76d55bf3e6
fix(manager/npm): keep workspace entries when massaging lockstep siblings ( #45786 )
2026-09-10 12:11:36 +00:00
9d74625d93
build(deps): update dependency prettier to v3.9.6 (main) ( #45815 )
...
* build(deps): update dependency prettier to v3.9.6
| datasource | package | from | to |
| ---------- | -------- | ----- | ----- |
| npm | prettier | 3.8.1 | 3.9.6 |
* chore: prettier fixes
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@mend.io >
2026-09-09 13:50:03 +00:00
2ee9a26675
fix(manager/npm): Harden .npmrc sanitization ( #44652 )
...
* fix(manager/npm): Parse npmrc settings before sanitizing
* Refactor NPMRC parsing and sanitization
* fix(manager/npm): Restore npmrc after artifact updates
* test(manager/npm): cover npmrc failure paths
* refactor(manager/npm): simplify npmrc parsing
* Update npmrc-parser.spec.ts
* refactor(manager/npm): clarify npmrc parsing
* refactor(manager/npm): make npmrc regexes RE2-compatible
* chore: retrigger CI
* Update lib/modules/manager/npm/npmrc-parser.ts
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
* fix(manager/npm): preserve captured npmrc line endings
---------
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2026-09-08 07:05:39 +00:00
05e1271376
test: use expect().resolves instead of awaiting inside expect ( #45672 )
...
Enables the vitest/prefer-expect-resolves oxlint rule and applies its
autofix across the spec suite.
2026-09-04 10:40:46 +00:00
f4fa861457
test(npm): replace file snapshots with explicit assertions ( #45658 )
...
* test(npm): replace file snapshots with explicit assertions
* test(npm): replace inline snapshots with explicit assertions
2026-09-04 06:36:41 +00:00
fa7abab44e
fix(manager/npm): massage out lockstep siblings pinning the replaced version ( #45085 )
...
* fix(manager/npm): massage out lockstep siblings pinning the replaced version
When updating an npm dependency, the package-lock massage deletes only
node_modules/<depName> before running npm install. Lockstep monorepo
siblings (e.g. vue -> @vue/server-renderer) that exact-pin the updated
dependency stay in the lock at the old version. npm then places the
fresh dependency into the hole, keeps the stale sibling (it still
satisfies its own demanding edges), and hard-fails with ERESOLVE on the
sibling's exact peer pin.
Also massage out lock entries whose dependencies/peerDependencies pin
the updated dependency to exactly the version being replaced, so npm
re-resolves the whole family in lockstep. The version guard keeps the
deletion precise: range pins and unrelated exact pins are untouched.
See discussion 44664.
* fix(manager/npm): address review feedback
- drop unreachable packages guard, wrap deletion loop instead
- flatten sibling check with early continue
- match exact pins per field, including optionalDependencies
- inline lockfile fixture, cover all three pin paths
2026-09-03 14:28:04 +00:00
ef60dfcdee
refactor(manager/npm): rename internal managerData.pnpmShrinkwrap to pnpmLockFile ( #45390 )
...
refactor(pnpm): rename managerData.pnpmShrinkwrap to pnpmLockFile
The field holds the path to pnpm-lock.yaml, and pnpm has not called that file
a shrinkwrap since v5, so the old name reads as a different artifact than the
one it points at.
Co-authored-by: Jamie Tanna <jamie.tanna@mend.io >
2026-09-01 13:09:21 +00:00
196101a6bb
chore(deps): update dependency oxlint-tsgolint to v0.25.0 (main) ( #44424 )
...
* chore(deps): update dependency oxlint-tsgolint to v0.25.0
| datasource | package | from | to |
| ---------- | --------------- | ------ | ------ |
| npm | oxlint-tsgolint | 0.23.0 | 0.25.0 |
* chore: fix new no-unnecessary-type-assertion findings
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Sebastian Poxhofer <sebastian.poxhofer@stedi.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-28 07:04:21 +00:00
ad0b59f8b7
refactor(oxlint): enable vitest/require-to-throw-message ( #44421 )
2026-07-07 17:47:04 +00:00
aac8365dd6
refactor(oxlint): enable vitest/prefer-snapshot-hint ( #44420 )
...
Add distinct hints to the multi-snapshot tests flagged by the rule
and regenerate the affected snapshot files, then re-enable the rule.
Part of #43845
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-07 16:35:22 +00:00
77758459e9
feat(manager/npm): pass --before to npm install when minimumReleaseAge is set ( #42552 )
...
* feat(manager/npm): pass --before to npm install when minimumReleaseAge is set
* fix tests
* replace regex with `ini` parse
2026-05-07 13:14:48 +00:00
0175429341
fix(manager/npm): apply minimumReleaseAgeExclude to pnpm catalog updates ( #42050 )
...
* Fix updating minimumReleaseAgeExclude with pnpm catalogs
* Try fixing coverage
2026-04-07 12:39:15 +00:00
2d1e57532f
refactor(types): rename lockFile to fileName in ArtifactError ( #41631 )
...
As `fileName` makes more sense (as it's not always a lock file we're
updating).
Also, if you set `fileName`, it would never actually output the
filename.
This renames the usages of `lockFile` to `fileName`.
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
2026-03-10 09:57:31 +00:00
9d857c1f68
refactor(lint): Organize imports with biome ( #40966 )
2026-02-06 13:40:01 +00:00
930cf6633c
refactor: Rewrite imports with .ts extensions ( #40700 )
...
fix: Additional vi.mock path corrections and prettier formatting
2026-01-26 22:48:17 +00:00
b4ed9e65d9
chore(deps): update dependency @vitest/eslint-plugin to v1.3.23 (main) ( #38702 )
...
* chore(deps): update dependency @vitest/eslint-plugin to v1.3.23
| datasource | package | from | to |
| ---------- | --------------------- | ------ | ------ |
| npm | @vitest/eslint-plugin | 1.3.16 | 1.3.23 |
* remove now unnecessary exceptions
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: secustor <sebastian@poxhofer.at >
2025-10-31 07:50:48 +00:00
1280fe4dc7
chore(deps): update dependency @vitest/eslint-plugin to v1.3.16 (main) ( #38502 )
...
* chore(deps): update dependency @vitest/eslint-plugin to v1.3.16
| datasource | package | from | to |
| ---------- | --------------------- | ------ | ------ |
| npm | @vitest/eslint-plugin | 1.3.13 | 1.3.16 |
* fix linting errors
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: secustor <sebastian@poxhofer.at >
2025-10-13 09:24:15 +00:00
a3616a496a
feat: add option skipArtifactsUpdate ( #35993 )
...
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
Co-authored-by: Rhys Arkins <rhys@arkins.net >
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
2025-08-11 09:13:56 +00:00
19c115c813
test: cleanup ( #34785 )
2025-03-13 17:52:09 +00:00
4f60a8b7fe
test: mock git globally ( #34783 )
2025-03-13 15:48:02 +00:00
6e5731b554
test: migrate from jest to vitest ( #34499 )
2025-02-26 14:18:38 +00:00
997c23502e
test: migrate to vitest ( #34475 )
...
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com >
2025-02-26 09:35:54 +00:00
e9cbd02865
fix(lockfilemaintenance): ensure isLockFileMaintenance on grouping ( #33971 )
2025-02-20 12:57:05 +00:00
55845508b6
chore(deps): update eslint monorepo to v9 (major) ( #33573 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2025-02-20 11:31:13 +00:00
b05f389c63
feat(npm)!: drop transitiveRemediation option ( #27985 )
...
This option only worked for npm <7, which is now EOL.
BREAKING CHANGE: Transitive remediation for npm <7 is no longer supported.
2024-07-25 15:28:16 +02:00
b357e4d21c
fix(npm): don't delete lockfiles early ( #28472 )
2024-04-18 06:22:03 +00:00
b652e853f2
feat(npm): support pnpm v9 ( #28470 )
...
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com >
2024-04-17 10:46:53 +00:00
88daaf5a89
feat(npm): fuzzy merge registries in .yarnrc.yml ( #26922 )
...
Co-authored-by: Rhys Arkins <rhys@arkins.net >
2024-01-30 08:21:14 +00:00
b69416ce17
refactor(prettier): Force trailing commas ( #25631 )
2023-11-07 15:50:29 +00:00
0c5df8ec46
fix(npm): re-enable lock file maintenance ( #25045 )
2023-10-05 07:12:34 +00:00
c11170fabb
feat(npm)!: drop explicit lerna support ( #24542 )
2023-09-27 14:29:07 +02:00
d81494ab13
fix: improve branch code coverage ( #24339 )
2023-09-17 06:56:34 +00:00
84a97a62fa
test(perf): improve test speed ( #24323 )
2023-09-08 11:40:04 +00:00
804114f716
fix(npm): handle null lockfile after update ( #23658 )
2023-09-06 09:37:03 +00:00
36e2b328bb
chore: update types reference
2023-08-15 11:31:15 +02:00
dd6c8e5147
feat: Move some Git commands behind a PlatformScm interface ( #19327 )
...
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2023-02-22 08:18:53 +00:00
5cdb9a86f0
refactor: move manager fields to managerData ( #20486 )
2023-02-18 15:06:03 +00:00
8c44d6bd10
fix(manger/npm): apply config.npmrc during extraction, not in post-update ( #19812 )
...
Co-authored-by: Rhys Arkins <rhys@arkins.net >
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
Closes https://github.com/renovatebot/renovate/issues/12891
2023-01-20 11:43:49 +00:00
582f77371c
chore(deps): update jest monorepo ( #17737 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2022-09-12 16:58:52 +02:00
189e39bcfc
fix(npm): issue with npm lerna deleting unrelated lockfile files ( #17233 )
2022-08-18 17:08:51 +00:00
f414cf9a54
fix(manager/npm): support yarn update without yarnPath ( #16988 )
2022-08-05 07:49:58 +00:00
83f67c27d5
refactor(fs): Rename getSubDirectory to getParentDir ( #16446 )
...
* refactor(fs): Rename `getSubDirectory` to `getParentDir`
* Add tests for `getSiblingFileName`
* fix
* fix
2022-07-07 06:44:21 +00:00
9f53724d90
feat(manager:npm): use local fs api ( #15294 )
2022-04-25 15:41:10 +02:00
dca3418bbd
refactor: lib/modules ( #14488 )
...
Moves datasource, manager, platform and versioning code from lib/ into new lib/modules/
BREAKING CHANGE: External tools must update paths to datasource, manager, platform and versioning
2022-03-04 09:04:02 +01:00
RahulGautamSingh