chore: bump eslint 9->10 + eslint-plugin-react-hooks 5->7 (Dependabot #4/#7) (#30)

Bundled together, not sequential: react-hooks 5.2.0 only peer-supports
eslint up to ^9.0.0, so eslint 10 required react-hooks 7.1.1 in the
same migration (confirmed via npm view peerDependencies before
starting, per Dependabot #4/#7 both being red).

react-hooks 6.x/7.x folded the React Compiler's lint rules into
`recommended`, surfacing real new violations, triaged rule-by-rule:
- preserve-caught-error (new eslint 10 core rule): two e2e fixture
  throws now attach `cause` to the original error.
- no-useless-assignment (new eslint 10 core rule): a genuinely dead
  initializer in SchemaIntake's detect().
- react-hooks/immutability: QuickPanel's refreshFrecency/openMain
  moved above the effects that reference them (order-only, same
  runtime closures).
- react-hooks/refs, react-hooks/purity: two legitimate false
  positives (a headless-hook ref-spread idiom in Tabs.tsx, an
  intentional Date.now() read in a relative-time badge) documented
  with disable-line comments.
- react-hooks/set-state-in-effect: tuned off project-wide in
  eslint.config.js -- flags an established, deliberate 15-instance
  reset-state-on-id-change idiom across the codebase; rewriting all
  15 call sites is real behavioral refactor work well beyond this
  bump's scope, so this follows .golangci.yml's own "tune when
  defaults fight house style" precedent instead of scattering 15
  disable-line comments or silently regressing behavior.

Also bumped @eslint/js to match eslint 10's flat-config recommended
preset. typescript-eslint (8.66+) and eslint-plugin-react-refresh
(0.5.3) already peer-support eslint 10, so neither needed a bump.

Full local suite green: eslint, tsc, boundaries, vitest (227/227),
frontend build, go vet, go build (desktop+server), file-loc-limit,
rules-frontmatter, root-file-naming.


Claude-Session: https://claude.ai/code/session_01FYwojT8GdUbYSoggbvEFft

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: alicoding

frontend/e2e/fixtures/clipboardLock.ts

@@ -49,7 +49,7 @@ async function acquire(): Promise<void> {
         continue // lock vanished between the EEXIST and this stat -- retry immediately
       }
       if (Date.now() > deadline) {
-        throw new Error(`timed out waiting ${ACQUIRE_TIMEOUT_MS}ms for the real-clipboard lock (${LOCK_PATH})`)
+        throw new Error(`timed out waiting ${ACQUIRE_TIMEOUT_MS}ms for the real-clipboard lock (${LOCK_PATH})`, { cause: err })
       }
       await new Promise((resolve) => setTimeout(resolve, 100))
     }

frontend/e2e/fixtures/server.ts

@@ -106,7 +106,7 @@ export async function spawnMillServer(opts: SpawnServerOptions): Promise<Spawned
     await waitForHealth(`${baseURL}/health`, proc, 60_000)
   } catch (err) {
     proc.kill('SIGKILL')
-    throw new Error(`${String(err)}\nmill-server stderr:\n${stderrTail.join('')}`)
+    throw new Error(`${String(err)}\nmill-server stderr:\n${stderrTail.join('')}`, { cause: err })
   }
 
   // Isolation guard, preserved per-worker instead of once globally (the

frontend/eslint.config.js

@@ -19,6 +19,21 @@ export default tseslint.config(
     },
     rules: {
       ...reactHooks.configs.recommended.rules,
+      // eslint-plugin-react-hooks 6.x/7.x folded the React Compiler's
+      // lint rules into `recommended` (goal: dependency majors sweep,
+      // eslint 10 + react-hooks 7.1.1). `set-state-in-effect` flags
+      // house style's own "reset local state when an id/prop changes,
+      // then kick off a fetch" idiom used across ~15 existing effects
+      // (WorkflowRunsPanel, IntegrationBindingsEditor, liveRunState,
+      // and others) -- a well-established, deliberate React pattern
+      // here, not a bug the rule caught. Rewriting all 15 call sites to
+      // the rule's preferred derived-state/`key`-remount shape is a
+      // real behavioral refactor with its own retest surface, well
+      // beyond a dependency bump's scope -- tune it off project-wide
+      // rather than force that refactor or scatter 15 disable-line
+      // comments, matching .golangci.yml's "tune when defaults fight
+      // house style" precedent.
+      'react-hooks/set-state-in-effect': 'off',
       'react-refresh/only-export-components': [
         'warn',
         { allowConstantExport: true },