pr-checkmate 1.21.15 → 1.22.0

package/dist/core/checks/sensitive-file-guard.js

@@ -4,6 +4,7 @@ exports.sensitiveFileGuardCheck = void 0;
 const execa_1 = require("execa");
 const utils_1 = require("../../utils");
 const types_1 = require("../types");
+const findings_1 = require("./findings");
 const SENSITIVE_CATEGORIES = [
     {
         label: 'Environment files (.env)',
@@ -53,6 +54,21 @@ const SENSITIVE_CATEGORIES = [
         severity: 'warn',
     },
 ];
+/** Bucket changed files by category severity, keyed by category label. */
+function categorizeFiles(changedFiles) {
+    var _a;
+    const errors = {};
+    const warnings = {};
+    for (const filePath of changedFiles) {
+        for (const category of SENSITIVE_CATEGORIES) {
+            if (category.patterns.some(p => p.test(filePath))) {
+                const bucket = category.severity === 'error' ? errors : warnings;
+                (bucket[_a = category.label] ?? (bucket[_a] = [])).push(filePath);
+            }
+        }
+    }
+    return { errors, warnings };
+}
 exports.sensitiveFileGuardCheck = {
     name: 'Sensitive Files',
     phase: 'informational',
@@ -60,40 +76,18 @@ exports.sensitiveFileGuardCheck = {
         return ctx.config.sensitiveFileGuard?.enabled !== false && Boolean(ctx.baseSha);
     },
     async run(ctx) {
-        var _a;
         try {
             const { stdout } = await (0, execa_1.execa)('git', ['diff', '--name-only', '--diff-filter=ACMRD', ctx.baseSha, 'HEAD'], { cwd: ctx.cwd });
             const changedFiles = stdout.split('\n').filter(Boolean);
             if (changedFiles.length === 0)
                 return (0, types_1.pass)();
-            const errors = {};
-            const warnings = {};
-            for (const filePath of changedFiles) {
-                for (const category of SENSITIVE_CATEGORIES) {
-                    if (category.patterns.some(p => p.test(filePath))) {
-                        const bucket = category.severity === 'error' ? errors : warnings;
-                        (bucket[_a = category.label] ?? (bucket[_a] = [])).push(filePath);
-                    }
-                }
-            }
-            const totalErrors = Object.values(errors).reduce((s, a) => s + a.length, 0);
-            const totalWarnings = Object.values(warnings).reduce((s, a) => s + a.length, 0);
-            if (totalErrors === 0 && totalWarnings === 0)
-                return (0, types_1.pass)();
-            for (const [label, files] of Object.entries(errors)) {
-                utils_1.logger.error(`[Sensitive Files]: ❌ ${label}:`);
-                files.forEach(f => utils_1.logger.error(`    ${f}`));
-            }
-            for (const [label, files] of Object.entries(warnings)) {
-                utils_1.logger.warn(`[Sensitive Files]: ⚠️ ${label}:`);
-                files.forEach(f => utils_1.logger.warn(`    ${f}`));
-            }
-            const parts = [];
-            if (totalErrors > 0)
-                parts.push(`${totalErrors} sensitive file(s) changed`);
-            if (totalWarnings > 0)
-                parts.push(`${totalWarnings} notable file(s) changed`);
-            return (0, types_1.warn)(parts.join(', '));
+            const { errors, warnings } = categorizeFiles(changedFiles);
+            return (0, findings_1.reportSeverityBuckets)(errors, warnings, {
+                prefix: 'Sensitive Files',
+                errorSummary: n => `${n} sensitive file(s) changed`,
+                warningSummary: n => `${n} notable file(s) changed`,
+                showCount: false,
+            });
         }
         catch (err) {
             utils_1.logger.warn(`[Sensitive Files]: ⚠️ Could not check file changes\n${err}`);

package/dist/core/registry.js

@@ -7,27 +7,27 @@ const commitlint_1 = require("./checks/commitlint");
 const cpp_format_1 = require("./checks/cpp-format");
 const dead_code_1 = require("./checks/dead-code");
 const dependency_check_1 = require("./checks/dependency-check");
+const diff_security_1 = require("./checks/diff-security");
 const diff_smell_1 = require("./checks/diff-smell");
+const duplicate_check_1 = require("./checks/duplicate-check");
+const kotlin_lint_1 = require("./checks/kotlin-lint");
 const license_check_1 = require("./checks/license-check");
 const lint_1 = require("./checks/lint");
+const markdown_lint_1 = require("./checks/markdown-lint");
 const npm_audit_1 = require("./checks/npm-audit");
 // informational — warn/skip only, never fail the run
-const diff_security_1 = require("./checks/diff-security");
 const outdated_deps_1 = require("./checks/outdated-deps");
 const pr_body_1 = require("./checks/pr-body");
 const pr_size_check_1 = require("./checks/pr-size-check");
 const pr_title_lint_1 = require("./checks/pr-title-lint");
+const prettier_1 = require("./checks/prettier");
+const python_format_1 = require("./checks/python-format");
+const python_lint_1 = require("./checks/python-lint");
+const security_1 = require("./checks/security");
 const sensitive_file_guard_1 = require("./checks/sensitive-file-guard");
-const duplicate_check_1 = require("./checks/duplicate-check");
-const markdown_lint_1 = require("./checks/markdown-lint");
 const spellcheck_1 = require("./checks/spellcheck");
-const python_lint_1 = require("./checks/python-lint");
 const swift_lint_1 = require("./checks/swift-lint");
-const kotlin_lint_1 = require("./checks/kotlin-lint");
 // format — runs last, may write files
-const prettier_1 = require("./checks/prettier");
-const python_format_1 = require("./checks/python-format");
-const security_1 = require("./checks/security");
 const typecheck_1 = require("./checks/typecheck");
 /**
  * Every check, in declaration order. The orchestrator groups them by `phase`

package/dist/core/reporters.js

@@ -14,6 +14,8 @@ const STATUS_ICON = {
 };
 // Unique marker so we can find and update the comment on re-runs.
 const COMMENT_MARKER = '<!-- pr-checkmate-summary -->';
+const SUMMARY_BORDER = '═══════════════════════════════════════════════════════════════';
+const SUMMARY_RULE = '───────────────────────────────────────────────────────────────';
 function getPrContext() {
     const token = process.env.GITHUB_TOKEN;
     const repository = process.env.GITHUB_REPOSITORY;
@@ -57,16 +59,16 @@ function buildMarkdownReport(report) {
 function printStdout(report) {
     const { passed, warned, failed, skipped } = report.summary;
     utils_1.logger.info('');
-    utils_1.logger.info('═══════════════════════════════════════════════════════════════');
+    utils_1.logger.info(SUMMARY_BORDER);
     utils_1.logger.info('  PR CheckMate Summary');
-    utils_1.logger.info('═══════════════════════════════════════════════════════════════');
+    utils_1.logger.info(SUMMARY_BORDER);
     for (const r of report.results) {
         const details = r.details ? `: ${r.details}` : '';
         utils_1.logger.info(`  ${STATUS_ICON[r.status]}  ${r.name}${details}`);
     }
-    utils_1.logger.info('───────────────────────────────────────────────────────────────');
+    utils_1.logger.info(SUMMARY_RULE);
     utils_1.logger.info(`  ✅ ${passed} passed  ⚠️ ${warned} warnings  ❌ ${failed} failed  ⏭️ ${skipped} skipped`);
-    utils_1.logger.info('═══════════════════════════════════════════════════════════════');
+    utils_1.logger.info(SUMMARY_BORDER);
 }
 async function upsertGithubComment(body) {
     const ctx = getPrContext();

package/dist/init.js

@@ -59,105 +59,124 @@ const DEFAULT_CONFIG = {
     },
     documentation: config_1.documentation,
 };
-/**
- *
- */
-async function init() {
-    const root = process.cwd();
-    if (!fs_1.default.existsSync(exports.CONFIG_FILE)) {
-        const answers = await inquirer_1.default.prompt([
-            {
-                type: 'list',
-                name: 'sourcePath',
-                message: 'Where is your project source code?',
-                choices: ['src', 'app', 'Enter manually'],
-            },
-            {
-                type: 'input',
-                name: 'manualPath',
-                message: 'Enter path:',
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                when: (a) => a.sourcePath === 'Enter manually',
-                validate: (input) => input.trim().length > 0 || 'Cannot be empty',
-            },
-        ]);
-        const sourcePath = answers.sourcePath === 'Enter manually' ? answers.manualPath : answers.sourcePath;
+const MANUAL_ENTRY = 'Enter manually';
+/** Prompt the user for the project source path, allowing a manual entry. */
+async function promptSourcePath() {
+    const answers = await inquirer_1.default.prompt([
+        {
+            type: 'list',
+            name: 'sourcePath',
+            message: 'Where is your project source code?',
+            choices: ['src', 'app', MANUAL_ENTRY],
+        },
+        {
+            type: 'input',
+            name: 'manualPath',
+            message: 'Enter path:',
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            when: (a) => a.sourcePath === MANUAL_ENTRY,
+            validate: (input) => input.trim().length > 0 || 'Cannot be empty',
+        },
+    ]);
+    return answers.sourcePath === MANUAL_ENTRY ? answers.manualPath : answers.sourcePath;
+}
+/** Copy the bundled GitHub Actions workflow into the consumer repo. */
+function setupWorkflow(root) {
+    const workflowSource = path_1.default.join(__dirname, 'config', 'pr-checkmate-workflow.yml');
+    const workflowDir = path_1.default.join(root, '.github', 'workflows');
+    const workflowDest = path_1.default.join(workflowDir, 'pr-checkmate.yml');
+    if (!fs_1.default.existsSync(workflowSource)) {
+        utils_1.logger.warn('[init]: ⚠️ Workflow template not found, skipping workflow setup');
+        return;
+    }
+    if (!fs_1.default.existsSync(workflowDir)) {
+        fs_1.default.mkdirSync(workflowDir, { recursive: true });
+    }
+    fs_1.default.copyFileSync(workflowSource, workflowDest);
+    utils_1.logger.info('[init]: ✅ Created .github/workflows/pr-checkmate.yml');
+    utils_1.logger.info('[init]: GitHub Actions workflow is ready for your PRs!');
+}
+/** Create a tsconfig.json scaffold if the consumer repo lacks one. */
+function setupTsConfig(root, sourcePath) {
+    const tsconfigPath = path_1.default.join(root, 'tsconfig.json');
+    if (fs_1.default.existsSync(tsconfigPath))
+        return;
+    const newTsConfig = {
+        compilerOptions: {
+            target: 'ES2020',
+            module: 'NodeNext',
+            outDir: 'dist',
+            strict: true,
+            rootDir: sourcePath,
+            moduleResolution: 'NodeNext',
+            esModuleInterop: true,
+            resolveJsonModule: true,
+            forceConsistentCasingInFileNames: true,
+            skipLibCheck: true,
+            types: ['node'],
+        },
+        include: [`${sourcePath}/**/*.ts`],
+        exclude: ['node_modules', 'dist'],
+    };
+    fs_1.default.writeFileSync(tsconfigPath, JSON.stringify(newTsConfig, null, 2));
+    utils_1.logger.info('[init]: ✅ Created tsconfig.json using your sourcePath');
+}
+/** First-run setup: prompt, write config, and scaffold workflow + tsconfig. */
+async function createConfig(root) {
+    const sourcePath = await promptSourcePath();
+    const languages = await (0, utils_1.detectLanguages)(root);
+    utils_1.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
+    const config = {
+        ...DEFAULT_CONFIG,
+        sourcePath,
+        languages,
+    };
+    fs_1.default.writeFileSync(exports.CONFIG_FILE, JSON.stringify(config, null, 2));
+    utils_1.logger.info(`[init]: ✅ Created pr-checkmate.json with sourcePath: ${sourcePath}`);
+    utils_1.logger.info(`[init]: 💡 You can now customize ESLint rules, Prettier settings,
+      and cspell words in pr-checkmate.json`);
+    setupWorkflow(root);
+    setupTsConfig(root, sourcePath);
+}
+/** Re-run setup: merge the existing config with current defaults. */
+async function updateConfig(root) {
+    utils_1.logger.info('[init]: pr-checkmate.json already exists — updating it.');
+    try {
+        const raw = fs_1.default.readFileSync(exports.CONFIG_FILE, 'utf-8');
+        const json = JSON.parse(raw);
         const languages = await (0, utils_1.detectLanguages)(root);
         utils_1.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
-        const config = {
+        // Merge with defaults to add new fields
+        const updated = {
             ...DEFAULT_CONFIG,
-            sourcePath,
+            ...json,
+            // Refresh detected languages on every init so new source dirs are picked up
             languages,
+            eslint: { ...DEFAULT_CONFIG.eslint, ...(json.eslint || {}) },
+            prettier: { ...DEFAULT_CONFIG.prettier, ...(json.prettier || {}) },
+            cspell: { ...DEFAULT_CONFIG.cspell, ...(json.cspell || {}) },
+            typecheck: { ...DEFAULT_CONFIG.typecheck, ...(json.typecheck || {}) },
+            diffSmell: { ...DEFAULT_CONFIG.diffSmell, ...(json.diffSmell || {}) },
+            prBody: { ...DEFAULT_CONFIG.prBody, ...(json.prBody || {}) },
+            duplicate: { ...DEFAULT_CONFIG.duplicate, ...(json.duplicate || {}) },
         };
-        fs_1.default.writeFileSync(exports.CONFIG_FILE, JSON.stringify(config, null, 2));
-        utils_1.logger.info(`[init]: ✅ Created pr-checkmate.json with sourcePath: ${sourcePath}`);
-        utils_1.logger.info(`[init]: 💡 You can now customize ESLint rules, Prettier settings,
-      and cspell words in pr-checkmate.json`);
-        // Copy workflow file to .github/workflows/
-        const workflowSource = path_1.default.join(__dirname, 'config', 'pr-checkmate-workflow.yml');
-        const workflowDir = path_1.default.join(root, '.github', 'workflows');
-        const workflowDest = path_1.default.join(workflowDir, 'pr-checkmate.yml');
-        if (fs_1.default.existsSync(workflowSource)) {
-            if (!fs_1.default.existsSync(workflowDir)) {
-                fs_1.default.mkdirSync(workflowDir, { recursive: true });
-            }
-            fs_1.default.copyFileSync(workflowSource, workflowDest);
-            utils_1.logger.info('[init]: ✅ Created .github/workflows/pr-checkmate.yml');
-            utils_1.logger.info('[init]: GitHub Actions workflow is ready for your PRs!');
-        }
-        else {
-            utils_1.logger.warn('[init]: ⚠️ Workflow template not found, skipping workflow setup');
-        }
-        const tsconfigPath = path_1.default.join(root, 'tsconfig.json');
-        if (!fs_1.default.existsSync(tsconfigPath)) {
-            const newTsConfig = {
-                compilerOptions: {
-                    target: 'ES2020',
-                    module: 'NodeNext',
-                    outDir: 'dist',
-                    strict: true,
-                    rootDir: sourcePath,
-                    moduleResolution: 'NodeNext',
-                    esModuleInterop: true,
-                    resolveJsonModule: true,
-                    forceConsistentCasingInFileNames: true,
-                    skipLibCheck: true,
-                    types: ['node'],
-                },
-                include: [`${sourcePath}/**/*.ts`],
-                exclude: ['node_modules', 'dist'],
-            };
-            fs_1.default.writeFileSync(tsconfigPath, JSON.stringify(newTsConfig, null, 2));
-            utils_1.logger.info('[init]: ✅ Created tsconfig.json using your sourcePath');
-        }
+        fs_1.default.writeFileSync(exports.CONFIG_FILE, JSON.stringify(updated, null, 2));
+        utils_1.logger.info('[init]: 🔧 Updated pr-checkmate.json with customization options.');
+        utils_1.logger.info('[init]: 💡 You can now add custom ESLint rules, cspell words, and more!');
+    }
+    catch (e) {
+        utils_1.logger.error(`[init]: ❌ Failed to update pr-checkmate.json: ${e}`);
+    }
+}
+/**
+ * Initialize (or refresh) pr-checkmate configuration in the current project.
+ */
+async function init() {
+    const root = process.cwd();
+    if (fs_1.default.existsSync(exports.CONFIG_FILE)) {
+        await updateConfig(root);
     }
     else {
-        utils_1.logger.info('[init]: pr-checkmate.json already exists — updating it.');
-        try {
-            const raw = fs_1.default.readFileSync(exports.CONFIG_FILE, 'utf-8');
-            const json = JSON.parse(raw);
-            const languages = await (0, utils_1.detectLanguages)(root);
-            utils_1.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
-            // Merge with defaults to add new fields
-            const updated = {
-                ...DEFAULT_CONFIG,
-                ...json,
-                // Refresh detected languages on every init so new source dirs are picked up
-                languages,
-                eslint: { ...DEFAULT_CONFIG.eslint, ...(json.eslint || {}) },
-                prettier: { ...DEFAULT_CONFIG.prettier, ...(json.prettier || {}) },
-                cspell: { ...DEFAULT_CONFIG.cspell, ...(json.cspell || {}) },
-                typecheck: { ...DEFAULT_CONFIG.typecheck, ...(json.typecheck || {}) },
-                diffSmell: { ...DEFAULT_CONFIG.diffSmell, ...(json.diffSmell || {}) },
-                prBody: { ...DEFAULT_CONFIG.prBody, ...(json.prBody || {}) },
-                duplicate: { ...DEFAULT_CONFIG.duplicate, ...(json.duplicate || {}) },
-            };
-            fs_1.default.writeFileSync(exports.CONFIG_FILE, JSON.stringify(updated, null, 2));
-            utils_1.logger.info('[init]: 🔧 Updated pr-checkmate.json with customization options.');
-            utils_1.logger.info('[init]: 💡 You can now add custom ESLint rules, cspell words, and more!');
-        }
-        catch (e) {
-            utils_1.logger.error(`[init]: ❌ Failed to update pr-checkmate.json: ${e}`);
-        }
+        await createConfig(root);
     }
 }

package/dist/utils/index.js

@@ -24,6 +24,7 @@ __exportStar(require("./logger"), exports);
 __exportStar(require("./delta"), exports);
 __exportStar(require("./result-collector"), exports);
 __exportStar(require("./resolve-bin"), exports);
+__exportStar(require("./own-deps"), exports);
 __exportStar(require("./detect-language"), exports);
 /**
  *

package/dist/utils/own-deps.js

@@ -0,0 +1,113 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOwnDependencyClosure = getOwnDependencyClosure;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const OWN_PACKAGE_NAME = 'pr-checkmate';
+const PACKAGE_JSON = 'package.json';
+let cachedClosure;
+/** Read a package.json's `dependencies` keys, tolerating missing/broken files. */
+function readDependencyNames(pkgDir) {
+    try {
+        const pkg = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(pkgDir, PACKAGE_JSON), 'utf-8'));
+        return Object.keys(pkg.dependencies ?? {});
+    }
+    catch {
+        return [];
+    }
+}
+/** Walk up from this module until we find pr-checkmate's own package root. */
+function findOwnPackageRoot() {
+    let dir = __dirname;
+    while (dir !== node_path_1.default.dirname(dir)) {
+        const pkgJsonPath = node_path_1.default.join(dir, PACKAGE_JSON);
+        if (node_fs_1.default.existsSync(pkgJsonPath)) {
+            try {
+                const pkg = JSON.parse(node_fs_1.default.readFileSync(pkgJsonPath, 'utf-8'));
+                if (pkg.name === OWN_PACKAGE_NAME)
+                    return dir;
+            }
+            catch { }
+        }
+        dir = node_path_1.default.dirname(dir);
+    }
+    return null;
+}
+/**
+ * Resolve a dependency's install directory by name, starting the search from
+ * `fromDir`. Relies on Node's upward node_modules walk so hoisted packages are
+ * found regardless of physical layout.
+ */
+function resolvePackageDir(name, fromDir) {
+    // Prefer the explicit package.json subpath.
+    try {
+        return node_path_1.default.dirname(require.resolve(`${name}/package.json`, { paths: [fromDir] }));
+    }
+    catch { }
+    // Fallback for packages whose exports map hides ./package.json: resolve the
+    // entry point and walk up to the package's own root.
+    try {
+        let dir = node_path_1.default.dirname(require.resolve(name, { paths: [fromDir] }));
+        while (dir !== node_path_1.default.dirname(dir)) {
+            const pkgJsonPath = node_path_1.default.join(dir, PACKAGE_JSON);
+            if (node_fs_1.default.existsSync(pkgJsonPath)) {
+                try {
+                    const pkg = JSON.parse(node_fs_1.default.readFileSync(pkgJsonPath, 'utf-8'));
+                    if (pkg.name === name)
+                        return dir;
+                }
+                catch { }
+            }
+            dir = node_path_1.default.dirname(dir);
+        }
+    }
+    catch { }
+    return null;
+}
+/**
+ * Compute the full set of package names in pr-checkmate's own dependency
+ * closure (direct + transitive runtime dependencies), plus pr-checkmate itself.
+ *
+ * pr-checkmate installs into the consumer's node_modules, so its own runtime
+ * deps (eslint plugins, cspell dictionaries, …) become part of the consumer's
+ * production dependency tree. Some carry copyleft licenses that would otherwise
+ * trip pr-checkmate's own license check against an innocent client. These are
+ * pr-checkmate's dependencies, not the client's, so they must be exempt.
+ *
+ * Result is cached for the process. Returns a set containing only pr-checkmate
+ * itself if the package root cannot be located (defensive; never throws).
+ */
+function getOwnDependencyClosure() {
+    if (cachedClosure)
+        return cachedClosure;
+    const closure = new Set([OWN_PACKAGE_NAME]);
+    const root = findOwnPackageRoot();
+    if (!root) {
+        cachedClosure = closure;
+        return closure;
+    }
+    // BFS over the dependency graph, resolving each package relative to the parent
+    // that declared it so nested (non-hoisted) installs resolve correctly.
+    const queue = readDependencyNames(root).map(name => ({
+        name,
+        fromDir: root,
+    }));
+    while (queue.length > 0) {
+        const { name, fromDir } = queue.shift();
+        if (closure.has(name))
+            continue;
+        closure.add(name);
+        const depDir = resolvePackageDir(name, fromDir);
+        if (!depDir)
+            continue;
+        for (const child of readDependencyNames(depDir)) {
+            if (!closure.has(child))
+                queue.push({ name: child, fromDir: depDir });
+        }
+    }
+    cachedClosure = closure;
+    return closure;
+}

package/dist/utils/resolve-bin.js

@@ -14,6 +14,9 @@ const node_path_1 = __importDefault(require("node:path"));
  * 2. Via package.json — for packages that export ./package.json but not the bin subpath (e.g. eslint)
  * 3. Walk up from main entry — for packages that export neither (e.g. cspell)
  *
+ * @param pkgName - The package whose binary to resolve (e.g. `eslint`).
+ * @param binRelPath - The bin path relative to the package root (e.g. `bin/eslint.js`).
+ * @param options - Resolution options.
  * @param options.paths - Directories to resolve from (passed to `require.resolve`).
  *   Use `[process.cwd()]` to prefer the consumer project's copy of the package.
  */

package/eslint.config.mjs

@@ -4,7 +4,7 @@ import tsPlugin from '@typescript-eslint/eslint-plugin';
 import tsParser from '@typescript-eslint/parser';
 import prettierPlugin from 'eslint-plugin-prettier';
 import sonarjsPlugin from 'eslint-plugin-sonarjs';
-import importPlugin from 'eslint-plugin-import';
+import importPlugin from 'eslint-plugin-import-x';
 import jsdocPlugin from 'eslint-plugin-jsdoc';
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.21.15",
+    "version": "1.22.0",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",
@@ -68,27 +68,27 @@
         "@cspell/dict-ru_ru": "^2.2.1",
         "@cspell/dict-uk-ua": "^4.0.0",
         "@types/node": "^26.1.0",
-        "@typescript-eslint/eslint-plugin": "^8.47.0",
-        "@typescript-eslint/parser": "^8.47.0",
+        "@typescript-eslint/eslint-plugin": "^8.62.1",
+        "@typescript-eslint/parser": "^8.62.1",
         "@wasm-fmt/clang-format": "^22.1.8",
-        "cspell": "^9.3.2",
+        "cspell": "^10.0.1",
         "depcheck": "^1.4.7",
-        "eslint": "^9.26.0",
+        "eslint": "^10.6.0",
         "eslint-config-prettier": "^10.1.8",
-        "eslint-plugin-import": "^2.29.0",
+        "eslint-plugin-import-x": "^4.17.1",
         "eslint-plugin-jsdoc": "^63.0.12",
         "eslint-plugin-prettier": "^5.5.4",
         "eslint-plugin-sonarjs": "^4.1.0",
         "execa": "^9.6.0",
         "gitleaks-secret-scanner-fixed": "^2.1.3",
-        "inquirer": "^13.0.1",
-        "jscpd": "^3.5.10",
+        "inquirer": "^14.0.2",
+        "jscpd": "^5.0.11",
         "license-checker": "^25.0.1",
         "markdownlint-cli2": "^0.23.0",
         "prettier": ">=3.0.0",
         "ts-node": "^10.9.1",
         "ts-unused-exports": "^11.0.1",
-        "typescript": "^5.9.3"
+        "typescript": "^6.0.3"
     },
     "devDependencies": {
         "standard-version": "^9.5.0"

package/src/config/.eslintrc.js

@@ -41,7 +41,7 @@ module.exports = {
     sourceType: 'module',
     project: './tsconfig.json',
   },
-  plugins: ['@typescript-eslint', 'prettier', 'import', 'jsdoc'],
+  plugins: ['@typescript-eslint', 'prettier', 'import-x', 'jsdoc'],
   extends: [
     'eslint:recommended',
     'plugin:@typescript-eslint/recommended',
@@ -83,14 +83,14 @@ module.exports = {
     // Complexity analysis (#61)
     complexity: ['warn', 15],
     // Import ordering (#65)
-    'import/order': [
+    'import-x/order': [
       'warn',
       {
         groups: ['builtin', 'external', 'internal', 'parent', 'sibling', 'index'],
         alphabetize: { order: 'asc', caseInsensitive: true },
       },
     ],
-    'import/no-duplicates': 'error',
+    'import-x/no-duplicates': 'error',
     // Documentation (#62)
     'jsdoc/require-jsdoc': [
       'warn',