chore(deps): update dependency eslint-plugin-boundaries to v6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
eslint-plugin-boundaries	^5.3.1 → ^6.0.0

---

Release Notes

javierbrea/eslint-plugin-boundaries (eslint-plugin-boundaries)

v6.0.2: Update handlebars to 4.7.9 to resolve critical vulnerability

Compare Source

eslint-plugin v6.0.2

Changed

• chore: Update handlebars from 4.7.8 to 4.7.9. Resolves critical vulnerability GHSA-2w6w-674q-4c4q and multiple High/Medium CVEs in handlebars 4.7.8. See handlebars 4.7.9 release notes for more details.

elements v2.0.1

Changed

• chore: Update handlebars from 4.7.8 to 4.7.9. Resolves critical vulnerability GHSA-2w6w-674q-4c4q and multiple High/Medium CVEs in handlebars 4.7.8. See handlebars 4.7.9 release notes for more details.

v6.0.1: Fix createConfig helper types in ESLint v10

Compare Source

eslint-plugin v6.0.1

Fixed

• fix(#​438): Fix createConfig helper types when used in Eslint v10.x. Returned type is now compatible both with eslint v9 and eslint v10.

v6.0.0: Object-based elements selector syntax

Compare Source

Summary

Version 6.0.0 introduces object-based selectors as the recommended way to define rules. This provides better readability and access to advanced matching features.

It also introduces several new features and changes in configuration to make it more semantic and powerful. But almost every change is designed to be incremental and non-breaking, allowing you to migrate at your own pace. For further info and examples, read the migration guide at the website

eslint-plugin v6.0.0

Added

• feat(#​383, #​388): Add object-based element selector syntax as the recommended way to define element selectors, providing better readability and access to advanced matching features.
• feat(#​395): Support from and to dependency selector objects in the boundaries/dependencies rule, enabling matching based on dependency relationship, origin, source, internal path, and more.
• feat(#​387): Add optional category field to element descriptors to enable multi-dimensional architectural classification.
• feat(#​386): Support a name property in the additional-dependency-nodes setting on each node definition, allowing to identify custom dependency nodes by name in rules and messages.
• feat: Add checkAllOrigins, checkUnknownLocals and checkInternals options to dependencies (old element-types) rule to allow checking or ignoring dependencies based on their properties. By default, only local dependencies with known elements are checked, and internal dependencies are ignored, as in previous versions.
• feat: Improve debug output, and add boundaries/debug setting to allow enabling/disabling it and filtering the traces that are printed.
• feat: Support all element description properties in custom messages templates by using handlebars syntax. Old message templates will continue working as they are, without any change.

Changed

• feat(#​403): Rename boundaries/element-types rule to boundaries/dependencies. The legacy name is still supported with a deprecation warning.
• feat(#​393): Deprecate rule-level importKind option in favor of selector-level dependency.kind, allowing more granular per-selector control over dependency kind matching.
• feat(#​392): Add deprecation warning when using legacy template format (${ }), and introduce new Handlebars-style template syntax ({{ }}). The legacy format is still supported but will be removed in a future major version.
• feat(#​384): Add deprecation warning when using legacy element selector syntax (string or tuple formats).
• feat: Validate and transform different settings and rules only once per different configuration object, and not per rule execution, to improve performance.
• refactor: Refactor the core of the plugin to support the new features and improvements, and to improve code organization, readability and maintainability. It is now fully typed with TypeScript.
• chore: Update dependencies and devDependencies to their latest versions.
• docs(#​396): Improve TypeScript typings documentation, enabling better IDE support and autocompletion.
• refactor: Use node: prefix for built-in modules.

Breaking Changes

• feat(#​429): Change default value of boundaries/dependency-nodes setting to ["import", "export", "require", "dynamic-import"]. Previously only import statements were analyzed by default. To preserve previous behavior, set "boundaries/dependency-nodes": ["import"] explicitly in your configuration.
• feat: Disable no-private rule by default in recommended configuration, as it is now deprecated and will be removed in a future major version. To preserve previous behavior, set "boundaries/no-private": [2, { "allowUncles": true }] explicitly in your configuration.
• Remove isExternalLibrarySelector and isExternalLibrariesSelector type guards. They are not needed anymore, as external rule is deprecated and external library selectors can be defined using the same ElementSelector format.

elements v2.0.0

Added

• feat: Add support for captured as an array in element selectors, where each element in the array represents an alternative (OR logic). The selector matches if any of the array elements matches.
• feat: Support matching null values in selectors.
• feat: Add support for parent selector property to match against first parent (parents[0]) properties (type, category, elementPath, and captured).

Changed

• refactor: Improve typing for better maintainability.
• test: Improve test coverage and add more test cases for edge scenarios.
• chore: Update dependencies and devDependencies to their latest versions.

Breaking Changes

• feat: Remove source and baseSource properties from the to and from objects in element descriptions and selectors. Move them to the dependency object instead, as they are properties of the dependency rather than the target element. This change may require updates to any custom rules or configurations that reference these properties in the to object. Refactor all types, tests, and documentation to reflect this change.
• feat: Rename "baseSource" property to "module" to better reflect its purpose and avoid confusion with the "source" property. Update all types, tests, and documentation to reflect this change.
• feat: Support array of dependency metadata selectors in the dependency property of dependency selectors, allowing for more flexible matching of dependencies based on their metadata. Each selector in the array represents an alternative (OR logic), and the dependency matches if any of the selectors in the array matches its metadata.
• feat: Remove external library selectors types and helpers.
• feat: Remove deprecated dependencySelectorGlobals option from matching methods and types.
• feat: Remove getSelectorMatchingDescription method, as it was too generic and caused confusion. Instead, provide specific methods for matching element and dependency descriptions against their respective selectors (getElementSelectorMatchingDescription and getDependencySelectorMatchingDescription) to improve clarity and usability.

website v6.0.0

Added

• feat(#​401): Publish v6.0.0 documentation website with migration guides, updated rules reference, and new selector syntax documentation.
• feat: Add keywords to all pages to improve searchability and SEO.

Changed

• feat: Adapt docs to the new object-based selectors syntax.
• feat: Add "Deprecated Rules" subsection to the sidebar, and move there the deprecated rules documentation.

v5.4.0: Enhance External/Local Dependency Classification for Monorepos

Compare Source

eslint-plugin-boundaries v5.4.0

• feat(#​349): Add boundaries/flag-as-external setting to allow better control over external module identification
• feat(#​420): Remove rules validation during linting runtime to improve performance. Validation is performed at configuration load time using eslint schema validation.
• chore: bump @​boundaries/elements to 1.2.0

@​boundaries/elements v1.2.0

• feat: Add rootPath and flagAsExternal options to allow better control over external module identification.

website

• feat: Add boundaries/flag-as-external setting to allow better control over external module identification
• feat: Add "Monorepo Setup" guide to the documentation, explaining how to configure the plugin in monorepo projects using boundaries/flag-as-external setting.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint-plugin-boundaries@​5.3.1 ⏵ 6.0.2	+1		+1	+8

View full report