chore(deps-dev): bump @eslint-react/eslint-plugin from 5.23.1 to 5.26.0

[dependabot]

Bumps @eslint-react/eslint-plugin from 5.23.1 to 5.26.0.

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.26.0 (2026-10-11)

What's Changed

✨ New

• Lowered the minimum required Node.js version from >=22.0.0 to >=20.19.0. (#2020)

Full Changelog: Rel1cx/eslint-react@v5.25.0...v5.26.0

Attestation

https://github.com/Rel1cx/eslint-react/attestations/54738811

v5.25.0 (2026-10-11)

What's Changed

✨ New

• react-dom/no-unsafe-target-blank: added an allowReferrer option (default: false). When enabled, rel="noopener" alone is accepted and the suggested fix adds rel="noopener" instead of rel="noreferrer noopener", preserving referrer information while still requiring an explicit token. (#2019) Closes #2012.

🏗️ Internal

• @eslint-react/ast: added hasParent and hasEnclosingTryBlock shortcuts to Traverse. (#2016)
• @eslint-react/ast: renamed the types module to tree and narrowed the Extract.unwrap result type. (#2017)
• @eslint-react/core: removed the unused REACT_BUILTIN_HOOK_NAMES constant.
• Bumped tsdown to 0.23.1, @effect/platform-node to 4.0.3, pnpm to 12.11.2, @types/node to 26.6.5, setup-uv to v10.3.0, and fumadocs and lucide-react in the website.

Full Changelog: Rel1cx/eslint-react@v5.24.10...v5.25.0

Attestation

https://github.com/Rel1cx/eslint-react/attestations/54718227

v5.24.10 (2026-10-09)

What's Changed

📝 Documentation

• Added a link to the Astryx no-react-introspection rule in the react-x/no-children-count and react-x/no-children-map rule documentation.

🏗️ Internal

• Disabled test isolation in the vitest config.
• Reordered react-web-api/no-leaked-event-listener test specs from typical cases to edge cases. (#2015)
• Unified KNOWN_-prefixed constant names in react-x/no-array-index-key and react-x/no-missing-key. (#2014)

... (truncated)

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.26.0 (2026-10-11)

✨ New

• Lowered the minimum required Node.js version from >=22.0.0 to >=20.19.0. (#2020)

Full Changelog: Rel1cx/eslint-react@v5.25.0...v5.26.0

v5.25.0 (2026-10-11)

✨ New

• react-dom/no-unsafe-target-blank: added an allowReferrer option (default: false). When enabled, rel="noopener" alone is accepted and the suggested fix adds rel="noopener" instead of rel="noreferrer noopener", preserving referrer information while still requiring an explicit token. (#2019) Closes #2012.

🏗️ Internal

• @eslint-react/ast: added hasParent and hasEnclosingTryBlock shortcuts to Traverse. (#2016)
• @eslint-react/ast: renamed the types module to tree and narrowed the Extract.unwrap result type. (#2017)
• @eslint-react/core: removed the unused REACT_BUILTIN_HOOK_NAMES constant.
• Bumped tsdown to 0.23.1, @effect/platform-node to 4.0.3, pnpm to 12.11.2, @types/node to 26.6.5, setup-uv to v10.3.0, and fumadocs and lucide-react in the website.

Full Changelog: Rel1cx/eslint-react@v5.24.10...v5.25.0

v5.24.10 (2026-10-09)

📝 Documentation

• Added a link to the Astryx no-react-introspection rule in the react-x/no-children-count and react-x/no-children-map rule documentation.

🏗️ Internal

• Disabled test isolation in the vitest config.
• Reordered react-web-api/no-leaked-event-listener test specs from typical cases to edge cases. (#2015)
• Unified KNOWN_-prefixed constant names in react-x/no-array-index-key and react-x/no-missing-key. (#2014)
• Bumped effect to 4.0.2, @effect/platform-node to 4.0.2, nx to 23.3.0, vite to 8.3.4, lucide-react to 1.53.0, and pnpm to 12.10.1.

Full Changelog: Rel1cx/eslint-react@v5.24.9...v5.24.10

v5.24.9 (2026-10-08)

🐞 Fixes

• react-x/set-state-in-effect: optional chaining in a setState argument (ex: setData(ref.current?.value), setWidth(el?.offsetWidth ?? 0) where el is ref-derived) no longer defeats the ref-value exemption; the ChainExpression wrapper is now unwrapped during ref-source detection. (#2011)

📝 Documentation

• Aligned rule documentation with the current react.dev reference docs. (#2013)

Full Changelog: Rel1cx/eslint-react@v5.24.8...v5.24.9

... (truncated)

Commits

• 49f2c62 release: 5.26.0
• 5115599 feat: lower minimum Node.js version to 20.19.0 (#2020)
• 3e678e9 release: 5.25.0
• c22fa42 chore(deps): bump tsdown to 0.23.1, pnpm to 12.11.2 and other dependencies
• a78e5bd release: 5.24.10
• a0c1767 release: 5.24.9
• fefd424 release: 5.24.8
• 68b98d4 release: 5.24.7
• 03e2c26 release: 5.24.6
• c1961a6 release: 5.24.5
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.