From 086aef463d0e7465deffaa88827a59949ddd81cd Mon Sep 17 00:00:00 2001 From: Frank Mueller Date: Sun, 15 Mar 2026 12:15:19 -0700 Subject: [PATCH] Upgrade npm-check-updates from v16 to v17 in build-cli MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ncu@17 is fully bundled with zero dependencies, eliminating the transitive tar 6.x chain (ncu@16 → pacote → cacache → tar 6.x). Code changes: - Bump npm-check-updates from ^16.14.20 to ^17.1.18 - Remove deep type imports (build/src/types/) that no longer exist in v17 - Replace Index cast with equivalent Record Co-Authored-By: Claude Opus 4.6 (1M context) --- build-tools/packages/build-cli/package.json | 2 +- build-tools/packages/build-cli/src/library/package.ts | 4 +--- build-tools/pnpm-lock.yaml | 11 +++++++++-- 3 files changed, 11 insertions(+), 6 deletions(-) diff --git a/build-tools/packages/build-cli/package.json b/build-tools/packages/build-cli/package.json index f217862ffea4..527b8ecdedb1 100644 --- a/build-tools/packages/build-cli/package.json +++ b/build-tools/packages/build-cli/package.json @@ -123,7 +123,7 @@ "mdast-util-heading-range": "^4.0.0", "mdast-util-to-string": "^4.0.0", "minimatch": "^10.1.1", - "npm-check-updates": "^16.14.20", + "npm-check-updates": "^17.1.18", "oclif": "^4.22.50", "picocolors": "^1.1.1", "prettier": "~3.2.5", diff --git a/build-tools/packages/build-cli/src/library/package.ts b/build-tools/packages/build-cli/src/library/package.ts index 6b006d18512c..b2d452b36ff5 100644 --- a/build-tools/packages/build-cli/src/library/package.ts +++ b/build-tools/packages/build-cli/src/library/package.ts @@ -25,8 +25,6 @@ import execa from "execa"; import { readJsonSync } from "fs-extra/esm"; import latestVersion from "latest-version"; import ncu from "npm-check-updates"; -import type { Index } from "npm-check-updates/build/src/types/IndexType.js"; -import type { VersionSpec } from "npm-check-updates/build/src/types/VersionSpec.js"; import * as semver from "semver"; import { AllPackagesSelectionCriteria, @@ -159,7 +157,7 @@ export async function npmCheckUpdates( jsonUpgraded: true, silent: true, peer: true, - })) as Index; + })) as Record; if (typeof result !== "object") { throw new TypeError(`Expected an object: ${typeof result}`); diff --git a/build-tools/pnpm-lock.yaml b/build-tools/pnpm-lock.yaml index e02cd8530bf8..1a6122cfa624 100644 --- a/build-tools/pnpm-lock.yaml +++ b/build-tools/pnpm-lock.yaml @@ -215,8 +215,8 @@ importers: specifier: ^10.1.1 version: 10.1.1 npm-check-updates: - specifier: ^16.14.20 - version: 16.14.20 + specifier: ^17.1.18 + version: 17.1.18 oclif: specifier: ^4.22.50 version: 4.22.50(@types/node@22.19.1) @@ -4600,6 +4600,11 @@ packages: engines: {node: '>=14.14'} hasBin: true + npm-check-updates@17.1.18: + resolution: {integrity: sha512-bkUy2g4v1i+3FeUf5fXMLbxmV95eG4/sS7lYE32GrUeVgQRfQEk39gpskksFunyaxQgTIdrvYbnuNbO/pSUSqw==} + engines: {node: ^18.18.0 || >=20.0.0, npm: '>=8.12.1'} + hasBin: true + npm-install-checks@6.1.1: resolution: {integrity: sha512-dH3GmQL4vsPtld59cOn8uY0iOqRmqKvV+DLGwNXV/Q7MDgD2QfOADWd/mFXcIE5LVhYYGjA3baz6W9JneqnuCw==} engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0} @@ -10574,6 +10579,8 @@ snapshots: - bluebird - supports-color + npm-check-updates@17.1.18: {} + npm-install-checks@6.1.1: dependencies: semver: 7.7.3