renovate

gsadmin/renovate

Fork 0

mirror of https://github.com/renovatebot/renovate.git synced 2026-10-25 15:01:49 +00:00

Files

T

History

Sebastian Poxhofer 4220c0fe36 feat(manager): share the .npmrc host-rule wrapper between bun, deno and npm (#46131 )

* refactor(manager): share the .npmrc host-rule wrapper between bun, deno and npm

Adds `withNpmrcHostRules()` to the npm manager utils: it injects the host-rule lines into a directory's `.npmrc`, runs the callback, and restores the original `.npmrc` from a `finally` block. bun, deno, the corepack `updateArtifacts()` and the three lock file loops in `post-update/index.ts` now share it instead of repeating getNpmrcContent / updateNpmrcContent / resetNpmrcContent.

Adds `readUpdatedBinaryLockFile()` to the shared manager utils for the `Buffer.compare` plus file-addition block that bun and deno both carried.

Behaviour changes:

- bun and deno now restore `.npmrc` when `exec()` throws. The reset previously ran only after a successful install, so a failed lock file update left the injected registry credentials in the working tree. Covered by "restores .npmrc when the install fails" in `bun/artifacts.spec.ts` and `deno/artifacts.spec.ts`.
- The npm, yarn and pnpm loops in `post-update/index.ts` now restore `.npmrc` when the loop body throws an `ExternalHostError`, for the same reason.
- deno reads `config.isLockFileMaintenance` instead of deriving the flag from `config.updateType === 'lockFileMaintenance'`. Grouped branches overwrite `updateType` while `isLockFileMaintenance` is set explicitly, so the flag is the reliable source. The deno specs were updated to set it.

* refactor(manager): let updateLockFile() compare binary lock files

A Buffer as the existing content makes the skeleton read, compare and
return the new lock file as bytes, so bun and deno use it instead of a
separate readUpdatedBinaryLockFile() helper.

* refactor(manager/devbox): update the lock file through updateLockFile()

devbox kept the same Buffer compare as bun and deno; the trace log before
returning the lock file goes away with it.

* fix(manager/devbox): type the command list explicitly

The list is now only read inside the run() closure, where TypeScript
cannot resolve an evolving array type, so tsc reported an implicit any.

2026-09-18 09:30:27 +00:00

artifacts.spec.ts

feat(manager): pass extracted constraints to updateArtifacts (#45826 )

2026-09-14 11:09:07 +00:00

artifacts.ts

feat(manager): share the .npmrc host-rule wrapper between bun, deno and npm (#46131 )

2026-09-18 09:30:27 +00:00

extract.spec.ts

refactor: Rewrite imports with .ts extensions (#40700 )

2026-01-26 22:48:17 +00:00

extract.ts

refactor: Rewrite imports with .ts extensions (#40700 )

2026-01-26 22:48:17 +00:00

index.ts

docs(manager): indicate where lockFileMaintenance runs external commands (#44914 )

2026-07-28 11:44:22 +00:00

readme.md

feat(devbox): Add support for various versioning apis (#39638 )

2025-12-12 07:36:20 +00:00

schema.ts

chore: migrate from zod/v3 to zod/v4 (#43691 )

2026-05-30 16:01:58 +00:00

tool-versioning.ts

refactor(lint): add types-location rule and enable it for lib/modules (#45497 )

2026-08-27 19:52:09 +00:00

types.ts

refactor(lint): add types-location rule and enable it for lib/modules (#45497 )

2026-08-27 19:52:09 +00:00

readme.md

Used for updating devbox projects.

Devbox is a tool for creating isolated, reproducible development environments that run anywhere.

It uses nix packages sourced from the devbox package registry.

Package versioning

Some packages in the devbox registry don't follow the basic versioning we have set up. We have allowed for defining an versioning API override within tool-versioning.ts.