ultracite 7.8.4 → 7.9.1

package/config/oxlint/core/index.mjs

@@ -16,13 +16,21 @@ export default defineConfig({
         "**/__tests__/**/*.{ts,tsx,js,jsx}",
       ],
       rules: {
-        // Disabled: mock callbacks often need empty functions
         "no-empty-function": "off",
-        // Disabled: mock factories use Promise.resolve/reject (conflicts with require-await)
+        // Repeated string literals (test titles, expected values) are normal
+        // and idiomatic in test files.
+        "sonarjs/no-duplicate-string": "off",
         "promise/prefer-await-to-then": "off",
       },
     },
   ],
+  // eslint-plugin-github and eslint-plugin-sonarjs run through oxlint's JS
+  // plugin support to close the gap with the ESLint preset. Rules that require
+  // type information are not supported by the JS plugin bridge and are excluded.
+  jsPlugins: [
+    { name: "github", specifier: "eslint-plugin-github" },
+    { name: "sonarjs", specifier: "eslint-plugin-sonarjs" },
+  ],
   plugins: [
     "eslint",
     "typescript",
@@ -58,6 +66,7 @@ export default defineConfig({
         allowArrowFunctions: true,
       },
     ],
+    "getter-return": "error",
     "grouped-accessor-pairs": "error",
     "guard-for-in": "error",
     "id-length": "off",
@@ -150,7 +159,6 @@ export default defineConfig({
     "no-regex-spaces": "error",
     "no-restricted-globals": "error",
     "no-restricted-imports": "error",
-    // Disabled: requires project-specific configuration to be useful
     "no-restricted-properties": "off",
     "no-return-assign": "error",
     "no-script-url": "error",
@@ -171,6 +179,7 @@ export default defineConfig({
     "no-unexpected-multiline": "error",
     "no-unmodified-loop-condition": "error",
     "no-unneeded-ternary": "error",
+    "no-unreachable": "error",
     "no-unsafe-finally": "error",
     "no-unsafe-negation": "error",
     "no-unsafe-optional-chaining": "error",
@@ -224,6 +233,36 @@ export default defineConfig({
     "vars-on-top": "error",
     yoda: "error",
 
+    // ── github ─────────────────────────────────────────────────────────
+    "github/a11y-aria-label-is-well-formatted": "error",
+    "github/a11y-no-title-attribute": "error",
+    "github/a11y-no-visually-hidden-interactive-element": "error",
+    "github/a11y-role-supports-aria-props": "error",
+    "github/a11y-svg-has-accessible-name": "error",
+    "github/array-foreach": "error",
+    "github/async-currenttarget": "error",
+    "github/async-preventdefault": "error",
+    "github/authenticity-token": "error",
+    "github/filenames-match-regex": "error",
+    "github/get-attribute": "error",
+    "github/js-class-name": "error",
+    "github/no-blur": "error",
+    "github/no-d-none": "error",
+    // Conflicts with unicorn/prefer-dom-node-dataset, which is the benchmark.
+    "github/no-dataset": "off",
+    "github/no-dynamic-script-tag": "error",
+    // The JS plugin bridge misreads module-scoped declarations (e.g. Astro
+    // frontmatter) as implicit globals, producing false positives.
+    "github/no-implicit-buggy-globals": "off",
+    "github/no-inner-html": "error",
+    "github/no-innerText": "error",
+    "github/no-then": "error",
+    "github/no-useless-passive": "error",
+    "github/prefer-observers": "error",
+    "github/require-passive-events": "error",
+    // Mirrors the ESLint preset.
+    "github/unescaped-html-literal": "off",
+
     // ── import ─────────────────────────────────────────────────────────
     "import/consistent-type-specifier-style": ["error", "prefer-top-level"],
     "import/default": "error",
@@ -286,9 +325,11 @@ export default defineConfig({
     "node/global-require": "error",
     "node/handle-callback-err": "error",
     "node/no-exports-assign": "error",
+    "node/no-mixed-requires": "error",
     "node/no-new-require": "error",
     "node/no-path-concat": "error",
     "node/no-process-env": "off",
+    "node/no-sync": "off",
 
     // ── oxc ────────────────────────────────────────────────────────────
     "oxc/approx-constant": "error",
@@ -299,6 +340,7 @@ export default defineConfig({
     "oxc/bad-min-max-func": "error",
     "oxc/bad-object-literal-comparison": "error",
     "oxc/bad-replace-all-arg": "error",
+    "oxc/branches-sharing-code": "error",
     "oxc/const-comparisons": "error",
     "oxc/double-comparisons": "error",
     "oxc/erasing-op": "error",
@@ -334,6 +376,207 @@ export default defineConfig({
     "promise/spec-only": "error",
     "promise/valid-params": "error",
 
+    // ── sonarjs ────────────────────────────────────────────────────────
+    // These sonarjs rules exist in eslint-plugin-sonarjs but oxlint's JS
+    // plugin bridge does not register them, so listing them fails config
+    // parsing. They are intentionally omitted here (still enabled in the
+    // ESLint preset): async-test-assertions, hooks-before-test-cases,
+    // no-duplicate-test-title, no-empty-test-title, no-floating-point-equality,
+    // no-forced-browser-interaction, no-trivial-assertions,
+    // prefer-specific-assertions, super-linear-regex.
+    "sonarjs/arguments-usage": "error",
+    "sonarjs/array-constructor": "error",
+    // Fights the formatter (arrowParentheses: always).
+    "sonarjs/arrow-function-convention": "off",
+    "sonarjs/aws-apigateway-public-api": "error",
+    "sonarjs/aws-ec2-rds-dms-public": "error",
+    "sonarjs/aws-ec2-unencrypted-ebs-volume": "error",
+    "sonarjs/aws-efs-unencrypted": "error",
+    "sonarjs/aws-iam-all-privileges": "error",
+    "sonarjs/aws-iam-all-resources-accessible": "error",
+    "sonarjs/aws-iam-privilege-escalation": "error",
+    "sonarjs/aws-iam-public-access": "error",
+    "sonarjs/aws-opensearchservice-domain": "error",
+    "sonarjs/aws-rds-unencrypted-databases": "error",
+    "sonarjs/aws-restricted-ip-admin-access": "error",
+    "sonarjs/aws-s3-bucket-granted-access": "error",
+    "sonarjs/aws-s3-bucket-insecure-http": "error",
+    "sonarjs/aws-s3-bucket-public-access": "error",
+    "sonarjs/aws-s3-bucket-versioning": "error",
+    "sonarjs/aws-sagemaker-unencrypted-notebook": "error",
+    "sonarjs/aws-sns-unencrypted-topics": "error",
+    "sonarjs/aws-sqs-unencrypted-queue": "error",
+    "sonarjs/block-scoped-var": "error",
+    "sonarjs/bool-param-default": "error",
+    "sonarjs/call-argument-line": "error",
+    "sonarjs/chai-determinate-assertion": "error",
+    "sonarjs/class-name": "error",
+    "sonarjs/code-eval": "error",
+    // Matches Biome's noExcessiveCognitiveComplexity limit.
+    "sonarjs/cognitive-complexity": ["error", 20],
+    "sonarjs/comma-or-logical-or-case": "error",
+    "sonarjs/comment-regex": "error",
+    "sonarjs/constructor-for-side-effects": "error",
+    "sonarjs/content-length": "error",
+    "sonarjs/content-security-policy": "error",
+    "sonarjs/cookie-no-httponly": "error",
+    "sonarjs/cors": "error",
+    "sonarjs/csrf": "error",
+    // Duplicate of the core complexity rule.
+    "sonarjs/cyclomatic-complexity": "off",
+    "sonarjs/declarations-in-global-scope": "error",
+    "sonarjs/destructuring-assignment-syntax": "error",
+    "sonarjs/disabled-timeout": "error",
+    "sonarjs/dynamically-constructed-templates": "error",
+    // Mirrors the ESLint preset.
+    "sonarjs/elseif-without-else": "off",
+    "sonarjs/encryption-secure-mode": "error",
+    "sonarjs/expression-complexity": "error",
+    // Requires a headerFormat option; errors on every file without one.
+    "sonarjs/file-header": "off",
+    // Fires on any file whose name differs from an exported class, which is
+    // noise for config and module files that export objects, not classes.
+    "sonarjs/file-name-differ-from-class": "off",
+    "sonarjs/file-permissions": "error",
+    "sonarjs/file-uploads": "error",
+    "sonarjs/fixme-tag": "error",
+    "sonarjs/for-in": "error",
+    "sonarjs/for-loop-increment-sign": "error",
+    "sonarjs/function-inside-loop": "error",
+    "sonarjs/function-name": "error",
+    "sonarjs/future-reserved-words": "error",
+    "sonarjs/generator-without-yield": "error",
+    "sonarjs/hardcoded-secret-signatures": "error",
+    "sonarjs/hashing": "error",
+    "sonarjs/inconsistent-function-call": "error",
+    "sonarjs/insecure-cookie": "error",
+    "sonarjs/insecure-jwt-token": "error",
+    "sonarjs/inverted-assertion-arguments": "error",
+    "sonarjs/label-position": "error",
+    "sonarjs/link-with-target-blank": "error",
+    // The preset disables max-lines everywhere.
+    "sonarjs/max-lines": "off",
+    // The preset disables max-lines-per-function everywhere.
+    "sonarjs/max-lines-per-function": "off",
+    "sonarjs/max-switch-cases": "error",
+    "sonarjs/max-union-size": "error",
+    "sonarjs/misplaced-loop-counter": "error",
+    // Duplicate of max-depth, which is off.
+    "sonarjs/nested-control-flow": "off",
+    "sonarjs/no-all-duplicated-branches": "error",
+    "sonarjs/no-angular-bypass-sanitization": "error",
+    "sonarjs/no-built-in-override": "error",
+    "sonarjs/no-case-label-in-switch": "error",
+    "sonarjs/no-clear-text-protocols": "error",
+    "sonarjs/no-code-after-done": "error",
+    "sonarjs/no-collapsible-if": "error",
+    "sonarjs/no-commented-code": "error",
+    "sonarjs/no-dead-store": "error",
+    "sonarjs/no-delete-var": "error",
+    "sonarjs/no-duplicate-in-composite": "error",
+    "sonarjs/no-duplicate-string": "error",
+    "sonarjs/no-duplicated-branches": "error",
+    "sonarjs/no-element-overwrite": "error",
+    "sonarjs/no-empty-collection": "error",
+    "sonarjs/no-empty-test-file": "error",
+    "sonarjs/no-equals-in-for-termination": "error",
+    "sonarjs/no-exclusive-tests": "error",
+    "sonarjs/no-extra-arguments": "error",
+    "sonarjs/no-fallthrough": "error",
+    "sonarjs/no-function-declaration-in-block": "error",
+    "sonarjs/no-global-this": "error",
+    "sonarjs/no-globals-shadowing": "error",
+    "sonarjs/no-gratuitous-expressions": "error",
+    "sonarjs/no-hardcoded-ip": "error",
+    "sonarjs/no-hardcoded-passwords": "error",
+    "sonarjs/no-hardcoded-secrets": "error",
+    "sonarjs/no-hook-setter-in-body": "error",
+    "sonarjs/no-identical-conditions": "error",
+    "sonarjs/no-identical-expressions": "error",
+    "sonarjs/no-identical-functions": "error",
+    "sonarjs/no-ignored-exceptions": "error",
+    // The JS plugin bridge has no dependency-manifest resolution, so this
+    // flags builtin (bun:test) and workspace imports as missing dependencies.
+    "sonarjs/no-implicit-dependencies": "off",
+    "sonarjs/no-implicit-global": "error",
+    "sonarjs/no-incomplete-assertions": "error",
+    "sonarjs/no-internal-api-use": "error",
+    "sonarjs/no-invariant-returns": "error",
+    "sonarjs/no-inverted-boolean-check": "error",
+    "sonarjs/no-labels": "error",
+    "sonarjs/no-literal-call": "error",
+    "sonarjs/no-mime-sniff": "error",
+    "sonarjs/no-nested-assignment": "error",
+    "sonarjs/no-nested-conditional": "error",
+    "sonarjs/no-nested-functions": "error",
+    "sonarjs/no-nested-incdec": "error",
+    "sonarjs/no-nested-switch": "error",
+    "sonarjs/no-nested-template-literals": "error",
+    "sonarjs/no-os-command-from-path": "error",
+    "sonarjs/no-parameter-reassignment": "error",
+    "sonarjs/no-primitive-wrappers": "error",
+    "sonarjs/no-redundant-assignments": "error",
+    "sonarjs/no-redundant-boolean": "error",
+    "sonarjs/no-redundant-jump": "error",
+    // The jsPlugins bridge provides no globals, so every identifier is flagged.
+    "sonarjs/no-reference-error": "off",
+    "sonarjs/no-referrer-policy": "error",
+    "sonarjs/no-same-argument-assert": "error",
+    "sonarjs/no-same-line-conditional": "error",
+    "sonarjs/no-session-cookies-on-static-assets": "error",
+    "sonarjs/no-skipped-tests": "error",
+    "sonarjs/no-sonar-comments": "error",
+    "sonarjs/no-table-as-layout": "error",
+    "sonarjs/no-undefined-assignment": "error",
+    "sonarjs/no-unenclosed-multiline-block": "error",
+    "sonarjs/no-uniq-key": "error",
+    "sonarjs/no-unthrown-error": "error",
+    "sonarjs/no-unused-collection": "error",
+    "sonarjs/no-unused-function-argument": "error",
+    "sonarjs/no-unused-vars": "error",
+    "sonarjs/no-use-of-empty-return-value": "error",
+    "sonarjs/no-useless-catch": "error",
+    "sonarjs/no-useless-increment": "error",
+    "sonarjs/no-useless-react-setstate": "error",
+    "sonarjs/no-variable-usage-before-declaration": "error",
+    "sonarjs/no-weak-cipher": "error",
+    "sonarjs/no-weak-keys": "error",
+    "sonarjs/no-wildcard-import": "error",
+    "sonarjs/non-existent-operator": "error",
+    "sonarjs/object-alt-content": "error",
+    "sonarjs/prefer-default-last": "error",
+    "sonarjs/prefer-object-literal": "error",
+    "sonarjs/prefer-promise-shorthand": "error",
+    "sonarjs/prefer-single-boolean-return": "error",
+    "sonarjs/prefer-type-guard": "error",
+    "sonarjs/prefer-while": "error",
+    "sonarjs/production-debug": "error",
+    "sonarjs/pseudo-random": "error",
+    "sonarjs/public-static-readonly": "error",
+    "sonarjs/publicly-writable-directories": "error",
+    "sonarjs/redundant-type-aliases": "error",
+    "sonarjs/review-blockchain-mnemonic": "error",
+    "sonarjs/session-regeneration": "error",
+    // Conflicts with sort-keys.
+    "sonarjs/shorthand-property-grouping": "off",
+    "sonarjs/stable-tests": "error",
+    "sonarjs/stateful-regex": "error",
+    "sonarjs/strict-transport-security": "error",
+    "sonarjs/table-header": "error",
+    "sonarjs/table-header-reference": "error",
+    "sonarjs/test-check-exception": "error",
+    "sonarjs/todo-tag": "error",
+    "sonarjs/too-many-break-or-continue-in-loop": "error",
+    "sonarjs/unverified-certificate": "error",
+    "sonarjs/unverified-hostname": "error",
+    "sonarjs/updated-const-var": "error",
+    "sonarjs/updated-loop-counter": "error",
+    "sonarjs/use-type-alias": "error",
+    "sonarjs/variable-name": "error",
+    "sonarjs/weak-ssl": "error",
+    "sonarjs/x-powered-by": "error",
+    "sonarjs/xml-parser-xxe": "error",
+
     // ── typescript ─────────────────────────────────────────────────────
     "typescript/adjacent-overload-signatures": "error",
     "typescript/array-type": "error",
@@ -459,11 +702,13 @@ export default defineConfig({
     "unicorn/explicit-length-check": "off",
     "unicorn/filename-case": "error",
     "unicorn/import-style": "error",
+    "unicorn/max-nested-calls": "off",
     "unicorn/new-for-builtins": "error",
     "unicorn/no-abusive-eslint-disable": "error",
     "unicorn/no-accessor-recursion": "error",
     "unicorn/no-anonymous-default-export": "error",
     "unicorn/no-array-callback-reference": "off",
+    "unicorn/no-array-fill-with-reference-type": "error",
     "unicorn/no-array-for-each": "error",
     "unicorn/no-array-method-this-argument": "error",
     "unicorn/no-array-reduce": "error",
@@ -533,6 +778,7 @@ export default defineConfig({
     "unicorn/prefer-dom-node-remove": "error",
     "unicorn/prefer-dom-node-text-content": "error",
     "unicorn/prefer-event-target": "error",
+    "unicorn/prefer-export-from": "error",
     "unicorn/prefer-global-this": "off",
     "unicorn/prefer-import-meta-properties": "error",
     "unicorn/prefer-includes": "error",
@@ -546,6 +792,7 @@ export default defineConfig({
     "unicorn/prefer-native-coercion-functions": "error",
     "unicorn/prefer-negative-index": "error",
     "unicorn/prefer-node-protocol": "error",
+    "unicorn/prefer-number-coercion": "error",
     "unicorn/prefer-number-properties": "error",
     "unicorn/prefer-object-from-entries": "error",
     "unicorn/prefer-optional-catch-binding": "error",
@@ -556,6 +803,7 @@ export default defineConfig({
     "unicorn/prefer-response-static-json": "error",
     "unicorn/prefer-set-has": "error",
     "unicorn/prefer-set-size": "error",
+    "unicorn/prefer-single-call": "error",
     "unicorn/prefer-spread": "error",
     "unicorn/prefer-string-raw": "off",
     "unicorn/prefer-string-replace-all": "error",

package/config/oxlint/next/index.mjs

@@ -1,6 +1,12 @@
 import { defineConfig } from "oxlint";
 
+// Every non-nursery nextjs rule oxlint implements is listed explicitly
+// (mirroring the core config's philosophy), with decisions matching the
+// ESLint next preset.
 export default defineConfig({
+  jsPlugins: [
+    { name: "react-doctor", specifier: "oxlint-plugin-react-doctor" },
+  ],
   overrides: [
     {
       files: ["**/next-env.d.ts"],
@@ -10,5 +16,51 @@ export default defineConfig({
     },
   ],
   plugins: ["nextjs"],
-  rules: {},
+  rules: {
+    "nextjs/google-font-display": "error",
+    "nextjs/google-font-preconnect": "error",
+    "nextjs/inline-script-id": "error",
+    "nextjs/next-script-for-ga": "error",
+    "nextjs/no-assign-module-variable": "error",
+    "nextjs/no-async-client-component": "error",
+    "nextjs/no-before-interactive-script-outside-document": "error",
+    "nextjs/no-css-tags": "error",
+    "nextjs/no-document-import-in-page": "error",
+    "nextjs/no-duplicate-head": "error",
+    "nextjs/no-head-element": "error",
+    "nextjs/no-head-import-in-document": "error",
+    "nextjs/no-html-link-for-pages": "error",
+    "nextjs/no-img-element": "error",
+    "nextjs/no-page-custom-font": "error",
+    "nextjs/no-script-component-in-head": "error",
+    "nextjs/no-styled-jsx-in-document": "error",
+    "nextjs/no-sync-scripts": "error",
+    "nextjs/no-title-in-document-head": "error",
+    "nextjs/no-typos": "error",
+    "nextjs/no-unwanted-polyfillio": "error",
+
+    "react-doctor/nextjs-async-client-component": "error",
+    "react-doctor/nextjs-error-boundary-missing-use-client": "error",
+    "react-doctor/nextjs-global-error-missing-html-body": "error",
+    "react-doctor/nextjs-image-missing-sizes": "error",
+    "react-doctor/nextjs-inline-script-missing-id": "error",
+    "react-doctor/nextjs-missing-metadata": "error",
+    "react-doctor/nextjs-no-a-element": "error",
+    "react-doctor/nextjs-no-client-fetch-for-server-data": "error",
+    "react-doctor/nextjs-no-client-side-redirect": "error",
+    "react-doctor/nextjs-no-css-link": "error",
+    "react-doctor/nextjs-no-default-export-in-route-handler": "error",
+    "react-doctor/nextjs-no-edge-og-runtime": "error",
+    "react-doctor/nextjs-no-font-link": "error",
+    "react-doctor/nextjs-no-google-analytics-script": "error",
+    "react-doctor/nextjs-no-head-import": "error",
+    "react-doctor/nextjs-no-img-element": "error",
+    "react-doctor/nextjs-no-native-script": "error",
+    "react-doctor/nextjs-no-polyfill-script": "error",
+    "react-doctor/nextjs-no-redirect-in-try-catch": "error",
+    "react-doctor/nextjs-no-script-in-head": "error",
+    "react-doctor/nextjs-no-side-effect-in-get-handler": "error",
+    "react-doctor/nextjs-no-use-search-params-without-suspense": "error",
+    "react-doctor/nextjs-no-vercel-og-import": "error",
+  },
 });