chore(deps): update dependency eslint to v9.39.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
eslint (source)	9.39.4 → 9.39.5

---

Release Notes

eslint/eslint (eslint)

v9.39.5

Compare Source

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #​20812 to v9.x) (#​21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#​20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#​20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 of the month (* * 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for cn-devtools-app canceled.

Name	Link
🔨 Latest commit	8f5f9dc
🔍 Latest deploy log	https://app.netlify.com/projects/cn-devtools-app/deploys/6ac5760c80576c000842b77b

[james-crabnebula]

Lockfile moves three packages: eslint 9.39.4 -> 9.39.5, its transitive @eslint/js 9.39.5 (the direct @eslint/js ^10 is untouched) and @eslint/eslintrc 3.3.5 -> 3.3.7. Nothing added or removed, no integrity change without a version change. The only code change in eslint is a guard on require.cache in the config loader; eslintrc's dist is byte-identical, it just widens its js-yaml range (already satisfied by the locked 4.3.2). All MIT. The lint job ran eslint . against this lockfile and passed, so the bump is exercised by CI.

The audit failure is pre-existing: the same advisories (seroval, brace-expansion, braces, source-map-js, postcss-selector-parser, fast-copy) come back on main today with identical paths; this PR moves none of them. Note eslint 9.x is on npm's maintenance tag; 10.x is a separate decision.