[dependabot]

Bumps react-doctor from 0.5.5 to 0.9.18.

Release notes

Sourced from react-doctor's releases.

react-doctor@0.9.18

Patch Changes

• #1386 041d1ab Thanks @​skoshx! - Record the GitHub Action clean-comment preference in anonymized scan telemetry and document the workflow input.

• #1943 6932e7d Thanks @​aidenybai! - Match API Platform subscription IDs to the provider's resource-and-IDs unsubscribe contract.

• #1920 0298eb8 Thanks @​aidenybai! - Do not infer React hooks from relative helper imports in Angular component classes. Continue to check React and React ecosystem imports.

• #1926 012e208 Thanks @​aidenybai! - Do not classify a local state transition as a prop-driven adjustment when its only prop dependencies are called notifications. Keep checks for prop values used in guards, results, or reset dependencies.

• #1911 bb00a27 Thanks @​aidenybai! - Do not recommend lazy state initialization for cheap primitive toString calls, including numeric React Native Dimensions values. Keep warnings for unproven receivers and nested expensive calls.

• #1919 1f6b98a Thanks @​aidenybai! - Report inaccessible parent click actions when descendant handlers stop keyboard-generated clicks from reaching them.

• #1928 a68f193 Thanks @​aidenybai! - Match listener cleanup when both branches of conditional options have the same capture value. Keep warnings for differing capture values, changed options, and missing cleanup.

  Recognize exhaustive listener-removal loops extracted into a synchronous helper when the cleanup only invokes that helper.

• #1965 695e46e Thanks @​aidenybai! - Add the opt-in --scope contextual reporting mode. Selected rules report existing findings when their owning function, JSX element, or file changes. Other rules retain line filtering. Support deletion-only edits, staged scans, untracked files, and separate result-cache entries while preserving existing scope defaults and diagnostic locations.

• #1933 72fab66 Thanks @​aidenybai! - Preserve count-based placeholder identity through a local array before mapping wrappers.

• #1907 e2b047b Thanks @​aidenybai! - Preserve numeric placeholder-loop identity through local key aliases, including constant-prefix keys. Continue reporting index aliases for loops over array data.

• #1905 a1cff2e Thanks @​aidenybai! - Keep browser reads in helpers defined inside React effects out of server-render diagnostics. Preserve warnings for render callbacks and shadowed effect functions.

• #1924 89c6701 Thanks @​aidenybai! - Do not classify zero-argument effect notifications as state payloads sent to a parent. Continue to report callbacks that pass local state.

• #1850 ab39ac4 Thanks @​skoshx! - Install and manage GitHub Actions workflows at the repository root when invoked from a nested package or linked worktree.

• #1852 d53c820 Thanks @​skoshx! - Exclude .cloudflare build output directory from source file discovery. Cloudflare's cf CLI stores compiled Worker bundles and cache state there, mirroring the existing .wrangler exclusion.

• #1964 5f322ad Thanks @​aidenybai! - Honor explicit rules settings of "warn" or "error" for ported rules when customRulesOnly is enabled. Current and legacy rule keys both work. Other ported rules and the React Compiler plugin stay disabled, and project requirements and tag exclusions still apply.

• #1883 909b8e5 Thanks @​skoshx! - fix(effect-needs-cleanup): accept Promise timer that resets its own handle in callback

  Fixes #1882. The rule no longer flags a timer created in a Promise callback when the timer's own callback resets the handle to null or undefined. This is safe because the timer has already fired when the reset happens, so no live handle is lost.

• #1631 f8e6ea4 Thanks @​skoshx! - Fix --staged refusing to scan in linked git worktrees when GIT_DIR is set. Clear the inherited GIT_DIR environment variable in the staged divergence check so git status resolves paths correctly, matching the fix for scoped scans in #1516.

• #1869 7bebcfc Thanks @​aidenybai! - Use constant Boolean initializers before treating numeric-looking JSX guard names as numbers. Preserve warnings for mutable bindings, destructuring defaults, and numeric values.

• #1873 6790398 Thanks @​aidenybai! - Require root route error boundaries only for data routers, since declarative useRoutes configurations do not use data-router error handling.

• #1875 ad8bca6 Thanks @​aidenybai! - Recognize legacy React.createClass components so render callbacks retain their instance this instead of being treated as function components.

• #1874 c92fec1 Thanks @​aidenybai! - Accept direct anchor children owned by an imported Next Link component, including the legacy Link child API.

• #1872 2825dfd Thanks @​aidenybai! - Allow state updater callbacks to reassign their local parameter while still reporting writes to prior-state properties and captured values.

... (truncated)

Changelog

Sourced from react-doctor's changelog.

0.9.18

Patch Changes

• #1386 041d1ab Thanks @​skoshx! - Record the GitHub Action clean-comment preference in anonymized scan telemetry and document the workflow input.

• #1943 6932e7d Thanks @​aidenybai! - Match API Platform subscription IDs to the provider's resource-and-IDs unsubscribe contract.

• #1920 0298eb8 Thanks @​aidenybai! - Do not infer React hooks from relative helper imports in Angular component classes. Continue to check React and React ecosystem imports.

• #1926 012e208 Thanks @​aidenybai! - Do not classify a local state transition as a prop-driven adjustment when its only prop dependencies are called notifications. Keep checks for prop values used in guards, results, or reset dependencies.

• #1911 bb00a27 Thanks @​aidenybai! - Do not recommend lazy state initialization for cheap primitive toString calls, including numeric React Native Dimensions values. Keep warnings for unproven receivers and nested expensive calls.

• #1919 1f6b98a Thanks @​aidenybai! - Report inaccessible parent click actions when descendant handlers stop keyboard-generated clicks from reaching them.

• #1928 a68f193 Thanks @​aidenybai! - Match listener cleanup when both branches of conditional options have the same capture value. Keep warnings for differing capture values, changed options, and missing cleanup.

  Recognize exhaustive listener-removal loops extracted into a synchronous helper when the cleanup only invokes that helper.

• #1965 695e46e Thanks @​aidenybai! - Add the opt-in --scope contextual reporting mode. Selected rules report existing findings when their owning function, JSX element, or file changes. Other rules retain line filtering. Support deletion-only edits, staged scans, untracked files, and separate result-cache entries while preserving existing scope defaults and diagnostic locations.

• #1933 72fab66 Thanks @​aidenybai! - Preserve count-based placeholder identity through a local array before mapping wrappers.

• #1907 e2b047b Thanks @​aidenybai! - Preserve numeric placeholder-loop identity through local key aliases, including constant-prefix keys. Continue reporting index aliases for loops over array data.

• #1905 a1cff2e Thanks @​aidenybai! - Keep browser reads in helpers defined inside React effects out of server-render diagnostics. Preserve warnings for render callbacks and shadowed effect functions.

• #1924 89c6701 Thanks @​aidenybai! - Do not classify zero-argument effect notifications as state payloads sent to a parent. Continue to report callbacks that pass local state.

• #1850 ab39ac4 Thanks @​skoshx! - Install and manage GitHub Actions workflows at the repository root when invoked from a nested package or linked worktree.

• #1852 d53c820 Thanks @​skoshx! - Exclude .cloudflare build output directory from source file discovery. Cloudflare's cf CLI stores compiled Worker bundles and cache state there, mirroring the existing .wrangler exclusion.

• #1964 5f322ad Thanks @​aidenybai! - Honor explicit rules settings of "warn" or "error" for ported rules when customRulesOnly is enabled. Current and legacy rule keys both work. Other ported rules and the React Compiler plugin stay disabled, and project requirements and tag exclusions still apply.

• #1883 909b8e5 Thanks @​skoshx! - fix(effect-needs-cleanup): accept Promise timer that resets its own handle in callback

  Fixes #1882. The rule no longer flags a timer created in a Promise callback when the timer's own callback resets the handle to null or undefined. This is safe because the timer has already fired when the reset happens, so no live handle is lost.

• #1631 f8e6ea4 Thanks @​skoshx! - Fix --staged refusing to scan in linked git worktrees when GIT_DIR is set. Clear the inherited GIT_DIR environment variable in the staged divergence check so git status resolves paths correctly, matching the fix for scoped scans in #1516.

• #1869 7bebcfc Thanks @​aidenybai! - Use constant Boolean initializers before treating numeric-looking JSX guard names as numbers. Preserve warnings for mutable bindings, destructuring defaults, and numeric values.

• #1873 6790398 Thanks @​aidenybai! - Require root route error boundaries only for data routers, since declarative useRoutes configurations do not use data-router error handling.

• #1875 ad8bca6 Thanks @​aidenybai! - Recognize legacy React.createClass components so render callbacks retain their instance this instead of being treated as function components.

• #1874 c92fec1 Thanks @​aidenybai! - Accept direct anchor children owned by an imported Next Link component, including the legacy Link child API.

... (truncated)

Commits

• d1feed1 chore: version packages (#1881)
• 695e46e feat: add contextual diff scope (#1965)
• 5f322ad fix: honor explicit rules with customRulesOnly (#1964)
• e5824ab docs: keep README focused on getting started (#1953)
• 066a7c7 test: wait for stdin probe readiness on slow runners (#1914)
• 6ff6710 feat(cli): add a separate exit code for warnings (#1900)
• a3cbae0 fix: tighten observer cleanup and matcher render detection (#1898)
• 673ce80 Merge branch 'codex/prepare-skoshx-1848' into codex/merge-selected-fixes
• 5bd2539 test(action): normalize Windows line endings in workflow checks
• cf29f73 fix(action): use installed project commands and preserve version overrides
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
nycgrid	Ignored	Preview	Oct 22, 2026 7:19pm UTC