wangzhigang1999 opened a new pull request, #7538:
URL: https://github.com/apache/kyuubi/pull/7538
### Why are the changes needed?
Follow-up to #7533. That change modernized the web-ui toolchain but deferred
the lint stack. ESLint 8 is end-of-life and its transitive dependencies still
carry dev-only advisories. This upgrades the lint stack to ESLint 9 (flat
config) and takes `pnpm audit` (dev + prod) to zero.
- `eslint` 8->9.39, `@typescript-eslint/{eslint-plugin,parser}` 5 -> unified
`typescript-eslint` 8, `eslint-plugin-vue` 9->10,
`@vue/eslint-config-typescript` 11->14, `eslint-plugin-prettier` 4->5,
`prettier` 2->3, add `@eslint/js`, drop `@vue/eslint-config-prettier`.
- Convert `.eslintrc` to flat config `eslint.config.js` (ESLint 9 drops
eslintrc support).
- Pin `brace-expansion@1` and `picomatch@2` via version-scoped
`pnpm.overrides` to clear the last transitive advisories from the ESLint 9
chain.
- Prettier 3 formatting (6 files, cosmetic only).
`pnpm audit`: 12 vulnerabilities (6 high / 5 moderate / 1 low) -> 0.
The rule set is preserved across the format change; removed rules are mapped
to successors:
| `.eslintrc` (ESLint 8) | `eslint.config.js` (ESLint 9) |
| --- | --- |
| `plugin:vue/vue3-recommended` | `pluginVue.configs['flat/recommended']` |
| `eslint:recommended` | `js.configs.recommended` |
| `@vue/typescript/recommended` | `vueTsConfigs.recommended` |
| `@vue/prettier` (prettier as a rule) |
`eslint-plugin-prettier/recommended` |
| `@typescript-eslint/ban-types: off` | `no-empty-object-type` /
`no-unsafe-function-type` / `no-wrapper-object-types: off` |
| `@typescript-eslint/no-empty-interface: off` | `no-empty-object-type: off`
|
| `vue/no-setup-props-destructure: off` |
`vue/no-setup-props-reactivity-loss: off` |
| `quotes` / `comma-dangle` / `space-before-function-paren` | owned by
Prettier (`.prettierrc`) |
### How was this patch tested?
On Node 22 / pnpm 9.11 (matching CI): `pnpm install --frozen-lockfile`,
`pnpm run lint` (0 problems), `pnpm run build`, `pnpm run coverage` (80 tests),
and `pnpm audit` = 0.
### Was this patch authored or co-authored using generative AI tooling?
Assisted-by: Claude Opus 4.8
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
