build(deps-dev): bump @wordpress/eslint-plugin from 23.0.0 to 25.0.0

[dependabot]

Bumps @wordpress/eslint-plugin from 23.0.0 to 25.0.0.

Changelog

Sourced from @​wordpress/eslint-plugin's changelog.

25.0.0 (2026-04-15)

Breaking Changes

• Upgraded to ESLint v10 with flat config format. The plugin now exports flat config arrays instead of eslintrc objects. Consumers must migrate from .eslintrc.* files to eslint.config.mjs. See the migration guide for details.
• The minimum required ESLint version is now ^9.0.0 || ^10.0.0.
• Upgraded eslint-plugin-import to v2.31+ (wrapped with fixupPluginRules for flat config compatibility).
• Upgraded @typescript-eslint/* from v6 to v8 (via the unified typescript-eslint package).
• Replaced eslint-plugin-eslint-comments with @eslint-community/eslint-plugin-eslint-comments. Rule prefixes changed from eslint-comments/* to @eslint-community/eslint-comments/*.

New Features

• Added @wordpress/eslint-plugin/eslintrc entry point — a compatibility wrapper for ESLint v9 consumers still using .eslintrc.* files. This is deprecated and will be removed in a future major version.
• Configs are now exported as flat config arrays (e.g., wordpress.configs.recommended returns an array of config objects suitable for spreading into eslint.config.mjs).

Enhancements

• Disabled the jsx-a11y/heading-has-content rule in the recommended configuration, which reports many false positives when heading elements are passed via a render prop (#77073).

24.5.0 (2026-04-01)

24.4.0 (2026-03-18)

New Features

• Added no-dom-globals-in-module-scope, no-dom-globals-in-constructor, no-dom-globals-in-react-cc-render, and no-dom-globals-in-react-fc rules to prevent DOM global usage in SSR-unsafe contexts, replacing the unmaintained eslint-plugin-ssr-friendly package (#76508).
• Added use-recommended-components rule to encourage the use of recommended UI components in a WordPress environment (#76222).
• Added no-unmerged-classname rule to flag components that set an explicit className while spreading rest props without destructuring and merging the incoming className (#76458).

Enhancements

• The no-unknown-ds-tokens rule now reports bare --wpds-* tokens not wrapped in var(), which would silently miss build-time fallback injection.
• The no-setting-ds-tokens rule now checks all object property keys, not just those inside JSX style attributes (#76212).

24.3.0 (2026-03-04)

New Features

• Added no-ds-tokens rule to disallow usage of Design System token CSS custom properties (--wpds-*).

Enhancements

• The no-unknown-ds-tokens rule now checks all string literals and template literals, not just JSX style attributes. It also reports dynamically constructed --wpds-* token names.

24.2.0 (2026-02-18)

24.1.0 (2026-01-29)

Enhancements

... (truncated)

Commits

• b862d8c chore(release): publish
• a3c385b Update changelog files
• bbb9ce0 Merge changes published in the Gutenberg plugin "release/23.0" branch
• 2cea906 chore(release): publish
• f3bc3b2 Update changelog files
• f146d62 Merge changes published in the Gutenberg plugin "release/22.9" branch
• c094feb Update changelog files
• 78bcaf5 Merge changes published in the Gutenberg plugin "release/22.9" branch
• 29f3a12 Update changelog files
• aa5f983 Merge changes published in the Gutenberg plugin "release/22.9" branch
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)