eslint 10.1.0 → 10.2.1

package/README.md

@@ -218,6 +218,8 @@ Packages that are controlled by the ESLint team and have no external dependencie
 
 For external packages, we don't use `require(esm)` because a package could add a top-level `await` and thus break ESLint. We can use an external ESM-only package only in case it is needed only in asynchronous code, in which case it can be loaded using dynamic `import()`.
 
+These policies don't apply to packages intended for our own usage only, such as `eslint-config-eslint`.
+
 ## License
 
 MIT License
@@ -358,7 +360,7 @@ to get your logo on our READMEs and [website](https://eslint.org/sponsors).
 <p><a href="https://automattic.com"><img src="https://images.opencollective.com/automattic/d0ef3e1/logo.png" alt="Automattic" height="128"></a></p><h3>Gold Sponsors</h3>
 <p><a href="https://qlty.sh/"><img src="https://images.opencollective.com/qltysh/33d157d/logo.png" alt="Qlty Software" height="96"></a></p><h3>Silver Sponsors</h3>
 <p><a href="https://vite.dev/"><img src="https://images.opencollective.com/vite/d472863/logo.png" alt="Vite" height="64"></a> <a href="https://liftoff.io/"><img src="https://images.opencollective.com/liftoff/2d6c3b6/logo.png" alt="Liftoff" height="64"></a> <a href="https://stackblitz.com"><img src="https://avatars.githubusercontent.com/u/28635252" alt="StackBlitz" height="64"></a></p><h3>Bronze Sponsors</h3>
-<p><a href="https://syntax.fm"><img src="https://github.com/syntaxfm.png" alt="Syntax" height="32"></a> <a href="https://cybozu.co.jp/"><img src="https://images.opencollective.com/cybozu/933e46d/logo.png" alt="Cybozu" height="32"></a> <a href="https://opensource.sap.com"><img src="https://avatars.githubusercontent.com/u/2531208" alt="SAP" height="32"></a> <a href="https://www.crawljobs.com/"><img src="https://images.opencollective.com/crawljobs-poland/fa43a17/logo.png" alt="CrawlJobs" height="32"></a> <a href="https://depot.dev"><img src="https://images.opencollective.com/depot/39125a1/logo.png" alt="Depot" height="32"></a> <a href="https://www.n-ix.com/"><img src="https://images.opencollective.com/n-ix-ltd/575a7a5/logo.png" alt="N-iX Ltd" height="32"></a> <a href="https://icons8.com/"><img src="https://images.opencollective.com/icons8/7fa1641/logo.png" alt="Icons8" height="32"></a> <a href="https://discord.com"><img src="https://images.opencollective.com/discordapp/f9645d9/logo.png" alt="Discord" height="32"></a> <a href="https://www.gitbook.com"><img src="https://avatars.githubusercontent.com/u/7111340" alt="GitBook" height="32"></a> <a href="https://herocoders.com"><img src="https://avatars.githubusercontent.com/u/37549774" alt="HeroCoders" height="32"></a> <a href="https://www.lambdatest.com"><img src="https://avatars.githubusercontent.com/u/171592363" alt="TestMu AI Open Source Office (Formerly LambdaTest)" height="32"></a></p>
+<p><a href="https://cybozu.co.jp/"><img src="https://images.opencollective.com/cybozu/933e46d/logo.png" alt="Cybozu" height="32"></a> <a href="https://opensource.sap.com"><img src="https://avatars.githubusercontent.com/u/2531208" alt="SAP" height="32"></a> <a href="https://www.crawljobs.com/"><img src="https://images.opencollective.com/crawljobs-poland/fa43a17/logo.png" alt="CrawlJobs" height="32"></a> <a href="https://depot.dev"><img src="https://images.opencollective.com/depot/39125a1/logo.png" alt="Depot" height="32"></a> <a href="https://icons8.com/"><img src="https://images.opencollective.com/icons8/7fa1641/logo.png" alt="Icons8" height="32"></a> <a href="https://discord.com"><img src="https://images.opencollective.com/discordapp/f9645d9/logo.png" alt="Discord" height="32"></a> <a href="https://www.gitbook.com"><img src="https://avatars.githubusercontent.com/u/7111340" alt="GitBook" height="32"></a> <a href="https://herocoders.com"><img src="https://avatars.githubusercontent.com/u/37549774" alt="HeroCoders" height="32"></a> <a href="https://www.lambdatest.com"><img src="https://avatars.githubusercontent.com/u/171592363" alt="TestMu AI Open Source Office (Formerly LambdaTest)" height="32"></a></p>
 <h3>Technology Sponsors</h3>
 Technology sponsors allow us to use their products and services for free as part of a contribution to the open source ecosystem and our work.
 <p><a href="https://netlify.com"><img src="https://raw.githubusercontent.com/eslint/eslint.org/main/src/assets/images/techsponsors/netlify-icon.svg" alt="Netlify" height="32"></a> <a href="https://algolia.com"><img src="https://raw.githubusercontent.com/eslint/eslint.org/main/src/assets/images/techsponsors/algolia-icon.svg" alt="Algolia" height="32"></a> <a href="https://1password.com"><img src="https://raw.githubusercontent.com/eslint/eslint.org/main/src/assets/images/techsponsors/1password-icon.svg" alt="1Password" height="32"></a></p>

package/conf/globals.js

@@ -144,6 +144,7 @@ const es2026 = {
 	AsyncDisposableStack: false,
 	DisposableStack: false,
 	SuppressedError: false,
+	Temporal: false,
 };
 
 //-----------------------------------------------------------------------------

package/lib/config/config.js

@@ -228,6 +228,76 @@ function splitPluginIdentifier(identifier) {
 	};
 }
 
+/**
+ * Normalizes a language name by replacing the built-in `@/` plugin prefix with `js/`.
+ * @param {string} languageName The language name to normalize.
+ * @returns {string} The normalized language name.
+ */
+function normalizeLanguageName(languageName) {
+	return languageName.startsWith("@/")
+		? `js/${languageName.slice(2)}`
+		: languageName;
+}
+
+/**
+ * Checks if a rule's `meta.languages` supports the given language.
+ * @param {Array<string>|undefined} ruleLangs The rule's `meta.languages` array.
+ * @param {string} configLanguageName The normalized language name from the config (e.g., "js/js").
+ * @param {Array<string>} validPluginNames The valid plugin name aliases for the config's plugin
+ *   (normalized plugin name plus its `meta.namespace` if defined).
+ * @returns {boolean} True if the rule supports the language, false otherwise.
+ */
+function doesRuleSupportLanguage(
+	ruleLangs,
+	configLanguageName,
+	validPluginNames,
+) {
+	// If no languages specified, works with all languages (backward compatible)
+	if (!ruleLangs) {
+		return true;
+	}
+
+	const { objectName: configLangPart } =
+		splitPluginIdentifier(configLanguageName);
+
+	for (const langEntry of ruleLangs) {
+		// Skip non-string entries
+		if (typeof langEntry !== "string") {
+			continue;
+		}
+
+		// "*" matches any language
+		if (langEntry === "*") {
+			return true;
+		}
+
+		// Direct match
+		if (langEntry === configLanguageName) {
+			return true;
+		}
+
+		const { pluginName: rulePluginPart, objectName: ruleLangPart } =
+			splitPluginIdentifier(langEntry);
+
+		// "plugin/*" wildcard - matches any language from that plugin (by name or namespace)
+		if (ruleLangPart === "*") {
+			if (validPluginNames.includes(rulePluginPart)) {
+				return true;
+			}
+		} else {
+			// Match by plugin name or namespace, with exact language part
+			if (
+				validPluginNames.includes(rulePluginPart) &&
+				ruleLangPart === configLangPart
+			) {
+				return true;
+			}
+		}
+	}
+
+	return false;
+}
+
 /**
  * Returns the name of an object in the config by reading its `meta` key.
  * @param {Object} object The object to check.
@@ -572,12 +642,30 @@ class Config {
 	 * @throws {TypeError} If the rulesConfig is not provided or is invalid.
 	 * @throws {InvalidRuleOptionsSchemaError} If a rule's `meta.schema` is invalid.
 	 * @throws {TypeError} If a rule is not found in the plugins.
+	 * @throws {TypeError} If a rule does not support the current language.
 	 */
 	validateRulesConfig(rulesConfig) {
 		if (!rulesConfig) {
 			throw new TypeError("Config is required for validation.");
 		}
 
+		// Normalize "@/" prefix to "js/" for matching and user-facing messages
+		const normalizedLanguageName = normalizeLanguageName(
+			this.#languageName,
+		);
+
+		// Compute valid plugin name aliases for the config's language plugin once
+		const { pluginName: configPluginName } = splitPluginIdentifier(
+			normalizedLanguageName,
+		);
+		const configPlugin =
+			this.plugins[configPluginName] ??
+			(configPluginName === "js" ? this.plugins["@"] : void 0);
+		const validPluginNames = configPlugin?.meta?.namespace
+			? [configPluginName, configPlugin.meta.namespace]
+			: [configPluginName];
+		const unsupportedLanguageRules = [];
+
 		for (const [ruleId, ruleOptions] of Object.entries(rulesConfig)) {
 			// check for edge case
 			if (ruleId === "__proto__") {
@@ -603,6 +691,34 @@ class Config {
 				throwRuleNotFoundError(parseRuleId(ruleId), this);
 			}
 
+			// Validate meta.languages structure if present (only for enabled rules)
+			if (rule.meta?.languages !== void 0) {
+				if (!Array.isArray(rule.meta.languages)) {
+					throw new TypeError(
+						`Key "rules": Key "${ruleId}": Key "meta": Key "languages": Expected an array.`,
+					);
+				}
+
+				for (const lang of rule.meta.languages) {
+					if (typeof lang !== "string") {
+						throw new TypeError(
+							`Key "rules": Key "${ruleId}": Key "meta": Key "languages": Expected each element to be a string.`,
+						);
+					}
+				}
+			}
+
+			// Check if the rule supports the current language
+			if (
+				!doesRuleSupportLanguage(
+					rule.meta?.languages,
+					normalizedLanguageName,
+					validPluginNames,
+				)
+			) {
+				unsupportedLanguageRules.push(ruleId);
+			}
+
 			const validateRule = getOrCreateValidator(rule, ruleId);
 
 			if (validateRule) {
@@ -634,6 +750,19 @@ class Config {
 				}
 			}
 		}
+
+		if (unsupportedLanguageRules.length > 0) {
+			const error = new TypeError(
+				`Key "rules": The following rules do not support the language "${normalizedLanguageName}":\n${unsupportedLanguageRules.map(ruleId => `\t- "${ruleId}"`).join("\n")}`,
+			);
+
+			error.messageTemplate = "rule-unsupported-language";
+			error.messageData = {
+				ruleIds: unsupportedLanguageRules,
+				language: normalizedLanguageName,
+			};
+			throw error;
+		}
 	}
 
 	/**

package/lib/config/flat-config-schema.js

@@ -224,15 +224,16 @@ function assertIsRuleSeverity(ruleId, value) {
 }
 
 /**
- * Validates that a given string is the form pluginName/objectName.
+ * Validates that a given string matches the "pluginName/memberPlaceholder" pattern.
  * @param {string} value The string to check.
+ * @param {string} memberPlaceholder The placeholder for the member portion of the expected format in the error message.
  * @returns {void}
- * @throws {TypeError} If the string isn't in the correct format.
+ * @throws {TypeError} If the string doesn't match the expected pattern.
  */
-function assertIsPluginMemberName(value) {
+function assertIsPluginMemberName(value, memberPlaceholder) {
 	if (!/[\w\-@$]+(?:\/[\w\-$]+)+$/iu.test(value)) {
 		throw new TypeError(
-			`Expected string in the form "pluginName/objectName" but found "${value}".`,
+			`Expected string in the form "pluginName/${memberPlaceholder}" but found "${value}".`,
 		);
 	}
 }
@@ -375,7 +376,9 @@ const languageOptionsSchema = {
 /** @type {ObjectPropertySchema} */
 const languageSchema = {
 	merge: "replace",
-	validate: assertIsPluginMemberName,
+	validate(value) {
+		assertIsPluginMemberName(value, "languageName");
+	},
 };
 
 /** @type {ObjectPropertySchema} */
@@ -430,7 +433,7 @@ const processorSchema = {
 	merge: "replace",
 	validate(value) {
 		if (typeof value === "string") {
-			assertIsPluginMemberName(value);
+			assertIsPluginMemberName(value, "processorName");
 		} else if (value && typeof value === "object") {
 			if (
 				typeof value.preprocess !== "function" ||

package/lib/linter/code-path-analysis/code-path-analyzer.js

@@ -31,7 +31,7 @@ function isCaseNode(node) {
 
 /**
  * Checks if a given node appears as the value of a PropertyDefinition node.
- * @param {ASTNode} node THe node to check.
+ * @param {ASTNode} node The node to check.
  * @returns {boolean} `true` if the node is a PropertyDefinition value,
  *      false if not.
  */
@@ -504,7 +504,7 @@ function processCodePathToEnter(analyzer, node) {
 
 		case "SwitchCase":
 			/*
-			 * Fork if this node is after the 2st node in `cases`.
+			 * Fork if this node is after the 1st node in `cases`.
 			 * It's similar to `else` blocks.
 			 * The next `test` node is processed in this path.
 			 */
@@ -626,10 +626,13 @@ function processCodePathToExit(analyzer, node) {
 		case "ImportExpression":
 		case "MemberExpression":
 		case "NewExpression":
-		case "YieldExpression":
 			state.makeFirstThrowablePathInTryBlock();
 			break;
 
+		case "YieldExpression":
+			state.makeYield();
+			break;
+
 		case "WhileStatement":
 		case "DoWhileStatement":
 		case "ForStatement":

package/lib/linter/code-path-analysis/code-path-state.js

@@ -569,11 +569,10 @@ class TryContext {
 		this.position = "try";
 
 		/**
-		 * If the `try` statement has a `finally` block, this affects how a
-		 * `return` statement behaves in the `try` block. Without `finally`,
-		 * `return` behaves as usual and doesn't require a fork; with `finally`,
-		 * `return` forks into the `finally` block, so we need a fork context
-		 * to track it.
+		 * If the `try` statement has a `finally` block, this affects how return-like
+		 * leaving paths behave in the `try` block. Without `finally`, they behave as
+		 * usual and don't require a fork; with `finally`, they fork into the
+		 * `finally` block, so we need a fork context to track them.
 		 * @type {ForkContext|null}
 		 */
 		this.returnedForkContext = hasFinalizer
@@ -1755,6 +1754,23 @@ class CodePathState {
 		this.forkContext.add(segments);
 	}
 
+	/**
+	 * Records abrupt resumption paths from a suspended `yield` expression,
+	 * then splits normal post-`yield` continuation into a fresh segment.
+	 * @returns {void}
+	 */
+	makeYield() {
+		const forkContext = this.forkContext;
+		const leavingSegments = forkContext.head;
+
+		if (forkContext.reachable) {
+			getReturnContext(this).returnedForkContext.add(leavingSegments);
+			getThrowContext(this).thrownForkContext.add(leavingSegments);
+
+			forkContext.replaceHead(forkContext.makeNext(-1, -1));
+		}
+	}
+
 	/**
 	 * Makes a code path segment from the first throwable node to the `catch`
 	 * block or the `finally` block.

package/lib/linter/code-path-analysis/code-path.js

@@ -100,9 +100,10 @@ class CodePath {
 	 * Final code path segments that represent normal completion of the code path.
 	 * For functions, this means both explicit `return` statements and implicit returns,
 	 * such as the last reachable segment in a function that does not have an
-	 * explicit `return` as this implicitly returns `undefined`. For scripts,
-	 * modules, class field initializers, and class static blocks, this means
-	 * all lines of code have been executed.
+	 * explicit `return` as this implicitly returns `undefined`, as well as
+	 * return-like exits from suspended `yield` expressions. For scripts, modules,
+	 * class field initializers, and class static blocks, this means all lines of
+	 * code have been executed.
 	 * These segments are also present in `finalSegments`.
 	 * This is a passthrough to the underlying `CodePathState`.
 	 * @type {CodePathSegment[]}
@@ -112,7 +113,8 @@ class CodePath {
 	}
 
 	/**
-	 * Final code path segments that represent `throw` statements.
+	 * Final code path segments that represent `throw` statements and throw-like
+	 * exits from suspended `yield` expressions.
 	 * This is a passthrough to the underlying `CodePathState`.
 	 * These segments are also present in `finalSegments`.
 	 * @type {CodePathSegment[]}

package/lib/linter/linter.js

@@ -1202,6 +1202,22 @@ class Linter {
 									throw err;
 								}
 
+								/*
+								 * If the rule does not support the current language, report a
+								 * specific, actionable error message.
+								 */
+								if (
+									err.messageTemplate ===
+									"rule-unsupported-language"
+								) {
+									report.addError({
+										ruleId,
+										message: `Inline configuration for rule "${ruleId}" is invalid:\n\tRule does not support the language "${err.messageData.language}". Use a config block with "files" to apply the rule only to supported files, or disable it.\n`,
+										loc,
+									});
+									return;
+								}
+
 								let baseMessage = err.message
 									.slice(
 										err.message.startsWith('Key "rules":')

package/lib/rules/no-async-promise-executor.js

@@ -28,12 +28,18 @@ module.exports = {
 	},
 
 	create(context) {
+		const sourceCode = context.sourceCode;
+
 		return {
 			"NewExpression[callee.name='Promise'][arguments.0.async=true]"(
 				node,
 			) {
+				if (!sourceCode.isGlobalReference(node.callee)) {
+					return;
+				}
+
 				context.report({
-					node: context.sourceCode.getFirstToken(
+					node: sourceCode.getFirstToken(
 						node.arguments[0],
 						token => token.value === "async",
 					),

package/lib/rules/no-obj-calls.js

@@ -20,7 +20,14 @@ const getPropertyName = require("./utils/ast-utils").getStaticPropertyName;
 // Helpers
 //------------------------------------------------------------------------------
 
-const nonCallableGlobals = ["Atomics", "JSON", "Math", "Reflect", "Intl"];
+const nonCallableGlobals = [
+	"Atomics",
+	"JSON",
+	"Math",
+	"Reflect",
+	"Intl",
+	"Temporal",
+];
 
 /**
  * Returns the name of the node to report

package/lib/rules/no-shadow.js

@@ -612,7 +612,7 @@ module.exports = {
 
 		/**
 		 * Checks the current context for shadowed variables.
-		 * @param {Scope} scope Fixme
+		 * @param {Scope} scope The scope to check for shadowed variables.
 		 * @returns {void}
 		 */
 		function checkForShadows(scope) {

package/lib/rules/no-unmodified-loop-condition.js

@@ -128,6 +128,35 @@ function getEncloseFunctionDeclaration(reference) {
 	return null;
 }
 
+/**
+ * Checks whether a given modifier is in a loop.
+ *
+ * Besides checking for the condition being in the loop, this also checks
+ * whether the function that this modifier is belonging to is called
+ * in the loop.
+ * @param {LoopConditionInfo} condition The condition to check.
+ * @param {Reference} modifier The modifier to check.
+ * @returns {boolean} `true` if the modifier is in a loop.
+ */
+function hasModifierInLoop(condition, modifier) {
+	if (condition.isInLoop(modifier)) {
+		return true;
+	}
+
+	const funcNode = getEncloseFunctionDeclaration(modifier);
+
+	if (!funcNode) {
+		return false;
+	}
+
+	const funcVar = astUtils.getVariableByName(
+		modifier.from.upper,
+		funcNode.id.name,
+	);
+
+	return Boolean(funcVar && funcVar.references.some(condition.isInLoop));
+}
+
 /**
  * Updates the "modified" flags of given loop conditions with given modifiers.
  * @param {LoopConditionInfo[]} conditions The loop conditions to be updated.
@@ -140,26 +169,8 @@ function updateModifiedFlag(conditions, modifiers) {
 
 		for (let j = 0; !condition.modified && j < modifiers.length; ++j) {
 			const modifier = modifiers[j];
-			let funcNode, funcVar;
 
-			/*
-			 * Besides checking for the condition being in the loop, we want to
-			 * check the function that this modifier is belonging to is called
-			 * in the loop.
-			 * FIXME: This should probably be extracted to a function.
-			 */
-			const inLoop =
-				condition.isInLoop(modifier) ||
-				Boolean(
-					(funcNode = getEncloseFunctionDeclaration(modifier)) &&
-					(funcVar = astUtils.getVariableByName(
-						modifier.from.upper,
-						funcNode.id.name,
-					)) &&
-					funcVar.references.some(condition.isInLoop),
-				);
-
-			condition.modified = inLoop;
+			condition.modified = hasModifierInLoop(condition, modifier);
 		}
 	}
 }

package/messages/rule-unsupported-language.js

@@ -0,0 +1,18 @@
+"use strict";
+
+module.exports = function ({ ruleIds, language }) {
+	return `
+The following rules do not support the language "${language}":
+${ruleIds.map(id => `\t- "${id}"`).join("\n")}
+
+To fix this error, either:
+- Remove the rule from your configuration, or set its severity to "off".
+- Use the "files" option to apply the rule only to files of the supported language, for example:
+  {
+    files: ["**/*.js"],
+    rules: { "${ruleIds[0]}": "error" }
+  }
+
+See https://eslint.org/docs/latest/use/configure/rules for more information.
+`.trimStart();
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint",
-  "version": "10.1.0",
+  "version": "10.2.1",
   "author": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>",
   "description": "An AST-based pattern checker for JavaScript.",
   "type": "commonjs",
@@ -119,10 +119,10 @@
   "dependencies": {
     "@eslint-community/eslint-utils": "^4.8.0",
     "@eslint-community/regexpp": "^4.12.2",
-    "@eslint/config-array": "^0.23.3",
-    "@eslint/config-helpers": "^0.5.3",
-    "@eslint/core": "^1.1.1",
-    "@eslint/plugin-kit": "^0.6.1",
+    "@eslint/config-array": "^0.23.5",
+    "@eslint/config-helpers": "^0.5.5",
+    "@eslint/core": "^1.2.1",
+    "@eslint/plugin-kit": "^0.7.1",
     "@humanfs/node": "^0.16.6",
     "@humanwhocodes/module-importer": "^1.0.1",
     "@humanwhocodes/retry": "^0.4.2",
@@ -168,7 +168,7 @@
     "ejs": "^3.0.2",
     "eslint": "file:.",
     "eslint-config-eslint": "file:packages/eslint-config-eslint",
-    "eslint-plugin-eslint-plugin": "^6.0.0",
+    "eslint-plugin-eslint-plugin": "^7.3.2",
     "eslint-plugin-expect-type": "^0.6.0",
     "eslint-plugin-yml": "^1.14.0",
     "eslint-release": "^3.3.0",
@@ -185,7 +185,7 @@
     "lint-staged": "^11.0.0",
     "markdown-it": "^12.2.0",
     "markdown-it-container": "^3.0.0",
-    "markdownlint-cli2": "^0.21.0",
+    "markdownlint-cli2": "^0.22.0",
     "marked": "^4.0.8",
     "metascraper": "^5.25.7",
     "metascraper-description": "^5.25.7",
@@ -196,7 +196,7 @@
     "mocha": "^11.7.1",
     "node-polyfill-webpack-plugin": "^1.0.3",
     "npm-license": "^0.3.3",
-    "prettier": "3.8.1",
+    "prettier": "3.8.2",
     "progress": "^2.0.3",
     "proxyquire": "^2.0.1",
     "recast": "^0.23.0",