v2.0.5

[2.0.5] - 2026-04-16

d27c92e...da8d692

🛠️ Bug Fixes

• 14500ca — 🛠️ [fix] Removes unnecessary test flag in check script

🛠️ [fix] Updates the check script command in package.json

• Removes the -- --run flag from the npm test command

• Fixes potential issues with the test execution in the check workflow

• Streamlines the build verification process by using the default test runner behavior

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com

• 54de1a2 — 🚨 [fix] (eslint) Disable two more Prettier-conflicting Vue rules

• Add vue/singleline-html-element-content-newline: off and
  vue/multiline-html-element-content-newline: off to the Antfu Vue
  overrides block in eslint.config.js

• Both rules enforce newline placement inside HTML element content that
  Prettier already controls, causing 43 spurious warnings across 7 Vue
  files (ConfigItem, RuleDeprecatedInfo, RuleStateItem, configs, dev,
  extends, rules)

• Entries kept in alphabetical order alongside the existing four
  Prettier-conflict overrides

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com

• e90bbad — (eslint) Silence Prettier-conflicting Vue and JSONC rules

• 954aab7 — 🛠️ [fix] Updates property access notation and adds test coverage

🛠️ [fix] Changes dot notation to bracket notation for property access throughout the codebase to avoid potential conflicts with reserved words and ensure consistent property access patterns

🧪 [test] Adds comprehensive test coverage reporting by:

• Adding codecov configuration file with detailed settings for coverage thresholds and component management

• Updating test scripts to support coverage reporting with vitest

• Adding @vitest/coverage-v8 dependency for enhanced coverage reporting

📝 [docs] Enhances README presentation by:

• Adding comprehensive badge section displaying license, downloads, release info, stars, forks, issues, and codecov status

• Removing redundant favicon SVG reference

🧹 [chore] Cleans up package configuration by:

• Removing package overrides section

• Updating npm-check-updates to latest version

• Adding test report file to gitignore

⚙️ [build] Updates ESLint configuration to disable dot-notation rule to align with the new bracket notation approach

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com

🛡️ Security

• 95e8448 — 🔒️ [fix] Fix CI deprecations, CWE-116 security issue, and Sonar code-quality findings

👷 [ci] Upgrade GitHub Actions workflows to Node 24 and CodeQL v4

• Add FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true" env to codeql, playwright,
  and scorecards workflows to opt in to Node 24 action runners

• Migrate all github/codeql-action/* pins from @V3 → @v4 across
  codeql.yml and scorecards.yml

• Deduplicate CodeQL language matrix: remove redundant typescript entry
  (TypeScript is analysed as part of the javascript category)

• Update actions/checkout pins to v6.0.2 across all three workflows

• Remove duplicate checkout step in playwright.yml

🔒️ [fix] (security) Fix CWE-116 incomplete sanitization in bootstrap script

• Correct shell-escaping order in scripts/bootstrap-eslint-repo.mjs:
  backslashes were escaped after double-quotes, allowing \" sequences to
  survive unescaped into shell commands

• Migrate replace(regex) → replaceAll(string) using String.raw template
  literals for clarity and correctness

🚨 [fix] (quality) Resolve all 32 open Sonar code-quality findings

• app/composables/state.ts: convert FONT_SCALE_VALUES from
  readonly FontScale[] to ReadonlySet<FontScale> for O(1) .has() lookup;
  remove redundant as unknown cast in setStateFilters

• app/composables/shiki.ts, strings.ts, src/cli.ts: replace all
  .replace(regex/string) with .replaceAll() throughout (S5734)

• app/pages/configs.vue: remove ! non-null assertion on filters.rule;
  refactor ?.scrollIntoView(…) optional chain to explicit null guard

• app/pages/rules.vue: extract assignment from return expression to
  early-return pattern (S1121)

• shared/config-plugin-filters.ts: replace RegExp.test() calls with
  String.startsWith() for static-prefix matching (S7780/S7781)

• src/inspectors/stylelint.ts: extract two nested ternary expressions to
  explicit let + if/else blocks; replace str.match(regex) with
  regex.exec(str); migrate replace() → replaceAll() for
  QUOTED_GENERATED_PLACEHOLDER_RE and MULTIPLE_WHITESPACE_RE;
  use String.raw template literals for regex escape strings

• src/server.ts: replace !stats || !stats.isFile() with
  !stats?.isFile() optional chain

🧪 [test] Remove unnecessary type assertions and fix non-deterministic sort

• tests/payload_resolve.test.ts: remove 4 redundant as ResolvedPayload
  assertions — resolvePayload already returns ResolvedPayload (S4325)

• tests/stylelint_adapter.test.ts: supply explicit string comparator to
  toSorted() for locale-stable, deterministic rule-name ordering

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com

• 93a9792 — (security) Escape backslashes before double-quotes in bootstrap script

🛠️ Other Changes

• 2b1ae29 — # 🦺 fix: strict TypeScript compliance and code quality audit

Apply exactOptionalPropertyTypes, noPropertyAccessFromIndexSignature, and
isolatedDeclarations to tsconfig.cli.json and fix all resulting type errors across the codebase.
Follow with a targeted quality audit to eliminate any, remove unnecessary async wrappers, and tighten annotations.

---

🔒 TypeScript strict‑mode fixes

• 🧱 src/cli.ts — bracket notation for process.env['HOST'] / process.env['PORT'] to satisfy noPropertyAccessFromIndexSignature
• 🎨 src/inspectors/stylelint.ts — convert all index‑signature accesses to bracket notation; use conditional spread ...(x !== undefined && { key: x }) on every optional field to satisfy exactOptionalPropertyTypes
• 🌐 src/server.ts — extract mimeType variable and spread conditionally; add explicit Promise<Server> return type for isolatedDeclarations
• 🔌 src/ws.ts — conditional spread for targetFilePath; introduce WsServerHandle interface; explicit Promise<WsServerHandle> return type
• 🧩 src/errors.ts — explicit prettyPrint(): void return types on all three classes; tighten configFilenames to readonly string[]
• 📦 src/constants.ts — explicit readonly string[] / string type annotations on all exported constants
• 📁 src/dirs.ts — explicit string type annotations on dataDir and distDir
• ⚙️ src/configs.ts — explicit Promise<ResolvedConfigPath> / Promise<InspectorReadResult> return types; remove redundant async/await wrappers
• 🔁 shared/configs.ts — explicit return types on all exported functions

---

🧹 Code quality audit

• ⚙️ src/configs.ts — drop async/await from promise‑forwarding functions with no try/catch; async wrapper adds a gratuitous microtask hop
• 🚮 server/api/payload.json.ts — remove async/return await from inner event handler
• 📏 shared/rules.ts — add explicit RuleLevel return type to getRuleLevel; import RuleLevel type
• 🧼 shared/configs.ts — rename unused basePath parameter to _basePath in matchFile, removing the void‑operator hack
• 🧽 app/composables/options.ts — replace all any with unknown; use undefined instead of void 0; add explicit return types throughout
• ✨ app/composables/strings.ts — replace any with unknown; add explicit string return types to stringifyOptions and stringifyUnquoted
• 📐 app/composables/payload.ts — replace meta: {} as any with a typed INITIAL_PAYLOAD constant satisfying all required PayloadMeta fields; remove non‑null assertion !; change getRuleDefaultOptions return type from any[] to unknown[]

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com

🧹 Chores

• da8d692 — Release v2.0.5

• d144453 — 🧹 chore(eslint): format settings.json

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com

• 9fd0b26 — 🧹 chore(eslint): disable stylistic rules and drop direct stylistic plugin

• disable stylistic rules in Antfu ESLint config

• disable stylistic rules in Nuxt ESLint config

• remove direct @stylistic/eslint-plugin dependency

• remove stale style/* ESLint overrides and IDE customizations

• update bootstrap dependency list and lockfile

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com

• 910f92f — 🧹 [chore] run new prettier formatting

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com

🔧 Build System

• d27c92e — 📦 build(package): add dual ESM/CJS exports and typed entrypoints

• emit both ESM and CJS bundles via tsdown

• emit .d.mts and .d.cts declaration files

• add conditional exports for import/require with matching types

• set main to CJS and keep top-level types for ESM consumers

• resolve ATW CJSResolvesToESM warning (attw now fully green)

Signed-off-by: Nick2bad4u 20943337+Nick2bad4u@users.noreply.github.com