@adobe/sizewatcher 1.4.0 → 1.4.2

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## 1.4.2
+
+Fixes:
+
+- [#143](https://github.com/adobe/sizewatcher/pull/143) Handle empty or comments-only `.sizewatcher.yml` config file gracefully after js-yaml 5 upgrade
+- [#150](https://github.com/adobe/sizewatcher/pull/150) Fix tests on Node 26.8+ by replacing mock-fs with real temp directories
+
+Improvements:
+
+- [#143](https://github.com/adobe/sizewatcher/pull/143) Upgrade js-yaml to v5.4.1 (major version, includes security fixes)
+- [#139](https://github.com/adobe/sizewatcher/pull/139) [#140](https://github.com/adobe/sizewatcher/pull/140) Upgrade tmp to v0.2.7 (security fixes)
+- [#151](https://github.com/adobe/sizewatcher/pull/151) CI: update CircleCI config to version 2.1, README example uses `cimg/node:lts` image
+- [#152](https://github.com/adobe/sizewatcher/pull/152) Set `root: true` in ESLint config
+- CI: update GitHub actions to v7, disable fail-fast on node version matrix
+- Renovate: keep mocha 11 and nyc 17 to retain Node 18 support
+- Various dev dependency updates
+
+## 1.4.1
+
+Fixes:
+
+- [#136](https://github.com/adobe/sizewatcher/pull/136) [#116](https://github.com/adobe/sizewatcher/issues/116) npm_package: use `npm pack` instead of `npm publish --dry-run`
+
+Improvements:
+
+- [#123](https://github.com/adobe/sizewatcher/pull/123) Update tmp to v0.2.4 (security fix)
+- [#133](https://github.com/adobe/sizewatcher/pull/133) Update js-yaml to v4.1.1 (security fix)
+- [#128](https://github.com/adobe/sizewatcher/pull/128) Update debug to v4.4.3
+- [#130](https://github.com/adobe/sizewatcher/pull/130) Renovate: ignore whatwg-url from package.json overrides
+- [#134](https://github.com/adobe/sizewatcher/pull/134) Update mocha to v11.7.5
+
 ## 1.4.0
 
 Major changes:

package/README.md

@@ -1,7 +1,6 @@
 [![Version](https://img.shields.io/npm/v/@adobe/sizewatcher.svg)](https://npmjs.org/package/@adobe/sizewatcher)
 [![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](http://www.apache.org/licenses/LICENSE-2.0)
 [![Coverage Status](https://coveralls.io/repos/github/adobe/sizewatcher/badge.svg)](https://coveralls.io/github/adobe/sizewatcher)
-[![Travis](https://travis-ci.com/adobe/sizewatcher.svg?branch=main)](https://travis-ci.com/adobe/sizewatcher)
 [![CircleCI](https://circleci.com/gh/adobe/sizewatcher.svg?style=shield)](https://circleci.com/gh/adobe/sizewatcher)
 [![Github Actions Node.js CI Status](https://github.com/adobe/sizewatcher/workflows/Node.js%20CI/badge.svg)](https://github.com/adobe/sizewatcher/actions?query=workflow%3A%22Node.js+CI%22)
 [![CodeQL Status](https://github.com/adobe/sizewatcher/workflows/CodeQL/badge.svg)](https://github.com/adobe/sizewatcher/actions?query=workflow%3ACodeQL)
@@ -320,17 +319,22 @@ For [CircleCI](https://circleci.com) you need to
 Example `.circleci/config.yml`:
 
 ```yaml
-version: 2
+version: 2.1
 
 jobs:
   build:
     docker:
-      - image: circleci/node:14
+      - image: cimg/node:lts
     steps:
       - checkout
 
       # ---------- this runs sizewatcher ------------
       - run: npx @adobe/sizewatcher
+
+workflows:
+  build-and-test:
+    jobs:
+      - build
 ```
 
 ### Other CIs
@@ -512,13 +516,13 @@ Configuration: supports `dir`
 
 ### npm_package
 
-Compares the size of an npm package tarball by running `npm publish --dry-run`.
+Compares the size of an npm package tarball by running `npm pack --dry-run`.
 
 Name: `npm_package`
 
 Trigger: Runs if a `package.json` is found.
 
-Details: Prints the package contents and metadata using the output of `npm publish --dry-run`.
+Details: Prints the package contents and metadata using the output of `npm pack --dry-run`.
 
 ---
 Package contents:

package/lib/comparators/npm_package.js

@@ -30,8 +30,8 @@ async function getSize(dir) {
         };
     }
 
-    debug(`running npm publish --dry-run inside ${dir}...`);
-    let { stderr } = await exec("npm publish --dry-run", { cwd: dir });
+    debug(`running npm pack --dry-run inside ${dir}...`);
+    let { stderr } = await exec("npm pack --dry-run", { cwd: dir });
 
     stderr = stderr.replace(/npm notice /g, "");
 

package/lib/config.js

@@ -39,7 +39,9 @@ function load() {
 
     if (fs.existsSync(CONFIG_FILE)) {
         const data = fs.readFileSync(CONFIG_FILE, "utf8");
-        const loadedConfig = yaml.load(data) || {};
+        // js-yaml 5+ load() throws on empty input (including comments-only files),
+        // loadAll() returns [] instead and thus handles an empty config file gracefully
+        const loadedConfig = yaml.loadAll(data)[0] || {};
 
         config = deepmerge(DEFAULT_CONFIG, loadedConfig);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/sizewatcher",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "Warns if your pull requests introduce large size increases.",
   "main": "index.js",
   "bin": {
@@ -33,24 +33,23 @@
     "coveralls": "^3.1.0",
     "eslint": "^8.0.0",
     "mocha": "^11.0.0",
-    "mock-fs": "^5.5.0",
     "nyc": "^17.0.0",
     "supports-color": "^8.1.1"
   },
   "dependencies": {
     "@octokit/rest": "19.0.3",
-    "debug": "4.4.0",
+    "debug": "4.4.3",
     "deepmerge": "4.3.1",
     "get-folder-size": "5.0.0",
     "glob": "10.3.5",
-    "js-yaml": "4.1.0",
+    "js-yaml": "5.4.1",
     "pretty-bytes": "5.6.0",
     "require-dir": "1.2.0",
     "simple-git": "3.22.0",
-    "tmp": "0.2.3",
+    "tmp": "0.2.7",
     "xbytes": "1.9.1"
   },
   "overrides": {
-    "whatwg-url": "^14.0.0"
+    "whatwg-url": "14.2.0"
   }
 }