[ ] npm
[ ] General
[ ] `npm audit fix`, //e.g.// `grunt` -> 1.0.4
[ ] `package.json` should have a `private` property
[ ] Order: Ensure `grunt test` order has eslint before banana (as that checks the JSON)
[ ] eslint / jsonlint
[ ] `.eslintrc` should be renamed to `.eslintrc.json`
[ ] {T206485}
[ ] Ensure we're using `reportUnusedDisableDirectives: true`
[ ] Ensure we're using `cache: true` and that `.eslintcache` is in .gitignore
[ ] `eslint-config-wikimedia` -> 0.6.0 & `grunt-eslint` -> 21.0.0 & remove `grunt-jsonlint` (https://gerrit.wikimedia.org/r/c/mediawiki/extensions/UploadWizard/+/508663|e.g.]]; needs manual fixes; can we generalise?)
[ ] stylelint
[ ] stylelint-config-wikimedia -> 0.6.0 & grunt-stylelint -> 0.11.0 & drop explicit `stylelint`
[ ] banana
[ ] `grunt-banana-checker` -> 0.7.0 (if it passes; some will fail)
[ ] composer
[ ] Order: Ensure `composer fix` has `minus-x fix` before `phpcbf` T214652
[ ] mwcs
[ ] Update `mediawiki-codesniffer` -> 26.0.0
[ ] Update `.gitattributes` for `.phpcs.xml` file move T183851
[ ] Drop "php5,inc" from `.phpcs.xml` files T200956
[ ] `mediawiki-phan-config` -> 0.6.1
[ ] `mediawiki/minus-x` -> 0.3.2
[ ] `jakub-onderka/php-console-highlighter` -> 0.4.0
[ ] `phan-taint-check-plugin` -> 1.5.1