Merge pull request #107 from Araxeus/update-dependencies

Author: Araxeus

.github/workflows/check.yml

@@ -11,7 +11,7 @@ jobs:
   Check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2
       - run: bun install
       - run: bun check

.github/workflows/dependabot_patch_bun.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: oven-sh/setup-bun@v2
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.ref }}

.github/workflows/dependency-review.yml

@@ -15,6 +15,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout Repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@v4

.github/workflows/publish.yml

@@ -0,0 +1,31 @@
+name: Publish Package
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch: null
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          # ensure we have the latest npm to get provenance support
+          node-version: 'latest'
+      - name: Verify npm version
+        run: npm -v
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install
+      - run: bun check
+      - run: bun b
+        
+      - run: npm publish --provenance --access public
+        # this only works because this package has no dependencies that need to be built
+

.github/workflows/semgrep.yml

@@ -20,5 +20,5 @@ jobs:
     container:
       image: returntocorp/semgrep
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - run: semgrep ci

README.md

@@ -253,7 +253,7 @@ Commands:
   help [command]                              display help for command
 
 Options:
-  -dir, --folder [folder]                     Folder containing the config file
+  -d, --folder [folder]                     Folder containing the config file
   -v, --version                               output the current version
   -h, --help                                  display help for command
 ```
@@ -282,7 +282,7 @@ Usage: vendor update|upgrade [options] [names...]
 Update all/selected dependencies to their latest version (the tag of the latest release)
 
 Options:
-  -pr|--pr    Output pull request text for gh action (default: false)
+  -p|--pr    Output pull request text for gh action (default: false)
   -h, --help  display help for command
 
 Examples:

biome.json

@@ -1,48 +1,46 @@
 {
-  "$schema": "./node_modules/@biomejs/biome/configuration_schema.json",
-  "organizeImports": {
-		"enabled": true
-	},
-  "files": {
-    "ignore": [
-      "./node_modules/**",
-      "./dist/*",
-      "./vendor/*",
-      "./lib/auth.js"
-    ]
-  },
-  "javascript": {
+    "$schema": "./node_modules/@biomejs/biome/configuration_schema.json",
+    "assist": { "actions": { "source": { "organizeImports": "on" } } },
+    "files": {
+        "includes": [
+            "**",
+            "!node_modules",
+            "!dist",
+            "!vendor",
+            "!lib/auth.js"
+        ]
+    },
+    "javascript": {
+        "formatter": {
+            "quoteStyle": "single",
+            "arrowParentheses": "asNeeded"
+        }
+    },
+    "json": {
+        "formatter": {
+            "enabled": false
+        }
+    },
     "formatter": {
-      "quoteStyle": "single"
+        "enabled": true,
+        "indentStyle": "space",
+        "indentWidth": 4,
+        "includes": ["**", "!**/*.json"]
+    },
+    "linter": {
+        "enabled": true,
+        "rules": {
+            "recommended": true,
+            "correctness": {
+                "noUndeclaredVariables": "error",
+                "noUnusedVariables": "error"
+            },
+            "style": {
+                "noParameterAssign": "off"
+            },
+            "nursery": {
+                "recommended": true
+            }
+        }
     }
-  },
-  "json": {
-    "formatter": {
-      "enabled": false
-    }
-  },
-  "formatter": {
-    "enabled": true,
-    "indentStyle": "space",
-    "indentWidth": 4,
-    "ignore": [
-      "*.json"
-    ]
-  },
-  "linter": {
-    "enabled": true,
-    "rules": {
-      "recommended": true,
-      "correctness": {
-        "noUndeclaredVariables": "error",
-        "noUnusedVariables": "error"
-      },
-      "style": {
-        "noParameterAssign": "off"
-      },
-      "nursery": {
-        "recommended": true
-      }
-    }
-  }
 }

bun.lockb

@@ -1,12 +1,10 @@
 #!/usr/bin/env node
 
-import type { FilesArray, VendorsOptions } from './lib/types.js';
-
 import { Command } from '@commander-js/extra-typings';
-
 import { install, sync, uninstall } from './lib/commands.js';
 import { getConfig, setRunOptions } from './lib/config.js';
 import { findRepoUrl, login } from './lib/github.js';
+import type { FilesArray, VendorsOptions } from './lib/types.js';
 import {
     assert,
     getPackageJson,
@@ -39,7 +37,7 @@ const updateCmd = new Command('update')
     .alias('up')
     .alias('u')
     .argument('[names...]')
-    .option('-pr|--pr', 'Output pull request text for gh action', false)
+    .option('-p|--pr', 'Output pull request text for gh action', false)
     .action((names, { pr }) => {
         if (names.length === 0) {
             upgradeAll(pr);
@@ -109,7 +107,7 @@ const installCmd = new Command('install')
             const deps =
                 vendorOptions.dependencies[name] ||
                 Object.values(vendorOptions.dependencies).find(
-                    (dep) => dep.repository === url,
+                    dep => dep.repository === url,
                 ) ||
                 {};
 
@@ -145,7 +143,7 @@ const uninstallCmd = new Command('uninstall')
     .alias('un')
     .alias('r')
     .argument('[names...]', 'Package names to uninstall')
-    .action((names) => {
+    .action(names => {
         assert(names.length > 0, 'No package names provided');
 
         for (const name of names) {
@@ -166,7 +164,7 @@ Examples:
 const loginCmd = new Command('login')
     .alias('auth')
     .argument('[token]', 'GitHub token (leave empty to login via browser)')
-    .action((token) => login(token))
+    .action(token => login(token))
     .summary('Login to GitHub')
     .description('Login to GitHub to increase rate limit')
     .addHelpText(
@@ -195,7 +193,7 @@ program
     .addCommand(installCmd)
     .addCommand(uninstallCmd)
     .addCommand(loginCmd)
-    .option('-dir, --folder [folder]', 'Folder containing the config file')
+    .option('-d, --folder [folder]', 'Folder containing the config file')
     .version(
         (await getPackageJson()).version || 'unknown',
         '-v, --version',
@@ -232,7 +230,12 @@ function installOne({
     name,
     version,
     files,
-}: { url: string; files: FilesArray; version?: string; name?: string }) {
+}: {
+    url: string;
+    files: FilesArray;
+    version?: string;
+    name?: string;
+}) {
     install({
         dependency: (name && vendorOptions.dependencies[name]) || {
             repository: url,

cli.ts

@@ -1,3 +1,10 @@
+import { existsSync } from 'node:fs';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { unarchive } from 'unarchive';
+import { getRunOptions, writeConfig } from './config.js';
+import github from './github.js';
 import type {
     ConfigFile,
     ConfigFileSettings,
@@ -6,16 +13,6 @@ import type {
     VendorDependency,
     VendorsOptions,
 } from './types.js';
-
-import { existsSync } from 'node:fs';
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-
-import { unarchive } from 'unarchive';
-
-import { getRunOptions, writeConfig } from './config.js';
-import github from './github.js';
 import {
     assert,
     checkIfNeedsUpdate,
@@ -30,8 +27,8 @@ import {
     info,
     ownerAndNameFromRepoUrl,
     random,
-    readLockfile,
     readableToFile,
+    readLockfile,
     red,
     replaceVersion,
     success,
@@ -93,7 +90,7 @@ export async function sync(
     if (getRunOptions().prMode && updatedDeps.length > 0) {
         const updatedDepsString = updatedDeps
             .map(
-                (dep) =>
+                dep =>
                     `* Bump [${dep.name}](${dep.url}) from ❌ ${dep.oldVersion} to ✅ ${dep.newVersion}`,
             )
             .join('\n');
@@ -256,7 +253,7 @@ export async function install({
         | string
         | [string, string]
         | [string, { [input: string]: string }]
-    )[] = dependency.files.flatMap((file) =>
+    )[] = dependency.files.flatMap(file =>
         // @ts-expect-error Type 'string' is not assignable to type '[string, string]'
         typeof file === 'object' ? Object.entries(file) : file,
     );
@@ -268,7 +265,7 @@ export async function install({
     const releaseFiles: { input: string; output: ReleaseFileOutput }[] = [];
 
     await Promise.all(
-        allFiles.map(async (file) => {
+        allFiles.map(async file => {
             let input: string;
             // type of parameter two
             let output: ReleaseFileOutput;
@@ -301,7 +298,7 @@ export async function install({
                     path: input,
                     ref,
                 })
-                .catch((err) => {
+                .catch(err => {
                     if (err?.status === 404) {
                         error(
                             `File "${file}" was not found in ${dependency.repository}`,
@@ -325,7 +322,7 @@ export async function install({
 
     await Promise.all(
         // file.output is either a string that or an object which would mean that we want to extract the files from the downloaded archive
-        releaseFiles.map(async (file) => {
+        releaseFiles.map(async file => {
             const input = replaceVersion(file.input, ref).replace(
                 '{release}/',
                 '',
@@ -367,7 +364,7 @@ export async function install({
                     }
 
                     const inputOutput = Array.isArray(output)
-                        ? output.map((o) => [o, o])
+                        ? output.map(o => [o, o])
                         : Object.entries(output);
 
                     // move files