chore(deps): Bump eslint-plugin-unicorn from 64.0.0 to 65.0.0 by dependabot[bot] · Pull Request #526 · nullvariant/nullvariant-vscode-extensions

dependabot · 2026-06-08T06:44:32Z

Bumps eslint-plugin-unicorn from 64.0.0 to 65.0.0.

Release notes

Sourced from eslint-plugin-unicorn's releases.

v65.0.0

Breaking

Drop better-regex rule (#2968) 89dc5dc0

It's too broken and it's not feasible to fix it.

Rename ignore* boolean options to check* for consistency (#3045) 8acfea1d

expiring-todo-comments: ignoreDates → checkDates

expiring-todo-comments: ignoreDatesOnPullRequests → checkDatesOnPullRequests

prefer-export-from: ignoreUsedVariables → checkUsedVariables

Rename prefer-dom-node-dataset rule to dom-node-dataset 3f51bc64

expiring-todo-comments: Make checkDates option true by default (#3044) 5e31bba7

prefer-global-this: Remove exemption for WebWorker-specific APIs (#2926) add2138b

New rules

better-dom-traversing (#3052) df50cee1

consistent-compound-words (#3061) fcacf46b

consistent-json-file-read (#2987) d9d38620

no-array-fill-with-reference-type (#3039) 47356fa7

no-array-from-fill (#3007) 57324cb9

no-blob-to-file (#2993) 7302833c

no-canvas-to-image (#2985) b4a5af12

no-confusing-array-splice (#2978) 01ae1d2a

no-duplicate-set-values (#2995) f29a382d

no-exports-in-scripts (#3015) 4cbb5293

no-incorrect-query-selector (#3059) 150b5f10

no-invalid-file-input-accept (#3047) 2c8d77be

no-late-current-target-access (#2974) db860861

no-manually-wrapped-comments (#3036) 87fe35b3

no-this-outside-of-class (#3030) 21fc3691

no-unnecessary-nested-ternary (#3023) cc1ced20

no-unused-array-method-return (#2940) a7d8a6ca

prefer-array-last-methods (#3029) 108d7a13

prefer-get-or-insert-computed (#2979) f48f3800

prefer-https (#3014) 838695ea

prefer-includes-over-repeated-comparisons (#3056) 3c5880e3

prefer-iterator-concat (#2998) 5c52d0cb

prefer-iterator-to-array-at-end (#3041) 6b341b6e

prefer-math-abs (#2996) 7df5b485

prefer-queue-microtask (#3050) 3fc8b037

prefer-split-limit (#3019) 6308c1df

prefer-string-match-all (#3057) c9b5ec83

prefer-string-pad-start-end (#3002) 3736c66c

prefer-string-repeat (#2988) e52c4550

require-css-escape (#3037) 55ff804b

require-passive-events (#3004) 4c175686

try-complexity (#3055) e7a19996

Improvements

... (truncated)

Commits

cc1880b 65.0.0
fcacf46 Add consistent-compound-words rule (#3061)
a99fbf4 Docs: Improve usage examples (#2952)
49535b0 prefer-set-has: Allow compatible extra usages (#3060)
150b5f1 Add no-incorrect-query-selector rule (#3059)
b0248a6 no-array-reduce: Add autofix (#3058)
3c5880e Add prefer-includes-over-repeated-comparisons rule (#3056)
c9b5ec8 Add prefer-string-match-all rule (#3057)
e7a1999 Add try-complexity rule (#3055)
fc18bd9 prevent-abbreviations: Avoid unsafe parameter autofixes (#3054)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) from 64.0.0 to 65.0.0. - [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases) - [Commits](sindresorhus/eslint-plugin-unicorn@v64.0.0...v65.0.0) --- updated-dependencies: - dependency-name: eslint-plugin-unicorn dependency-version: 65.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-08T06:44:33Z

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

socket-security · 2026-06-08T06:44:51Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint-plugin-unicorn@64.0.0 ⏵ 65.0.0			⁺¹	^-5

View full report

github-actions · 2026-06-08T06:44:59Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/eslint-plugin-unicorn

^65.0.0

Unknown

npm/detect-indent

7.0.2

🟢 3.8

Details

Check	Score	Reason
Code-Review	🟢 3	Found 9/30 approved changesets -- score normalized to 3
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/eslint-plugin-unicorn

65.0.0

🟢 5.2

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	25 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 4	Found 13/29 approved changesets -- score normalized to 4
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

extensions/git-id-switcher/package.json
package-lock.json

nullvariant-luna · 2026-06-08T06:45:07Z

👧 Luna's Exploration Report 📦

No new dependencies added. Just version bumps! Nothing to explore here... 😴

Botに418返そうよ！

This report was curiously compiled by nullvariant-luna[bot]

nullvariant-blaze · 2026-06-08T06:45:09Z

🐗 Blaze's Release Review 📦

No version bump. Just dependency changes... boring. Wake me up when it's deploy time! 😤

よっしゃ！デプロイしまくるぞ！

This review was ENTHUSIASTICALLY filed by nullvariant-blaze[bot]

nullvariant-mimi · 2026-06-08T06:45:42Z

🐰 Mimi's Validation Report 🚨

...ears twitching... something failed validation!

🔴 VALIDATION FAILED: 1 check(s) did not pass.

Failed: build (ubuntu-latest)

Please fix the issues and push again. I believe in you!

バリデーターを通してくださいね

This report was carefully prepared by nullvariant-mimi[bot]

github-actions · 2026-06-08T06:46:11Z

VEX Assessment: `not_affected`

This dependency update modifies devDependencies only.

Status: not_affected
Justification: vulnerable_code_not_in_execute_path
Impact: Zero production dependencies. No third-party code is included in the published VSIX.

Any CVEs in updated devDependencies do not affect end users. The VEX document will be automatically updated by the weekly VEX Auto-Update workflow.

🤖 Automated VEX assessment

nullvariant-ciel · 2026-06-08T06:46:41Z

🕊️ Ciel's Mediation 🌤️

*~~ floating down from the clouds ~~ The zoo seems a bit noisy today...*

3 zoo members have reviewed this PR.

Zoo Member	Status
🐰 Mimi	Commented
👧 Luna	Commented
🐗 Blaze	Commented

⚖️ The zoo has mixed opinions. Some are concerned, some are fine with it. Please review each comment carefully and make the final call.

まあまあ、ほどほどに。

This mediation was peacefully delivered by nullvariant-ciel[bot]

nullvariant · 2026-06-11T01:52:26Z

Superseded by #533, which includes this bump plus the fixes for the 39 lint violations introduced by unicorn 65's new recommended rules.

dependabot · 2026-06-11T01:52:30Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 8, 2026

nullvariant mentioned this pull request Jun 11, 2026

fix(lint): resolve eslint-plugin-unicorn 65.0.0 violations #533

Merged

12 tasks

nullvariant closed this Jun 11, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/eslint-plugin-unicorn-65.0.0 branch June 11, 2026 01:52

Navigation Menu

Uh oh!

chore(deps): Bump eslint-plugin-unicorn from 64.0.0 to 65.0.0 - #526

chore(deps): Bump eslint-plugin-unicorn from 64.0.0 to 65.0.0#526
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-plugin-unicorn-65.0.0

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

socket-security Bot commented Jun 8, 2026

Uh oh!

github-actions Bot commented Jun 8, 2026

Uh oh!

nullvariant-luna Bot commented Jun 8, 2026

Uh oh!

nullvariant-blaze Bot commented Jun 8, 2026

Uh oh!

nullvariant-mimi Bot commented Jun 8, 2026

Uh oh!

github-actions Bot commented Jun 8, 2026

Uh oh!

nullvariant-ciel Bot commented Jun 8, 2026 •

edited

Loading

Uh oh!

nullvariant commented Jun 11, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026

v65.0.0

Breaking

New rules

Improvements

Uh oh!

dependabot Bot commented on behalf of github Jun 8, 2026

Labels

Uh oh!

socket-security Bot commented Jun 8, 2026

Uh oh!

github-actions Bot commented Jun 8, 2026

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

nullvariant-luna Bot commented Jun 8, 2026

👧 Luna's Exploration Report 📦

Uh oh!

nullvariant-blaze Bot commented Jun 8, 2026

🐗 Blaze's Release Review 📦

Uh oh!

nullvariant-mimi Bot commented Jun 8, 2026

🐰 Mimi's Validation Report 🚨

Uh oh!

github-actions Bot commented Jun 8, 2026

VEX Assessment: not_affected

Uh oh!

nullvariant-ciel Bot commented Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🕊️ Ciel's Mediation 🌤️

Uh oh!

nullvariant commented Jun 11, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

VEX Assessment: `not_affected`

nullvariant-ciel Bot commented Jun 8, 2026 •

edited

Loading