Update wearerequired/coding-standards requirement from ^6.0 to ^7.0

[dependabot]

Updates the requirements on wearerequired/coding-standards to permit the latest version.

Release notes

Sourced from wearerequired/coding-standards's releases.

@​wearerequired/eslint-config@​7.0.0

Major Changes

• c4a8a1f: Do not enable browser globals. This matches the WordPress default — @wordpress/eslint-plugin deliberately does not enable the browser environment (the v6 config added env: { browser: true }). It also removes the globals dependency, so the package now ships with no runtime dependencies.

  In .js / .jsx files, bare DOM-only globals (MutationObserver, getComputedStyle, IntersectionObserver, ResizeObserver, …) are no longer predefined; add them per project via languageOptions.globals or access them through window.. .ts / .tsx files are unaffected (no-undef is off for TypeScript).

• 3f8da04: Switch to ESLint flat config. The package now exports an array of flat config objects.

  • Raise the eslint peer dependency from >=8 <9 to ^9.0.0 || ^10.0.0. ESLint 10 works when ESLint comes from @wordpress/scripts (v32+, the recommended WordPress setup). A standalone direct ESLint 10 install may need --legacy-peer-deps because the classic eslint-plugin-import@2 bundled by @wordpress/eslint-plugin still stops at ESLint 9 in its peer range (fixed upstream once WordPress moves to eslint-plugin-import-x).
  • Raise the @wordpress/eslint-plugin peer dependency from >=17 <25 to ^25.0.0. This version bundles both typescript-eslint and eslint-import-resolver-typescript as direct dependencies, which fixes the recurring transitive @typescript-eslint resolution failures. The upper bound is kept because the config spreads the plugin's configs.recommended flat-config array, whose shape may change across majors.
  • Refresh the import/core-modules allowlist to the current set of WordPress script packages, so their imports are not reported as unresolved. Adds 20 packages, including @wordpress/preferences, @wordpress/preferences-persistence, @wordpress/commands, @wordpress/interactivity, @wordpress/patterns and @wordpress/router.

  Migration: delete .eslintrc* and .eslintignore, then add an eslint.config.js in your project root:

  const config = require("@wearerequired/eslint-config");
  module.exports = config;

Changelog

Sourced from wearerequired/coding-standards's changelog.

[7.0.0] - 2026-07-19

Dependencies stay pinned to exact versions (as before) so the standard lints reproducibly.

Changed

• PHP: Update wp-coding-standards/wpcs from 3.1.0 to 3.4.0 (pulls in PHP_CodeSniffer 3.13).
• PHP: Update slevomat/coding-standard from 8.15.0 to 8.22.1 — the last release compatible with PHP_CodeSniffer 3 (8.24+ requires PHP_CodeSniffer 4, which WordPressCS/PHPCompatibility do not support).
• PHP: Update phpcompatibility/phpcompatibility-wp from 2.1.5 to 2.1.8.
• PHP: Update sirbrillig/phpcs-variable-analysis from 2.11.18 to 2.13.0.
• PHP: Require squizlabs/php_codesniffer 3.13.5 explicitly to pin the PHP_CodeSniffer 3 line.
• PHP: Raise the minimum PHP version from 7.2 to 7.4 (required by slevomat/coding-standard 8.22).

Internal

• Replace Lerna with npm workspaces and Changesets.
• Add a CI workflow and smoke tests for all three standards.

[6.0.1] - 2026-04-19

Fixed

• JS: Restrict peer dependencies to eslint <9 and @wordpress/eslint-plugin <25 to prevent incompatible usage.

[6.0.0] - 2024-02-09

Changed

• PHP: Update wp-coding-standards/wpcs from 2.3.0 to 3.0.1. Announcement: https://make.wordpress.org/core/2023/08/21/wordpresscs-3-0-0-is-now-available/
• PHP: Update slevomat/coding-standard from 8.8.0 to 8.14.1.
• PHP: Update sirbrillig/phpcs-variable-analysis from 2.11.10 to 2.11.17.
• JS: Increase minimum peer dependency of @wordpress/eslint-plugin from 13 to 17.
• JS: Increase minimum peer dependency of prettier from 2.6 to 3.0.

[5.0.0] - 2023-01-27

Changed

• PHP: Remove minimum_supported_wp_version and testVersion.
  Migration guide: Add the following to the phpcs.xml.dist file to restore previous behaviour.

  <!-- The minimum supported WordPress version for all sniffs which use it. -->
  <config name="minimum_supported_wp_version" value="5.3"/>
  <!-- The minimum PHP requirement. -->
  <config name="testVersion" value="7.4-"/>

• PHP: Introduce Required-Strict ruleset for stricter rules.
• PHP: Update slevomat/coding-standard from 8.6.4 to 8.8.0.
• PHP: Update sirbrillig/phpcs-variable-analysis from 2.11.9 to 2.11.10.

[4.0.0] - 2022-12-08

Changed

• JS: Increase minimum peer dependency of @wordpress/eslint-plugin from 10 to 13.

... (truncated)

Commits

• c0834c1 Prepare CHANGELOG for the PHP 7.0.0 release (#279)
• 6fda282 Version Packages (#278)
• d95f12b Exit Changesets pre mode for the stable 7.0.0 release (#277)
• 7a62049 Update @​wordpress/eslint-plugin to 25.7.0 (#276)
• 197d242 Dependabot: ignore lint-toolchain majors beyond the WordPress ceiling (#275)
• 0cf7947 Version Packages (alpha) (#269)
• acb718e Bump @​changesets/cli from 2.31.0 to 2.31.1 (#274)
• 1d3817e Group Dependabot updates and guard against missing changesets (#272)
• b4d1a16 Sync the lockfile as part of version-packages (#271)
• 52a40df Update wp-coding-standards/wpcs requirement from 3.3.0 to 3.4.0 (#263)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)