@blumintinc/eslint-plugin-blumint 1.19.26 → 1.19.28

package/lib/index.js

@@ -222,7 +222,7 @@ function noFrontendImportsFromFunctionsPatterns(pattern) {
 module.exports = {
     meta: {
         name: '@blumintinc/eslint-plugin-blumint',
-        version: '1.19.26',
+        version: '1.19.28',
     },
     parseOptions: {
         ecmaVersion: 2020,

package/lib/rules/memo-nested-react-components.js

@@ -339,6 +339,35 @@ const returnExpressionIsJsx = (expression) => {
     return (unwrapped.type === utils_1.AST_NODE_TYPES.JSXElement ||
         unwrapped.type === utils_1.AST_NODE_TYPES.JSXFragment);
 };
+/**
+ * True when the expression is a `memo(...)` / `forwardRef(...)` call. Returned
+ * from a useMemo/useDeepCompareMemo callback, this is the complete, sanctioned
+ * stabilization pattern: the memo hook stabilizes the component *identity*
+ * across re-renders (a new identity only on a deps change), so the inner
+ * component never remounts on an ordinary re-render—the exact harm this rule
+ * exists to prevent does not occur.
+ */
+const returnExpressionIsMemoOrForwardRefCall = (expression, reactImports) => {
+    if (!expression) {
+        return false;
+    }
+    const unwrapped = unwrapExpression(expression);
+    return (unwrapped.type === utils_1.AST_NODE_TYPES.CallExpression &&
+        (isMemoCall(unwrapped, reactImports) ||
+            isForwardRefCall(unwrapped, reactImports)));
+};
+/**
+ * True when a useMemo/useDeepCompareMemo callback directly returns a
+ * memo()/forwardRef()-wrapped component. The memo hook stabilizes the returned
+ * component's identity, so such a binding does not remount on re-render and
+ * must not be flagged.
+ */
+const memoCallbackReturnsMemoizedComponent = (callback, reactImports) => {
+    if (!isFunctionExpression(callback)) {
+        return false;
+    }
+    return collectDirectReturnExpressions(callback).some((expression) => returnExpressionIsMemoOrForwardRefCall(expression, reactImports));
+};
 /**
  * Direct return-statement arguments of a function, traversing control flow
  * (if/switch/try/loops) but NOT descending into nested function definitions—
@@ -486,6 +515,12 @@ See: https://react.dev/learn/your-first-component#nesting-and-organizing-compone
                         // Returns JSX directly, so it's an element, not a component
                         return;
                     }
+                    // A memo()/forwardRef()-wrapped return is identity-stabilized by the
+                    // memo hook, so it does not remount on re-render and must not be
+                    // flagged (see #1336). Bare inner components stay flagged.
+                    if (memoCallbackReturnsMemoizedComponent(callback, reactImports)) {
+                        return;
+                    }
                 }
                 const variableName = getVariableName(node);
                 // A non-PascalCase binding (e.g. renderHit) is a render callback used

package/lib/rules/parallelize-async-operations.js

@@ -178,6 +178,19 @@ exports.parallelizeAsyncOperations = (0, createRule_1.createRule)({
          * name.
          */
         const GUARD_PATTERN = /^(assert|ensure|require|validate|verify|guard|check)/i;
+        /**
+         * Matches state re-read callees by their leading verb. A refetch/refresh
+         * that follows a preceding await exists to re-observe state a prior await
+         * may have mutated (e.g. `await unlinkProvider(...)` then `await
+         * refreshUser()`, where refreshUser re-reads the post-unlink server state).
+         * Running such a pair through Promise.all races the refetch ahead of / in
+         * parallel with the mutation, so a refresh that resolves first repopulates
+         * the just-mutated state -- a genuine correctness bug. Anchored at the
+         * start so it fires on the callee's own verb (refreshUser, reloadData,
+         * refetchProfile) rather than on an arbitrary substring elsewhere in the
+         * name (getRefreshToken must NOT match).
+         */
+        const REFETCH_PATTERN = /^(refresh|reload|refetch|revalidate|resync|sync)/i;
         /**
          * Extracts the callee's method name (the identifier bearing the leading
          * verb) from an await expression argument. Handles both direct
@@ -324,6 +337,33 @@ exports.parallelizeAsyncOperations = (0, createRule_1.createRule)({
                     return true;
                 }
             }
+            // 5. Refetch/refresh ordering barrier. A discarded-result await whose
+            // callee reads as a state re-read (refresh*, reload*, refetch*,
+            // revalidate*, resync*, sync*) exists to observe state that a PRECEDING
+            // await may have mutated. Promise.all invokes every operand eagerly and
+            // concurrently, so it would race the refetch ahead of the mutation -- a
+            // refresh that resolves first repopulates the just-mutated state, a
+            // genuine correctness bug. Treat a refetch that FOLLOWS another await as
+            // a sequencing dependency that blocks parallelizing the run. Only
+            // non-first positions qualify: the preceding await is what the refetch
+            // depends on. getCalleeMethodName handles both bare-identifier and
+            // member-expression callees. Only discarded-result awaits
+            // (ExpressionStatements) qualify here; a captured result carries a value
+            // and is handled by the data-dependency path above.
+            for (let i = 1; i < awaitNodes.length; i++) {
+                const node = awaitNodes[i];
+                if (node.type !== utils_1.AST_NODE_TYPES.ExpressionStatement) {
+                    continue;
+                }
+                const awaitExpr = getAwaitExpression(node);
+                if (!awaitExpr) {
+                    continue;
+                }
+                const methodName = getCalleeMethodName(awaitExpr);
+                if (methodName && REFETCH_PATTERN.test(methodName)) {
+                    return true;
+                }
+            }
             // If any node is a variable declaration with destructuring, consider it as having dependencies
             for (const node of awaitNodes) {
                 if (node.type === utils_1.AST_NODE_TYPES.VariableDeclaration) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blumintinc/eslint-plugin-blumint",
-  "version": "1.19.26",
+  "version": "1.19.28",
   "description": "Custom eslint rules for use within BluMint",
   "author": {
     "name": "Brodie McGuire",

package/release-manifest.json

@@ -1,4 +1,32 @@
 [
+  {
+    "version": "1.19.28",
+    "date": "2026-07-23T17:25:39.744Z",
+    "rules": [
+      {
+        "name": "memo-nested-react-components",
+        "changeType": "fix",
+        "issues": [
+          1336
+        ],
+        "summary": "exempt memo/forwardRef components returned from useMemo/useDeepCompareMemo callbacks (closes #1336)"
+      }
+    ]
+  },
+  {
+    "version": "1.19.27",
+    "date": "2026-07-23T04:26:05.419Z",
+    "rules": [
+      {
+        "name": "parallelize-async-operations",
+        "changeType": "fix",
+        "issues": [
+          1334
+        ],
+        "summary": "treat mutation→refetch bare-identifier awaits as ordered (closes #1334)"
+      }
+    ]
+  },
   {
     "version": "1.19.26",
     "date": "2026-07-23T00:25:08.850Z",