Skip to content

fix(deps): update linters - #2188

Open
squiggler-app[bot] wants to merge 2 commits into
mainfrom
renovate/linters
Open

squiggler-app[bot] wants to merge 2 commits into
mainfrom
renovate/linters

Conversation

@squiggler-app

@squiggler-app squiggler-app Bot commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@oxlint/plugins (source) ^1.86.0 → ^1.91.0 age confidence
eslint-plugin-storybook (source) ^10.6.0 → ^10.6.5 age confidence
oxfmt (source) ^0.73.0 → ^0.76.0 age confidence
oxlint (source) ^1.83.0 → ^1.91.0 age confidence

Release Notes

storybookjs/storybook (eslint-plugin-storybook)

v10.6.5

Compare Source

v10.6.4

Compare Source

v10.6.3

Compare Source

v10.6.2

Compare Source

v10.6.1

Compare Source

oxc-project/oxc (oxfmt)

v0.76.0: oxfmt v0.76.0

Compare Source

💥 BREAKING CHANGES
  • 296623d oxfmt: [BREAKING] Format parser:html files by oxc_formatter_htmlish (#​28273) (Yuji Sugiura)
🚀 Features
  • 336b2c1 oxfmt: Support html-in-js templates closing a dynamic tag name (#​28389) (Yuji Sugiura)
  • 0a42af6 formatter_htmlish: Format end tags of omitted html, head and body (#​28388) (Yuji Sugiura)
  • 44d8c2b formatter_htmlish: Implement HTML-ish formatter Html variant (#​28272) (Yuji Sugiura)
  • 36e5ddb oxfmt: Add debug span for reading files (#​28204) (leaysgur)
🐛 Bug Fixes
  • dbcc358 formatter: Keep arrow conditional body parens before a leading function/class (#​28710) (Yuji Sugiura)
  • fef809a formatter_htmlish: Handle XHTML (#​28703) (leaysgur)
  • f3dd201 formatter_htmlish: Keep SVG text under xml:space="preserve" as written (#​28382) (Yuji Sugiura)
  • fb3aefa formatter: Keep source parens around html-in-js placeholders past comments (#​28381) (Yuji Sugiura)
  • e738dae formatter: Quote keys added in an HTML event handler with single quotes (#​28380) (Yuji Sugiura)
  • 2e7a629 oxfmt: Format HTML in a <script> body as an embedded part (#​28379) (Yuji Sugiura)
  • f00862b formatter: Keep parens around a generic function type in a type assertion (#​28173) (vidigoat)
  • 9ead5c4 formatter: Handle this.b and super.b like foo.b (#​28200) (leaysgur)
  • 72a54cf formatter: Break parens of (a + b)[c] like (a + b).c (#​28199) (leaysgur)
  • b8f4f34 formatter: Print x.b and x.#b samely (#​28193) (leaysgur)
  • 9ddccb7 formatter: Keep parens for private field (#​28188) (leaysgur)
⚡ Performance
  • b6f1ac9 formatter_markdown: Bump parser to 0.0.4 and skip unread work (#​28713) (leaysgur)
  • 633ee96 formatter_css: Use u32 spans (#​28708) (leaysgur)
  • f680ee1 formatter_yaml: Use multiline flag for flow scalars (#​28707) (leaysgur)
  • ff7c203 formatter_css: Avoid repeated scans and allocations in values (#​28706) (leaysgur)
  • 7cd46cb formatter_htmlish: Search script end tags by < in embedded (#​28704) (leaysgur)
  • 46f8efd formatter_graphql: Print block string lines borrowed from the source (#​28701) (leaysgur)
  • dce1485 formatter_htmlish: Skip escaping attr values without the chosen quote (#​28700) (leaysgur)
  • e9392c8 formatter_core: Search line terminators with memchr (#​28699) (leaysgur)
  • ceb26be formatter_htmlish: Use char to escape attr quotes (#​28697) (leaysgur)
  • 8239dac parser: Replace dragonbox_ecma with zmij_ecma (#​28282) (Boshen)
📚 Documentation
  • 303d9e8 formatter: Strengthen start-token-no-double-parens rationale (#​28711) (Yuji Sugiura)
  • a82ce83 oxfmt: Update unclassified divergence (#​28685) (Yuji Sugiura)
  • 7f18c20 formatter_htmlish: Note class and srcset are formatted with embeddedLanguageFormatting: off (#​28465) (Yuji Sugiura)
  • 01ed68a oxfmt,formatter_htmlish,formatter: Clean up behavior comments (#​28384) (Yuji Sugiura)
  • a363c27 formatter_css,formatter_yaml: Point parser citations at AGENTS.md (#​28466) (Yuji Sugiura)
  • 6586050 formatter_core: Document tab width in text width policy (#​28393) (leaysgur)
  • 49fbffb formatter_core: Tighten FORMATTER_POLICY (#​28206) (leaysgur)

v0.75.0: oxfmt v0.75.0

Compare Source

🐛 Bug Fixes
  • 5042019 formatter: Keep fill layout for array with comment after [ (#​28170) (leaysgur)
  • 9d37ff6 formatter: Use position-based comment checks for concise arrays (#​28169) (leaysgur)
  • 016c4a2 formatter: Keep a comment before } inside a JSX spread child (#​28103) (vidigoat)
  • 190bb1e formatter: Keep parens around an instantiation expression ending an operand through any tight parent (#​28168) (leaysgur)
  • a5314a1 formatter: Keep ; before in and instanceof class members (#​28166) (leaysgur)
  • 3a56e7c formatter: Keep closing HTML comments at the start of a line (#​28064) (Cameron)
  • 23d23d6 formatter_markdown: Honor range ignore inside directives (#​28164) (leaysgur)
  • 5f1fd3d formatter: Measure width heuristics by display width (#​28098) (leaysgur)
  • a5a52cf formatter: Keep parens around private in expressions (#​28096) (leaysgur)
  • 999496e formatter: Measure a short key by its display width (#​28026) (vidigoat)
  • 7e9aa44 formatter: Keep parens around a looser operand of an instantiation expression (#​28025) (vidigoat)
  • 6912d1f formatter: Keep an arrow signature that exactly fills the line for any body (#​27989) (leaysgur)
  • eb1d9f9 formatter_core: Count a flat line space in fits only when text follows (#​27987) (leaysgur)
⚡ Performance
  • 1ed93af data_structures: Copy short strings without a memcpy call (#​27953) (leaysgur)
  • 7948f0b formatter_core: Shrink FormatElement to 16B (#​28012) (leaysgur)
  • 788af22 formatter: Keep AstNodes on the stack, and only chain links in the arena (#​27963) (leaysgur)
📚 Documentation

v0.74.0: oxfmt v0.74.0

Compare Source

🐛 Bug Fixes
  • e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#​27957) (leaysgur)
  • 782ab6e linter: Search string values without UTF-8 conversion (#​26716) (Dunqing)
  • a5d8184 jsdoc: Parse code spans after quotes in descriptions (#​27955) (leaysgur)
  • 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#​27948) (leaysgur)
  • 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#​27947) (leaysgur)
  • 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#​27946) (leaysgur)
  • c22a9b2 formatter: Treat static block with only empty statements as empty (#​27945) (leaysgur)
  • d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#​27823) (leaysgur)
  • c4c1727 formatter/sort_imports: Keep comments after the last import (#​27822) (leaysgur)
  • a64677e formatter: Print JSDoc embedded snippets with LF (#​27821) (leaysgur)
  • 2c1cc20 formatter: Keep comment only Vue bindings as-is (#​27820) (leaysgur)
  • 1bf236d formatter/sort_imports: Do not use comments as import source (#​27819) (leaysgur)
  • 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#​27818) (leaysgur)
  • 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#​27814) (leaysgur)
  • a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#​27812) (leaysgur)
  • de110ce formatter: Keep more parens around TSInstantiationExpression (#​27811) (leaysgur)
  • 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#​27785) (leaysgur)
  • 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#​27780) (leaysgur)
  • 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#​27778) (leaysgur)
  • 5b2acb0 formatter_core: Report error position releative to CRLF source (#​27777) (leaysgur)
  • c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#​27776) (leaysgur)
  • 3a980c9 formatter_toml: Handle BOM like other languages (#​27775) (leaysgur)
  • 97c9fc4 oxfmt: Handle BOM in config JSON (#​27774) (leaysgur)
  • 28eb4a7 oxfmt: Print trailing newline for --list-different (#​27773) (leaysgur)
  • d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#​27737) (leaysgur)
  • 6a95ec1 formatter: Keep comment position on holey array (#​27730) (leaysgur)
  • 54769da formatter: Break after dangling line comment in holey array (#​27729) (leaysgur)
  • 99077ef formatter_json: Reject unary expressions other than signed numbers (#​27728) (leaysgur)
  • 22cd4cd formatter_json: Handle holey array and comments (#​27727) (leaysgur)
  • 644ca1c formatter: Do not indent logical chains whose right sides all inline (#​27667) (leaysgur)
  • a07a0fb formatter: Wrap comment-only JSX expression container in a group (#​27666) (leaysgur)
⚡ Performance
  • e220293 formatter: Check only the operator suppression mark in is_quiet (#​27952) (leaysgur)
  • e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#​27559) (leaysgur)
  • a342f7e formatter: Skip comment handling for nodes with no comment near them (#​27557) (leaysgur)
  • d8ce750 formatter: Write string literals with swapped quotes into the arena (#​27558) (Yuji Sugiura)
  • 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#​27561) (leaysgur)
  • 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#​27673) (leaysgur)
📚 Documentation
  • 1325225 oxfmt: Update useless comment prefix (#​27956) (leaysgur)
  • d0dd140 formatter: Note lossy cooked round-trip in template embeds (#​27944) (leaysgur)
  • 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#​27824) (leaysgur)
oxc-project/oxc (oxlint)

v1.91.0

Compare Source

🚀 Features
  • 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)

v1.90.0

Compare Source

🚀 Features
  • 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#​28118) (camc314)
  • d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#​28117) (camc314)
  • 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#​28116) (camc314)

v1.89.0

Compare Source

🐛 Bug Fixes
  • 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#​27699) (camc314)

v1.88.0

Compare Source

🚀 Features
  • 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#​27346) (Mikhail Baev)

v1.87.0: oxlint v1.87.0

Compare Source

🚀 Features
  • 42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#​27292) (Mikhail Baev)
  • cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#​27245) (Mikhail Baev)
  • 1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#​27181) (Mikhail Baev)
🐛 Bug Fixes
  • 176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#​27302) (sama Pyb)
  • 7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#​27306) (sama Pyb)
  • 4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#​27304) (sama Pyb)
  • 7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#​27207) (breken)
  • e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#​27206) (breken)
  • 3d61a59 parser: Validate TypeScript type member separators (#​27222) (camc314)
  • f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#​27150) (camc314)
  • 7d60ae3 linter/valid-title: Continue checks after allowed words (#​27146) (Cameron)
  • ad5dd5d linter/eslint/no-unused-vars: Respect disabled argument checks for used ignore patterns (#​26925) (camc314)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 3am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@squiggler-app
squiggler-app Bot requested a review from a team as a code owner October 13, 2026 14:20
@squiggler-app
squiggler-app Bot requested review from pedrobonamin and removed request for a team October 13, 2026 14:20
@squiggler-app
squiggler-app Bot enabled auto-merge (squash) October 13, 2026 14:20
@changeset-bot

changeset-bot Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: d76b745

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@sanity/plugin-kit Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercel Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
plugins-studio Ready Ready Preview Nov 3, 2026 2:13pm UTC
1 Skipped Deployment
Project Deployment Actions Updated
plugins-e2e-test-studio Ignored Ignored Nov 3, 2026 2:13pm UTC

Request Review

@socket-security

socket-security Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​oxfmt@​0.73.0 ⏵ 0.76.0941008895 +1100
Updatednpm/​oxlint@​1.86.0 ⏵ 1.90.09910091 +195 -1100
Updatednpm/​@​oxlint/​plugins@​1.89.0 ⏵ 1.91.01001009996100
Updatednpm/​eslint-plugin-storybook@​10.6.0 ⏵ 10.6.510010010099 +1100

View full report

@stipsan

stipsan commented Oct 13, 2026

Copy link
Copy Markdown
Member

@copilot please run pnpm install (and pnpm dedupe if needed), commit the updated lockfile, and push

auto-merge was automatically disabled October 13, 2026 21:03

Head branch was pushed to by a user without write access

Copilot AI commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

@copilot please run pnpm install (and pnpm dedupe if needed), commit the updated lockfile, and push

pnpm install now passes. The lockfile already contained eslint-plugin-storybook@10.6.1 and oxlint@1.88.0, so install/dedupe required no lockfile changes. I added exact temporary release-age exclusions for the six locked versions blocking the install and pushed that as 822d47f.

stipsan
stipsan previously approved these changes Oct 15, 2026
@stipsan
stipsan enabled auto-merge (squash) October 15, 2026 00:59
pedrobonamin
pedrobonamin previously approved these changes Oct 16, 2026
@pedrobonamin

Copy link
Copy Markdown
Contributor

@copilot resolve the merge conflicts in this pull request

auto-merge was automatically disabled October 16, 2026 09:16

Head branch was pushed to by a user without write access

Copilot AI dismissed stale reviews from pedrobonamin and stipsan via 6cf7cfb October 16, 2026 09:16

Copilot AI commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

@copilot resolve the merge conflicts in this pull request

Merged main and resolved the lockfile conflict in merge commit 6cf7cfb. Frozen install passes.

@pedrobonamin
pedrobonamin requested a review from stipsan October 16, 2026 09:29
@github-actions

github-actions Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

✅ E2E Tests

🟢 55 passed • 🟡 1 flaky • view full report • view run

Studio: https://plugins-e2e-test-studio-gi4myjsrw.sanity.dev

Datasets: pr-2188-chromium-41651270477, pr-2188-firefox-41651270477

@github-actions

Copy link
Copy Markdown

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 35.8% 6538 / 18261
🔵 Statements 35.72% 6967 / 19503
🔵 Functions 31.92% 1751 / 5485
🔵 Branches 27.23% 3500 / 12853
File CoverageNo changed files found.
Generated in workflow #11051 for commit 6cf7cfb by the Vitest Coverage Report Action

stipsan
stipsan previously approved these changes Oct 16, 2026
@stipsan
stipsan enabled auto-merge (squash) October 16, 2026 23:02
pedrobonamin
pedrobonamin previously approved these changes Nov 2, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit a2b122f. Configure here.

Comment thread pnpm-workspace.yaml Outdated
oxfmt: ^0.73.0
oxlint: ^1.83.0
oxfmt: ^0.75.0
oxlint: ^1.90.0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oxlint tsgolint peer version mismatch

Medium Severity

oxlint is now ^1.90.0, which declares a peer of oxlint-tsgolint >=7.0.2005, but the catalog and lockfile still resolve 7.0.2003. The shared config turns on typeAware and the suspicious category, so type-aware lint can fail when 1.90 sends rules the older tsgolint does not implement.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit a2b122f. Configure here.

This branch was successfully deployed

1 active deployment
Preview – plugins-studio — d76b7452 Deployed Nov 3, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants