build(deps-dev): Bump eslint-plugin-react from 7.37.4 to 7.37.5

[dependabot]

Bumps eslint-plugin-react from 7.37.4 to 7.37.5.

Release notes

Sourced from eslint-plugin-react's releases.

v7.37.5

Fixed

• [no-unknown-property]: allow shadow root attrs on \<template> (#3912[] @​ljharb)
• [prop-types]: support ComponentPropsWithRef from a namespace import (#3651[] @​corydeppen)
• [jsx-no-constructed-context-values]: detect constructed context values in React 19 <Context> usage (#3910[] @​TildaDares)
• [no-unknown-property]: allow transform-origin on rect (#3914[] @​ljharb)

Changed

• [Docs] [button-has-type]: clean up phrasing (#3909[] @​hamirmahal)

#3651: jsx-eslint/eslint-plugin-react#3651 #3909: jsx-eslint/eslint-plugin-react#3909 #3910: jsx-eslint/eslint-plugin-react#3910 #3912: jsx-eslint/eslint-plugin-react#3912 #3914: jsx-eslint/eslint-plugin-react#3914 [button-has-type]: docs/rules/button-has-type.md [jsx-no-constructed-context-values]: docs/rules/jsx-no-constructed-context-values.md [no-unknown-property]: docs/rules/no-unknown-property.md [prop-types]: docs/rules/prop-types.md

Changelog

Sourced from eslint-plugin-react's changelog.

7.37.5 - 2025.04.03

Fixed

• [no-unknown-property]: allow shadow root attrs on \<template> (#3912[] @​ljharb)
• [prop-types]: support ComponentPropsWithRef from a namespace import (#3651[] @​corydeppen)
• [jsx-no-constructed-context-values]: detect constructed context values in React 19 <Context> usage (#3910[] @​TildaDares)
• [no-unknown-property]: allow transform-origin on rect (#3914[] @​ljharb)

Changed

• [Docs] [button-has-type]: clean up phrasing (#3909[] @​hamirmahal)

#3914: jsx-eslint/eslint-plugin-react#3914 #3912: jsx-eslint/eslint-plugin-react#3912 #3910: jsx-eslint/eslint-plugin-react#3910 #3909: jsx-eslint/eslint-plugin-react#3909 #3651: jsx-eslint/eslint-plugin-react#3651

Commits

• 2c98b83 Update CHANGELOG and bump version
• 2f64dea [Fix] no-unknown-property: allow transform-origin on rect
• 2428618 [Fix] jsx-no-constructed-context-values: detect constructed context values ...
• 60b7316 [Tests] prop-types: use proper spacing/semis, button type
• 90a00b9 [Fix] prop-types: support ComponentPropsWithRef from a namespace import
• 3fd9b92 [Fix] no-unknown-property: allow shadow root attrs on \<template>
• addad46 [Deps] update object.entries
• 98a31f8 [Dev Deps] update @babel/core, @babel/eslint-parser
• 7eb6ca9 [Docs] button-has-type: clean up phrasing
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[Houwen-He-sti]

Round 3: E2E Verification Review (Opus + GPT)

Evidence Reviewed

Console log from live Chrome + Notion (www.notion.so-1778136005460.log):

stream-interceptor-main.iife.js:1 [MCP-SA/MAIN] Stream interceptor installed (MAIN world, document_start)
lockdown-install.js:1 SES Removing unpermitted intrinsics
stream-interceptor-main.iife.js:1 [MCP-SA/MAIN] Config applied (seq=1): {cutoffEnabled: false, cutoffMode: 'drain-drop', requireStructuredIdentity: true, maxDrainMs: 30000}
stream-interceptor-main.iife.js:1  POST https://www.notion.so/api/v3/markInferenceTranscriptSeen 404 (Not Found)
fetch @ stream-interceptor-main.iife.js:1

Test Results (6/6 Pass)

#	Test	Evidence
1	MAIN world installation at document_start	Log line 1 before SES lockdown (line 2)
2	Config channel (ISOLATED→MAIN)	Config applied (seq=1) with correct values
3	Fetch interception active	Stack trace shows fetch @ stream-interceptor-main.iife.js:1
4	URL filtering precision	markInferenceTranscriptSeen not wrapped (pathname ≠ target)
5	Simulated stream pipeline	DevTools injection: stream_start → stream_end correct
6	MCP proxy + bridge connectivity	SSE handshake + tools/list + get_bridge_info succeeded

Untested Items

Gap	Risk (Opus)	Risk (GPT)	Consensus
Real Notion AI stream	LOW	LOW	Accept — external service issue
function_call detection	LOW	LOW-MEDIUM	Accept — deterministic logic, worst case = missed detection
Cutoff behavior	LOW	N/A (experimental)	Accept — disabled by default
Concurrent streams	MEDIUM	MEDIUM	Accept — follow-up

GPT's Pre-Merge Suggestions (accepted)

1. ✅ Update PR body: "E2E verification pending" → completed summary
2. ✅ Update PR body: buffer cap wording → "split/process complete lines first, cap only incomplete tail"

Evidence Strength (GPT scoring, Opus agrees)

• Observation layer: 4/5 — sufficient for merge
• Real payload compatibility: 2/5 — acceptable for observation-only scope
• Cutoff behavior: 1/5 — experimental, not in merge scope

Consensus

Both Opus and GPT independently reached LGTM. The E2E evidence covers all critical risks within PR #4's scope (MAIN world observation infrastructure). Untested areas are low-risk, behind feature flags, or depend on external service availability.

Final Verdict: LGTM — Merge approved.

Follow-up Actions (P3)

• Open issue: "Add automated E2E fixture for MAIN-world stream interceptor"
• Test with real Notion AI when service recovers
• Concurrent stream testing
• Cutoff behavior testing when enabled