v1.86.0.
Files
Oxlint will run on files with the following extensions:.js.mjs.cjs.jsx.ts.mts.cts.tsx.vue.astro.svelte
Configuration
boolean
default:true
Enable Oxlint
- .coderabbit.yaml
- Web UI
.coderabbit.yaml
.oxlintrc.jsonoxlintrc.json.oxlintrcoxlint.json
CodeRabbit only runs Oxlint when an Oxlint config file is present and Biome is disabled.
Security policy and restrictions
CodeRabbit runs Oxlint in a sandbox. Because JavaScript-based plugins can execute repository-controlled code, CodeRabbit does not run Oxlint analysis when the Oxlint configuration enables them. A non-emptyjsPlugins array at the top level or inside any overrides entry causes CodeRabbit to skip Oxlint analysis. Configurations that omit jsPlugins or set it to an empty array continue to receive Oxlint findings as before.
Oxlint’s built-in plugins setting continues to work and does not affect eligibility.
When we skip Oxlint
CodeRabbit will skip running Oxlint when:- Oxlint is disabled in your CodeRabbit configuration.
- No files in the pull request match the supported extensions.
- Oxlint is already configured in GitHub Actions, GitLab CI, CircleCI, or Azure Pipelines.
- No Oxlint config file is found.
- Biome is enabled.
- The Oxlint configuration declares a non-empty JavaScript plugins array (
jsPlugins) at the top level or inside anyoverridesentry. - The repository’s Oxlint configuration cannot be read, is not valid JSON, or does not parse to a JSON object.
- Oxlint reports a configuration parsing, loading, or resolution failure on the first file. CodeRabbit then skips the remaining files.