[dependabot]

Bumps @eslint-react/eslint-plugin from 5.8.6 to 5.28.8.

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.28.8 (2026-10-24)

What's Changed

🐞 Fixes

• react-x/purity: builtin member resolution no longer follows computed or unknown middle segments (ex: window[fetch], window.myLibrary.fetch), preventing false reports of non-builtin calls. (#2074)

🏗️ Internal

• @eslint-react/eslint: added dual-purpose getText for direct or callback-style source text extraction, replacing repeated context.sourceCode.getText wrappers across packages. (#2073)

Full Changelog: Rel1cx/eslint-react@v5.28.7...v5.28.8

Attestation

https://github.com/Rel1cx/eslint-react/attestations/59146035

v5.28.7 (2026-10-23)

What's Changed

🐞 Fixes

• react-x/purity: now reports Date calls during render, including Date(), Date(arg), and window.Date(); unlike new Date(arg), Date(arg) ignores its arguments and always returns the current time. (#2071) Thanks to @​aki05162525!

🏗️ Internal

• Bumped effect and @effect/platform-node to 4.0.6, @tanstack/react-router to 1.170.46, @tanstack/react-start to 1.169.4, and eslint-plugin-de-morgan to 2.3.0.

New Contributors

• TAKAGI AKIHIRO (@​aki05162525) made their first contribution in #2071.

Full Changelog: Rel1cx/eslint-react@v5.28.6...v5.28.7

Attestation

https://github.com/Rel1cx/eslint-react/attestations/59051814

v5.28.6 (2026-10-22)

What's Changed

🐞 Fixes

• react-x/set-state-in-effect: the ref-derived parameter exemption now also applies to helpers wrapped in useCallback (ex: measure(ref.current) where measure = useCallback((el) => { setWidth(el.offsetWidth); }, [])). (#2065) Thanks to @​amhunt!
• react-x/set-state-in-effect: a helper call behind a ref-derived guard (if, ternary, short-circuit, or early return) now exempts the setState calls it reaches, as a setState written in its place would be (ex: if (!anchorRef.current) return; commitPosition(0, true);); call sites are judged individually. (#2065) Thanks to @​amhunt!

... (truncated)

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.28.8 (2026-10-24)

🐞 Fixes

• react-x/purity: builtin member resolution no longer follows computed or unknown middle segments (ex: window[fetch], window.myLibrary.fetch), preventing false reports of non-builtin calls. (#2074)

🏗️ Internal

• @eslint-react/eslint: added dual-purpose getText for direct or callback-style source text extraction, replacing repeated context.sourceCode.getText wrappers across packages. (#2073)

Full Changelog: Rel1cx/eslint-react@v5.28.7...v5.28.8

v5.28.7 (2026-10-23)

🐞 Fixes

• react-x/purity: now reports Date calls during render, including Date(), Date(arg), and window.Date(); unlike new Date(arg), Date(arg) ignores its arguments and always returns the current time. (#2071) Thanks to @​aki05162525!

🏗️ Internal

• Bumped effect and @effect/platform-node to 4.0.6, @tanstack/react-router to 1.170.46, @tanstack/react-start to 1.169.4, and eslint-plugin-de-morgan to 2.3.0.

New Contributors

• TAKAGI AKIHIRO (@​aki05162525) made their first contribution in #2071.

Full Changelog: Rel1cx/eslint-react@v5.28.6...v5.28.7

v5.28.6 (2026-10-22)

🐞 Fixes

• react-x/set-state-in-effect: the ref-derived parameter exemption now also applies to helpers wrapped in useCallback (ex: measure(ref.current) where measure = useCallback((el) => { setWidth(el.offsetWidth); }, [])). (#2065) Thanks to @​amhunt!
• react-x/set-state-in-effect: a helper call behind a ref-derived guard (if, ternary, short-circuit, or early return) now exempts the setState calls it reaches, as a setState written in its place would be (ex: if (!anchorRef.current) return; commitPosition(0, true);); call sites are judged individually. (#2065) Thanks to @​amhunt!

New Contributors

• Andrew Hunt (@​amhunt) made their first contribution in #2065.

Full Changelog: Rel1cx/eslint-react@v5.28.5...v5.28.6

v5.28.5 (2026-10-22)

✨ New

• react-dom/no-unsafe-target-blank: the suggested fix now adds rel="noreferrer" instead of rel="noreferrer noopener", since noreferrer already implies noopener per the HTML spec; values combining both tokens remain valid. (#2068)

🏗️ Internal

• Removed redundant transitive dependency overrides. (#2064)

... (truncated)

Commits

• ac277a8 release: 5.28.8
• c3318d0 release: 5.28.7
• 558d8fd release: 5.28.6
• de5d042 release: 5.28.5
• 46450e5 docs: minor improvements
• afc7eb9 release: 5.28.4
• 1f3931b release: 5.28.3
• 11456a4 release: 5.28.2
• 3533e2d docs: correct documented ESLint minimum version to 10.0.0
• a35f390 release: 5.28.1
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
nodejs-org	Ready	Preview	Nov 1, 2026 5:40pm UTC

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.95%. Comparing base (9b90137) to head (b1e9caa).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #9278      +/-   ##
==========================================
- Coverage   86.98%   86.95%   -0.04%     
==========================================
  Files          88       88              
  Lines        6356     6356              
  Branches      386      386              
==========================================
- Hits         5529     5527       -2     
- Misses        823      825       +2     
  Partials        4        4              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

[github-actions]

📦 Build Size Comparison

Summary

Metric	Value
Old Total First Load JS	7.23 MB
New Total First Load JS	7.23 MB
Delta	0 B (0.00%)