[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@eslint-react/eslint-plugin (source)	5.28.2 → 5.28.8
@next/eslint-plugin-next (source)	16.4.2 → 16.4.3
@next/mdx (source)	16.4.2 → 16.4.3
eslint-plugin-mdx (source)	3.8.1 → 3.8.2
next (source)	16.4.2 → 16.4.3

---

Release Notes

Rel1cx/eslint-react (@​eslint-react/eslint-plugin)

v5.28.8

Compare Source

🐞 Fixes

• react-x/purity: builtin member resolution no longer follows computed or unknown middle segments (ex: window[fetch], window.myLibrary.fetch), preventing false reports of non-builtin calls. (#​2074)

🏗️ Internal

• @eslint-react/eslint: added dual-purpose getText for direct or callback-style source text extraction, replacing repeated context.sourceCode.getText wrappers across packages. (#​2073)

Full Changelog: Rel1cx/eslint-react@v5.28.7...v5.28.8

v5.28.7

Compare Source

🐞 Fixes

• react-x/purity: now reports Date calls during render, including Date(), Date(arg), and window.Date(); unlike new Date(arg), Date(arg) ignores its arguments and always returns the current time. (#​2071) Thanks to @​aki05162525!

🏗️ Internal

• Bumped effect and @effect/platform-node to 4.0.6, @tanstack/react-router to 1.170.46, @tanstack/react-start to 1.169.4, and eslint-plugin-de-morgan to 2.3.0.

New Contributors

• TAKAGI AKIHIRO (@​aki05162525) made their first contribution in #​2071.

Full Changelog: Rel1cx/eslint-react@v5.28.6...v5.28.7

v5.28.6

Compare Source

🐞 Fixes

• react-x/set-state-in-effect: the ref-derived parameter exemption now also applies to helpers wrapped in useCallback (ex: measure(ref.current) where measure = useCallback((el) => { setWidth(el.offsetWidth); }, [])). (#​2065) Thanks to @​amhunt!
• react-x/set-state-in-effect: a helper call behind a ref-derived guard (if, ternary, short-circuit, or early return) now exempts the setState calls it reaches, as a setState written in its place would be (ex: if (!anchorRef.current) return; commitPosition(0, true);); call sites are judged individually. (#​2065) Thanks to @​amhunt!

New Contributors

• Andrew Hunt (@​amhunt) made their first contribution in #​2065.

Full Changelog: Rel1cx/eslint-react@v5.28.5...v5.28.6

v5.28.5

Compare Source

✨ New

• react-dom/no-unsafe-target-blank: the suggested fix now adds rel="noreferrer" instead of rel="noreferrer noopener", since noreferrer already implies noopener per the HTML spec; values combining both tokens remain valid. (#​2068)

🏗️ Internal

• Removed redundant transitive dependency overrides. (#​2064)
• Bumped vite to 8.3.5 and lucide-react to 1.61.0.

Full Changelog: Rel1cx/eslint-react@v5.28.4...v5.28.5

v5.28.4

Compare Source

🐞 Fixes

• Reverted the component-scope-bounded identifier resolution introduced in v5.28.3, including the per-component single-report attribution; class declarations in a component body remain recognized as per-render constructions. (#​2062)

  Affected rules:

  • react-x/no-unstable-context-value
  • react-x/no-unstable-default-props

📝 Documentation

• Updated the AST Explorer links across the website docs and recipes.

🏗️ Internal

• @eslint-react/var: removed the boundary option from resolve and resolveObjectType, and the ClassDeclaration resolution in resolveObjectType, following the revert. (#​2062)
• Renamed the Jsx-prefixed @eslint-react/core exports to all-caps JSX (ex: JsxConfig → JSXConfig, isJsxLike → isJSXLike). (#​2061)
• Bumped fumadocs-mdx to 15.4.9.

Full Changelog: Rel1cx/eslint-react@v5.28.3...v5.28.4

v5.28.3

Compare Source

✨ New

• Identifier resolution is now bounded by the enclosing component scope, so render-scoped values referenced from nested callbacks (ex: items.map((item) => <Context.Provider value={foo}>)) are now detected, values declared outside the component (ex: module-level constants) are treated as stable, and nested components report each value only once, attributed to the innermost component. (#​2060)

  Affected rules:

  • react-x/no-unstable-context-value
  • react-x/no-unstable-default-props

• Class declarations (ex: class Foo {} in a component body) are now recognized as per-render constructions, so using one as a context value or default prop is now reported. (#​2060)

  Affected rules:

  • react-x/no-unstable-context-value
  • react-x/no-unstable-default-props

🏗️ Internal

• @eslint-react/var: resolve and resolveObjectType now accept a boundary option that bounds scope-chain traversal to an enclosing component or hook; resolveObjectType also resolves ClassDeclaration nodes. (#​2060)
• Bumped typescript-eslint to 8.72.0, fumadocs-core and fumadocs-ui to 16.17.7, fumadocs-mdx to 15.4.8, lucide-react to 1.60.0, and typedoc-plugin-markdown to 4.14.1.

Full Changelog: Rel1cx/eslint-react@v5.28.2...v5.28.3

vercel/next.js (@​next/eslint-plugin-next)

v16.4.3

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• v16.4.2
• [lts-active] Fix extensionless Google font URLs in both bundlers (#​100277)
• [lts-active] Don't load the app-page runtime in proxy.ts (#​100423)
• [lts-active] Revert "Turbopack: loader change invalidation (#​95732)" (#​100438)
• [lts-active][cd] Gate release bot credentials behind GitHub environments (#​100123)
• [lts-active] test: Pin react-virtualized (#​100545)
• [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#​100572)
• [lts-active] Keep OpenTelemetry request traces together (#​100349, #​100294, #​100324, #​100350, #​100552, #​100583) (#​100542)
• [lts-active] Avoid loading standalone React in server bootstrap (#​100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

mdx-js/eslint-mdx (eslint-plugin-mdx)

v3.8.2

Compare Source

Patch Changes

• Updated dependencies [f07115b]:
  • eslint-mdx@​3.8.2

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for cert-manager ready!

Name	Link
🔨 Latest commit	d9da249
🔍 Latest deploy log	https://app.netlify.com/projects/cert-manager/deploys/6adfb29b7a3cabef3e634f31
😎 Deploy Preview	https://deploy-preview-2343--cert-manager.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[erikgb]

/lgtm
/approve

[cert-manager-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: erikgb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [erikgb]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment