Skip to content

chore(deps): update dependency eslint-plugin-react-hooks to v7 #9718

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 29, 2025
Merged

chore(deps): update dependency eslint-plugin-react-hooks to v7 #9718

merged 1 commit into from
Oct 29, 2025

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 6, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
eslint-plugin-react-hooks (source) 5.2.0 -> 7.0.1 age confidence

Release Notes

facebook/react (eslint-plugin-react-hooks)

v7.0.1

Compare Source

v7.0.0

Compare Source

This release slims down presets to just 2 configurations (recommended and recommended-latest), and all compiler rules are enabled by default.

  • Breaking: Removed recommended-latest-legacy and flat/recommended configs. The plugin now provides recommended (legacy and flat configs with all recommended rules), and recommended-latest (legacy and flat configs with all recommended rules plus new bleeding edge experimental compiler rules). (@​poteto in #​34757)

v6.1.1

Compare Source

Note: 6.1.0 accidentally allowed use of recommended without flat config, causing errors when used with ESLint v9's defineConfig() helper. This has been fixed in 6.1.1.

v6.1.0

Compare Source

Note: Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.

  • Breaking: Require Node.js 18 or newer. (@​michaelfaith in #​32458)
  • Breaking: Flat config is now the default recommended preset. Legacy config moved to recommended-legacy. (@​michaelfaith in #​32457)
  • New Violations: Disallow calling use within try/catch blocks. (@​poteto in #​34040)
  • New Violations: Disallow calling useEffectEvent functions in arbitrary closures. (@​jbrown215 in #​33544)
  • Handle React.useEffect in addition to useEffect in rules-of-hooks. (@​Ayc0 in #​34076)
  • Added react-hooks settings config option that to accept additionalEffectHooks that are used across exhaustive-deps and rules-of-hooks rules. (@​jbrown215) in #​34497

v6.0.0

Compare Source

Accidentally released. See 6.1.0 for the actual changes.

Configuration

📅 Schedule: Branch creation - "before 7am on Tuesday,before 7am on Wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security
Copy link

socket-security bot commented Oct 6, 2025 •
edited
Loading

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
[email protected] has Obfuscated code.

Confidence: 0.94

Location: Package overview

From: pnpm-lock.yaml → npm/[email protected]

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate bot force-pushed the renovate/major-react-monorepo branch from 4f370ed to 0838cd6 Compare October 13, 2025 14:45
@renovate renovate bot changed the title chore(deps): update dependency eslint-plugin-react-hooks to v6 chore(deps): update dependency eslint-plugin-react-hooks to v7 Oct 13, 2025
@renovate renovate bot force-pushed the renovate/major-react-monorepo branch from 0838cd6 to 856e61d Compare October 27, 2025 15:11
@renovate renovate bot force-pushed the renovate/major-react-monorepo branch from 856e61d to 6ab5fb2 Compare October 28, 2025 18:13
@socket-security
Copy link

socket-security bot commented Oct 28, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedesbuild@​0.25.11921007391100
Addedlodash.debounce@​4.0.81001007480100
Addedfast-deep-equal@​3.1.31001009978100
Addedpluralize@​8.0.010010010078100
Addedprompts@​2.4.210010010078100
Addedjs-yaml@​4.1.010010010078100
Addeddate-fns@​4.1.01001009278100
Addedfast-glob@​3.3.39910010079100
Addeddecimal.js@​10.6.010010010079100
Addedtree-kill@​1.2.21001009780100
Addedclassnames@​2.5.110010010080100
Addeddataloader@​2.2.310010010081100
Addedcookie@​1.0.210010010082100
Addedexeca@​5.1.19910010083100
Addedchalk@​4.1.210010010083100
Addedglobby@​11.1.09910010084100
Addedresolve@​1.22.119910010085100
Addedfs-extra@​11.3.210010010086100
Addeduuid@​9.0.110010010087100
Addedci-info@​4.3.110010010087100
Addeduuid@​11.1.010010010087100
Addedprettier@​3.6.29910010090100
Addedpretty-format@​29.7.010010010090100
Addedgraphql@​16.11.010010010091100
Addedjest-diff@​29.7.010010010092100
Addeddotenv@​16.6.110010010093100
Addedplaywright@​1.56.110010010099100

View full report

@dcousens dcousens merged commit 56e92cf into main Oct 29, 2025
50 of 51 checks passed
@dcousens dcousens deleted the renovate/major-react-monorepo branch October 29, 2025 04:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@dcousens