eslint-sh 0.6.0 → 0.7.0

package/README.md

@@ -242,6 +242,13 @@ to the `files` patterns in your config. `--no-warn-ignored` keeps a staged file
 does not cover from failing the hook as an "ignored file" warning. File names are passed
 NUL-separated, so names with spaces work, and the hook does nothing when no shell file is staged.
 
+**Linting code you don't control.** The job above runs the checkout's own config and install,
+which is right for your own repository. When CI lints contributions from people who don't own the
+policy, a script can switch rules off with `# eslint-disable` comments, and the checkout's
+`eslint.config.mjs` is code the contributor wrote. See
+[linting code you don't control](https://github.com/mike-north/eslint-sh/blob/main/packages/eslint-plugin/docs/untrusted-code.md)
+for a config that ignores those comments and a command that runs ESLint from outside the checkout.
+
 ## Editor setup
 
 Editors that run ESLint through its language server, such as the VS Code ESLint extension, run
@@ -448,7 +455,7 @@ from what the plugin actually does.
   ```
 
 - **Setting `shellVersion` doesn't change anything.** `shellVersion` has no effect on parsing,
-  and only the version-gated `compat/*` rules read it (`sh/compat/no-append-all-redirect`, `sh/compat/no-associative-arrays`, `sh/compat/no-case-attributes`, `sh/compat/no-case-fallthrough`, `sh/compat/no-case-modification`, `sh/compat/no-coproc`, `sh/compat/no-declare-g`, `sh/compat/no-epoch-variables`, `sh/compat/no-fd-variable`, `sh/compat/no-globstar`, `sh/compat/no-lastpipe-semantics`, `sh/compat/no-mapfile`, `sh/compat/no-nameref`, `sh/compat/no-negative-array-index`, `sh/compat/no-nounset-empty-array`, `sh/compat/no-parameter-transformation`, `sh/compat/no-pipe-all`, `sh/compat/no-printf-time-format`, `sh/compat/no-test-v`, `sh/compat/no-unicode-escape` and `sh/compat/no-wait-n`). The `bash-3.2` and `posix-portable` presets enable them; to pick rules yourself,
+  and only the version-gated `compat/*` rules read it (`sh/compat/no-append-all-redirect`, `sh/compat/no-associative-arrays`, `sh/compat/no-brace-sequence-padding-step`, `sh/compat/no-case-attributes`, `sh/compat/no-case-fallthrough`, `sh/compat/no-case-modification`, `sh/compat/no-coproc`, `sh/compat/no-declare-g`, `sh/compat/no-epoch-variables`, `sh/compat/no-fd-variable`, `sh/compat/no-globstar`, `sh/compat/no-lastpipe-semantics`, `sh/compat/no-mapfile`, `sh/compat/no-nameref`, `sh/compat/no-negative-array-index`, `sh/compat/no-nounset-empty-array`, `sh/compat/no-parameter-transformation`, `sh/compat/no-pipe-all`, `sh/compat/no-printf-time-format`, `sh/compat/no-test-v`, `sh/compat/no-unicode-escape` and `sh/compat/no-wait-n`). The `bash-3.2` and `posix-portable` presets enable them; to pick rules yourself,
   enable the ones you want, for example `'sh/compat/no-mapfile': 'error'`. See
   [version compatibility](https://github.com/mike-north/eslint-sh/blob/main/packages/eslint-plugin/docs/compat.md).
 - **`# eslint-disable-next-line ...` comments don't seem to do anything.** First check that the

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "eslint-sh",
   "description": "Shell script linting for ESLint, with built-in policy rules, shared presets, and custom rules over a typed shell AST",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "author": "Mike North <michael.l.north@gmail.com>",
   "dependencies": {
-    "@eslint-sh/eslint-plugin": "0.6.0"
+    "@eslint-sh/eslint-plugin": "0.7.0"
   },
   "devDependencies": {
     "eslint": "^10.7.0"