chore: replace eslint with oxlint

[claude]

Requested by Samuel Attard · Slack thread

Before: yarn lint ran ESLint 8 with @typescript-eslint/* and eslint-plugin-ava via a legacy .eslintrc.json.

After: yarn lint runs oxlint src spec from .oxlintrc.json with the correctness category as errors and the typescript plugin; ESLint and its plugins are gone.

• Removed eslint, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint-plugin-ava; added oxlint@1.81.0.
• oxlint is pinned exactly to 1.81.0 rather than ^1.81.0: this repo is still Yarn 1 with no npm minimum-age gate, and the caret resolved to the 5-day-old 1.82.0, which Socket blocks and which the other (age-gated) Electron repos are not on yet.
• Added .oxlintrc.json (mirrors chore: replace eslint with oxlint github-app-auth-action#174, minus the import/vitest plugins); deleted .eslintrc.json.
• Carried over no-var, eqeqeq, prefer-const, no-unused-vars, typescript/no-explicit-any, typescript/no-inferrable-types, typescript/no-non-null-assertion (warn); typescript/no-require-imports stays off to match the old no-var-requires: off.
• Dropped rules with no oxlint equivalent: eslint-plugin-ava (oxlint has no ava plugin) and the stylistic indent/semi/quotes rules (oxlint does not ship formatting rules).
• Scripts: lint → oxlint src spec, new lint:fix; removed the now-obsolete // eslint-disable-next-line prefer-const in src/index.ts. Not type-aware, since the old config was not either.

Verified on Linux: yarn lint clean, yarn build (tsc) clean, and the 3 pure ava specs (assert-supported-arch, convert-version, sanitize-authors) pass; installer-spec/sign-spec need Wine + Mono (or Windows) and were not run here, so CI covers them.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Dp8HUuTkriy2qNUP2GNgcs

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	oxlint@​1.81.0

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report