Pack up removal and replacement (#103)

* feat: wip pack up removal and replacement

* feat: wip pack up removal and replacement

* feat: upgrade to version 6.0.0 and replace pack-up with vite

* feat: add target option to ViteConfigOptions for customizable build targets

* docs: add command descriptions and usage details for plugin build, watch, and validation utilities

* chore: update @strapi/sdk-plugin dependency to version 6.0.0 in package.json and file-generator.ts

* chore: rename validation check to verify

* chore: update Vite build target to node20

* chore: replace 'check' function with 'verify'

* chore: built-in module check using 'builtinModules'

* chore: legacy packup config warning update changelog

* chore: correct changeset workflow

* chore: support non standard exports

Author: jhoward1994

.changeset/early-cherries-leave.md

@@ -0,0 +1,20 @@
+---
+'@strapi/sdk-plugin': major
+---
+
+### Breaking Changes
+
+- Removed `@strapi/pack-up` dependency - build system now uses Vite v6 directly
+- `packup.config.ts` is no longer used (can be safely deleted)
+- Sourcemaps now default to `false` (use `--sourcemap` flag to enable)
+
+### Migration
+
+1. Delete `packup.config.ts` from your plugin (it's no longer read)
+2. If you need sourcemaps, add `--sourcemap` to your build command
+
+### Why This Change?
+
+- Resolves Vite security vulnerability (CVE) that existed in pack-up's dependencies
+- Simplifies the build system with direct Vite configuration
+- Reduces maintenance overhead by removing the pack-up abstraction layer

jest.config.mjs

@@ -3,7 +3,8 @@
  */
 export default {
   modulePathIgnorePatterns: ['dist'],
-  testMatch: ['**/__tests__/**/*.{js,ts}'],
+  testMatch: ['**/__tests__/**/*.test.{js,ts}'],
+  testPathIgnorePatterns: ['__tests__/fixtures/'],
   transform: {
     '^.+\\.(t|j)sx?$': ['@swc/jest'],
   },

package.json

@@ -28,9 +28,9 @@
   "exports": {
     ".": {
       "source": "./src/index.ts",
-      "import": "./dist/index.mjs",
-      "require": "./dist/index.js",
-      "default": "./dist/index.js"
+      "import": "./dist/cli.mjs",
+      "require": "./dist/cli.js",
+      "default": "./dist/cli.js"
     },
     "./package.json": "./package.json"
   },
@@ -42,8 +42,8 @@
     "dist"
   ],
   "scripts": {
-    "build": "pack-up build",
-    "check": "pack-up check",
+    "build": "vite build",
+    "check": "pnpm lint && pnpm test:ts && pnpm test:unit",
     "lint": "eslint .",
     "prepare": "husky",
     "prerelease:enter": "changeset pre enter",
@@ -55,15 +55,16 @@
     "release:version": "changeset version && pnpm install",
     "test:ts": "tsc --noEmit",
     "test:unit": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
-    "watch": "pack-up watch"
+    "watch": "vite build --watch"
   },
   "dependencies": {
-    "@strapi/pack-up": "^5.1.1",
     "@types/prompts": "2.4.9",
+    "@vitejs/plugin-react": "^4.3.4",
     "boxen": "5.1.2",
     "chalk": "4.1.2",
     "commander": "12.1.0",
     "concurrently": "^8.2.2",
+    "esbuild": "^0.24.0",
     "execa": "^9.3.1",
     "get-latest-version": "5.1.0",
     "git-url-parse": "13.1.1",
@@ -72,7 +73,10 @@
     "outdent": "0.8.0",
     "pkg-up": "3.1.0",
     "prettier": "2.8.8",
+    "prompts": "^2.4.2",
     "typescript": "5.4.4",
+    "vite": "^6.0.3",
+    "vite-plugin-dts": "^4.3.0",
     "yup": "0.32.9"
   },
   "devDependencies": {
@@ -94,7 +98,8 @@
     "eslint-plugin-rxjs": "^5.0.3",
     "husky": "^9.0.11",
     "jest": "^29.7.0",
-    "lint-staged": "^15.2.2"
+    "lint-staged": "^15.2.2",
+    "tsx": "^4.19.0"
   },
   "packageManager": "pnpm@9.1.0",
   "engines": {