build(deps-dev): bump the development group with 3 updates by dependabot[bot] · Pull Request #53 · openclaw/uirouter

dependabot · 2026-10-07T18:55:40Z

Bumps the development group with 3 updates: oxfmt, oxlint and tsdown.

Updates oxfmt from 0.71.0 to 0.72.0

Release notes

oxfmt v0.72.0

💥 BREAKING CHANGES

e2c68b1 oxfmt: [BREAKING] Format parser:markdown files by oxc_formatter_markdown (#27256) (leaysgur)

🚀 Features

b538e3c formatter_css: Parse embedded CSS as a block's contents (#27284) (leaysgur)

🐛 Bug Fixes

71e400b formatter_markdown: Fixed remaining issues found by fuzz (#27334) (leaysgur)

7d0e54d formatter_markdown: Preserve line breaks around Chinese/Japanese characters in all proseWrap (#27331) (leaysgur)

e9ae2d8 formatter_css: Fix layouts found in mdn-content repo (css-in-md) (#27326) (leaysgur)

df85b4c oxfmt: Keep blank lines after a line break in Prettier Doc to IR (#27325) (leaysgur)

7f65b75 formatter: Format assignment target property as assignment-like (#27289) (leaysgur)

6c08f2a formatter_css: Apply the url() import exception to a lone comma group (#27288) (leaysgur)

1967302 formatter_css: Hug a spaced ident ( only at the at-rule prelude head (#27283) (leaysgur)

2445064 formatter_markdown: Keep a preserved line break before a delimiter row that opens no table (#27278) (leaysgur)

dd72fbf formatter_markdown: Keep container columns as spaces under useTabs (#27277) (leaysgur)

1686018 oxfmt: Make one state conditionalGroup fit up to first hardline (#27275) (leaysgur)

fd4ddce formatter_json: Flatten block comment only array|object (#27274) (leaysgur)

267557c formatter,oxfmt: Embed only original JSDoc plugin supported languages (#27241) (leaysgur)

2606c60 oxfmt: Do not re-include a file below an excluded directory with a negated pattern (#27237) (Nicolas Le Cam)

c2de02b formatter: Decide embedded template layout from AST, not source shape (#27218) (leaysgur)

c9e1224 formatter: Handle quoteProps: consistent for patterns and computed keys (#27216) (leaysgur)

36e14df formatter: Keep comments between callee and its opener on the callee side (#27172) (leaysgur)

6da7657 oxfmt: Render diagnostics with source in Stdin mode (#27130) (leaysgur)

e9b2ec5 oxfmt/lsp: Reload .prettierignore on watched file change (#27129) (leaysgur)

30eb463 oxfmt: Check global ignores before resolving nested config in Stdin mode (#27128) (leaysgur)

⚡ Performance

72f42a3 formatter_markdown: Pre-allocate the IR buffer (#27333) (leaysgur)

cea47e3 formatter_core: Avoid exponential will_break check on nested interned (#27211) (leaysgur)

0aba566 oxfmt: Do not resolve root js config from nested context (#27147) (leaysgur)

📚 Documentation

51506c6 formatter_css: Record divergences found in mdn-content (css-in-md) (#27327) (leaysgur)

656b81c formatter_markdown: Record unclosed fences closing at a directive's closer (#27279) (leaysgur)

66545bf formatter_markdown: Record setext heading wrap divergence (#27221) (leaysgur)

af4b269 oxfmt: Document why format() API does not take cwd (#27131) (leaysgur)

Commits

2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
See full diff in compare view

Updates oxlint from 1.86.0 to 1.87.0

Release notes

Sourced from oxlint's releases.

oxlint v1.87.0

🚀 Features

42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#27292) (Mikhail Baev)

cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#27245) (Mikhail Baev)

1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#27181) (Mikhail Baev)

🐛 Bug Fixes

176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#27302) (sama Pyb)

7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#27306) (sama Pyb)

4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#27304) (sama Pyb)

7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#27207) (breken)

e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#27206) (breken)

3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)

f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#27150) (camc314)

7d60ae3 linter/valid-title: Continue checks after allowed words (#27146) (Cameron)

ad5dd5d linter/eslint/no-unused-vars: Respect disabled argument checks for used ignore patterns (#26925) (camc314)

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
See full diff in compare view

Updates tsdown from 0.22.14 to 0.23.0

Release notes

Sourced from tsdown's releases.

v0.23.0

   🧭 Migration Guide

Most users can upgrade directly. Before upgrading, run one final build with tsdown@0.22.14 and resolve all deprecation warnings.

config:

bundle: false → unbundle: true; bundle: true can be removed

outExtension → outExtensions

publicDir / --public-dir → copy / --copy

removeNodeProtocol: true → nodeProtocol: 'strip'

injectStyle → css.inject

deps:

inlineOnly / deps.onlyAllowBundle → deps.onlyBundle

skipNodeModulesBundle: true → deps.neverBundle: true

resolveDepSubpath now defaults to false; set it to true to preserve the previous behavior

dts:

rolldown-plugin-dts was upgraded from 0.27.13 to 0.28.5

dts.oxc: true → dts.generator: 'oxc'

dts.tsgo: true → dts.generator: 'tsgo'; oxc and tsgo objects now only configure their respective generators

dts.volarPlugins → dts.customLanguages; rename each language's create hook to createVolarPlugins

Custom languages, including vue, now throw when combined with an incompatible generator

dts.cjsReexport was removed; dual-format builds now generate CJS declarations in a separate pass

attw:

The default profile changed from strict to esm-only; set profile: 'strict' to preserve the previous checks

programmatic API:

build() now returns { bundles, watch }; replace const bundles = await build() with const { bundles } = await build()

requirements:

Node.js 25 is no longer supported; use ^22.18.0, ^24.11.0, or >=26.0.0

rolldown-plugin-dts now requires Rolldown 1.2.x

Legacy types and typesVersions fallbacks were removed; use TypeScript's bundler, node16, or nodenext module resolution

   🚨 Breaking Changes

Drop support for Node.js 25 - by @sxzz (26950)

Remove deprecated tsup compatibility options - by @sxzz (50766)

Drop types and typesVersionsfields - by @sxzz (be3ea)

attw:

Change default profile to esm-only - by @sxzz (9b3cf)

deps:

Remove deprecated deps.onlyAllowBundle - by @sxzz (30c55)

Disable resolveDepSubpath by default - by @sxzz (d300f)

Remove deprecated skipNodeModulesBundle - by @sxzz (f2a3d)

dts:

Remove dts.cjsReexport option - by @sxzz (9c70f)

Make dts.generator the only way to select generator - by @sxzz (eb75f)

   🚀 Features

Expose programmatic watch controls - by @sxzz in rolldown/tsdown#1062 (96a40)

css: Support function form for css.modules.localsConvention - by @sxzz and @lazerg (b566f)

... (truncated)

Commits

ced9a2c chore: release v0.23.0
f5f9ea9 docs: add Ember support guide (#1043)
8ac89dc chore: upgrade Vitest to v5
96a4098 feat: expose programmatic watch controls (#1062)
61718d7 chore: upgrade deps
d04119c chore: upgrade deps
55f89c5 chore(deps): update pnpm to v12.1.0 (#1060)
946224d fix: ignore optional dependencies in type definitions
62f01cd chore: release v0.23.0-rc.1
bf53f43 fix(cli): camel-case nested flag keys
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development group with 3 updates: [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt), [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) and [tsdown](https://github.com/rolldown/tsdown). Updates `oxfmt` from 0.71.0 to 0.72.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.72.0/npm/oxfmt) Updates `oxlint` from 1.86.0 to 1.87.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.87.0/npm/oxlint) Updates `tsdown` from 0.22.14 to 0.23.0 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.22.14...v0.23.0) --- updated-dependencies: - dependency-name: oxfmt dependency-version: 0.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: oxlint dependency-version: 1.87.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: tsdown dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development ... Signed-off-by: dependabot[bot] <support@github.com>

clawsweeper · 2026-10-07T18:55:46Z

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

ClawSweeper review complete

ClawSweeper finished reviewing this revision. The review result is being finalized.

View the workflow run.

socket-security · 2026-10-07T18:56:03Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
oxfmt@0.71.0 ⏵ 0.72.0	⁺¹	⁺¹
tsdown@0.22.14 ⏵ 0.23.0		⁺¹	⁺³
oxlint@1.86.0 ⏵ 1.87.0			^-1

View full report

clawsweeper · 2026-10-07T19:00:17Z

Codex review: needs changes before merge.

What this changes

Updates the development formatter, linter, and package builder to oxfmt 0.72.0, oxlint 1.87.0, and tsdown 0.23.0.

Example: A contributor installs development dependencies on Node 25.

Before: The supported tsdown 0.22.14 dependency graph permits installation.
After: The tsdown 0.23.0 dependency graph excludes Node 25, and the recorded installation job fails.

Review scores

Measure	Result	What it means
Overall readiness	🧂 unranked krab (1/6)	The tooling refresh has useful value, but the confirmed supported-version installation blocker makes the patch unready.
Proof confidence	🦐 gold shrimp (3/6)	Dependabot is exempt from the external-contributor proof gate. Exact-head CI exercises installation and package checks on Node 22/24, but Node 25 installation fails; detailed logs were inaccessible through the allowed network.
Patch quality	🧂 unranked krab (1/6)	1 actionable review finding remain.

Product

Kind: Maintenance · Worth it: Yes
User problem: Contributors benefit from current formatter and linter fixes while retaining installation on supported Node versions.
Reason: The formatter and linter refresh fits established tooling maintenance. Its value does not justify violating the explicitly preserved Node 25 compatibility contract.

Merge readiness

⛔ Needs changes before merge - 2 items remain

This PR retains useful tooling updates that are absent from current main, but the previously reported Node 25 installation regression remains unfixed.

Priority: P2
Reviewed head: 45a0d2a7d575884c306ef804545a3cd492dd7b57

Before merge

[P1] Retain a builder compatible with supported Node 25 installs (P1) - On Node 25, this requirement selects tsdown 0.23.0 and locked rolldown-plugin-dts 0.28.6, whose engine ranges exclude that version. The repository declares Node 25 support and enables engineStrict; the exact-head Node 25 job fails during installation and skips the package check. Restore tsdown 0.22.14 and its compatible locked graph while retaining the formatter and linter updates, following build(deps): refresh Node types and cover Node 25 installs #52. This previously reported finding remains unfixed.
Explain or restore the original intent of package.json and pnpm-lock.yaml: builder dependency graph - 01c7a1b: Explicitly retain tsdown 0.22.14 because 0.23.0 excludes supported Node 25, and add CI coverage for that contract. The older manifest requirement traces to f4138d1; its patch is locally unavailable.

Findings

[P1] [P1] Retain a builder compatible with supported Node 25 installs — package.json:57

Provenance

package.json and pnpm-lock.yaml: builder dependency graph changes intended behavior without addressing why it exists (01c7a1b: Explicitly retain tsdown 0.22.14 because 0.23.0 excludes supported Node 25, and add CI coverage for that contract. The older manifest requirement traces to f4138d1; its patch is locally unavailable.)

Tests

Missing end-to-end proof: The changed tooling still lacks a successful Node 25 frozen installation followed by the full package check; the recorded job stops during installation.

Agent review details

How this fits together

These development tools format and lint the router source and build its published JavaScript and TypeScript declarations. They run during contributor checks and package preparation.

flowchart TD
  A[Contributor Node version] --> B[Frozen dependency installation]
  C[Manifest and lockfile] --> B
  B --> D{Engine requirements satisfied?}
  D -->|Yes| E[Format, lint, build, and package checks]
  D -->|No| F[Installation stops]
  E --> G[Validated router package]

Technical review

Best possible solution:

Retain the formatter and linter refresh while preserving the established Node 25-compatible builder dependency graph.

Do we have a high-confidence way to reproduce the issue?

Not applicable to a current-main bug: this is dependency maintenance. The introduced compatibility defect is source-proven and supported by the exact-head Node 25 installation failure.

Is this the best way to solve the issue?

No: upgrading the builder violates the existing Node support contract; retaining its compatible graph is the narrow repair already used by prior merged updates.

Full review comments:

[P1] [P1] Retain a builder compatible with supported Node 25 installs — package.json:57
On Node 25, this requirement selects tsdown 0.23.0 and locked rolldown-plugin-dts 0.28.6, whose engine ranges exclude that version. The repository declares Node 25 support and enables engineStrict; the exact-head Node 25 job fails during installation and skips the package check. Restore tsdown 0.22.14 and its compatible locked graph while retaining the formatter and linter updates, following build(deps): refresh Node types and cover Node 25 installs #52. This previously reported finding remains unfixed.
Confidence: 0.99

Overall correctness: patch is incorrect
Overall confidence: 0.99

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning medium; reviewed against 01c7a1b96886.

Provenance checked

package.json and pnpm-lock.yaml: formatter keeps the original intent (07fab05: Refresh the formatter while preserving the builder graph and declared Node support.)
pnpm-lock.yaml: linter keeps the original intent (f7320e4: Retain the linter update while restoring the Node 25-compatible builder graph.)

Testing

Proof path: shipped entry point.

Security

None.

Evidence

Acceptance criteria:

Node 25: pnpm install --frozen-lockfile
Node 25: pnpm run check
Node 22/24 existing CI matrix: frozen installation and pnpm run check
git diff --check

What I checked:

Introduced changes: The pinned delta changes only package.json and pnpm-lock.yaml; it upgrades tsdown from 0.22.14 to 0.23.0 alongside formatter and linter updates. The checkout remains clean, and the diff whitespace check passes. (package.json:57, 45a0d2a7d575)
Supported development contract: The package and README support Node ^22.18.0 || >=24.11.0, including Node 25. pnpm-workspace.yaml enables engineStrict, and CI explicitly includes Node 25 installation and the full package check. (pnpm-workspace.yaml:1, 01c7a1b96886)
Incompatible locked dependencies: Both tsdown 0.23.0 and rolldown-plugin-dts 0.28.6 require Node ^22.18.0 || ^24.11.0 || >=26.0.0, which excludes Node 25. (pnpm-lock.yaml:1147, 45a0d2a7d575)
Upstream engine contract: The target invokes tsdown in its build and prepack scripts, establishing the dependency signal. Upstream v0.23.0 package.json independently confirms the engine range excluding Node 25. (package.json:65, ced9a2c7f3a7)
Exact-head installation failure: https://github.com/openclaw/uirouter/actions/runs/37670578535/job/112960998822 records the reviewed head failing Install dependencies and skipping Check on Node 25. Node 22/24 checks passed. The detailed job log redirects to a blocked artifact host, so its exact error text was not inspected. (45a0d2a7d575)
Established compatibility direction: build(deps): refresh Node types and cover Node 25 installs #52 explicitly retains tsdown 0.22.14 because 0.23.0 excludes supported Node 25 and records successful frozen installation and package checks. build(deps): refresh formatter with Node 25 support #48 and build(deps-dev): bump oxlint to 1.86.0 #49 establish the same compatible-tooling approach; vincentkoc's discussion confirms restoring the builder graph while retaining other updates. (package.json:57, 01c7a1b96886)

Likely related people:

Peter Steinberger: Raw commit 01c7a1b adds package.json:52 relative to its recorded parents. This identifies author metadata, not feature responsibility or a PR merger. (role: source-line author; confidence: high; commits: 01c7a1b96886; files: package.json)

Review metrics

Metric	Value	Why it matters
Dependency refresh	3 direct development tools updated; 2 files changed	The proposal affects contributor tooling and package preparation without adding router source or tests.

Labels

Label changes:

No label changes.

Label justifications:

P2: This is bounded development-tool maintenance with no demonstrated shipped router runtime failure.
merge-risk: 🚨 compatibility: The introduced builder dependency graph excludes supported Node 25 and stops development installation under strict engine checks.
rating: 🧂 unranked krab: Overall readiness is 🧂 unranked krab; proof is 🦐 gold shrimp and patch quality is 🧂 unranked krab.
status: ⏳ waiting on author: ClawSweeper has contributor-facing work open and is waiting for author action.

Rating scale

6/6 🦀 challenger crab · 5/6 🦞 diamond lobster · 4/6 🐚 platinum hermit · 3/6 🦐 gold shrimp · 2/6 🦪 silver shellfish · 1/6 🧂 unranked krab. Overall follows the weaker of proof and patch quality; ✨ marks media proof (a screenshot, video, or linked artifact) that directly shows the changed behavior.

Workflow

ClawSweeper edits this one comment on every review. Comment @clawsweeper re-review for a fresh review only; repair and merge need explicit maintainer commands such as @clawsweeper autofix or @clawsweeper automerge.

History

Review history (12 earlier review cycles; latest 8 shown)

reviewed 2026-10-08T18:38:30.347Z sha 45a0d2a :: needs changes before merge. :: [P1] [P1] Retain a builder compatible with supported Node 25 installs
reviewed 2026-10-08T18:59:26.841Z sha 45a0d2a :: needs changes before merge. :: [P1] [P1] Retain a builder compatible with supported Node 25 installs
reviewed 2026-10-08T21:47:56.648Z sha 45a0d2a :: needs changes before merge. :: [P1] [P1] Retain a builder compatible with supported Node 25 installs
reviewed 2026-10-09T02:46:03.050Z sha 45a0d2a :: needs changes before merge. :: [P1] [P1] Retain a builder compatible with supported Node 25 installs
reviewed 2026-10-09T04:37:43.827Z sha 45a0d2a :: needs changes before merge. :: [P1] [P1] Retain a builder compatible with supported Node 25 installs
reviewed 2026-10-09T10:51:50.179Z sha 45a0d2a :: needs changes before merge. :: [P1] [P1] Retain a builder compatible with supported Node 25 installs
reviewed 2026-10-09T16:32:31.742Z sha 45a0d2a :: needs changes before merge. :: [P1] [P1] Retain a builder compatible with supported Node 25 installs
reviewed 2026-10-09T19:13:13.504Z sha 45a0d2a :: needs changes before merge. :: [P1] [P1] Retain a builder compatible with supported Node 25 installs

Reviewed October 9, 2026, 8:00 PM ET / October 10, 2026, 00:00 UTC (Revision 13).

Refresh oxfmt to 0.72.0, oxlint to 1.87.0, and the pinned Node setup action to 7.1.0. Consolidates the compatible updates proposed in #53 and #54 while retaining tsdown 0.22.14 for supported Node 25 installations. Validation: frozen install and full package check on Linux/Node 24.19.0 (58 tests, build/declarations, typecheck, lint, formatting, package install/import); actionlint; independent Codex review without actionable P0-P2 findings; GitHub CI at the reviewed head. Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

steipete · 2026-10-10T09:15:15Z

Thanks for the updates. Landed the oxfmt 0.72.0 and oxlint 1.87.0 refresh in #55, with contributor credit. Retained tsdown 0.22.14 because 0.23.0 and its declaration-generator dependency exclude Node 25, which this repository explicitly supports under strict engine checks.

The replacement passed the full seven-job Node/OS matrix, including Node 25 frozen installation and package checks: https://github.com/openclaw/uirouter/actions/runs/38040322173. Closing this grouped update as superseded.

dependabot · 2026-10-10T09:15:19Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot requested a review from a team as a code owner October 7, 2026 18:55

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026

clawsweeper Bot added rating: 🧂 unranked krab Not merge-ready due to missing proof or serious correctness/safety concerns. and removed rating: 🦐 gold shrimp Decent PR readiness signal, but merge confidence is limited. labels Oct 8, 2026

steipete mentioned this pull request Oct 10, 2026

build(deps): refresh compatible tooling and Node setup #55

Merged

steipete closed this Oct 10, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/development-ea4fade5dc branch October 10, 2026 09:15

Navigation Menu

Repository navigation

build(deps-dev): bump the development group with 3 updates - #53

build(deps-dev): bump the development group with 3 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-ea4fade5dc

dependabot Bot commented on behalf of github Oct 7, 2026 •

edited

Loading

Uh oh!

clawsweeper Bot commented Oct 7, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 7, 2026

Uh oh!

clawsweeper Bot commented Oct 7, 2026 •

edited

Loading

How this fits together

Technical review

Provenance checked

Testing

Security

Evidence

Review metrics

Labels

Rating scale

Workflow

History

Uh oh!

steipete commented Oct 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

oxfmt v0.72.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

oxlint v1.87.0

🚀 Features

🐛 Bug Fixes

Changelog

v0.23.0

🧭 Migration Guide

🚨 Breaking Changes

🚀 Features

Uh oh!

clawsweeper Bot commented Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ClawSweeper review complete

Uh oh!

socket-security Bot commented Oct 7, 2026

Uh oh!

clawsweeper Bot commented Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What this changes

Review scores

Product

Merge readiness

Before merge

Findings

Provenance

Tests

How this fits together

Technical review

Provenance checked

Testing

Security

Evidence

Review metrics

Labels

Rating scale

Workflow

History

Uh oh!

steipete commented Oct 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 7, 2026 •

edited

Loading

clawsweeper Bot commented Oct 7, 2026 •

edited

Loading

clawsweeper Bot commented Oct 7, 2026 •

edited

Loading