build(deps-dev): bump @feedic/eslint-config from 0.4.1 to 0.5.0

[dependabot]

Upgrades @feedic/eslint-config to 0.5.0 and adapts the repository to its new rules after merging the current base branch. Applies narrow lint fixes and compatibility settings for the existing public API, custom DOM nodes and test fixtures.

Auto-merge is disabled on this PR. The workflow also excludes shared lint-config updates from future automatic merging so rule changes receive manual review.

Validation: lint, build and the existing test suite pass locally; modified automation passes actionlint. Fresh GitHub CI runs on the pushed commit.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[fb55]

@dependabot rebase

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 32c172dd-ae25-4706-9d64-139844b74b9a

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[fb55]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review skipped.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Copilot]

🟡 Changes recommended

Registry lookups accept inherited properties, and the upgraded lint toolchain conflicts with the repository’s declared Node 20 development path.

2 open findings

• Keep lint plugins compatible with the declared Node.js minimum · New
• Restrict pseudo-class dispatch to own registry properties · New

What changed in this PR

Upgrades the shared ESLint configuration and adapts source, tests, and automation to the new rules.

Changes:

• Updates ESLint dependencies and lockfile.
• Applies lint-driven naming, documentation, and compatibility changes.
• Excludes shared lint-config updates from Dependabot auto-merge.

File	Description
.github/​workflows/​dependabot-automerge.yml	Requires manual review for lint-config updates.
eslint.config.mjs	Disables an incompatible DOM rule for fixtures.
package.json	Upgrades the shared ESLint config.
package-lock.json	Updates resolved lint dependencies.
src/​compile.ts	Modernizes a documentation URL.
src/​general.ts	Renames boolean matcher functions.
src/​helpers/​cache.ts	Renames boolean matcher parameters and results.
src/​helpers/​options.ts	Documents the options parameter.
src/​helpers/​selectors.ts	Adapts selector checks and lint compatibility.
src/​index.ts	Renames the equality predicate and preserves public API naming.
src/​pseudo-selectors/​filters.ts	Renames boolean predicates.
src/​pseudo-selectors/​index.ts	Replaces pseudo-registry membership checks.
src/​pseudo-selectors/​pseudos.ts	Renames whitespace and predicate identifiers.
src/​pseudo-selectors/​subselects.ts	Renames the cache-control boolean.
test/​api.ts	Simplifies repeated-string construction.
test/​nwmatcher.ts	Updates documentation URLs.
test/​sizzle.ts	Applies lint-compatible fixture updates.
test/​tools/​helper.ts	Reworks body extraction assignment.
test/​tools/​sizzle-testinit.ts	Documents a fixture-reset lint exception.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🔵 Needs a closer look

The inherited pseudo-name regression remains reachable through an empty custom pseudos object.

1 open finding

• Keep lint plugins compatible with the declared Node.js minimum

1 resolved since last review

• Restrict pseudo-class dispatch to own registry properties

Previously missed (1)

In code that hasn't changed since last review

Guard custom pseudo lookup against inherited properties

test/​api.ts:140

These cases only cover the built-in pseudo tables. The public custom-pseudo path still reads options.pseudos?.[name], so CSSselect.compile(":constructor", { pseudos: {} }) resolves the inherited Object.prototype.constructor function and does not throw. Please add this option shape to the regression cases and guard the custom pseudo lookup with an own-property check as well.

🧠 Review effort: Balanced

[Copilot]

🟢 Approval recommended

The dependency upgrade, compatibility changes, regression tests, and CI baseline are internally consistent with no unresolved correctness issues.

0 open findings

1 resolved since last review

• Keep lint plugins compatible with the declared Node.js minimum

🧠 Review effort: Balanced