eslint 10.4.0 → 10.5.0

package/README.md

@@ -45,7 +45,7 @@ ESLint is a tool for identifying and reporting on patterns found in ECMAScript/J
 
 ### Prerequisites
 
-To use ESLint, you must have [Node.js](https://nodejs.org/) (`^20.19.0`, `^22.13.0`, or `>=24`) installed and built with SSL support. (If you are using an official Node.js distribution, SSL is always built in.)
+To use ESLint, you must have [Node.js](https://nodejs.org/) (`^20.19.0`, `^22.13.0`, or `>=24`) installed and built with SSL and ICU support. (If you are using an official Node.js distribution, both SSL and ICU are always built in.)
 
 If you use ESLint's TypeScript type definitions, TypeScript 5.3 or later is required.
 
@@ -360,7 +360,7 @@ to get your logo on our READMEs and [website](https://eslint.org/sponsors).
 <p><a href="https://automattic.com"><img src="https://images.opencollective.com/automattic/d0ef3e1/logo.png" alt="Automattic" height="128"></a></p><h3>Gold Sponsors</h3>
 <p><a href="https://qlty.sh/"><img src="https://images.opencollective.com/qltysh/33d157d/logo.png" alt="Qlty Software" height="96"></a></p><h3>Silver Sponsors</h3>
 <p><a href="https://vite.dev/"><img src="https://images.opencollective.com/vite/d472863/logo.png" alt="Vite" height="64"></a> <a href="https://liftoff.io/"><img src="https://images.opencollective.com/liftoff/2d6c3b6/logo.png" alt="Liftoff" height="64"></a> <a href="https://stackblitz.com"><img src="https://avatars.githubusercontent.com/u/28635252" alt="StackBlitz" height="64"></a></p><h3>Bronze Sponsors</h3>
-<p><a href="https://cybozu.co.jp/"><img src="https://images.opencollective.com/cybozu/933e46d/logo.png" alt="Cybozu" height="32"></a> <a href="https://opensource.sap.com"><img src="https://avatars.githubusercontent.com/u/2531208" alt="SAP" height="32"></a> <a href="https://www.crawljobs.com/"><img src="https://images.opencollective.com/crawljobs-poland/fa43a17/logo.png" alt="CrawlJobs" height="32"></a> <a href="https://syntax.fm"><img src="https://github.com/syntaxfm.png" alt="Syntax" height="32"></a> <a href="https://depot.dev"><img src="https://images.opencollective.com/depot/39125a1/logo.png" alt="Depot" height="32"></a> <a href="https://icons8.com/"><img src="https://images.opencollective.com/icons8/7fa1641/logo.png" alt="Icons8" height="32"></a> <a href="https://discord.com"><img src="https://images.opencollective.com/discordapp/f9645d9/logo.png" alt="Discord" height="32"></a> <a href="https://www.gitbook.com"><img src="https://avatars.githubusercontent.com/u/7111340" alt="GitBook" height="32"></a> <a href="https://herocoders.com"><img src="https://avatars.githubusercontent.com/u/37549774" alt="HeroCoders" height="32"></a> <a href="https://citadel.co.jp"><img src="https://avatars.githubusercontent.com/u/75781367" alt="Citadel AI" height="32"></a> <a href="https://www.lambdatest.com"><img src="https://avatars.githubusercontent.com/u/171592363" alt="TestMu AI Open Source Office (Formerly LambdaTest)" height="32"></a></p>
+<p><a href="https://cybozu.co.jp/"><img src="https://images.opencollective.com/cybozu/933e46d/logo.png" alt="Cybozu" height="32"></a> <a href="https://opensource.sap.com"><img src="https://avatars.githubusercontent.com/u/2531208" alt="SAP" height="32"></a> <a href="https://www.crawljobs.com/"><img src="https://images.opencollective.com/crawljobs-poland/fa43a17/logo.png" alt="CrawlJobs" height="32"></a> <a href="https://syntax.fm"><img src="https://github.com/syntaxfm.png" alt="Syntax" height="32"></a> <a href="https://depot.dev"><img src="https://images.opencollective.com/depot/39125a1/logo.png" alt="Depot" height="32"></a> <a href="https://icons8.com/"><img src="https://images.opencollective.com/icons8/7fa1641/logo.png" alt="Icons8" height="32"></a> <a href="https://discord.com"><img src="https://images.opencollective.com/discordapp/f9645d9/logo.png" alt="Discord" height="32"></a> <a href="https://www.gitbook.com"><img src="https://avatars.githubusercontent.com/u/7111340" alt="GitBook" height="32"></a> <a href="https://herocoders.com"><img src="https://avatars.githubusercontent.com/u/37549774" alt="HeroCoders" height="32"></a> <a href="https://citadel.co.jp"><img src="https://avatars.githubusercontent.com/u/75781367" alt="Citadel AI" height="32"></a></p>
 <h3>Technology Sponsors</h3>
 Technology sponsors allow us to use their products and services for free as part of a contribution to the open source ecosystem and our work.
 <p><a href="https://netlify.com"><img src="https://raw.githubusercontent.com/eslint/eslint.org/main/src/assets/images/techsponsors/netlify-icon.svg" alt="Netlify" height="32"></a> <a href="https://algolia.com"><img src="https://raw.githubusercontent.com/eslint/eslint.org/main/src/assets/images/techsponsors/algolia-icon.svg" alt="Algolia" height="32"></a> <a href="https://1password.com"><img src="https://raw.githubusercontent.com/eslint/eslint.org/main/src/assets/images/techsponsors/1password-icon.svg" alt="1Password" height="32"></a></p>

package/bin/eslint.js

@@ -61,6 +61,32 @@ function readStdin() {
 	});
 }
 
+/**
+ * Spawns an external command and propagates its exit status.
+ * @param {string} command The command to run.
+ * @param {string[]} args The command arguments.
+ * @throws {Error} If the command cannot be spawned.
+ * @returns {void}
+ */
+function spawnExternalCommand(command, args) {
+	const spawn = require("cross-spawn");
+	const result = spawn.sync(command, args, {
+		encoding: "utf8",
+		stdio: "inherit",
+	});
+
+	if (result.error) {
+		throw result.error;
+	}
+
+	if (result.signal) {
+		process.kill(process.pid, result.signal);
+		return;
+	}
+
+	process.exitCode = result.status ?? 0;
+}
+
 /**
  * Get the error message of a given value.
  * @param {any} error The value to get.
@@ -146,12 +172,7 @@ ${getErrorMessage(error)}`;
 			"You can also run this command directly using 'npm init @eslint/config@latest'.",
 		);
 
-		const spawn = require("cross-spawn");
-
-		spawn.sync("npm", ["init", "@eslint/config@latest"], {
-			encoding: "utf8",
-			stdio: "inherit",
-		});
+		spawnExternalCommand("npm", ["init", "@eslint/config@latest"]);
 		return;
 	}
 
@@ -161,12 +182,7 @@ ${getErrorMessage(error)}`;
 			"You can also run this command directly using 'npx @eslint/mcp@latest'.",
 		);
 
-		const spawn = require("cross-spawn");
-
-		spawn.sync("npx", ["@eslint/mcp@latest"], {
-			encoding: "utf8",
-			stdio: "inherit",
-		});
+		spawnExternalCommand("npx", ["@eslint/mcp@latest"]);
 		return;
 	}
 

package/lib/linter/code-path-analysis/code-path-analyzer.js

@@ -617,7 +617,7 @@ function processCodePathToExit(analyzer, node) {
 
 		case "Identifier":
 			if (isIdentifierReference(node)) {
-				state.makeFirstThrowablePathInTryBlock();
+				state.makeFirstThrowablePathInTryOrCatchBlock();
 				dontForward = true;
 			}
 			break;
@@ -626,7 +626,7 @@ function processCodePathToExit(analyzer, node) {
 		case "ImportExpression":
 		case "MemberExpression":
 		case "NewExpression":
-			state.makeFirstThrowablePathInTryBlock();
+			state.makeFirstThrowablePathInTryOrCatchBlock();
 			break;
 
 		case "YieldExpression":

package/lib/linter/code-path-analysis/code-path-state.js

@@ -1772,11 +1772,12 @@ class CodePathState {
 	}
 
 	/**
-	 * Makes a code path segment from the first throwable node to the `catch`
-	 * block or the `finally` block.
+	 * Makes a code path segment from the first throwable node in a `try` block to the `catch`
+	 * block or the `finally` block or from the first throwable node in a `catch` block
+	 * to the `finally` block.
 	 * @returns {void}
 	 */
-	makeFirstThrowablePathInTryBlock() {
+	makeFirstThrowablePathInTryOrCatchBlock() {
 		const forkContext = this.forkContext;
 
 		if (!forkContext.reachable) {
@@ -1785,10 +1786,13 @@ class CodePathState {
 
 		const context = getThrowContext(this);
 
+		if (context === this || !context.thrownForkContext.empty) {
+			return;
+		}
+
 		if (
-			context === this ||
-			context.position !== "try" ||
-			!context.thrownForkContext.empty
+			context.position !== "try" &&
+			(context.position !== "catch" || !context.hasFinalizer)
 		) {
 			return;
 		}

package/lib/rules/array-callback-return.js

@@ -10,6 +10,7 @@
 //------------------------------------------------------------------------------
 
 const astUtils = require("./utils/ast-utils");
+const { isAnySegmentReachable } = require("./utils/code-path-utils");
 
 //------------------------------------------------------------------------------
 // Helpers
@@ -30,21 +31,6 @@ function isTargetMethod(node) {
 	return astUtils.isSpecificMemberAccess(node, null, TARGET_METHODS);
 }
 
-/**
- * Checks all segments in a set and returns true if any are reachable.
- * @param {Set<CodePathSegment>} segments The segments to check.
- * @returns {boolean} True if any segment is reachable; false otherwise.
- */
-function isAnySegmentReachable(segments) {
-	for (const segment of segments) {
-		if (segment.reachable) {
-			return true;
-		}
-	}
-
-	return false;
-}
-
 /**
  * Returns a human-legible description of an array method
  * @param {string} arrayMethodName A method name to fully qualify

package/lib/rules/consistent-return.js

@@ -10,26 +10,12 @@
 
 const astUtils = require("./utils/ast-utils");
 const { upperCaseFirst } = require("../shared/string-utils");
+const { isAnySegmentReachable } = require("./utils/code-path-utils");
 
 //------------------------------------------------------------------------------
 // Helpers
 //------------------------------------------------------------------------------
 
-/**
- * Checks all segments in a set and returns true if all are unreachable.
- * @param {Set<CodePathSegment>} segments The segments to check.
- * @returns {boolean} True if all segments are unreachable; false otherwise.
- */
-function areAllSegmentsUnreachable(segments) {
-	for (const segment of segments) {
-		if (segment.reachable) {
-			return false;
-		}
-	}
-
-	return true;
-}
-
 /**
  * Checks whether a given node is a `constructor` method in an ES6 class
  * @param {ASTNode} node A node to check
@@ -100,7 +86,7 @@ module.exports = {
 			 */
 			if (
 				!funcInfo.hasReturnValue ||
-				areAllSegmentsUnreachable(funcInfo.currentSegments) ||
+				!isAnySegmentReachable(funcInfo.currentSegments) ||
 				astUtils.isES5Constructor(node) ||
 				isClassConstructor(node)
 			) {

package/lib/rules/getter-return.js

@@ -10,6 +10,7 @@
 //------------------------------------------------------------------------------
 
 const astUtils = require("./utils/ast-utils");
+const { isAnySegmentReachable } = require("./utils/code-path-utils");
 
 //------------------------------------------------------------------------------
 // Helpers
@@ -17,21 +18,6 @@ const astUtils = require("./utils/ast-utils");
 
 const TARGET_NODE_TYPE = /^(?:Arrow)?FunctionExpression$/u;
 
-/**
- * Checks all segments in a set and returns true if any are reachable.
- * @param {Set<CodePathSegment>} segments The segments to check.
- * @returns {boolean} True if any segment is reachable; false otherwise.
- */
-function isAnySegmentReachable(segments) {
-	for (const segment of segments) {
-		if (segment.reachable) {
-			return true;
-		}
-	}
-
-	return false;
-}
-
 //------------------------------------------------------------------------------
 // Rule Definition
 //------------------------------------------------------------------------------

package/lib/rules/max-depth.js

@@ -54,6 +54,8 @@ module.exports = {
 	},
 
 	create(context) {
+		const sourceCode = context.sourceCode;
+
 		//--------------------------------------------------------------------------
 		// Helpers
 		//--------------------------------------------------------------------------
@@ -102,6 +104,7 @@ module.exports = {
 			if (len > maxDepth) {
 				context.report({
 					node,
+					loc: sourceCode.getFirstToken(node).loc,
 					messageId: "tooDeeply",
 					data: { depth: len, maxDepth },
 				});
@@ -117,6 +120,18 @@ module.exports = {
 			functionStack[functionStack.length - 1]--;
 		}
 
+		/**
+		 * Checks whether a node is an else-if statement.
+		 * @param {ASTNode} node node to evaluate
+		 * @returns {boolean} Whether the node is an else-if statement
+		 */
+		function isElseIf(node) {
+			return (
+				node.parent.type === "IfStatement" &&
+				node.parent.alternate === node
+			);
+		}
+
 		//--------------------------------------------------------------------------
 		// Public API
 		//--------------------------------------------------------------------------
@@ -129,7 +144,7 @@ module.exports = {
 			StaticBlock: startFunction,
 
 			IfStatement(node) {
-				if (node.parent.type !== "IfStatement") {
+				if (!isElseIf(node)) {
 					pushBlock(node);
 				}
 			},
@@ -142,7 +157,11 @@ module.exports = {
 			ForInStatement: pushBlock,
 			ForOfStatement: pushBlock,
 
-			"IfStatement:exit": popBlock,
+			"IfStatement:exit"(node) {
+				if (!isElseIf(node)) {
+					popBlock();
+				}
+			},
 			"SwitchStatement:exit": popBlock,
 			"TryStatement:exit": popBlock,
 			"DoWhileStatement:exit": popBlock,

package/lib/rules/max-lines-per-function.js

@@ -222,6 +222,7 @@ module.exports = {
 
 				context.report({
 					node,
+					loc: astUtils.getFunctionHeadLoc(funcNode, sourceCode),
 					messageId: "exceed",
 					data: { name, lineCount, maxLines },
 				});

package/lib/rules/max-nested-callbacks.js

@@ -5,6 +5,12 @@
 
 "use strict";
 
+//------------------------------------------------------------------------------
+// Requirements
+//------------------------------------------------------------------------------
+
+const astUtils = require("./utils/ast-utils");
+
 //------------------------------------------------------------------------------
 // Rule Definition
 //------------------------------------------------------------------------------
@@ -53,6 +59,8 @@ module.exports = {
 	},
 
 	create(context) {
+		const sourceCode = context.sourceCode;
+
 		//--------------------------------------------------------------------------
 		// Constants
 		//--------------------------------------------------------------------------
@@ -90,17 +98,25 @@ module.exports = {
 			if (callbackStack.length > THRESHOLD) {
 				const opts = { num: callbackStack.length, max: THRESHOLD };
 
-				context.report({ node, messageId: "exceed", data: opts });
+				context.report({
+					node,
+					loc: astUtils.getFunctionHeadLoc(node, sourceCode),
+					messageId: "exceed",
+					data: opts,
+				});
 			}
 		}
 
 		/**
 		 * Pops the call stack.
+		 * @param {ASTNode} node The node to check.
 		 * @returns {void}
 		 * @private
 		 */
-		function popStack() {
-			callbackStack.pop();
+		function popStack(node) {
+			if (callbackStack.at(-1) === node) {
+				callbackStack.pop();
+			}
 		}
 
 		//--------------------------------------------------------------------------

package/lib/rules/max-statements.js

@@ -108,6 +108,7 @@ module.exports = {
 
 				context.report({
 					node,
+					loc: astUtils.getFunctionHeadLoc(node, context.sourceCode),
 					messageId: "exceed",
 					data: { name, count, max },
 				});

package/lib/rules/no-fallthrough.js

@@ -9,6 +9,7 @@
 //------------------------------------------------------------------------------
 
 const { directivesPattern } = require("../shared/directives");
+const { isAnySegmentReachable } = require("./utils/code-path-utils");
 
 //------------------------------------------------------------------------------
 // Helpers
@@ -16,21 +17,6 @@ const { directivesPattern } = require("../shared/directives");
 
 const DEFAULT_FALLTHROUGH_COMMENT = /falls?\s?through/iu;
 
-/**
- * Checks all segments in a set and returns true if any are reachable.
- * @param {Set<CodePathSegment>} segments The segments to check.
- * @returns {boolean} True if any segment is reachable; false otherwise.
- */
-function isAnySegmentReachable(segments) {
-	for (const segment of segments) {
-		if (segment.reachable) {
-			return true;
-		}
-	}
-
-	return false;
-}
-
 /**
  * Checks whether or not a given comment string is really a fallthrough comment and not an ESLint directive.
  * @param {string} comment The comment string to check.

package/lib/rules/no-unreachable-loop.js

@@ -5,6 +5,8 @@
 
 "use strict";
 
+const { isAnySegmentReachable } = require("./utils/code-path-utils");
+
 //------------------------------------------------------------------------------
 // Helpers
 //------------------------------------------------------------------------------
@@ -17,21 +19,6 @@ const allLoopTypes = [
 	"ForOfStatement",
 ];
 
-/**
- * Checks all segments in a set and returns true if any are reachable.
- * @param {Set<CodePathSegment>} segments The segments to check.
- * @returns {boolean} True if any segment is reachable; false otherwise.
- */
-function isAnySegmentReachable(segments) {
-	for (const segment of segments) {
-		if (segment.reachable) {
-			return true;
-		}
-	}
-
-	return false;
-}
-
 /**
  * Determines whether the given node is the first node in the code path to which a loop statement
  * 'loops' for the next iteration.

package/lib/rules/no-unreachable.js

@@ -4,6 +4,12 @@
  */
 "use strict";
 
+//------------------------------------------------------------------------------
+// Requirements
+//------------------------------------------------------------------------------
+
+const { isAnySegmentReachable } = require("./utils/code-path-utils");
+
 //------------------------------------------------------------------------------
 // Helpers
 //------------------------------------------------------------------------------
@@ -23,21 +29,6 @@ function isInitialized(node) {
 	return Boolean(node.init);
 }
 
-/**
- * Checks all segments in a set and returns true if all are unreachable.
- * @param {Set<CodePathSegment>} segments The segments to check.
- * @returns {boolean} True if all segments are unreachable; false otherwise.
- */
-function areAllSegmentsUnreachable(segments) {
-	for (const segment of segments) {
-		if (segment.reachable) {
-			return false;
-		}
-	}
-
-	return true;
-}
-
 /**
  * The class to distinguish consecutive unreachable statements.
  */
@@ -154,7 +145,7 @@ module.exports = {
 			if (
 				node &&
 				(node.type === "PropertyDefinition" ||
-					areAllSegmentsUnreachable(currentCodePathSegments))
+					!isAnySegmentReachable(currentCodePathSegments))
 			) {
 				// Store this statement to distinguish consecutive statements.
 				if (range.isEmpty) {

package/lib/rules/no-useless-return.js

@@ -10,6 +10,7 @@
 
 const astUtils = require("./utils/ast-utils"),
 	FixTracker = require("./utils/fix-tracker");
+const { isAnySegmentReachable } = require("./utils/code-path-utils");
 
 //------------------------------------------------------------------------------
 // Helpers
@@ -60,21 +61,6 @@ function isInFinally(node) {
 	return false;
 }
 
-/**
- * Checks all segments in a set and returns true if any are reachable.
- * @param {Set<CodePathSegment>} segments The segments to check.
- * @returns {boolean} True if any segment is reachable; false otherwise.
- */
-function isAnySegmentReachable(segments) {
-	for (const segment of segments) {
-		if (segment.reachable) {
-			return true;
-		}
-	}
-
-	return false;
-}
-
 //------------------------------------------------------------------------------
 // Rule Definition
 //------------------------------------------------------------------------------

package/lib/rules/no-with.js

@@ -28,9 +28,15 @@ module.exports = {
 	},
 
 	create(context) {
+		const sourceCode = context.sourceCode;
+
 		return {
 			WithStatement(node) {
-				context.report({ node, messageId: "unexpectedWith" });
+				context.report({
+					node,
+					loc: sourceCode.getFirstToken(node).loc,
+					messageId: "unexpectedWith",
+				});
 			},
 		};
 	},

package/lib/rules/prefer-arrow-callback.js

@@ -323,6 +323,24 @@ module.exports = {
 								return;
 							}
 
+							const functionToken = sourceCode.getFirstToken(
+								node,
+								node.async ? 1 : 0,
+							);
+							const leftParenToken = sourceCode.getTokenAfter(
+								functionToken,
+								astUtils.isOpeningParenToken,
+							);
+
+							if (node.async) {
+								if (
+									functionToken.loc.end.line <
+									leftParenToken.loc.start.line
+								) {
+									return;
+								}
+							}
+
 							// Remove `.bind(this)` if exists.
 							if (callbackInfo.isLexicalThis) {
 								const memberNode = node.parent;
@@ -375,14 +393,6 @@ module.exports = {
 							}
 
 							// Convert the function expression to an arrow function.
-							const functionToken = sourceCode.getFirstToken(
-								node,
-								node.async ? 1 : 0,
-							);
-							const leftParenToken = sourceCode.getTokenAfter(
-								functionToken,
-								astUtils.isOpeningParenToken,
-							);
 							const tokenBeforeBody = sourceCode.getTokenBefore(
 								node.body,
 							);

package/lib/rules/utils/code-path-utils.js

@@ -0,0 +1,22 @@
+/**
+ * @fileoverview Code path related utilities.
+ */
+
+"use strict";
+
+/**
+ * Checks all segments in a set and returns true if any are reachable.
+ * @param {Set<CodePathSegment>} segments The segments to check.
+ * @returns {boolean} `true` if any segment is reachable; `false` otherwise.
+ */
+function isAnySegmentReachable(segments) {
+	for (const segment of segments) {
+		if (segment.reachable) {
+			return true;
+		}
+	}
+
+	return false;
+}
+
+module.exports = { isAnySegmentReachable };

package/lib/types/index.d.ts

@@ -723,6 +723,22 @@ export namespace Rule {
 		| "class-field-initializer"
 		| "class-static-block";
 
+	interface CodePathSegmentTraversalController {
+		skip(): void;
+		break(): void;
+	}
+
+	type CodePathSegmentTraversalCallback = (
+		this: CodePath,
+		segment: CodePathSegment,
+		controller: CodePathSegmentTraversalController,
+	) => void;
+
+	interface CodePathTraversalOptions {
+		first?: CodePathSegment | undefined;
+		last?: CodePathSegment | undefined;
+	}
+
 	interface CodePath {
 		id: string;
 		origin: CodePathOrigin;
@@ -732,12 +748,19 @@ export namespace Rule {
 		thrownSegments: CodePathSegment[];
 		upper: CodePath | null;
 		childCodePaths: CodePath[];
+		traverseSegments(callback: CodePathSegmentTraversalCallback): void;
+		traverseSegments(
+			options: CodePathTraversalOptions,
+			callback: CodePathSegmentTraversalCallback,
+		): void;
 	}
 
 	interface CodePathSegment {
 		id: string;
 		nextSegments: CodePathSegment[];
 		prevSegments: CodePathSegment[];
+		allNextSegments: CodePathSegment[];
+		allPrevSegments: CodePathSegment[];
 		reachable: boolean;
 	}
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint",
-  "version": "10.4.0",
+  "version": "10.5.0",
   "author": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>",
   "description": "An AST-based pattern checker for JavaScript.",
   "type": "commonjs",
@@ -78,8 +78,15 @@
     "test:fuzz": "node Makefile.js fuzz",
     "test:performance": "node Makefile.js perf",
     "test:pnpm": "cd tests/pnpm && node check.js && pnpm install && pnpm exec tsc",
-    "test:types": "tsc -p tests/lib/types/tsconfig.json"
+    "test:types": "tsc -p tests/lib/types/tsconfig.json && npm run test:types --workspaces --if-present",
+    "test:types:5.3": "npx -p typescript@5.3 -y -- tsc -p tsconfig.types-legacy.json",
+    "test:types:5.x": "npx -p typescript@5.x -y -- tsc -p tsconfig.types.json",
+    "test:types:7.x": "npx -p @typescript/native-preview@latest -y -- tsgo -p tsconfig.types.json",
+    "test:types:all": "npm run test:types && npm run test:types:5.3 && npm run test:types:5.x && npm run test:types:7.x"
   },
+  "workspaces": [
+    "packages/*"
+  ],
   "gitHooks": {
     "pre-commit": "lint-staged"
   },
@@ -124,7 +131,7 @@
     "@eslint/config-array": "^0.23.5",
     "@eslint/config-helpers": "^0.6.0",
     "@eslint/core": "^1.2.1",
-    "@eslint/plugin-kit": "^0.7.1",
+    "@eslint/plugin-kit": "^0.7.2",
     "@humanfs/node": "^0.16.6",
     "@humanwhocodes/module-importer": "^1.0.1",
     "@humanwhocodes/retry": "^0.4.2",
@@ -151,12 +158,12 @@
     "optionator": "^0.9.3"
   },
   "devDependencies": {
-    "@arethetypeswrong/cli": "^0.18.0",
+    "@arethetypeswrong/cli": "^0.18.3",
     "@babel/core": "^7.4.3",
     "@babel/preset-env": "^7.4.3",
     "@cypress/webpack-preprocessor": "^6.0.2",
     "@eslint/eslintrc": "^3.3.5",
-    "@eslint/json": "^1.2.0",
+    "@eslint/json": "^2.0.0",
     "@types/esquery": "^1.5.4",
     "@types/node": "^22.13.14",
     "@typescript-eslint/parser": "^8.58.2",