[eslint-monster] ESLint Monster daily remediation plan for actions/setup/js

[github-actions[bot]]

Daily ESLint Monster triage for actions/setup/js grouped current lint findings into three remediation streams and launched Copilot follow-up work.

Streams launched

1. JSON.parse hardening
   • Guard unhandled JSON.parse(...) call sites with try/catch
   • Focus files include config/tooling loaders and slash-routing helpers under actions/setup/js
2. Safe error handling normalization
   • Replace unsafe direct caught/rejected property access and prefer getErrorMessage(...)
   • Focus files include harnesses, checkout helpers, MCP bridges, and PR helpers
3. Numeric + entrypoint cleanup
   • Replace coercive numeric APIs, add explicit parseInt(..., 10), stringify setOutput(...) values, and add async .catch(...) entrypoints

Validation target

Each stream includes npm run lint:setup-js as the final validation step.

Notes

• Scope was kept strictly to actions/setup/js.
• Work was split to reduce overlap and keep each issue aligned to a distinct root cause cluster.

Generated by 🧹 ESLint Monster · 18.5 AIC · ⌖ 7.96 AIC · ⊞ 1.5K · ◷

• expires on Jul 7, 2026, 2:18 PM UTC-08:00