Update deps

Author: jdalton

.dep-stats.json

@@ -1,11 +1,11 @@
 {
   "dependencies": {
     "@apideck/better-ajv-errors": "^0.3.6",
-    "@cyclonedx/cdxgen": "^10.10.4",
+    "@cyclonedx/cdxgen": "^10.10.6",
     "@inquirer/prompts": "^7.0.0",
     "@npmcli/package-json": "6.0.1",
-    "@npmcli/promise-spawn": "^8.0.1",
-    "@socketregistry/hyrious__bun.lockb": "1.0.0",
+    "@npmcli/promise-spawn": "^8.0.2",
+    "@socketregistry/hyrious__bun.lockb": "1.0.1",
     "@socketsecurity/config": "^2.1.3",
     "@socketsecurity/registry": "^1.0.8",
     "@socketsecurity/sdk": "^1.3.0",
@@ -15,7 +15,7 @@
     "chalk-table": "^1.0.2",
     "hpagent": "^1.2.0",
     "ignore": "^6.0.2",
-    "pacote": "^19.0.0",
+    "pacote": "^20.0.0",
     "pony-cause": "^2.1.11",
     "synp": "^1.9.13",
     "which": "^5.0.0",
@@ -80,11 +80,11 @@
   },
   "external": {
     "@apideck/better-ajv-errors": "^0.3.6",
-    "@cyclonedx/cdxgen": "^10.10.4",
+    "@cyclonedx/cdxgen": "^10.10.6",
     "@inquirer/prompts": "^7.0.0",
     "@npmcli/package-json": "6.0.1",
-    "@npmcli/promise-spawn": "^8.0.1",
-    "@socketregistry/hyrious__bun.lockb": "1.0.0",
+    "@npmcli/promise-spawn": "^8.0.2",
+    "@socketregistry/hyrious__bun.lockb": "1.0.1",
     "@socketsecurity/config": "^2.1.3",
     "@socketsecurity/registry": "^1.0.8",
     "@socketsecurity/sdk": "^1.3.0",
@@ -106,7 +106,7 @@
     "ignore": "^6.0.2",
     "ini": "5.0.0",
     "onetime": "^7.0.0",
-    "pacote": "^19.0.0",
+    "pacote": "^20.0.0",
     "pony-cause": "^2.1.11",
     "rc": "1.2.8",
     "registry-auth-token": "^5.0.2",

.oxlintrc.json

@@ -1,16 +1,16 @@
 {
   "settings": {},
   "rules": {
-    "consistent-function-scoping": "allow",
+    "@typescript-eslint/no-extraneous-class": "allow",
+    "@typescript-eslint/no-this-alias": ["deny"],
+    "unicorn/consistent-function-scoping": "allow",
+    "unicorn/no-empty-file": "allow",
+    "unicorn/no-new-array": "allow",
     "no-async-endpoint-handlers": "allow",
     "no-await-in-loop": "allow",
     "no-control-regex": "allow",
-    "no-empty-file": "allow",
     "no-extend-native": "allow",
-    "no-extraneous-class": "allow",
     "no-new": "allow",
-    "no-new-array": "allow",
-    "no-this-alias": ["deny"],
     "no-self-assign": "allow",
     "no-unused-vars": "allow"
   }

eslint.config.js

@@ -2,13 +2,33 @@
 
 const path = require('node:path')
 
+const eslintPluginUnicorn = require('eslint-plugin-unicorn')
 const { includeIgnoreFile } = require('@eslint/compat')
+const js = require('@eslint/js')
 const tsEslint = require('typescript-eslint')
 const tsParser = require('@typescript-eslint/parser')
 
 const gitignorePath = path.resolve(__dirname, '.gitignore')
 const prettierignorePath = path.resolve(__dirname, '.prettierignore')
 
+const sharedPlugins = {
+  __proto__: null,
+  unicorn: eslintPluginUnicorn
+}
+
+const sharedRules = {
+  __proto__: null,
+  ...js.configs.recommended.rules,
+  'no-await-in-loop': ['error'],
+  'no-empty': ['error', { allowEmptyCatch: true }],
+  'no-control-regex': ['error'],
+  'no-new': ['error'],
+  'no-undef': 'off',
+  'no-unused-vars': 'off',
+  'no-warning-comments': ['warn', { terms: ['fixme'] }],
+  'unicorn/consistent-function-scoping': 'off'
+}
+
 module.exports = [
   includeIgnoreFile(gitignorePath),
   includeIgnoreFile(prettierignorePath),
@@ -25,12 +45,16 @@ module.exports = [
       }
     },
     plugins: {
+      __proto__: null,
+      ...sharedPlugins,
       '@typescript-eslint': tsEslint.plugin
     },
     linterOptions: {
       reportUnusedDisableDirectives: 'off'
     },
     rules: {
+      __proto__: null,
+      ...sharedRules,
       '@typescript-eslint/no-floating-promises': ['error'],
       '@typescript-eslint/no-misused-promises': ['error'],
       // Define @typescript-eslint/no-this-alias because oxlint defines
@@ -45,8 +69,7 @@ module.exports = [
       // not awaiting promises *outside* of try/catch/finally, which is not what
       // we want), and it's nice to await before returning anyways, since you get
       // a slightly more comprehensive stack trace upon promise rejection.
-      '@typescript-eslint/return-await': ['error', 'always'],
-      'no-warning-comments': ['warn', { terms: ['fixme'] }]
+      '@typescript-eslint/return-await': ['error', 'always']
     }
   },
   {
@@ -57,8 +80,13 @@ module.exports = [
   },
   {
     files: ['scripts/**/*.js', 'test/**/*.cjs'],
+    plugins: {
+      __proto__: null,
+      ...sharedPlugins
+    },
     rules: {
-      'no-warning-comments': ['warn', { terms: ['fixme'] }]
+      __proto__: null,
+      ...sharedRules
     }
   }
 ]