deps(npm-dev): bump eslint from 9.39.5 to 10.9.1 in /ui

[dependabot]

Bumps eslint from 9.39.5 to 10.9.1.

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

• 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

• ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

• 3c3ae53 chore: update ecosystem plugins (#21249) (ESLint Bot)

v10.9.0

Features

• 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
• 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

• 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
• 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
• 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

• 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
• 87f66f4 docs: Update README (GitHub Actions Bot)
• 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
• f3993b0 docs: Update README (GitHub Actions Bot)
• ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
• 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
• 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
• 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

• 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
• 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
• dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
• f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
• 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

• 5c8c241 10.9.1
• a7f3b7d Build: changelog update for 10.9.1
• 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251)
• ad74a8d docs: add deprecation steps for EOL package versions (#21248)
• 3c3ae53 chore: update ecosystem plugins (#21249)
• c27bc92 10.9.0
• fa831d9 Build: changelog update for 10.9.0
• 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243)
• 08de88e feat: handle underflow in no-loss-of-precision (#21218)
• 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[rennerdo30]

Leaving this open as upstream-blocked. Re-tested eslint 10.6.0 together with eslint-config-next 16.2.9 (#56, now merged): npm run lint still crashes with TypeError: Error while loading rule 'react/display-name': contextOrFilename.getFilename is not a function. eslint-config-next@16.2.9 still bundles eslint-plugin-react@7.37.5 (peer eslint: ^9.7), which relies on the rule-context getFilename API removed in eslint 10. Blocked until eslint-config-next ships a build with an eslint-10-compatible eslint-plugin-react.

[dependabot]

A newer version of eslint exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

[rennerdo30]

Still blocked — re-verified against current main (eslint-config-next 16.2.12, typescript 6.0.3), so the earlier assessment against 16.2.9 is unchanged:

ESLint: 10.6.0
TypeError: Error while loading rule 'react/display-name': contextOrFilename.getFilename is not a function
    at resolveBasedir (node_modules/eslint-plugin-react/lib/util/version.js:31:100)

eslint-config-next 16.2.12 still bundles eslint-plugin-react 7.37.5, which uses the rule-context getFilename() API removed in eslint 10. npm run lint exits 2 (baseline: exit 1, 2 errors).

This PR is also CONFLICTING on ui/package.json now that #68 and #81 have landed; it needs a rebase before it can be evaluated for merge at all. Leaving open.

[rennerdo30]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[rennerdo30]

@dependabot recreate

[rennerdo30]

Re-verified against today's main (eslint-config-next 16.3.4, next 16.3.4, eslint 10.10.0 installed with npm install --legacy-peer-deps). Still blocked, and the blocker is not typescript-eslint.

> eslint

Oops! Something went wrong! :(

ESLint: 10.10.0

TypeError: Error while loading rule 'react/display-name': contextOrFilename.getFilename is not a function
Occurred while linting ui/eslint.config.mjs
    at resolveBasedir (ui/node_modules/eslint-plugin-react/lib/util/version.js:31:100)
    at detectReactVersion (ui/node_modules/eslint-plugin-react/lib/util/version.js:85:19)
    at getReactVersionFromContext (ui/node_modules/eslint-plugin-react/lib/util/version.js:116:25)

Blocking package: eslint-plugin-react. Its newest release still refuses ESLint 10, and there is no newer line to move to:

$ npm view eslint-plugin-react version peerDependencies
version = '7.37.5'
peerDependencies = { eslint: '^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9.7' }

$ npm view eslint-plugin-react dist-tags
{ next: '7.8.0-rc.0', latest: '7.37.5' }      # the `next` tag is an old RC pinned to eslint ^3 || ^4

It reaches us transitively, and both the stable and canary Next.js configs still pin it:

$ npm view eslint-config-next@16.3.4 dependencies
{ ..., 'eslint-plugin-react': '^7.37.0', 'typescript-eslint': '^8.46.0', ... }

$ npm view eslint-config-next@16.4.0-canary.18 dependencies
{ ..., 'eslint-plugin-react': '^7.37.0', ... }

For the record, typescript-eslint is not the problem here — it already accepts ESLint 10 (eslint: '^8.57.0 || ^9.0.0 || ^10.0.0'). The only way to take ESLint 10 today would be to drop eslint-config-next for a hand-rolled flat config, which would also drop the @next/eslint-plugin-next rules; that is a deliberate change to the project's lint setup, not a dependency bump, so it is not being done here.

Leaving this open. It should go green on @dependabot rebase once eslint-plugin-react ships ESLint 10 support and eslint-config-next picks it up.