build(deps-dev): bump typescript-eslint from 8.61.0 to 8.61.1 in /webui#287
Conversation
Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.61.0 to 8.61.1. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: typescript-eslint dependency-version: 8.61.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
deleted the
dependabot/npm_and_yarn/webui/typescript-eslint-8.61.1
branch
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Bug Scan Summary
Date: 2026-06-21
Commits inspected: 34c8e021..80eecd3 (PR #287 — typescript-eslint 8.61.0 → 8.61.1); also noted 4 subsequent master-only dep bumps (#286, #289–#291) since last automation baseline e045e4b.
Result: No critical bugs found.
Investigation
- Diff scope:
webui/package.json+webui/package-lock.jsononly. All@typescript-eslint/*packages aredev: true;typescript-eslintis not bundled into the production Vite output. - ESLint config:
webui/eslint.config.jsusestseslint.configs.recommendedonly. The 8.61.1 patch fixes (consistent-indexed-object-style,no-unnecessary-type-assertion,no-unnecessary-boolean-literal-compare,no-unnecessary-template-expression) are not in the recommended preset and only affect lint autofix behavior — no runtime impact. - Validation:
npx vitest run— 154/154 passed;npm run build— succeeded; resolved versiontypescript-eslint@8.61.1.
Deduplication check
- Open PRs: searched
typescript-eslint— only #287 (now merged). - Recently merged PRs: #233 (8.61.0), #174, #165, #159 — routine dependabot bumps, no bug-fix PRs for this change.
- Open issues: searched
typescript-eslint OR eslint— no related bug reports. - Conclusion: N/A — no bug to fix.
Notes: Pre-existing ESLint findings (e.g. react-hooks/set-state-in-effect in Arr views) are unrelated to this bump and below the critical-severity bar (lint-only, no data/crash/auth impact).
Sent by Cursor Automation: Torrentarr - Find critical bugs
There was a problem hiding this comment.
PR Validation (Cursor Automation)
Recommendation: Merge
Primary reason: Clean local merge with current origin/master; Release build and test gates pass; this is a narrow Dependabot dev-dependency bump that is already present on current master via this PR's squash merge.
Gates
| Gate | Status | Notes |
|---|---|---|
| Merge conflicts | Pass | git merge origin/master completed cleanly on the PR head fetched from refs/pull/287/head; conflicts: none. |
dotnet build |
Pass | dotnet restore and dotnet build -c Release succeeded with 0 errors. |
dotnet test (non-live) |
Pass | dotnet test -c Release --no-build --filter "Category!=Live": 759 passed, 0 failed, 0 skipped. |
vitest |
Pass | npm ci succeeded; npx vitest run: 154 passed across 16 test files. |
Validation
| Axis | Score | Notes |
|---|---|---|
| Purpose | Pass | Updates the web UI typescript-eslint dev dependency from 8.61.0 to 8.61.1; justified routine maintenance. |
| Correctness | Pass | Manifest and lockfile-only dependency update; no qBitrr parity or Torrentarr behavior paths affected. |
| Tests | Pass | No behavior change requiring new regression tests; existing .NET non-live and Vitest suites pass. |
| Hygiene | Pass | Scope is limited to webui/package.json and webui/package-lock.json; no unrelated noise. |
| Overlap | Pass | No open competing typescript-eslint PRs found; known 2026-06-15 winner themes are unrelated. Current master already contains #287 as a squash merge. |
Why
This PR is safe to merge from a validation standpoint: the local merge against current master is clean, dependency installation succeeds, and both backend and frontend test gates pass. The PR has already been merged by automation, so this comment records validation of the landed result rather than requesting any further action.
Overlap
None. No open PRs on the same dependency were found, and the known duplicate-PR winners (#229, #271, #258, #243) are unrelated. Note: docs/audits/pr-triage-2026-06-15.md is not present on current master because the docs/audits directory has been deleted, so overlap was checked against the prompt's winner table plus open PR search.
Commands run
git fetch origin master; git fetch origin dependabot/npm_and_yarn/webui/typescript-eslint-8.61.1 (remote ref unavailable after merge); git fetch origin pull/287/head:pr-287-head; git checkout -B pr-validate pr-287-head; git merge origin/master; dotnet restore; dotnet build -c Release; dotnet test -c Release --no-build --filter "Category!=Live"; cd webui && npm ci && npx vitest run; gh pr list --state open --search "typescript-eslint in:title repo:Feramance/Torrentarr".
Sent by Cursor Automation: Torrentarr PR validation triage
Bumps typescript-eslint from 8.61.0 to 8.61.1.
Release notes
Sourced from typescript-eslint's releases.
Changelog
Sourced from typescript-eslint's changelog.
Commits
aaad718chore(release): publish 8.61.1Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)