React Doctor Files

Patch Changes

• #1519 83f3ff8 Thanks @aidenybai! - Detect Astro projects, run template design rules through Astro's compiler with source-mapped diagnostics, and keep Astro's default sharp image service out of unused-dependency findings.

• #1470 f1a1b16 Thanks @aidenybai! - Detect React Compiler transforms passed through bundled config wrappers such as Vite's defineConfig.

• #1533 2db2a97 Thanks @aidenybai! - Reduce scan startup time and workspace contention by loading lightweight rule metadata, sharing Oxlint subprocess capacity across projects, and reusing semantic and filesystem analysis within each scan. Keep cached diagnostics correct when imported browser guards, Next.js manifests, nested project targets, or TypeScript path configuration change, and ignore explicitly disabled inline CSS animations and transitions in Remotion rules.

• #1457 b31fd85 Thanks @skoshx! - Keep baseline comparisons accurate when the GitHub Action scans a rootDir subdirectory.

• #1540 5268cb4 Thanks @skoshx! - fix(server-auth-actions): skip credential-establishing actions via SDK detection

The server-auth-actions rule now correctly skips server actions that perform credential-establishing operations (signup, signin, OTP verification, password reset) by detecting calls to auth SDK methods like supabase.auth.signUp(), auth.signInWithPassword(), and auth.verifyOtp(). These actions legitimately run for anonymous callers, so requiring authentication would be incorrect.

This resolves the documented false positive where credential-establishing endpoints were incorrectly flagged as unauthenticated privileged operations.

Closes #1538

• #1467 3728102 Thanks @aidenybai! - Upgrade the Oxc toolchain to the latest releases.

• #1488 d6f02bb Thanks @aidenybai! - Detect browser-dependent hydration branches through render-time helpers, mutable aliases, state initializers, and compiled React output.

• #1426 3f3197f Thanks @aidenybai! - Show scan progress immediately after interactive project selection while Git and project setup continue. Keep the experimental TUI usable across terminal sizes with a compact visual hierarchy, balanced report layouts, readable active findings, and a theme-safe action menu. Render repeated live diagnostics without React key warnings.

• #1516 86add14 Thanks @aidenybai! - --staged now honors --project and the config's projects field, so a monorepo pre-commit scan stops reporting clean with every React rule gated off. Each selected package brings its own package.json / tsconfig / config into the staged snapshot, and every staged path belongs to exactly one package. Selecting a package also makes the --json report package-scoped, so packageRoot is no longer always the report's directory; diagnostic ids are unchanged, so baselines still match.

Selecting several packages prints the aggregate project summary rather than a single-scan report, notes how many staged files fell outside the selected projects, and writes --output-dir on a quiet (--json / --score) run where it previously wrote nothing.

Failures stay out of the committer's way. A projects entry that no longer resolves, or that points outside the scanned tree, warns and falls back to a root scan rather than blocking every commit; an explicit --project still fails, since it was typed this run. A staged run whose git index cannot be read fails rather than treating it as empty, but individual paths that cannot be snapshotted are reported and skipped, and when nothing is left to scan the run warns and exits 0 — nobody can act on an oversized blob mid-commit, and failing would only send them to --no-verify.

• Updated dependencies [83f3ff8, 3d67ca1, 1098b9c, c126684, 992205a, 8402820, de6d280, 0cc5efb, d81eeda, 16972ae, 5f23826, c6bdd2d, 57743f8, 1938763, 29e35d5, 01ca0b3, 69d19b5, 2db2a97, 5268cb4, 3728102, b10cd4c, 9418a1c, 444e177, 8170ba2, 65539af, b07af9d, d6f02bb, 9512488, adcee58, 1f6e181, 6b64dfa, c672551, a81b3d6, 660200e, 8715808, 3a0b9a0, 2992a03, 443082a, bf470d5, b479d7d, a9a1f40, 5dc936e, fb5f881, a8115b8, 3bc63ea, 811a2ff]:
• deslop-js@0.9.3
• oxlint-plugin-react-doctor@0.9.3