[dependabot]

Bumps react-doctor from 0.9.14 to 0.9.17.

Release notes

Sourced from react-doctor's releases.

react-doctor@0.9.17

Patch Changes

• #1864 fcfb6ea Thanks @​aidenybai! - Fix false new findings in --baseline and --scope changed after formatting or editing existing flagged code. Compare finding counts per file and rule, then use fingerprints, messages, and Git line shifts to identify added findings. Skip location matching when counts do not increase. Apply portable config filters to saved baseline findings and reject reports with missing or incompatible source-dependent filter settings; regenerate those base reports with the current version and settings.

• Updated dependencies []:

  • oxlint-plugin-react-doctor@0.9.17

react-doctor@0.9.16

Patch Changes

• #1860 8ed70df Thanks @​aidenybai! - Fix changed-scope scans to compare findings for uncommitted changes and use flagged source spans instead of whole lines. Match duplicate findings by count and limit cross-file matches to Git renames.

  Add --baseline <report.json> to reuse a saved scan. JSON reports now include stable finding fingerprints, the source revision, the comparison source, and the number of matched base findings. Gates and summary counts use only new findings.

• #1846 6313667 Thanks @​aidenybai! - Disable require-pnpm-hardening by default; enable it explicitly through rules when wanted. Describe await parallelization as a conditional opportunity, preserving ordering, resource limits, and error semantics. Recognize local Promise.all/allSettled collectors and stop describing async array callbacks as sequential.

• #1832 8a950f0 Thanks @​skoshx! - Fix effect-needs-cleanup false positive for React 19 callback ref cleanup returns. React 19 callback refs can return cleanup functions with the signature (node: T | null) => void | (() => void). The rule now correctly handles cases where cleanup is only returned after resource usage (e.g., after ResizeObserver.observe()), allowing void returns on the null branch.

• Updated dependencies [23d6160, 23d6160, 23d6160, 6313667, 3242a81, 8a950f0, 23d6160, 23d6160, 23d6160, 23d6160]:

  • oxlint-plugin-react-doctor@0.9.16

Changelog

Sourced from react-doctor's changelog.

0.9.17

Patch Changes

• #1864 fcfb6ea Thanks @​aidenybai! - Fix false new findings in --baseline and --scope changed after formatting or editing existing flagged code. Compare finding counts per file and rule, then use fingerprints, messages, and Git line shifts to identify added findings. Skip location matching when counts do not increase. Apply portable config filters to saved baseline findings and reject reports with missing or incompatible source-dependent filter settings; regenerate those base reports with the current version and settings.

• Updated dependencies []:

  • oxlint-plugin-react-doctor@0.9.17

0.9.16

Patch Changes

• #1860 8ed70df Thanks @​aidenybai! - Fix changed-scope scans to compare findings for uncommitted changes and use flagged source spans instead of whole lines. Match duplicate findings by count and limit cross-file matches to Git renames.

  Add --baseline <report.json> to reuse a saved scan. JSON reports now include stable finding fingerprints, the source revision, the comparison source, and the number of matched base findings. Gates and summary counts use only new findings.

• #1846 6313667 Thanks @​aidenybai! - Disable require-pnpm-hardening by default; enable it explicitly through rules when wanted. Describe await parallelization as a conditional opportunity, preserving ordering, resource limits, and error semantics. Recognize local Promise.all/allSettled collectors and stop describing async array callbacks as sequential.

• #1832 8a950f0 Thanks @​skoshx! - Fix effect-needs-cleanup false positive for React 19 callback ref cleanup returns. React 19 callback refs can return cleanup functions with the signature (node: T | null) => void | (() => void). The rule now correctly handles cases where cleanup is only returned after resource usage (e.g., after ResizeObserver.observe()), allowing void returns on the null branch.

• Updated dependencies [23d6160, 23d6160, 23d6160, 6313667, 3242a81, 8a950f0, 23d6160, 23d6160, 23d6160, 23d6160]:

  • oxlint-plugin-react-doctor@0.9.16

0.9.15

Patch Changes

• #1819 260b448 Thanks @​aidenybai! - Prevent Bun scans from crashing when its child-process IPC channel omits Node's ref and unref methods.

• #1814 499a020 Thanks @​aidenybai! - Stop no-impure-state-updater reporting callbacks handed to a helper that merely runs them (run(async () => setValue("x"))). Only a wrapper that forwards its parameter into a React setter's updater slot still counts as an updater.

  Stop nextjs-no-side-effect-in-get-handler reporting .set() on a Headers object the helper constructs itself; mutations on stores the helper did not create still report.

  Treat a ternary between static values (hasHeader ? 0 : 16) as static spacing in rn-scrollview-dynamic-padding, and reword its recommendation to name the matching contentInset edge and its iOS-only scope.

  Accept a Zustand store.setState(awaitedValue) re-sync as a cache update in query-mutation-missing-invalidation; plain UI-state writes and non-store bindings still report.

• #1803 922616f Thanks @​aidenybai! - Speed up scans without changing any diagnostic: lint batches are planned for every pooled oxlint worker, sidecar cache probes are interned into a per-bucket table (a 27 MB cache file becomes about 2.5 MB) and collected by the idle pool workers instead of the parent thread, source files are listed once per scan and shared with the duplicate-JSX pass, workers import the rule plugin while they boot, cross-file targets are parsed with oxc raw transfer, the whole-repo cache identity resolves its git calls concurrently, and TypeScript, conf, prompts and agent-install load on first use instead of at startup. The CLI now also starts the scan's git commands, the oxlint worker processes, and a React Compiler detection worker thread before its bundle finishes loading (only when no whole-repo cache can replay), parses tsconfig files as JSONC, and skips parsing build configs that cannot reference unplugin-auto-import, so the TypeScript compiler stays off the main thread's path to the first lint batch.

• Updated dependencies [83466a8, 499a020, 922616f]:

  • oxlint-plugin-react-doctor@0.9.15

Commits

• 0a046d2 chore: version packages (#1865)
• ef1be22 fix: bound baseline matching and validate source filters
• fcfb6ea fix: compare baseline finding counts within each file and rule
• 675ad3c chore: version packages (#1838)
• 8ed70df fix(cli): report only new changed-scope findings and support saved baselines ...
• 6313667 fix: make pnpm hardening opt-in and correct async advice (#1846)
• d741d58 chore: version packages (#1806)
• a4daa0a RD CLEANUP: simplify cleanup helpers (#1833)
• 922616f perf: keep TypeScript, git, and worker boot off the scan's critical path (#1803)
• See full diff in compare view