Update npm package @eslint/js to v9.39.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/js (source)	9.39.2 → 9.39.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

eslint/eslint (@​eslint/js)

v9.39.4

Compare Source

Bug Fixes

• f18f6c8 fix: update dependency minimatch to ^3.1.5 (#​20564) (Milos Djermanovic)
• a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#​20554) (Milos Djermanovic)
• 234d005 fix: minimatch security vulnerability patch for v9.x (#​20549) (Andrej Beles)
• b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#​20538) (루밀LuMir)

Documentation

• 4675152 docs: add deprecation notice partial (#​20520) (Milos Djermanovic)

Chores

• b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#​20596) (Francesco Trotta)
• 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
• 1d16c2f ci: pin Node.js 25.6.1 (#​20563) (Milos Djermanovic)

v9.39.3

Compare Source

Bug Fixes

• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

• 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#​20529) (Milos Djermanovic)
• 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
• af498c6 chore: ignore /docs/v9.x in link checker (#​20453) (Milos Djermanovic)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am every weekday,every weekend"
• Automerge
  • "before 4am every weekday,every weekend"

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
petrinaut-hazel	Ready	Preview, Comment	Jul 12, 2026 10:13am

[cursor]

PR Summary

Low Risk
Dev-only lockfile bump with no runtime or config changes; patch release aligned with dependency security fixes.

Overview
Bumps the @eslint/js dev dependency in apps/clones-cli from 9.39.4 (lockfile previously pinned 9.39.2) via package-lock.json only in this diff.

No application or ESLint config source changes—eslint.config.js still uses eslint.configs.recommended from the same package. The upgrade is a patch release that pulls in ESLint ecosystem security fixes (e.g. minimatch, ajv) through updated transitive dependencies.

^{Reviewed by Cursor Bugbot for commit 4c8acb5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[augmentcode]

🤖 Augment PR Summary

Summary: Updates the @eslint/js dependency from 9.39.2 to 9.39.4 in apps/clones-cli.

Changes: Refreshes package-lock.json to pick up the upstream patch releases (including type compatibility fixes) with no source changes.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. No suggestions at this time.

Comment augment review to trigger a new review at any time.