chore(deps-dev): bump @wordpress/eslint-plugin from 24.5.0 to 25.7.0

[dependabot]

Bumps @wordpress/eslint-plugin from 24.5.0 to 25.7.0.

Changelog

Sourced from @​wordpress/eslint-plugin's changelog.

25.7.0 (2026-07-14)

25.6.0 (2026-07-01)

25.5.0 (2026-06-24)

25.4.1 (2026-06-16)

25.4.0 (2026-06-10)

25.3.0 (2026-05-27)

25.2.0 (2026-05-14)

New Features

• Added no-non-module-stylesheet-imports rule to prevent importing non-module stylesheets from JavaScript files (#77984).

25.1.0 (2026-04-29)

New Features

• Added use-import-as rule to enforce configured aliases for selected named imports and direct unlock( privateApis ) destructuring (#77389).
• Added no-unsafe-render-order rule to flag unsafe render-prop composition with VisuallyHidden and Link/Text (#77428).

Enhancements

• Improved the Design System token lint rules to recognize CSS declaration strings more accurately, avoiding false bare-token reports for declarations while still flagging invalid token assignments and unknown token names (#77384).
• Update use-recommended-components rule to prefer VisuallyHidden from @wordpress/ui over @wordpress/components (#77575).

25.0.0 (2026-04-15)

Breaking Changes

• Upgraded to ESLint v10 with flat config format. The plugin now exports flat config arrays instead of eslintrc objects. Consumers must migrate from .eslintrc.* files to eslint.config.mjs. See the migration guide for details (#76654).
• The minimum required ESLint version is now ^9.0.0 || ^10.0.0 (#76654).
• Upgraded eslint-plugin-import to v2.31+ (wrapped with fixupPluginRules for flat config compatibility) (#76654).
• Upgraded @typescript-eslint/* from v6 to v8 (via the unified typescript-eslint package) (#76654).
• Replaced eslint-plugin-eslint-comments with @eslint-community/eslint-plugin-eslint-comments. Rule prefixes changed from eslint-comments/* to @eslint-community/eslint-comments/* (#76654).

New Features

• Added @wordpress/eslint-plugin/eslintrc entry point — a compatibility wrapper for ESLint v9 consumers still using .eslintrc.* files. This is deprecated and will be removed in a future major version (#76654).
• Configs are now exported as flat config arrays (e.g., wordpress.configs.recommended returns an array of config objects suitable for spreading into eslint.config.mjs) (#76654).

Enhancements

• Disabled the jsx-a11y/heading-has-content rule in the recommended configuration, which reports many false positives when heading elements are passed via a render prop (#77073).

Commits

• e9a74f9 chore(release): publish
• 2a0c375 Update changelog files
• e61c854 Merge changes published in the Gutenberg plugin "release/23.6" branch
• 1055a35 Update changelog files
• 8ca3e8e Merge changes published in the Gutenberg plugin "release/23.6" branch
• 66c8050 Fix wp/latest release metadata (#79821)
• d0d1bfc Update changelog files
• 66315f3 Merge changes published in the Gutenberg plugin "release/23.5" branch
• 74218a2 Update changelog files
• 504adfc Revert "Update changelog files"
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by desrosj, a new releaser for @​wordpress/eslint-plugin since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​wordpress/​eslint-plugin@​25.6.0 ⏵ 25.7.0	-5
	npm/​@​wordpress/​i18n@​6.23.0 ⏵ 6.24.0

View full report