chore(deps): update dependency react-doctor to v0.9.13

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
react-doctor (source)	0.9.12 → 0.9.13

---

Release Notes

millionco/react-doctor (react-doctor)

v0.9.13

Compare Source

Patch Changes

• 28a1a9f Thanks @​aidenybai! - Add bippy as a runtime dependency.

• #​1695 ac87f7d Thanks @​skoshx! - Preserve plugin settings when React Doctor adopts an existing lint config.

• #​1651 ffc2d14 Thanks @​aidenybai! - Upgrade the Oxc parser and Oxlint runtime while preserving hard failures for broken JS plugins.

• #​1689 1d3e4a6 Thanks @​skoshx! - Use pnpm's strict dependency layout and declare the runtime dependencies that the CLI imports directly.

• #​1646 05ef989 Thanks @​aidenybai! - Keep the interactive score header intact in narrow split views and invalidate locally stale scan results when rule implementations change.

  Report standalone Three.js render loops that use requestAnimationFrame instead of the renderer-managed setAnimationLoop API.

  Include standalone Three.js, supported React framework, Remotion, and React Three Fiber ecosystem packages in automatic workspace project discovery.

• #​1714 013f737 Thanks @​aidenybai! - Clean leading npm messages from GitHub Action JSON reports before later steps read them.

• #​1697 0557145 Thanks @​skoshx! - Stop multi-project scans from recommending GitHub Actions when the root workflow is already configured.

• #​1730 adc3a91 Thanks @​skoshx! - Fix rn-no-raw-text false positives in components that return only direct <fbt> or <fbs> elements.

• #​1723 e1d4c51 Thanks @​skoshx! - Prevent rn-no-raw-text reports for <fbt> content passed through verified React Native text wrappers.

• #​1693 4e04921 Thanks @​skoshx! - Show an npm-native recovery command when an incomplete npx installation is missing Ajv meta-schema files.

• #​1734 025d69d Thanks @​skoshx! - Fix js-set-map-lookups false positives for substring checks on values returned by the global String constructor.

• #​1725 0f59a3b Thanks @​aidenybai! - Run test-noise rules in ambiguous product-named directories such as tools, demo, and migrations when they are below a recognized application source root. Explicit test surfaces and root-level tooling or example directories remain excluded.

• #​1688 72a4f46 Thanks @​skoshx! - Make generated GitHub workflows explain how to pin the action to an immutable commit SHA.

• #​1663 2b0f06e Thanks @​aidenybai! - Improve repeated effect analysis and deeply nested JSX performance, preserve derived-state detection through transparent TypeScript wrappers, and upgrade Oxc parser and linter dependencies.

• #​1650 0b670aa Thanks @​aidenybai! - Run installed Claude Code and Cursor hooks once at the end of an agent turn, include untracked files in the changed-file scan, and migrate existing per-tool React Doctor hooks automatically.

• #​1746 ca30808 Thanks @​aidenybai! - Accept source file paths as positional CLI arguments.

• #​1624 8c2f03a Thanks @​aidenybai! - Make React cleanup a first-class part of React Doctor with diagnostics for complex React functions and repeated JSX composition. Keep whole-project unused file, export, type, dependency, and import-cycle analysis as explicit opt-in rules while removing the separate Deslop packages, experimental language server, and IDE extensions.

• #​1653 1971506 Thanks @​aidenybai! - Add an interactive URL scan and /performance skill that record Chrome DevTools traces, flash live component render outlines, and return agent-readable React performance context.

• #​1654 6416370 Thanks @​aidenybai! - Add component-composition and correctness rules for shadcn, Radix UI, Base UI, React Aria, TanStack Table, and TanStack Virtual behind six new project capabilities (shadcn from components.json; the rest from their package dependencies). Dialog surfaces that render no title part and carry no accessible name are reported across all three libraries (shadcn DialogContent/SheetContent/AlertDialogContent/DrawerContent, Radix Dialog.Content and AlertDialog.Content, Base UI Dialog.Popup and AlertDialog.Popup). Icon-sized shadcn Buttons with no accessible name, shadcn FormItem fields wrapping a FormControl without a FormLabel, and Base UI Field.Root controls without a Field.Label are reported as unlabeled. Raw Input, Textarea, and Button controls placed directly inside shadcn InputGroup are reported in favor of its InputGroupInput, InputGroupTextarea, and InputGroupAddon parts, and presence-only data-[selected]: / data-[disabled]: Tailwind variants on command items are reported because cmdk renders both attributes as "true" or "false". TanStack Form submit handlers that call the form's handleSubmit without event.preventDefault() are reported because the browser still performs a native full-page submission. Tabs triggers provably inside the root without the list part are reported for shadcn, Radix, and Base UI; the existing shadcn-tabs-trigger-requires-list rule is now enabled by default for shadcn projects through the capability gate and no longer risks false positives on extracted trigger subcomponents. React Aria Dialogs without a Heading or aria-label are reported as unnamed. TanStack Table data/columns options that provably get a new array identity every render (inline literals, render-scoped const arrays, fresh ?? [] fallbacks, inline .filter()/.map() transforms) are reported for rebuilding row and column models each render and looping auto-reset features, and elements measured by TanStack Virtual's measureElement without a data-index attribute are reported because the virtualizer drops the measurement.

• #​1743 6f3dd03 Thanks @​aidenybai! - Normalize Oxlint file URLs before applying ignore patterns and writing report-relative diagnostic paths.

• Updated dependencies [ffc2d14, f7efb7d, 05ef989, a04b933, adc3a91, 2c4560f, e1d4c51, 905607f, 17eeeb5, afa1780, 025d69d, 0f59a3b, 5bc88ae, 4bf7aff, bd08406, 2b0f06e, 8c2f03a, 6416370, 28d4343]:

  • oxlint-plugin-react-doctor@​0.9.13

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.