: a bare fetch(...) whose name is bound by an enclosing scope (ex: a local function fetch() {}) and member calls on non-global objects (ex: api.fetch(...)) are ignored, while window.fetch(...), globalThis.fetch(...), and self.fetch(...) are still recognized. (#2116, closes #2072)

Full Changelog: Rel1cx/eslint-react@v5.30.1...v5.30.2

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 14, 2026
Bumps [@eslint-react/eslint-plugin](https://github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin) from 5.30.1 to 5.30.2.
- [Release notes](https://github.com/Rel1cx/eslint-react/releases)
- [Changelog](https://github.com/Rel1cx/eslint-react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Rel1cx/eslint-react/commits/v5.30.2/plugins/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@eslint-react/eslint-plugin"
  dependency-version: 5.30.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump @eslint-react/eslint-plugin from 5.28.8 to 5.30.1 in /frontend build(deps-dev): bump @eslint-react/eslint-plugin from 5.30.1 to 5.30.2 in /frontend Nov 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/eslint-react/eslint-plugin-5.30.1 branch from cd4590b to ec9f75d Compare November 15, 2026 01:14
@YusukeKato
YusukeKato merged commit e8bee7b into main Nov 15, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/frontend/eslint-react/eslint-plugin-5.30.1 branch November 15, 2026 01:41

Copy link
Copy Markdown
Owner

追加の修正版3件(#234 FastAPI 0.162.5、#236 Playwright 1.65.1、本PR ESLint React 5.30.2)を、最終main e8bee7b2d4e6e2957b8bcbc51053fed57bd24cb6 で本番確認まで完了しました。

各PRの対象headで全CI成功・レビュー未解決事項なしを確認し、一時cloneで合成差分を照合しました。変更は4ファイル、PythonはFastAPI/Playwrightのversion・配布hashのみ、frontendはESLint React関連13 packageのpatch更新です。新しいsource修正は作成していません。最終mainの全検査は次のとおり成功しています。

  • Python 3.12/3.13/3.14 各1,099件、frontend 127件。
  • 全148問回帰を含むrootless Compose 69件(569.57秒)。browser 1件のdeselect分は独立した3 browser jobで検証し、更新後Playwright 1.65.1の代表画面も確認。
  • Supply Chain CI・署名と本番配備成功。取得したSBOM/レポートのsourceと記録hash・実versionを照合。署名付きruntime archive全体は配備CIが検証しています。停止対象・例外・risk acceptanceは0件ですが、既知の検出自体は残っています。
  • 公開148問・詳細/画像、配備frontendのindex digest一致、日英・320/1440幅の表示を確認。chmod提出ID330は20 UTF-8 bytes完全一致、画像提出ID331もAccepted。各1回、両方 persistence=saved、応答原文を保持。
  • primary mainをff同期してclean。取り込み済みbranchをhead照合後に整理し、公開中PR0件・リモートmainのみを確認。

公開確認クライアントには先の#242でCA検査済みのPlaywright 1.65.0 imageを再利用しました。更新版1.65.1は今回のmain CI imageで検証済みです。実機iOS/Androidは未確認。ホストOS/kernel更新や新規問題の実装は今回の範囲外です。

Codexが作成した各squash commitの共同著者行も1回ずつ確認済みです。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant