Bump the tseslint group with 2 updates by dependabot[bot] · Pull Request #648 · guibranco/github-file-reader-action-v2

dependabot · 2026-07-06T08:15:12Z

Bumps the tseslint group with 2 updates: @typescript-eslint/eslint-plugin and @typescript-eslint/parser.

Updates @typescript-eslint/eslint-plugin from 8.62.0 to 8.62.1

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)

eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

mdm317

Patrick Aleite

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.62.1 (2026-06-29)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)

eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

mdm317

Patrick Aleite

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

3ea32f4 chore(release): publish 8.62.1
4ecca6d fix(eslint-plugin): [no-unnecessary-type-assertion] parenthesize object liter...
f3a7ec7 chore(eslint-plugin-internal): [no-dynamic-tests] restrict where noFormat can...
301f350 fix(eslint-plugin): [no-unnecessary-boolean-literal-compare] preserve boolean...
ebce2d4 fix(eslint-plugin): [prefer-optional-chain] use suggestion instead of autofix...
See full diff in compare view

Updates @typescript-eslint/parser from 8.62.0 to 8.62.1

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)

eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

mdm317

Patrick Aleite

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.62.1 (2026-06-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

3ea32f4 chore(release): publish 8.62.1
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the tseslint group with 2 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser). Updates `@typescript-eslint/eslint-plugin` from 8.62.0 to 8.62.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.62.0 to 8.62.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/parser) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.62.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: tseslint - dependency-name: "@typescript-eslint/parser" dependency-version: 8.62.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: tseslint ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-06T08:16:12Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@typescript-eslint/parser@8.62.0 ⏵ 8.62.1
	@typescript-eslint/eslint-plugin@8.62.0 ⏵ 8.62.1			⁺¹

View full report

socket-security · 2026-07-06T08:16:14Z

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Block		Embedded URLs or IPs: npm `@typescript-eslint/eslint-plugin` URLs: https://typescript-eslint.io/rules/no-empty-object-type, https://github.com/typescript-eslint/typescript-eslint/pull/8977, https://typescript-eslint.io/rules/no-require-imports, https://github.com/typescript-eslint/typescript-eslint/pull/8334, https://eslint.org/docs/latest/rules/no-loss-of-precision, https://github.com/typescript-eslint/typescript-eslint/pull/8832, https://perfectionist.dev, https://perfectionist.dev/rules/sort-intersection-types, https://perfectionist.dev/rules/sort-union-types, https://github.com/typescript-eslint/typescript-eslint/pull/9253, https://typescript-eslint.io/rules/consistent-type-definitions, https://github.com/typescript-eslint/typescript-eslint/pull/6229, https://typescript-eslint.io/rules/, https://typescript-eslint.io/rules/ban-ts-comment, https://github.com/typescript-eslint/typescript-eslint/pull/9081 Location: Package overview From: package-lock.json → `npm/@typescript-eslint/eslint-plugin@8.62.1` ℹ Read more on: This package \| This alert \| What are URL strings? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Review all remote URLs to ensure they are intentional, pointing to trusted sources, and not being used for data exfiltration or loading untrusted code at runtime. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@typescript-eslint/eslint-plugin@8.62.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Block		Embedded URLs or IPs: npm `@typescript-eslint/scope-manager` URLs: es2020.date, es2017.date, esnext.date Location: Package overview From: package-lock.json → `npm/@typescript-eslint/parser@8.62.1` → `npm/@typescript-eslint/eslint-plugin@8.62.1` → `npm/@typescript-eslint/scope-manager@8.62.1` ℹ Read more on: This package \| This alert \| What are URL strings? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Review all remote URLs to ensure they are intentional, pointing to trusted sources, and not being used for data exfiltration or loading untrusted code at runtime. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@typescript-eslint/scope-manager@8.62.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Block		Embedded URLs or IPs: npm `@typescript-eslint/typescript-estree` URLs: https://tseslint.com/allowdefaultproject-glob-too-wide, https://tseslint.com/are-project-references-supported, https://tseslint.com/none-of-those-tsconfigs-include-this-file, https://tseslint.com/parser-tsconfigrootdir, https://tseslint.com/key-property-deprecated., https://github.com/typescript-eslint/typescript-eslint/issues/new/choose. Location: Package overview From: package-lock.json → `npm/@typescript-eslint/parser@8.62.1` → `npm/@typescript-eslint/eslint-plugin@8.62.1` → `npm/@typescript-eslint/typescript-estree@8.62.1` ℹ Read more on: This package \| This alert \| What are URL strings? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Review all remote URLs to ensure they are intentional, pointing to trusted sources, and not being used for data exfiltration or loading untrusted code at runtime. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@typescript-eslint/typescript-estree@8.62.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

codacy-production · 2026-07-06T08:18:41Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

guibranco

Automatically approved by gstraccini[bot]

sonarqubecloud · 2026-07-06T08:31:32Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot assigned guibranco Jul 6, 2026

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code npm labels Jul 6, 2026

github-actions Bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Jul 6, 2026

guibranco enabled auto-merge (squash) July 6, 2026 08:21

gstraccini Bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Jul 6, 2026

gstraccini Bot approved these changes Jul 6, 2026

View reviewed changes

gstraccini Bot added the 🤖 bot Automated processes or integrations label Jul 6, 2026

guibranco approved these changes Jul 6, 2026

View reviewed changes

gstraccini Bot added the 📦 dependencies label Jul 6, 2026

Merge branch 'main' into dependabot/npm_and_yarn/tseslint-c5113bf4f6

5b84792

guibranco merged commit 80fee7e into main Jul 6, 2026
36 of 48 checks passed

guibranco deleted the dependabot/npm_and_yarn/tseslint-c5113bf4f6 branch July 6, 2026 08:48

Navigation Menu

Bump the tseslint group with 2 updates - #648

Bump the tseslint group with 2 updates#648
guibranco merged 2 commits into
mainfrom
dependabot/npm_and_yarn/tseslint-c5113bf4f6

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

socket-security Bot commented Jul 6, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 6, 2026 •

edited

Loading

Uh oh!

codacy-production Bot commented Jul 6, 2026

Uh oh!

guibranco left a comment

Uh oh!

sonarqubecloud Bot commented Jul 6, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 6, 2026

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

❤️ Thank You

8.62.1 (2026-06-29)

🩹 Fixes

❤️ Thank You

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

❤️ Thank You

8.62.1 (2026-06-29)

Uh oh!

socket-security Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codacy-production Bot commented Jul 6, 2026

Up to standards ✅

Uh oh!

guibranco left a comment

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud Bot commented Jul 6, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

socket-security Bot commented Jul 6, 2026 •

edited

Loading

socket-security Bot commented Jul 6, 2026 •

edited

Loading