Skip to content
This repository has been archived by the owner on Jun 22, 2024. It is now read-only.

chore(Renovate): ⬆️ Update project monorepo tools (major) #465

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(Renovate): ⬆️ Update project monorepo tools (major) #465

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 28, 2024 •
edited
Loading

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
husky 8.0.3 -> 9.0.11 age adoption passing confidence
turbo (source) 1.11.2 -> 2.0.4 age adoption passing confidence

Release Notes

typicode/husky (husky)

v9.0.11

Compare Source

v9.0.10

Compare Source

v9.0.9

Compare Source

v9.0.8

Compare Source

v9.0.7

Compare Source

v9.0.6

Compare Source

v9.0.5

Compare Source

v9.0.4

Compare Source

v9.0.3

Compare Source

v9.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: typicode/husky@v9.0.1...v9.0.2

v9.0.1

Compare Source

Kicking off the year with an exciting update!

TLDR;

Improved user experience and a (even) smaller package size while packing in more features!

👋 By the Way

I'm available for remote work (Front-end/Back-end mainly JS/TS but open to other stacks Rails, Go, Elixir). You can contact me at my mail: typicode at gmail 🙂

Introducing husky init

Adding husky to a project is now easier than ever. Although the installation process was straightforward, it often required consulting the documentation.

v8
npm pkg set scripts.prepare="husky install"
npm run prepare
npx husky add .husky/pre-commit "npm test"
v9
npx husky init

Adding a New Hook

Adding a hook is now as simple as creating a file. This can be accomplished using your favorite editor, a script or a basic echo command.

v8
npx husky add  .husky/pre-commit "npm test"
git add --chmod=+x .husky/pre-commit # On Windows
v9
echo "npm test" > .husky/pre-commit

Further Size Reduction

v8 was already the most compact Git hooks manager at approximately 6kB.

v9 takes this a step further, reducing the size to just 3kB, likely making it the smallest devDependency in your toolkit.

To give you an idea of how small it is, the biggest file in the project is the MIT license 😄

More to Come

Additional features are in the pipeline for v9. Stay tuned 🙌

Other Changes

  • Enhanced security with CI and npm --provenance for safer publishing.
  • Added $XDG_CONFIG_HOME support. Move ~/.huskyrc to ~/.config/husky/init.sh for centralized configuration.
  • Fixed permission issue for Windows-created hooks; they no longer need to be executable.
  • Removed husky install. Use husky or husky some/dir for the same functionality (deprecation notice to be added).
  • Modified behavior when .git is missing; it now triggers a warning instead of failure.
  • Replaced HUSKY_DEBUG=1 with HUSKY=2 for debugging.
  • Updated the Husky API for module usage.
  • Transitioned to ESM for module usage.
  • Dropped support for Node 14 and 16.
  • Revamped docs.

How to Migrate

v9 is backward compatible with v8, allowing you to freely upgrade and migrate your hooks later.

package.json

{
  "scripts": {
-   "prepare": "husky install"
+   "prepare": "husky"
  }
}

.husky/pre-commit

- #!/usr/bin/env sh
- . "$(dirname -- "$0")/_/husky.sh"
npm test
vercel/turbo (turbo)

v2.0.4: Turborepo v2.0.4

Compare Source

What's Changed

create-turbo
@​turbo/codemod
Examples
Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.0.3...v2.0.4

v2.0.3: Turborepo v2.0.3

Compare Source

What's Changed

turbo-ignore
Changelog

Full Changelog: vercel/turborepo@v2.0.2...v2.0.3

v2.0.2: Turborepo v2.0.2

Compare Source

What's Changed

@​turbo/codemod
Examples
Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.0.1...v2.0.2

v2.0.1: Turborepo v2.0.1

Compare Source

Full Changelog: vercel/turborepo@v2.0.0...v2.0.1

v2.0.0: Turborepo v2.0.0

Compare Source

What's Changed

Upgrade guide: https://turbo.build/repo/docs/crafting-your-repository/upgrading

@​turbo/codemod
Changelog
Breaking
Other

Full Changelog: vercel/turborepo@v1.13.4...v2.0.0

v1.13.4: Turborepo v1.13.4

Compare Source

What's Changed

Docs
turbo-ignore
@​turbo/repository
Examples
Changelog

New Contributors

Full Changelog: vercel/turborepo@v1.13.3...v1.13.4

v1.13.3

Compare Source

v1.13.2

Compare Source

v1.13.1

Compare Source

v1.13.0

Compare Source

v1.12.5

Compare Source

v1.12.4: Turborepo v1.12.4

Compare Source

What's Changed

Docs
create-turbo
@​turbo/repository - ⚠️ Alpha - Expect Breaking Changes
Changelog

New Contributors

Full Changelog: vercel/turborepo@v1.12.3...v1.12.4

v1.12.3: Turborepo v1.12.3

Compare Source

What's Changed

Docs
create-turbo
Examples
Changelog

New Contributors

Full Changelog: vercel/turborepo@v1.12.2...v1.12.3

v1.12.2: Turborepo v1.12.2

Compare Source

What's Changed

create-turbo
Changelog

Full Changelog: vercel/turborepo@v1.12.1...v1.12.2

v1.12.1: Turborepo v1.12.1

Compare Source

What's Changed

Docs
create-turbo
Changelog

New Contributors

Full Changelog: vercel/turborepo@v1.12.0...v1.12.1

v1.12.0: Turborepo v1.12.0

Compare Source

What's Changed

Docs

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,on sunday,before 5am every weekday" in timezone Asia/Taipei, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added 🧩 dependencies Related to the dependencies 🧰 monorepo Related to the monorepo management labels Jan 28, 2024
@changeset-bot changeset-bot
Copy link

changeset-bot bot commented Jan 28, 2024 •
edited
Loading

⚠️ No Changeset found

Latest commit: 884b158

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codeclimate CodeClimate
Copy link

codeclimate bot commented Jan 28, 2024 •
edited
Loading

Code Climate has analyzed commit 884b158 and detected 0 issues on this pull request.

View more on Code Climate.

@socket-security Socket Security
Copy link

socket-security bot commented Jan 28, 2024 •
edited
Loading

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/[email protected] environment, filesystem, shell 0 3.61 kB typicode
npm/[email protected] None 0 0 B

🚮 Removed packages: npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

@github-actions GitHub Actions
Copy link
Contributor

github-actions bot commented Jan 28, 2024 •
edited
Loading

Size Change: 0 B

Total Size: 185 kB

ℹ️ View Unchanged
Filename Size
./packages/browserslist/dist/browsers.cjs 175 B
./packages/browserslist/dist/browsers.js 168 B
./packages/browserslist/dist/node.cjs 229 B
./packages/browserslist/dist/node.js 219 B
./packages/constants/dist/main.cjs 275 B
./packages/constants/dist/main.js 241 B
./packages/eslint/dist/index.cjs 3.76 kB
./packages/lint-staged/dist/checks.js 180 B
./packages/lint-staged/dist/chunk-BCQS74IR.js 225 B
./packages/lint-staged/dist/chunk-GVLGZKET.js 225 B
./packages/lint-staged/dist/chunk-GYAFE257.js 268 B
./packages/lint-staged/dist/chunk-I5CYDEBO.js 261 B
./packages/lint-staged/dist/chunk-I636WRXW.js 209 B
./packages/lint-staged/dist/chunk-UXS7MS47.js 251 B
./packages/lint-staged/dist/chunk-XF6WJRIQ.js 426 B
./packages/lint-staged/dist/chunk-ZUNU3G5W.js 322 B
./packages/lint-staged/dist/groups/code-format.js 116 B
./packages/lint-staged/dist/groups/eslint.js 106 B
./packages/lint-staged/dist/groups/markdown.js 111 B
./packages/lint-staged/dist/groups/package-json.js 134 B
./packages/lint-staged/dist/groups/stylesheets.js 117 B
./packages/lint-staged/dist/groups/tests.js 105 B
./packages/lint-staged/dist/groups/typescript.js 114 B
./packages/lint-staged/dist/main.js 437 B
./packages/markdownlint/dist/index.json 304 B
./packages/prettier/dist/index.js 71.8 kB
./packages/prettier/dist/main-ZBOLTEWM.js 9.15 kB
./packages/stylelint/dist/index.cjs 74.5 kB
./packages/stylelint/dist/main-HZOLMS6I.cjs 9.18 kB
./packages/syncpack/dist/index.js 509 B
./packages/tsup/dist/main.js 345 B
./packages/utils/dist/array.cjs 259 B
./packages/utils/dist/array.js 136 B
./packages/utils/dist/chunk-2EUY5ROG.cjs 741 B
./packages/utils/dist/chunk-AXQUIOJB.cjs 686 B
./packages/utils/dist/chunk-DZORIKCW.js 707 B
./packages/utils/dist/chunk-FFLUHYOO.cjs 310 B
./packages/utils/dist/chunk-I5GJA7OJ.js 291 B
./packages/utils/dist/chunk-NNY7KIY2.js 263 B
./packages/utils/dist/chunk-NTYEA6KO.cjs 672 B
./packages/utils/dist/chunk-RHWTXGRV.js 300 B
./packages/utils/dist/chunk-WYH6VPJI.cjs 289 B
./packages/utils/dist/chunk-XPB3OUOB.js 592 B
./packages/utils/dist/chunk-XRDZ2PSF.js 516 B
./packages/utils/dist/chunk-ZXXKV2AL.cjs 324 B
./packages/utils/dist/extensions.cjs 472 B
./packages/utils/dist/extensions.js 271 B
./packages/utils/dist/has-module.cjs 227 B
./packages/utils/dist/has-module.js 125 B
./packages/utils/dist/main.cjs 836 B
./packages/utils/dist/main.js 493 B
./packages/utils/dist/merge-configs.cjs 234 B
./packages/utils/dist/merge-configs.js 131 B
./packages/utils/dist/paths.cjs 300 B
./packages/utils/dist/paths.js 180 B
./packages/utils/dist/scope.cjs 316 B
./packages/utils/dist/scope.js 163 B
./packages/vitest/dist/base.js 128 B
./packages/vitest/dist/chunk-T256VEOW.js 258 B
./packages/vitest/dist/chunk-XZHYECMR.js 207 B
./packages/vitest/dist/main.js 158 B
./packages/vitest/dist/with-coverage.js 148 B

compressed-size-action

@renovate renovate bot force-pushed the renovate/major-project-monorepo-tools branch 4 times, most recently from 41a850a to 3c1d8ad Compare February 1, 2024 17:09
@renovate renovate bot force-pushed the renovate/major-project-monorepo-tools branch 12 times, most recently from b2fb1a2 to 4554eb0 Compare February 11, 2024 02:50
@renovate renovate bot force-pushed the renovate/major-project-monorepo-tools branch from 4554eb0 to 971b12a Compare February 17, 2024 01:35
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@renovate renovate bot force-pushed the renovate/major-project-monorepo-tools branch from 971b12a to 9c993d9 Compare June 7, 2024 21:36
@renovate renovate bot changed the title chore(Renovate): ⬆️ Update dependency husky to v9 chore(Renovate): ⬆️ Update project monorepo tools (major) Jun 7, 2024
@renovate renovate bot force-pushed the renovate/major-project-monorepo-tools branch 2 times, most recently from 493330d to 56f8df9 Compare June 10, 2024 01:29
@socket-security Socket Security
Copy link

socket-security bot commented Jun 10, 2024 •
edited
Loading

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Install scripts npm/[email protected]
  • Install script: postinstall
  • Source: node ./bin/postinstall-script.js

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@renovate renovate bot force-pushed the renovate/major-project-monorepo-tools branch from 56f8df9 to 884b158 Compare June 17, 2024 19:11
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
No reviews
Assignees
No one assigned
Labels
🧩 dependencies Related to the dependencies 🧰 monorepo Related to the monorepo management
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants