Bump eslint-plugin-promise from 7.2.1 to 7.3.0 by dependabot[bot] · Pull Request #316 · fossas/fossa-action

dependabot · 2026-07-23T04:10:11Z

Bumps eslint-plugin-promise from 7.2.1 to 7.3.0.

Release notes

Sourced from eslint-plugin-promise's releases.

v7.3.0

7.3.0 (2026-04-27)

🌟 Features

no-promise-in-callback: add exemptDeclarations option (#513) (550524f)

add support for ESLint v10 (#617) (6096821)

🩹 Fixes

no-native: fix to report Promise usage in eslint v9 or later (#619) (1230ced)

🧹 Chores

add missing 'use strict' directive (#593) (4cd7ea1)

deps-dev: update eslint-plugin-eslint-plugin to v6.4.0 (#583) (45385a3)

deps-dev: update eslint-plugin-jest to v28.11.0 (#585) (a33ffb6)

deps-dev: update eslint-plugin-n to v17.14.0 (#575) (fad9049)

deps-dev: update eslint-plugin-prettier to v5.2.3 (#586) (b2095cb)

deps-dev: update eslint-plugin-prettier to v5.2.4 (#600) (fad5029)

deps-dev: update lint-staged to v15.4.3 (#582) (d1e23e5)

deps-dev: update prettier to v3.4.1 (#578) (3fae241)

deps-dev: update prettier to v3.4.2 (#580) (7219528)

deps-dev: update prettier to v3.5.0 (#588) (5da83c4)

deps: update globals to v15.13.0 (#579) (75defcf)

deps: update globals to v15.14.0 (#584) (846ad48)

deps: update typescript to v5.7.3 (#589) (79b0eff)

package: explicitly declare js module type (#592) (b19e133)

update typescript to ~5.7.0 (#577) (04d0b2b)

Changelog

Sourced from eslint-plugin-promise's changelog.

7.3.0 (2026-04-27)

🌟 Features

no-promise-in-callback: add exemptDeclarations option (#513) (550524f)

add support for ESLint v10 (#617) (6096821)

🩹 Fixes

no-native: fix to report Promise usage in eslint v9 or later (#619) (1230ced)

🧹 Chores

add missing 'use strict' directive (#593) (4cd7ea1)

deps-dev: update eslint-plugin-eslint-plugin to v6.4.0 (#583) (45385a3)

deps-dev: update eslint-plugin-jest to v28.11.0 (#585) (a33ffb6)

deps-dev: update eslint-plugin-n to v17.14.0 (#575) (fad9049)

deps-dev: update eslint-plugin-prettier to v5.2.3 (#586) (b2095cb)

deps-dev: update eslint-plugin-prettier to v5.2.4 (#600) (fad5029)

deps-dev: update lint-staged to v15.4.3 (#582) (d1e23e5)

deps-dev: update prettier to v3.4.1 (#578) (3fae241)

deps-dev: update prettier to v3.4.2 (#580) (7219528)

deps-dev: update prettier to v3.5.0 (#588) (5da83c4)

deps: update globals to v15.13.0 (#579) (75defcf)

deps: update globals to v15.14.0 (#584) (846ad48)

deps: update typescript to v5.7.3 (#589) (79b0eff)

package: explicitly declare js module type (#592) (b19e133)

update typescript to ~5.7.0 (#577) (04d0b2b)

Commits

f1dd605 chore(main): release 7.3.0 (#576)
6096821 feat: add support for ESLint v10 (#617)
1230ced fix(no-native): fix to report Promise usage in eslint v9 or later (#619)
6cf7adb ci: trusted publishing (#610)
fad5029 chore(deps-dev): update eslint-plugin-prettier to v5.2.4 (#600)
4cd7ea1 chore: add missing 'use strict' directive (#593)
b19e133 chore(package): explicitly declare js module type (#592)
5da83c4 chore(deps-dev): update prettier to v3.5.0 (#588)
d1e23e5 chore(deps-dev): update lint-staged to v15.4.3 (#582)
b2095cb chore(deps-dev): update eslint-plugin-prettier to v5.2.3 (#586)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-promise since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eslint-plugin-promise](https://github.com/eslint-community/eslint-plugin-promise) from 7.2.1 to 7.3.0. - [Release notes](https://github.com/eslint-community/eslint-plugin-promise/releases) - [Changelog](https://github.com/eslint-community/eslint-plugin-promise/blob/main/CHANGELOG.md) - [Commits](eslint-community/eslint-plugin-promise@v7.2.1...v7.3.0) --- updated-dependencies: - dependency-name: eslint-plugin-promise dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

fossabot · 2026-07-23T04:10:14Z

✓ Safe to upgrade

I recommend merging this upgrade because it is a minor, non-breaking version bump that adds ESLint v10 compatibility — directly relevant since the project already depends on eslint: "^10.7.0". The release includes two targeted bug fixes (for the no-native and no-multiple-resolved rules to work correctly with ESLint v9+), a new opt-in exemptDeclarations option on no-promise-in-callback, and internal housekeeping. The only promise/ rules referenced in the project's ESLint config (promise/param-names and promise/no-nesting) are both explicitly disabled, meaning no linting behaviour changes will affect developers. There are no breaking changes, no runtime compatibility issues, and no security concerns.

What we checked

eslint-plugin-promise is declared in devDependencies as "^7.3.0", confirming this is a lint tooling dependency only — it has no impact on the production build or runtime. ^[1]
promise/param-names is explicitly set to 0 (disabled), so the bug fix and behavioural changes to that rule have no effect on CI lint output. ^[2]
promise/no-nesting is also explicitly set to 0 (disabled), confirming no active promise/ rules are in use that could surface new lint errors after the upgrade. ^[3]
The config extends standard (via eslint-config-standard), which declares a peer dependency on eslint-plugin-promise ^6.0.0 — the upgraded 7.3.0 satisfies that peer range without conflict. ^[4]
The project uses eslint: "^10.7.0". The upgrade explicitly adds ESLint v10 to the supported peer range (^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0), resolving a prior compatibility gap. ^[5]
Lockfile confirms resolution to eslint-plugin-promise@7.3.0, consistent with the declared ^7.3.0 range in package.json. ^[6]

Dependency Usage

No usage of the analyzed dependencies was found in this repository.

promise/param-names is explicitly set to 0 (disabled), so the bug fix and behavioural changes to that rule have no effect on CI lint output.

fossa-action/eslint.config.mjs

Line 125 in 45c7133

"promise/param-names": 0,
promise/no-nesting is also explicitly set to 0 (disabled), confirming no active promise/ rules are in use that could surface new lint errors after the upgrade.

fossa-action/eslint.config.mjs

Line 126 in 45c7133

"promise/no-nesting": 0,

View 1 more usage

The config extends standard (via eslint-config-standard), which declares a peer dependency on eslint-plugin-promise ^6.0.0 — the upgraded 7.3.0 satisfies that peer range without conflict.

fossa-action/eslint.config.mjs

Line 27 in 45c7133

"eslint-config-airbnb-base",

Changes

eslint-plugin-promise was updated with two notable bug fixes: the no-native rule now correctly reports Promise usage in ESLint v9+ (using sourceCode.scopeManager instead of getScope), and the no-multiple-resolved rule was fixed for newer ESLint versions. Additionally, ESLint v10 support was added and the no-promise-in-callback rule gained a new exemptDeclarations option.

no-native: fix to report Promise usage in eslint v9 or later (#619) (1230ced) (v7.2.1-7.3.0, changelog)
no-promise-in-callback: add exemptDeclarations option (#513) (550524f) (v7.2.1-7.3.0, changelog)
add support for ESLint v10 (#617) (6096821) (v7.2.1-7.3.0, changelog)

View 38 more changes

add missing 'use strict' directive (#593) (4cd7ea1) (v7.2.1-7.3.0, changelog)
deps-dev: update eslint-plugin-eslint-plugin to v6.4.0 (#583) (45385a3) (v7.2.1-7.3.0, changelog)
deps-dev: update eslint-plugin-jest to v28.11.0 (#585) (a33ffb6) (v7.2.1-7.3.0, changelog)
deps-dev: update eslint-plugin-n to v17.14.0 (#575) (fad9049) (v7.2.1-7.3.0, changelog)
deps-dev: update eslint-plugin-prettier to v5.2.3 (#586) (b2095cb) (v7.2.1-7.3.0, changelog)
deps-dev: update lint-staged to v15.4.3 (#582) (d1e23e5) (v7.2.1-7.3.0, changelog)
deps-dev: update prettier to v3.4.1 (#578) (3fae241) (v7.2.1-7.3.0, changelog)
deps-dev: update prettier to v3.5.0 (#588) (5da83c4) (v7.2.1-7.3.0, changelog)
deps: update globals to v15.13.0 (#579) (75defcf) (v7.2.1-7.3.0, changelog)
deps: update globals to v15.14.0 (#584) (846ad48) (v7.2.1-7.3.0, changelog)
deps: update typescript to v5.7.3 (#589) (79b0eff) (v7.2.1-7.3.0, changelog)
package: explicitly declare js module type (#592) (b19e133) (v7.2.1-7.3.0, changelog)
update typescript to ~5.7.0 (#577) (04d0b2b) (v7.2.1-7.3.0, changelog)
no-promise-in-callback: add exemptDeclarations option (#513) (550524f) (v7.3.0, changelog)
add support for ESLint v10 (#617) (6096821) (v7.3.0, changelog)
no-native: fix to report Promise usage in eslint v9 or later (#619) (1230ced) (v7.3.0, changelog)
add missing 'use strict' directive (#593) (4cd7ea1) (v7.3.0, changelog)
Fix no-native rule to report Promise usage in ESLint v9 or later (v7.2.1-7.3.0, commit)
Add support for ESLint v10 (v7.2.1-7.3.0, commit)
Add exemptDeclarations option to no-promise-in-callback rule (v7.2.1-7.3.0, commit)
Add missing 'use strict' directive (v7.2.1-7.3.0, commit)
Explicitly declare JS module type in package configuration (v7.2.1-7.3.0, commit)
Update TypeScript to v5.7.3 (v7.2.1-7.3.0, commit)
Update globals to v15.14.0 (v7.2.1-7.3.0, commit)
Update Prettier to v3.5.0 (v7.2.1-7.3.0, commit)
Update ESLint Plugin Prettier to v5.2.4 (v7.2.1-7.3.0, commit)
Update ESLint Plugin Jest to v28.11.0 (v7.2.1-7.3.0, commit)
Update ESLint Plugin ESLint Plugin to v6.4.0 (v7.2.1-7.3.0, commit)
Update ESLint Plugin N to v17.14.0 (v7.2.1-7.3.0, commit)
Update Lint Staged to v15.4.3 (v7.2.1-7.3.0, commit)
Enable trusted publishing in CI (v7.2.1-7.3.0, commit)
Fixed no-native rule to properly report Promise usage in ESLint v9 or later - updated compatibility layer to use sourceCode.scopeManager instead of getScope (v7.3.0, package source)
Fixed no-multiple-resolved rule selector and implementation to properly handle CallExpression nodes in newer ESLint versions (v7.3.0, package source)
Added support for ESLint v10 - plugin now works with ESLint ^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0 (v7.3.0, package source)
Added exemptDeclarations boolean option to no-promise-in-callback rule to allow exempting certain declarations from the rule (v7.3.0, package source)
Explicitly declared module type as commonjs and main entry point as index.js in package.json (v7.3.0, package source)
Added missing 'use strict' directives to JavaScript files for better code consistency (v7.3.0, package source)
Updated development dependencies including TypeScript to ~5.7.0 and various eslint plugins (v7.3.0, package source)

References (6)

[1]: eslint-plugin-promise is declared in devDependencies as "^7.3.0", confirming this is a lint tooling dependency only — it has no impact on the production build or runtime.

fossa-action/package.json

Line 33 in 45c7133

"eslint-plugin-promise": "^7.3.0",

[2]: promise/param-names is explicitly set to 0 (disabled), so the bug fix and behavioural changes to that rule have no effect on CI lint output.

fossa-action/eslint.config.mjs

Line 125 in 45c7133

"promise/param-names": 0,

[3]: promise/no-nesting is also explicitly set to 0 (disabled), confirming no active promise/ rules are in use that could surface new lint errors after the upgrade.

fossa-action/eslint.config.mjs

Line 126 in 45c7133

"promise/no-nesting": 0,

[4]: The config extends standard (via eslint-config-standard), which declares a peer dependency on eslint-plugin-promise ^6.0.0 — the upgraded 7.3.0 satisfies that peer range without conflict.

fossa-action/eslint.config.mjs

Line 27 in 45c7133

"eslint-config-airbnb-base",

[5]: The project uses eslint: "^10.7.0". The upgrade explicitly adds ESLint v10 to the supported peer range (^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0), resolving a prior compatibility gap.

fossa-action/package.json

Line 27 in 45c7133

"eslint": "^10.7.0",

[6]: Lockfile confirms resolution to eslint-plugin-promise@7.3.0, consistent with the declared ^7.3.0 range in package.json.

fossa-action/yarn.lock

Line 1147 in 45c7133

"eslint-plugin-promise@npm:^7.3.0":

fossabot analyzed this PR using dependency research. View this analysis on the web

fossabot · 2026-07-23T04:10:16Z

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026

dependabot Bot requested a review from a team as a code owner July 23, 2026 04:10

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026

dependabot Bot requested a review from csasarak July 23, 2026 04:10

csasarak approved these changes Jul 23, 2026

View reviewed changes

csasarak merged commit 28d08a7 into main Jul 23, 2026
3 checks passed

csasarak deleted the dependabot/npm_and_yarn/eslint-plugin-promise-7.3.0 branch July 23, 2026 11:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump eslint-plugin-promise from 7.2.1 to 7.3.0 - #316

Bump eslint-plugin-promise from 7.2.1 to 7.3.0#316
csasarak merged 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-plugin-promise-7.3.0

dependabot Bot commented on behalf of github Jul 23, 2026

Uh oh!

fossabot Bot commented Jul 23, 2026 •

edited

Loading

Uh oh!

fossabot Bot commented Jul 23, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026

v7.3.0

7.3.0 (2026-04-27)

🌟 Features

🩹 Fixes

🧹 Chores

7.3.0 (2026-04-27)

🌟 Features

🩹 Fixes

🧹 Chores

Uh oh!

fossabot Bot commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✓ Safe to upgrade

What we checked

Dependency Usage

Changes

Uh oh!

fossabot Bot commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

fossabot Bot commented Jul 23, 2026 •

edited

Loading

fossabot Bot commented Jul 23, 2026 •

edited

Loading