@stll/oxlint-config 1.5.2 → 1.6.0

package/dist/toolchain-guard.mjs

@@ -2,7 +2,7 @@ import { t as checkRepositoryQuarantine } from "./quarantine-policy2.mjs";
 import { E as parseCloudSetup, S as generateCloudSetup, T as nodeSupportRangeMatches, _ as cloudSessionStartFix, a as isMiseConfigPath, d as containerDocumentImages, f as isComposeDefinitionPath, g as cloudClaudeSettingsPath, h as cloudAttributionFix, i as isDockerDefinitionPath, m as workspaceContains, n as githubAutomationFileKind, p as isKubernetesDefinitionPath, s as isShellScript, u as toolchainInputKind, v as hasCloudAttribution, w as nodeSelectorMatches, x as cloudSetupPath, y as hasCloudSessionStartHook } from "./toolchain-inputs.mjs";
 import { t as readGitTrackedOutput } from "./git-tracked-output.mjs";
 import { a as assertConsumerFixtureSelection, g as parseConsumerFixtures, h as discoverConsumerPackages, m as discoverConsumerManifests, r as assertConsumerFixtureKind, t as assertConsumerNodeSupport, u as consumerPackageClosure } from "./consumer-node-support.mjs";
-import { n as dependabotRules, o as canonicalDockerRuntime, s as rustImageVersion, t as checkDependabot } from "./toolchain-dependabot.mjs";
+import { d as rustImageVersion, i as dependabotRules, n as declaredIgnoreConflicts, o as parseDependabotIgnores, t as checkDependabot, u as canonicalDockerRuntime } from "./toolchain-dependabot.mjs";
 import "./toolchain-schema.mjs";
 import { createRequire } from "node:module";
 import path, { extname } from "node:path";
@@ -14,7 +14,7 @@ import { LineCounter, isAlias, isMap, isNode, isScalar, isSeq, parseAllDocuments
 import picomatch from "picomatch";
 //#endregion
 //#region src/toolchain-consumer-checks.ts
-const consumerRunnerVersion = "1.5.2";
+const consumerRunnerVersion = "1.6.0";
 const consumerCheckWorkflow = "stella/.github/.github/workflows/package-consumer-compat.yml";
 const record$10 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const repositoryDirectory = (value) => typeof value === "string" && value !== "" && !value.includes("\\") && !value.includes("${{") && !value.split("").some((character) => {
@@ -3891,7 +3891,7 @@ const record = (value) => typeof value === "object" && value !== null && !Array.
 const array = (value) => Array.isArray(value);
 /** Repository-owned declarations are explicit; malformed decisions fail closed. */
 const parseToolchainConfiguration = (input) => {
-	if (!record(input) || Object.keys(input).some((key) => key !== "optOuts" && key !== "cloud" && key !== "engineFloors" && key !== "dynamicSelectors" && key !== "consumerChecks" && key !== "rustExceptions") || input["optOuts"] !== void 0 && !array(input["optOuts"])) throw new Error("stll-toolchain.json accepts only optOuts, cloud, engineFloors, dynamicSelectors consumerChecks and rustExceptions declarations");
+	if (!record(input) || Object.keys(input).some((key) => key !== "optOuts" && key !== "cloud" && key !== "engineFloors" && key !== "dynamicSelectors" && key !== "consumerChecks" && key !== "rustExceptions" && key !== "dependabotIgnores") || input["optOuts"] !== void 0 && !array(input["optOuts"])) throw new Error("stll-toolchain.json accepts only optOuts, cloud, engineFloors, dynamicSelectors, consumerChecks, rustExceptions and dependabotIgnores declarations");
 	const disabled = /* @__PURE__ */ new Set();
 	const optOuts = input["optOuts"] ?? [];
 	if (!array(optOuts)) throw new Error("optOuts must be an array");
@@ -3911,7 +3911,8 @@ const parseToolchainConfiguration = (input) => {
 		cloud: parseCloudSetup(input["cloud"]),
 		engineFloors: parseEngineFloors(input["engineFloors"]),
 		dynamicSelectors: parseDynamicSelectors(input["dynamicSelectors"]),
-		consumerChecks: parseConsumerChecks(input["consumerChecks"])
+		consumerChecks: parseConsumerChecks(input["consumerChecks"]),
+		dependabotIgnores: parseDependabotIgnores(input["dependabotIgnores"])
 	};
 };
 /** Dependency graphs stay opaque unless a caller explicitly needs registry identities. */
@@ -4142,9 +4143,20 @@ const checkToolchain = ({ root, policy, onDelegated, onWarning, now }) => {
 		line: 1,
 		message: `dynamic selector ${entry.path}:${entry.at ?? entry.line} must match exactly one unresolved ${entry.kind} selector`
 	});
+	const dependabotIgnores = configuration.dependabotIgnores;
+	for (const message of declaredIgnoreConflicts({
+		ignores: dependabotIgnores,
+		policy: policy.dependabot
+	})) diagnostics.push({
+		rule: "configuration",
+		path: "stll-toolchain.json",
+		line: 1,
+		message
+	});
 	diagnostics.push(...checkDependabot({
 		files,
-		policy: policy.dependabot
+		policy: policy.dependabot,
+		ignores: dependabotIgnores
 	}));
 	return diagnostics.filter((diagnostic) => !configuration.disabled.has(diagnostic.rule));
 };