build(deps-dev): bump the development-minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the development-minor-and-patch group with 3 updates in the / directory: @eslint-react/eslint-plugin, @types/node and eslint.

Updates @eslint-react/eslint-plugin from 5.19.1 to 5.20.5

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.20.5 (2026-09-21)

What's Changed

🐞 Fixes

• react-web-api/no-leaked-fetch: fixed a false positive where an abort call nested in a callback within the cleanup function (e.g. setTimeout(() => ctrl.abort())) was not recognized, causing a spurious expectedAbortInCleanup report; the abort lookup now finds the nearest enclosing setup/cleanup function instead of requiring the innermost one. (#1962)

Full Changelog: Rel1cx/eslint-react@v5.20.4...v5.20.5

Attestation

https://github.com/Rel1cx/eslint-react/attestations/48898603

v5.20.4 (2026-09-21)

What's Changed

🐞 Fixes

• react-web-api/no-leaked-event-listener: listeners that are only added inside the effect cleanup are now reported when the matching removeEventListener is in the setup (reversed setup/cleanup pairing), since a listener attached on unmount is never removed. (#1961)

🏗️ Internal

• react-jsx and react-web-api rules: unified rule code style and variable naming across the plugins. (#1960, #1961)

Full Changelog: Rel1cx/eslint-react@v5.20.3...v5.20.4

Attestation

https://github.com/Rel1cx/eslint-react/attestations/48844395

v5.20.3 (2026-09-21)

What's Changed

🏗️ Internal

• @eslint-react/ast: replaced getIdentifierAt with the new getMemberChain helper and moved getInnermostCall to its sole consumer in react-x/no-nested-component-definitions. (#1959)
• react-dom rules: unified rule code style and variable naming across the plugin, and switched no-find-dom-node to import-aware detection via createImportLookup. (#1958)

Full Changelog: Rel1cx/eslint-react@v5.20.2...v5.20.3

Attestation

https://github.com/Rel1cx/eslint-react/attestations/48818429

... (truncated)

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.20.5 (2026-09-21)

🐞 Fixes

• react-web-api/no-leaked-fetch: fixed a false positive where an abort call nested in a callback within the cleanup function (e.g. setTimeout(() => ctrl.abort())) was not recognized, causing a spurious expectedAbortInCleanup report; the abort lookup now finds the nearest enclosing setup/cleanup function instead of requiring the innermost one. (#1962)

Full Changelog: Rel1cx/eslint-react@v5.20.4...v5.20.5

v5.20.4 (2026-09-21)

🐞 Fixes

• react-web-api/no-leaked-event-listener: listeners that are only added inside the effect cleanup are now reported when the matching removeEventListener is in the setup (reversed setup/cleanup pairing), since a listener attached on unmount is never removed. (#1961)

🏗️ Internal

• react-jsx and react-web-api rules: unified rule code style and variable naming across the plugins. (#1960, #1961)

Full Changelog: Rel1cx/eslint-react@v5.20.3...v5.20.4

v5.20.3 (2026-09-21)

🏗️ Internal

• @eslint-react/ast: replaced getIdentifierAt with the new getMemberChain helper and moved getInnermostCall to its sole consumer in react-x/no-nested-component-definitions. (#1959)
• react-dom rules: unified rule code style and variable naming across the plugin, and switched no-find-dom-node to import-aware detection via createImportLookup. (#1958)

Full Changelog: Rel1cx/eslint-react@v5.20.2...v5.20.3

v5.20.2 (2026-09-20)

🐞 Fixes

• Fixed false negatives in the JSX element resolver used by the react-dom rules: polymorphic components written as member expressions (e.g. <motion.div as="button">) were mistaken for host elements, so the polymorphic prop was ignored and these rules skipped them entirely; they are now resolved through the polymorphic prop and checked like the underlying DOM element. String values of the polymorphic prop are also normalized to lowercase, so as="BUTTON" is treated as button. Affected rules:
  • react-dom/no-missing-button-type
  • react-dom/no-missing-iframe-sandbox
  • react-dom/no-unsafe-iframe-sandbox
  • react-dom/no-unsafe-target-blank
  • react-dom/no-void-elements-with-children

🏗️ Internal

• The normalized polymorphicPropName setting type is corrected from string | null to string — it could never be null at runtime — and the unreachable null branch in the JSX element resolver used by the react-dom rules is removed.

Full Changelog: Rel1cx/eslint-react@v5.20.1...v5.20.2

v5.20.1 (2026-09-20)

🐞 Fixes

... (truncated)

Commits

• 22bf7c5 release: 5.20.5
• 989b4a1 release: 5.20.4
• 3a57ab3 release: 5.20.3
• dffc8b2 release: 5.20.2
• fbe776a release: 5.20.1
• 03e0cbd chore(deps): update eslint to 10.11.0, pnpm to 12.5.1 and other deps
• d675570 chore: add node types reference to all package tsl/tsdown configs
• bb368c5 release: 5.20.0
• See full diff in compare view

Updates @types/node from 24.13.5 to 24.13.6

Commits

• See full diff in compare view

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

• 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
• 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
• 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
• 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
• 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
• ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
• c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
• f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
• fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

Commits

• 3c0b7c6 10.11.0
• 321f0a7 Build: changelog update for 10.11.0
• 520dd77 perf: Implement fast paths in critical areas (#21210)
• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
• 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
• 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
• 24310e3 chore: update ecosystem plugins (#21324)
• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
• 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
• Additional commits viewable in compare view