Dependabot bumping eslint to version 7 while it's incompatible with @vue/cli-plugin-eslint

[strokesws]

Package manager/ecosystem
JavaScript/NPM
Manifest contents prior to update
https://github.com/strokesws/personal-website/blob/dev/package.json
Updated dependency
eslint from 6.8.0 to 7.21.0
What you expected to see, versus what you actually saw
I expect dependabot not to suggest an updated to an incompatible dependency. If I try to manually update eslint to 7 I receive a warning from NPM
Images of the diff or a link to the PR, issue or logs
https://github.com/strokesws/personal-website/pull/20

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! Found: eslint@7.21.0
npm ERR! node_modules/eslint
npm ERR!   dev eslint@"7.21.0" from the root project
npm ERR!   peer eslint@"^5.0.0 || ^6.0.0 || ^7.0.0" from @typescript-eslint/eslint-plugin@4.16.1
npm ERR!   node_modules/@typescript-eslint/eslint-plugin
npm ERR!     peer @typescript-eslint/eslint-plugin@"^4.4.0" from @vue/eslint-config-typescript@7.0.0
npm ERR!     node_modules/@vue/eslint-config-typescript
npm ERR!       dev @vue/eslint-config-typescript@"^7.0.0" from the root project
npm ERR!     dev @typescript-eslint/eslint-plugin@"^4.16.1" from the root project
npm ERR!   8 more (@typescript-eslint/experimental-utils, ...)
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer eslint@">= 1.6.0 < 7.0.0" from @vue/cli-plugin-eslint@4.5.11
npm ERR! node_modules/@vue/cli-plugin-eslint
npm ERR!   dev @vue/cli-plugin-eslint@"~4.5.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.

[Olegt0rr]

The same for python!

How to reproduce:

• create requirements.txt with pymongo[srv] 3.11.3 and dnspython<2.0.0
• run dependabot
• receive update dnspython requirement from <2.0.0 to <3.0.0
• get the conflict:

The conflict is caused by:
    The user requested dnspython==2.1.0
    pymongo[srv] 3.11.3 depends on dnspython<2.0.0 and >=1.16.0; extra == "srv"

[jeffwidman]

👋 sorry for the slow response.

We've shipped a lot of updates to our npm package resolver over the past year and a half. Any idea if this is still a valid issue?

[jeffwidman]

Closing due to lack of response.

[deivid-rodriguez]

It seems like still an issue. I created a small repo that reproduces it. Checking out the dependency manifest files proposed by Dependabot here leads to a resolution error.

[github-actions]

👋 This issue has been marked as stale because it has been open for 2 years with no activity. You can comment on the issue to hold stalebot off for a while, or do nothing. If you do nothing, this issue will be closed eventually by the stalebot. Please see CONTRIBUTING.md for more policy details.