Glob patterns now match project root instead of app/

Minor Changes

• The require-auth-protection rule now matches protected and public globs relative to the project root, instead of relative to app/. You can specify rootDir to control the project root. (#8942) by @Ephem

  Breaking change: If your project uses the src/app/ folder structure, you need to rewrite your globs. For example, instead of public: ['app/sign-in/**'], use: public: ['src/app/sign-in/**'].

Patch Changes

• Handle non-promise return types when require-auth-protection rule fixer makes the function async. (#8941) by @Ephem

  The eslint rule fixer will now wrap a non-promise return type with Promise<> to produce valid TypeScript.

• The require-auth-protection fixer now matches the string quote style of existing imports when inserting a new auth import. (#8941) by @Ephem

  Previously, new imports always used single quotes regardless of how other imports in the file were quoted.

• The require-auth-protection rule now accepts OR-conditions like if (!isAuthenticated || otherCondition) when determining if a resource is protected. (#8941) by @Ephem

  Previously, only bare auth checks such as if (!isAuthenticated) were recognized. Guards with only || are safe but were incorrectly reported as missing protection.