Bump globals from 17.11.0 to 17.12.0

[dependabot]

Bumps globals from 17.11.0 to 17.12.0.

Release notes

Sourced from globals's releases.

v17.12.0

• Update globals (2026-09-01) (#353) 50a2119
• Add __webpack_layer__ global (#351) 779a11a

---

sindresorhus/globals@v17.11.0...v17.12.0

Commits

• 98008c3 17.12.0
• 50a2119 Update globals (2026-09-01) (#353)
• 779a11a Add __webpack_layer__ global (#351)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[fossabot]

✓ Safe to upgrade

I recommend merging this upgrade because it is a purely additive minor version bump of a developer-only linting dependency. The upgrade introduces eight new global identifier definitions (including Temporal, __webpack_layer__, and several experimental Web/HTML API globals) that expand the globals package's coverage of modern JavaScript environments. None of the existing usages in eslint.config.mjs — which reference globals.browser, globals.node, and globals.mocha — are affected by these additive changes. There are no breaking changes, no runtime impact (this package is consumed exclusively during ESLint execution), and no security concerns. The noted Node.js version context (project runs Node 24, package requires Node 18) is fully compatible, as Node 24 satisfies any >=18 engine requirement.

What we checked

• Package globals is imported exclusively in the ESLint flat config file — confirming it is a developer tooling dependency with no runtime application impact. ^[1]
• The codebase uses globals.browser, globals.node, and globals.mocha to define valid global variables for ESLint. All three namespaces are unchanged by this upgrade; the new identifiers are purely additive extensions to these sets. ^[2]
• globals is declared as ^17.12.0 in devDependencies, correctly scoped to developer tooling only with no production bundle exposure. ^[3]
• Package source diff confirms all detected changes are additive new global identifier definitions (renderQuantumSize, HTMLCameraElement, MathMLAnchorElement, NodeRange, requestResize, TrustedParserOptions, Temporal, __webpack_layer__). No existing identifiers were removed or renamed, posing no risk of false-positive lint errors in the codebase. ^[4]

Dependency Usage

The globals package is used exclusively within the project's linting infrastructure, specifically in eslint.config.mjs. It provides predefined global variable definitions for browser, Node.js, and Mocha environments, enabling ESLint to correctly understand which global variables (like window, process, or describe) are valid in each context. This is a developer tooling dependency with no impact on runtime application functionality, serving only to enforce code quality and prevent false-positive linting errors across the codebase's different execution environments.

• Package globals is imported exclusively in the ESLint flat config file — confirming it is a developer tooling dependency with no runtime application impact.
  

  fossa-action/eslint.config.mjs

  Line 6 in 60d2ee3

  import globals from "globals";

• The codebase uses globals.browser, globals.node, and globals.mocha to define valid global variables for ESLint. All three namespaces are unchanged by this upgrade; the new identifiers are purely additive extensions to these sets.
  

  fossa-action/eslint.config.mjs

  Line 39 in 60d2ee3

  ...Object.fromEntries(Object.entries(globals.browser).map(([key]) => [key, "off"])),

Changes

The globals package has been updated with new browser and web platform identifiers, including __webpack_layer__ for Webpack 5 layer support, Temporal for the JavaScript Temporal proposal, TrustedParserOptions from the Trusted Types API, and several experimental HTML/DOM globals such as HTMLCameraElement and NodeRange. These additions expand the set of recognized global identifiers available for linting and static analysis tooling.

• Add __webpack_layer__ global (#351) 779a11a (v17.11.0-17.12.0, release notes)
• Update globals (2026-09-01) (#353) 50a2119 (v17.11.0-17.12.0, release notes)
• Add __webpack_layer__ global (v17.11.0-17.12.0, commit)

View 8 more changes

• Added new global identifier: renderQuantumSize (Web Audio API) (v17.12.0, package source)
• Added new global identifier: HTMLCameraElement (HTML5 experimental element) (v17.12.0, package source)
• Added new global identifier: MathMLAnchorElement (MathML support) (v17.12.0, package source)
• Added new global identifier: NodeRange (DOM Range API) (v17.12.0, package source)
• Added new global identifier: requestResize (Resize Observer API) (v17.12.0, package source)
• Added new global identifier: TrustedParserOptions (Trusted Types API) (v17.12.0, package source)
• Added new global identifier: Temporal (in global scope, JavaScript temporal proposal) (v17.12.0, package source)
• Added new global identifier: webpack_layer (Webpack 5 layer support) (v17.12.0, package source)

References (4)

[1]: Package globals is imported exclusively in the ESLint flat config file — confirming it is a developer tooling dependency with no runtime application impact.

fossa-action/eslint.config.mjs

Line 6 in 60d2ee3

import globals from "globals";

[2]: The codebase uses globals.browser, globals.node, and globals.mocha to define valid global variables for ESLint. All three namespaces are unchanged by this upgrade; the new identifiers are purely additive extensions to these sets.

fossa-action/eslint.config.mjs

Line 39 in 60d2ee3

...Object.fromEntries(Object.entries(globals.browser).map(([key]) => [key, "off"])),

[3]: globals is declared as ^17.12.0 in devDependencies, correctly scoped to developer tooling only with no production bundle exposure.

fossa-action/package.json

Line 36 in 60d2ee3

"globals": "^17.12.0",

[4]: Package source diff confirms all detected changes are additive new global identifier definitions (renderQuantumSize, HTMLCameraElement, MathMLAnchorElement, NodeRange, requestResize, TrustedParserOptions, Temporal, __webpack_layer__). No existing identifiers were removed or renamed, posing no risk of false-positive lint errors in the codebase. (source link)

---

fossabot analyzed this PR using static analysis, dependency research and AI. View this analysis on the web

[fossabot]