chore(deps): update dependency @antfu/eslint-config to v9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@antfu/eslint-config	^5.4.1 → ^9.0.0

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v9.1.0

Compare Source

   🚀 Features

• Update deps  -  by @​antfu (ff246)

   🐞 Bug Fixes

• Update deps and scope unicorn rules  -  by @​antfu (82078)

    View changes on GitHub

v9.0.0

Compare Source

   🚨 Breaking Changes

• react: Update eslint react to 5.0  -  by @​hyoban in #​839 (06a1a)

    View changes on GitHub

v8.3.0

Compare Source

   🚀 Features

• Make perfectionist configurable inside antfu()  -  by @​oliver139 in #​848 (ae1d6)
• stylistic: Allow easy setting brace style  -  by @​oliver139 in #​846 (bd784)
• svelte: Use recommended rules  -  by @​Jungzl in #​842 (6c839)

   🐞 Bug Fixes

• markdown: Scope user rule overrides away from md files  -  by @​antfu and Claude Opus 4.7 (1M context) in #​844 (8d25a)

    View changes on GitHub

v8.2.0

Compare Source

   🐞 Bug Fixes

• Disbale e18e/prefer-static-regex in non-lib mode  -  by @​antfu (52069)

    View changes on GitHub

v8.1.1

Compare Source

   🐞 Bug Fixes

• Update default exclude  -  by @​antfu (527b6)

    View changes on GitHub

v8.1.0

Compare Source

   🐞 Bug Fixes

• Disable some e18e rules  -  by @​antfu (299c2)

    View changes on GitHub

v8.0.0

Compare Source

   🚨 Breaking Changes

• react: Update eslint react to 3.0  -  by @​hyoban in #​832 (83c1d)

   🚀 Features

• Update plugins  -  by @​antfu (ad998)

    View changes on GitHub

v7.7.3

Compare Source

   🐞 Bug Fixes

• Disable some e18e rules  -  by @​antfu (7edec)

    View changes on GitHub

v7.7.2

Compare Source

   🐞 Bug Fixes

• Exclude the zed terminal from editor detection  -  by @​mattmess1221 in #​834 (9484a)
• Enable typescript when tsgo installed  -  by @​9romise in #​833 (4665e)
• e18e: moduleReplacements should only enable in lib  -  by @​antfu (61658)

    View changes on GitHub

v7.7.0

Compare Source

   🚀 Features

• Zed support  -  by @​hyoban in #​827 (30fcb)
• Integrate @​e18e/eslint-plugin  -  by @​9romise in #​830 (ebd46)

   🐞 Bug Fixes

• markdown: Disable 'markdown/fenced-code-language' rule  -  by @​jinghaihan in #​831 (0c44d)

    View changes on GitHub

v7.6.1

Compare Source

   🐞 Bug Fixes

• Separate node plugins setup and rules, fix #​817  -  by @​antfu in #​817 (fa3b0)

    View changes on GitHub

v7.6.0

Compare Source

   🚀 Features

• jsonc: Use jsonc/x language  -  by @​hyoban in #​824 (a9b7a)

   🐞 Bug Fixes

• jsdoc: Separate setup  -  by @​hyoban in #​825 (6742d)

    View changes on GitHub

v7.5.0

Compare Source

   🚀 Features

• markdown: Use markdown language  -  by @​hyoban and @​antfu in #​818 (93063)

    View changes on GitHub

v7.4.3

Compare Source

   🐞 Bug Fixes

• Formating regression  -  by @​antfu (2ef8a)

    View changes on GitHub

v7.4.2

Compare Source

   🐞 Bug Fixes

• Relax eslint peer deps range  -  by @​antfu (b5f53)

    View changes on GitHub

v7.4.1

Compare Source

   🐞 Bug Fixes

• Ignore typescript files when typescript is off  -  by @​antfu (bda75)

    View changes on GitHub

v7.4.0

Compare Source

   🚀 Features

• Angular support  -  by @​St2r and @​antfu in #​804 (67b1b)

   🐞 Bug Fixes

• Update peer dependency requirement for eslint-plugin-react-refresh  -  by @​hyoban in #​813 (19a43)

    View changes on GitHub

v7.3.0

Compare Source

   🚀 Features

• Upgrade eslint-plugin-react-refresh, eslint-plugin-regexp  -  by @​antfu (610e7)
• react: Sync recommend rules  -  by @​hyoban in #​810 (1b870)

   🐞 Bug Fixes

• Use ConfigWithExtends instead of Linter.Config  -  by @​hyoban in #​809 (ad4e5)

    View changes on GitHub

v7.2.0

Compare Source

   🚀 Features

• Upgrade eslint-flat-config-utils, support native extends, close #​800  -  by @​antfu in #​800 (15685)

    View changes on GitHub

v7.1.0

Compare Source

   🚀 Features

• react: Sync recommended config for eslint-plugin-react-refresh  -  by @​hyoban in #​801 (2e029)

    View changes on GitHub

v7.0.1

Compare Source

   🐞 Bug Fixes

• Indent value resolving  -  by @​antfu (0857a)

    View changes on GitHub

v7.0.0

Compare Source

   🚨 Breaking Changes

• Upgrade perfectionist to v5  -  by @​mefengl in #​797 (5878d)

   🚀 Features

• Update all deps  -  by @​antfu (4ac4e)
• react: Enable react/prefer-namespace-import  -  by @​hyoban in #​796 (4ce62)

    View changes on GitHub

v6.7.3

Compare Source

   🐞 Bug Fixes

• pnpm: Remove catalogMode in the enforced settings  -  by @​antfu (4fc09)

    View changes on GitHub

v6.7.2

Compare Source

   🐞 Bug Fixes

• Update react rules to match eslint-react v2  -  by @​Rel1cx in #​795 (6b425)
• pnpm: Add ignore for @​types/vscode in json-enforce-catalog  -  by @​jinghaihan in #​794 (95685)

    View changes on GitHub

v6.7.1

Compare Source

   🐞 Bug Fixes

• pnpm: Do not set catalogMode when catalogs is not enabled  -  by @​antfu (0471e)

    View changes on GitHub

v6.7.0

Compare Source

   🚀 Features

• Add more options to toggle configs  -  by @​antfu (203b8)

   🐞 Bug Fixes

• pnpm: Respect yaml and jsonc config in the factory, close #​791  -  by @​antfu in #​791 (3e0c5)

    View changes on GitHub

v6.6.1

Compare Source

   🐞 Bug Fixes

• pnpm: Detection  -  by @​antfu (e649f)

    View changes on GitHub

v6.6.0

Compare Source

   🐞 Bug Fixes

• pnpm: Enforce catalog usage based on smart detection  -  by @​antfu (654c0)

    View changes on GitHub

v6.5.1

Compare Source

   🐞 Bug Fixes

• Adopt to tsdown extension change, close #​786, close #​787  -  by @​antfu in #​786 and #​787 (c16d3)

    View changes on GitHub

v6.5.0

Compare Source

   🚀 Features

• react: React compiler preset  -  by @​hyoban in #​784 (663e0)

   🐞 Bug Fixes

• Spelling of required-scrpts  -  by @​christopher-buss in #​785 (26185)
• pnpm: Remove cleanupUnusedCatalogs setting  -  by @​antfu (f712a)

    View changes on GitHub

v6.4.2

Compare Source

   🐞 Bug Fixes

• pnpm: Move pnpm-workspace.yaml sorting config from yaml to pnpm  -  by @​antfu (fc2b1)

    View changes on GitHub

v6.4.1

Compare Source

No significant changes

    View changes on GitHub

v6.3.0

Compare Source

   🚀 Features

• Update deps  -  by @​antfu (2d2b6)

   🐞 Bug Fixes

• Ts error from cb29b1a  -  by @​daflyinbed in #​782 (b4e49)

    View changes on GitHub

v6.2.0

Compare Source

   🚀 Features

• Accepting functions for ignores, close #​776  -  by @​antfu in #​776 (63b13)

    View changes on GitHub

v6.1.0

Compare Source

   🚀 Features

• Update deps  -  by @​antfu (aca34)

    View changes on GitHub

v6.0.0

Compare Source

   🚀 Features

• Update react plugins  -  by @​Jungzl in #​762 (7971e)
• Upgrade eslint-plugin-react-hooks to v7  -  by @​Jungzl in #​764 (b7653)
• typescript: Integrate eslint-plugin-erasable-syntax-only  -  by @​kirklin and @​antfu in #​760 (95199)

   🐞 Bug Fixes

• Broader the dev environment detection  -  by @​yaaax and @​antfu in #​748 (81236)
• Revert #​748  -  by @​antfu in #​748 (8b736)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​antfu/​eslint-config@​5.4.1 ⏵ 9.1.0				-3

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @typescript-eslint/eslint-plugin is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/@antfu/eslint-config@9.1.0 → npm/@typescript-eslint/eslint-plugin@8.62.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript-eslint/eslint-plugin@8.62.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm eslint-plugin-jsdoc is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/@antfu/eslint-config@9.1.0 → npm/eslint-plugin-jsdoc@63.0.7 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-jsdoc@63.0.7. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[cursor]

Risk: medium. Not approving: this bumps @antfu/eslint-config across four major versions (v5→v9), which can change lint rules and CI behavior beyond a low-risk threshold. Cursor Bugbot was not present on this PR; human review is needed before merge.

  

_{Sent by Cursor Approval Agent: Pull Request Approver External}