fix: resolve cache/navigation binding and unsafe mutation parallelization

[skoshx]

Summary

Fixes #1810

This PR resolves false positives and false negatives in four rules by improving binding resolution and side-effect detection:

Changes

server-cache-with-object-literal

• Use resolveImportedApiReference and collectBindingAliases to properly track React.cache wrappers through immutable bindings
• Check all argument positions for fresh objects/arrays (not just the first)
• Report once per call
• Shadowed and non-React cache functions stay silent

nextjs-no-redirect-in-try-catch

• Extend findGuardingTryStatement and catchClauseRethrowsCaught with optional framework rethrow predicates
• Recognize unstable_rethrow(error) from next/navigation as equivalent to throw
• Support renamed imports and namespace access (nav.unstable_rethrow(error))
• Deferred, wrong-error, and shadowed rethrows still report correctly

server-sequential-independent-await and async-parallel

• Use findSideEffect to detect mutating HTTP requests (POST, PUT, PATCH, DELETE)
• Preserve ordering for mutations that must run sequentially
• Independent GET requests continue to report as expected

Testing

• ✅ All 27,147 tests pass
• ✅ Added 37 new regression test cases covering:
  • React import resolution with aliases and shadowing
  • Multi-argument object/array detection
  • unstable_rethrow patterns (direct, renamed, namespace)
  • HTTP mutation detection (POST, PUT, PATCH, DELETE, lowercase)
• ✅ Unit tests validate all edge cases

Scope and Correctness

The changes follow the existing patterns in the codebase:

• resolveImportedApiReference and collectBindingAliases are existing, well-tested utilities
• findSideEffect already correctly detects mutating fetch calls
• Framework rethrow predicates extend the existing try/catch analysis without changing default behavior

Validation Status

⚠️ Parity Check: Full corpus parity was not run due to environment constraints (no baseline data available). The following validations were completed:

• All focused unit tests pass (37 new regression cases)
• Existing test suite passes completely (27,147 tests)
• Changes are targeted and well-scoped to the reported issues

Before merge: Run rde parity to validate that only the intended diagnostic changes appear across the corpus.

Changeset

Included patch-level changeset documenting all four rule fixes.

  

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/eslint-plugin-react-doctor@1811

npm i https://pkg.pr.new/oxlint-plugin-react-doctor@1811

npm i https://pkg.pr.new/react-doctor@1811

commit: 38a880f

[github-actions]

Interactive terminal E2E

Terminal Control verified the built CLI at 38a880f in a real PTY:

• selected a project interactively and observed Scanning... before the three-second Git delay completed
• waited for the clean result and exercised the compact report
• opened copy context and the GitHub Actions confirmation, then cancelled safely

Download the edited MP4 and PNG evidence