Bump @eslint-react/eslint-plugin from 5.23.3 to 5.24.9 in /components/frontend

[dependabot]

Bumps @eslint-react/eslint-plugin from 5.23.3 to 5.24.9.

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.24.9 (2026-10-08)

What's Changed

🐞 Fixes

• react-x/set-state-in-effect: optional chaining in a setState argument (ex: setData(ref.current?.value), setWidth(el?.offsetWidth ?? 0) where el is ref-derived) no longer defeats the ref-value exemption; the ChainExpression wrapper is now unwrapped during ref-source detection. (#2011)

📝 Documentation

• Aligned rule documentation with the current react.dev reference docs. (#2013)

Full Changelog: Rel1cx/eslint-react@v5.24.8...v5.24.9

Attestation

https://github.com/Rel1cx/eslint-react/attestations/53901493

v5.24.8 (2026-10-07)

What's Changed

🐞 Fixes

• react-x/rules-of-hooks: removed the incorrect FIX feature declaration; the rule does not provide an auto-fix and is no longer advertised as fixable. (#2009)

🏗️ Internal

• Added edge-case test specs from the v5.24.7 change review covering react-x/immutability, react-x/set-state-in-render, react-web-api/no-leaked-event-listener, and the leaked-observer rules.
• Bumped next to 16.4.0, vite to 8.3.3, and related dependencies.

Full Changelog: Rel1cx/eslint-react@v5.24.7...v5.24.8

Attestation

https://github.com/Rel1cx/eslint-react/attestations/53394140

v5.24.7 (2026-10-07)

What's Changed

🐞 Fixes

• react-x/immutability: no longer reports rebinding a plain local alias of props/state as a mutation; destructured props rebinding and member writes through aliases are still reported. (#1995)
• react-x/set-state-in-render: setState calls after nested component or hook declarations are now attributed to the outer component again. (#2004)
• react-x/set-state-in-render: anonymous callbacks passed directly to memo()/forwardRef() are now treated as component render functions. (#1998)
• react-web-api/no-leaked-fetch: signal alias chains are now resolved recursively, so fetches with aliased signals correctly pair with their cleanup abort call. (#1997)
• react-web-api/no-leaked-event-listener: bare global addEventListener(...) calls now pair with matching removeEventListener(...) cleanup calls. (#1996)

... (truncated)

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.24.9 (2026-10-08)

🐞 Fixes

• react-x/set-state-in-effect: optional chaining in a setState argument (ex: setData(ref.current?.value), setWidth(el?.offsetWidth ?? 0) where el is ref-derived) no longer defeats the ref-value exemption; the ChainExpression wrapper is now unwrapped during ref-source detection. (#2011)

📝 Documentation

• Aligned rule documentation with the current react.dev reference docs. (#2013)

Full Changelog: Rel1cx/eslint-react@v5.24.8...v5.24.9

v5.24.8 (2026-10-07)

🐞 Fixes

• react-x/rules-of-hooks: removed the incorrect FIX feature declaration; the rule does not provide an auto-fix and is no longer advertised as fixable. (#2009)

🏗️ Internal

• Added edge-case test specs from the v5.24.7 change review covering react-x/immutability, react-x/set-state-in-render, react-web-api/no-leaked-event-listener, and the leaked-observer rules.
• Bumped next to 16.4.0, vite to 8.3.3, and related dependencies.

Full Changelog: Rel1cx/eslint-react@v5.24.7...v5.24.8

v5.24.7 (2026-10-07)

🐞 Fixes

• react-x/immutability: no longer reports rebinding a plain local alias of props/state as a mutation; destructured props rebinding and member writes through aliases are still reported. (#1995)
• react-x/set-state-in-render: setState calls after nested component or hook declarations are now attributed to the outer component again. (#2004)
• react-x/set-state-in-render: anonymous callbacks passed directly to memo()/forwardRef() are now treated as component render functions. (#1998)
• react-web-api/no-leaked-fetch: signal alias chains are now resolved recursively, so fetches with aliased signals correctly pair with their cleanup abort call. (#1997)
• react-web-api/no-leaked-event-listener: bare global addEventListener(...) calls now pair with matching removeEventListener(...) cleanup calls. (#1996)
• react-web-api/no-leaked-event-listener: a signal destructured from new AbortController() is now recognized. (#2001)
• disconnect() / unobserve(...) now only count as cleanup in the cleanup phase; useRef-held observer instances are tracked; unobserve(...) inside the observer callback no longer pairs with observe(...). (#2002, #2003) Affected rules:
  • react-web-api/no-leaked-resize-observer
  • react-web-api/no-leaked-intersection-observer

🏗️ Internal

• Bumped typescript-eslint to 8.71.1 and postcss to 8.5.29.

Full Changelog: Rel1cx/eslint-react@v5.24.6...v5.24.7

v5.24.6 (2026-10-06)

🐞 Fixes

• react-x/no-unused-props: computed member access and destructuring with an identifier key (ex: props[key], const { [key]: value } = props) no longer count as usage of a prop named after the key; the rule now bails out on such dynamic keys instead of reporting actually-used props as unused. (#1994)

... (truncated)

Commits

• a0c1767 release: 5.24.9
• fefd424 release: 5.24.8
• 68b98d4 release: 5.24.7
• 03e2c26 release: 5.24.6
• c1961a6 release: 5.24.5
• 73c2444 release: 5.24.4
• 3b00e2f release: 5.24.3
• 9b3e8b5 release: 5.24.2
• 0c392f0 release: 5.24.1
• fde951e chore(deps): update eslint to 10.12.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #14840.