@aws/nx-plugin 1.0.11 → 1.0.12

package/src/utils/version-lockstep/exact-dependency.js

@@ -1,7 +1,8 @@
 /**
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
- */ import { coerce, satisfies, valid } from "semver";
+ */ import { readJson, writeJson } from "@nx/devkit";
+import { coerce, satisfies, valid } from "semver";
 /** The bare version in a pin, whatever range syntax it was written with. */ const bare = (version)=>coerce(version, {
         includePrerelease: true
     })?.version;
@@ -132,5 +133,81 @@ const message = (error)=>error instanceof Error ? error.message : String(error);
     }
     return notes;
 };
+/** Reads each release's field once; a failed read fails the same way when repeated. */ export const memoizeLookup = (lookup)=>{
+    const cache = new Map();
+    return async (name, version, field)=>{
+        const key = `${name}@${version} ${field}`;
+        let cached = cache.get(key);
+        if (!cached) {
+            cached = lookup(name, version, field);
+            cache.set(key, cached);
+        }
+        return {
+            ...await cached
+        };
+    };
+};
+/** Where the update records what each rule's source release depends on. */ export const EXACT_DEPENDENCY_SOURCES_PATH = 'packages/nx-plugin/exact-dependency-sources.json';
+/**
+ * What each rule's source, at the version being written, depends on for its
+ * followers. Reuses `recorded` for a source that did not move and reads the
+ * registry otherwise. Throws when a follower being written is not that version,
+ * or when the source's dependencies can't be read or omit a follower.
+ */ export const verifyExactDependencies = async (rules, versions, recorded, lookup)=>{
+    const sources = {};
+    const written = (name)=>{
+        const version = versions[name];
+        return version === undefined ? undefined : bare(version);
+    };
+    for (const { source, followers, reason } of rules){
+        const sourceVersion = written(source);
+        if (sourceVersion === undefined) continue;
+        let dependencies;
+        if (recorded[source]?.version === sourceVersion) {
+            dependencies = recorded[source].dependencies;
+        } else {
+            try {
+                dependencies = await lookup(source, sourceVersion, 'dependencies');
+            } catch (error) {
+                throw new Error(`could not read the dependencies of ${source} ${sourceVersion} (${message(error)})`);
+            }
+        }
+        const missing = followers.filter((name)=>!dependencies[name]);
+        if (missing.length > 0) {
+            throw new Error(`${source} ${sourceVersion} does not depend on ${missing.join(', ')}`);
+        }
+        const expected = Object.fromEntries(followers.map((name)=>{
+            const declared = dependencies[name];
+            return [
+                name,
+                valid(declared) ?? bare(declared) ?? declared
+            ];
+        }));
+        const differing = followers.filter((name)=>written(name) !== expected[name]);
+        if (differing.length > 0) {
+            throw new Error(`${differing.map((name)=>`${name} ${written(name)}`).join(', ')} but ${source} ${sourceVersion} depends on ${differing.map((name)=>`${name} ${expected[name]}`).join(', ')}: ${reason}`);
+        }
+        sources[source] = {
+            version: sourceVersion,
+            dependencies: expected
+        };
+    }
+    return sources;
+};
+/**
+ * Record in `EXACT_DEPENDENCY_SOURCES_PATH` what the sources being written depend
+ * on, which `versions.spec.ts` checks the pins against. Throws as
+ * `verifyExactDependencies` does, before anything is written.
+ * @returns paths written, for the update report
+ */ export const writeExactDependencySources = async (tree, rules, versions, lookup)=>{
+    const path = EXACT_DEPENDENCY_SOURCES_PATH;
+    const recorded = tree.exists(path) ? readJson(tree, path) : {};
+    const sources = await verifyExactDependencies(rules, versions, recorded, lookup);
+    if (JSON.stringify(sources) === JSON.stringify(recorded)) return [];
+    writeJson(tree, path, sources);
+    return [
+        path
+    ];
+};
 
 //# sourceMappingURL=exact-dependency.js.map

package/src/utils/version-lockstep/exact-dependency.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/version-lockstep/exact-dependency.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { coerce, satisfies, valid } from 'semver';\nimport type {\n  IVersionedDep,\n  LockstepNote,\n  ProposedVersions,\n} from './lockstep.js';\n\n/**\n * Pins that must equal the exact `dependencies` a published release of another\n * pin declares, for packages that don't share a version line.\n */\nexport interface ExactDependencyPin {\n  /** The pin whose published `dependencies` the followers take. */\n  source: IVersionedDep;\n  /** Pins set to exactly the version `source` depends on. */\n  followers: readonly [IVersionedDep, ...IVersionedDep[]];\n  /** Pins whose published `peerDependencies` must accept the followers. */\n  peers: readonly IVersionedDep[];\n  /** Why the followers must match, for the update's PR. */\n  reason: string;\n}\n\n/** The manifest fields the rule reads. */\nexport type ManifestField = 'dependencies' | 'peerDependencies';\n\n/**\n * Reads one field of a published release's manifest, for example from\n * `https://registry.npmjs.org/<name>/<version>`. Resolves to `{}` when the\n * release has no such field, and rejects when the release can't be read.\n */\nexport type DependencyLookup = (\n  name: string,\n  version: string,\n  field: ManifestField,\n) => Promise<Record<string, string>>;\n\n/** Groups of pins held at one version, as in `LOCKSTEP_GROUPS`. */\ntype Groups = readonly (readonly string[])[];\n\n/** The version each pin must take, or why there isn't one. */\ntype Targets = Map<IVersionedDep, string> | { held: string };\n\n/** The bare version in a pin, whatever range syntax it was written with. */\nconst bare = (version: string): string | undefined =>\n  coerce(version, { includePrerelease: true })?.version;\n\nconst message = (error: unknown): string =>\n  error instanceof Error ? error.message : String(error);\n\n/**\n * The versions the source's `dependencies` give its followers, and the version\n * of the follower each group mate is grouped with, so the group stays in step.\n */\nconst targetsFrom = (\n  { source, followers }: ExactDependencyPin,\n  sourceVersion: string,\n  dependencies: Record<string, string>,\n  groups: Groups,\n  current: Readonly<ProposedVersions>,\n): Targets => {\n  const missing = followers.filter((name) => !dependencies[name]);\n  if (missing.length > 0) {\n    return {\n      held: `${source} ${sourceVersion} does not depend on ${missing.join(', ')}`,\n    };\n  }\n\n  // Releases so far declare exact versions. If one declares a range, take its\n  // bare version: our pins are exact, and a single copy needs that version.\n  const targets = new Map<IVersionedDep, string>(\n    followers.map((name) => {\n      const declared = dependencies[name];\n      return [name, valid(declared) ?? bare(declared) ?? declared];\n    }),\n  );\n\n  for (const group of groups) {\n    const inGroup = followers.filter((name) => group.includes(name));\n    if (inGroup.length === 0) continue;\n    const version = targets.get(inGroup[0]) as string;\n    const disagreeing = inGroup.find((name) => targets.get(name) !== version);\n    if (disagreeing) {\n      return {\n        held: `${source} ${sourceVersion} depends on ${inGroup[0]} ${version} but ${disagreeing} ${targets.get(disagreeing)}, which must move in step`,\n      };\n    }\n    for (const name of group as readonly IVersionedDep[]) {\n      if (!targets.has(name) && current[name] !== undefined) {\n        targets.set(name, version);\n      }\n    }\n  }\n\n  return targets;\n};\n\n/** Why the peers being written would reject the targets, if they would. */\nconst unmetPeers = async (\n  { source, peers }: ExactDependencyPin,\n  sourceVersion: string,\n  targets: Map<IVersionedDep, string>,\n  written: (name: IVersionedDep) => string | undefined,\n  lookup: DependencyLookup,\n): Promise<string | undefined> => {\n  const unmet: string[] = [];\n  for (const peer of peers) {\n    const peerVersion = written(peer);\n    if (peerVersion === undefined) continue;\n    let ranges: Record<string, string>;\n    try {\n      ranges = await lookup(peer, peerVersion, 'peerDependencies');\n    } catch (error) {\n      return `could not read the peerDependencies of ${peer} ${peerVersion} (${message(error)})`;\n    }\n    for (const [name, version] of targets) {\n      const range = ranges[name];\n      if (range && !satisfies(version, range, { includePrerelease: true })) {\n        unmet.push(\n          `${peer} ${peerVersion} requires ${name} ${range}, but ${source} ${sourceVersion} needs ${version}`,\n        );\n      }\n    }\n  }\n  return unmet.length > 0 ? unmet.join('; ') : undefined;\n};\n\n/**\n * Set each rule's followers, and their lockstep group mates, to the exact\n * versions the source being written depends on. Runs after the lockstep, which\n * can only hold a group back and so can't move one up to what the source needs.\n *\n * Mutates `proposed`, which holds versions not yet written anywhere. When a peer\n * would reject the result, or a manifest can't be read, every pin the rule covers\n * is put back to `current` for this run instead. Returns a note for each pin set\n * and each rule held, so the reason reaches the update's PR.\n */\nexport const pinToExactDependencies = async (\n  rules: readonly ExactDependencyPin[],\n  groups: Groups,\n  current: Readonly<ProposedVersions>,\n  proposed: ProposedVersions,\n  lookup: DependencyLookup,\n): Promise<LockstepNote[]> => {\n  const notes: LockstepNote[] = [];\n  const written = (name: IVersionedDep): string | undefined => {\n    const version = proposed[name] ?? current[name];\n    return version === undefined ? undefined : bare(version);\n  };\n\n  for (const rule of rules) {\n    const { source, followers, peers, reason } = rule;\n    const mates = groups\n      .filter((group) => followers.some((name) => group.includes(name)))\n      .flat() as IVersionedDep[];\n    const covered = [\n      ...new Set([source, ...followers, ...mates, ...peers]),\n    ].filter((name) => current[name] !== undefined);\n\n    // Every pin the rule covers goes back to its current version, so nothing\n    // the rule could not check is written.\n    const hold = (why: string) => {\n      const notTaken = covered.filter(\n        (name) =>\n          proposed[name] !== undefined && proposed[name] !== current[name],\n      );\n      notes.push({\n        name: source,\n        note:\n          `${source} held at ${current[source]}, with ${covered\n            .filter((name) => name !== source)\n            .join(', ')} at their current versions` +\n          (notTaken.length > 0\n            ? ` (not taken: ${notTaken\n                .map((name) => `${name} ${proposed[name]}`)\n                .join(', ')})`\n            : '') +\n          `: ${why}`,\n      });\n      for (const name of covered) proposed[name] = current[name];\n    };\n\n    const sourceVersion = written(source);\n    if (sourceVersion === undefined) continue;\n\n    let dependencies: Record<string, string>;\n    try {\n      dependencies = await lookup(source, sourceVersion, 'dependencies');\n    } catch (error) {\n      hold(\n        `could not read the dependencies of ${source} ${sourceVersion} (${message(error)})`,\n      );\n      continue;\n    }\n\n    const targets = targetsFrom(\n      rule,\n      sourceVersion,\n      dependencies,\n      groups,\n      current,\n    );\n    if (!(targets instanceof Map)) {\n      hold(targets.held);\n      continue;\n    }\n\n    const unmet = await unmetPeers(\n      rule,\n      sourceVersion,\n      targets,\n      written,\n      lookup,\n    );\n    if (unmet) {\n      hold(unmet);\n      continue;\n    }\n\n    for (const [name, version] of targets) {\n      const before = proposed[name] ?? current[name];\n      if (before === version) continue;\n      proposed[name] = version;\n      notes.push({\n        name,\n        note: `${name} set to ${version} (${before} proposed) to match the exact dependencies of ${source} ${sourceVersion}: ${reason}`,\n      });\n    }\n  }\n\n  return notes;\n};\n"],"names":["coerce","satisfies","valid","bare","version","includePrerelease","message","error","Error","String","targetsFrom","source","followers","sourceVersion","dependencies","groups","current","missing","filter","name","length","held","join","targets","Map","map","declared","group","inGroup","includes","get","disagreeing","find","has","undefined","set","unmetPeers","peers","written","lookup","unmet","peer","peerVersion","ranges","range","push","pinToExactDependencies","rules","proposed","notes","rule","reason","mates","some","flat","covered","Set","hold","why","notTaken","note","before"],"mappings":"AAAA;;;CAGC,GACD,SAASA,MAAM,EAAEC,SAAS,EAAEC,KAAK,QAAQ,SAAS;AA0ClD,0EAA0E,GAC1E,MAAMC,OAAO,CAACC,UACZJ,OAAOI,SAAS;QAAEC,mBAAmB;IAAK,IAAID;AAEhD,MAAME,UAAU,CAACC,QACfA,iBAAiBC,QAAQD,MAAMD,OAAO,GAAGG,OAAOF;AAElD;;;CAGC,GACD,MAAMG,cAAc,CAClB,EAAEC,MAAM,EAAEC,SAAS,EAAsB,EACzCC,eACAC,cACAC,QACAC;IAEA,MAAMC,UAAUL,UAAUM,MAAM,CAAC,CAACC,OAAS,CAACL,YAAY,CAACK,KAAK;IAC9D,IAAIF,QAAQG,MAAM,GAAG,GAAG;QACtB,OAAO;YACLC,MAAM,GAAGV,OAAO,CAAC,EAAEE,cAAc,oBAAoB,EAAEI,QAAQK,IAAI,CAAC,OAAO;QAC7E;IACF;IAEA,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAMC,UAAU,IAAIC,IAClBZ,UAAUa,GAAG,CAAC,CAACN;QACb,MAAMO,WAAWZ,YAAY,CAACK,KAAK;QACnC,OAAO;YAACA;YAAMjB,MAAMwB,aAAavB,KAAKuB,aAAaA;SAAS;IAC9D;IAGF,KAAK,MAAMC,SAASZ,OAAQ;QAC1B,MAAMa,UAAUhB,UAAUM,MAAM,CAAC,CAACC,OAASQ,MAAME,QAAQ,CAACV;QAC1D,IAAIS,QAAQR,MAAM,KAAK,GAAG;QAC1B,MAAMhB,UAAUmB,QAAQO,GAAG,CAACF,OAAO,CAAC,EAAE;QACtC,MAAMG,cAAcH,QAAQI,IAAI,CAAC,CAACb,OAASI,QAAQO,GAAG,CAACX,UAAUf;QACjE,IAAI2B,aAAa;YACf,OAAO;gBACLV,MAAM,GAAGV,OAAO,CAAC,EAAEE,cAAc,YAAY,EAAEe,OAAO,CAAC,EAAE,CAAC,CAAC,EAAExB,QAAQ,KAAK,EAAE2B,YAAY,CAAC,EAAER,QAAQO,GAAG,CAACC,aAAa,yBAAyB,CAAC;YAChJ;QACF;QACA,KAAK,MAAMZ,QAAQQ,MAAmC;YACpD,IAAI,CAACJ,QAAQU,GAAG,CAACd,SAASH,OAAO,CAACG,KAAK,KAAKe,WAAW;gBACrDX,QAAQY,GAAG,CAAChB,MAAMf;YACpB;QACF;IACF;IAEA,OAAOmB;AACT;AAEA,yEAAyE,GACzE,MAAMa,aAAa,OACjB,EAAEzB,MAAM,EAAE0B,KAAK,EAAsB,EACrCxB,eACAU,SACAe,SACAC;IAEA,MAAMC,QAAkB,EAAE;IAC1B,KAAK,MAAMC,QAAQJ,MAAO;QACxB,MAAMK,cAAcJ,QAAQG;QAC5B,IAAIC,gBAAgBR,WAAW;QAC/B,IAAIS;QACJ,IAAI;YACFA,SAAS,MAAMJ,OAAOE,MAAMC,aAAa;QAC3C,EAAE,OAAOnC,OAAO;YACd,OAAO,CAAC,uCAAuC,EAAEkC,KAAK,CAAC,EAAEC,YAAY,EAAE,EAAEpC,QAAQC,OAAO,CAAC,CAAC;QAC5F;QACA,KAAK,MAAM,CAACY,MAAMf,QAAQ,IAAImB,QAAS;YACrC,MAAMqB,QAAQD,MAAM,CAACxB,KAAK;YAC1B,IAAIyB,SAAS,CAAC3C,UAAUG,SAASwC,OAAO;gBAAEvC,mBAAmB;YAAK,IAAI;gBACpEmC,MAAMK,IAAI,CACR,GAAGJ,KAAK,CAAC,EAAEC,YAAY,UAAU,EAAEvB,KAAK,CAAC,EAAEyB,MAAM,MAAM,EAAEjC,OAAO,CAAC,EAAEE,cAAc,OAAO,EAAET,SAAS;YAEvG;QACF;IACF;IACA,OAAOoC,MAAMpB,MAAM,GAAG,IAAIoB,MAAMlB,IAAI,CAAC,QAAQY;AAC/C;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMY,yBAAyB,OACpCC,OACAhC,QACAC,SACAgC,UACAT;IAEA,MAAMU,QAAwB,EAAE;IAChC,MAAMX,UAAU,CAACnB;QACf,MAAMf,UAAU4C,QAAQ,CAAC7B,KAAK,IAAIH,OAAO,CAACG,KAAK;QAC/C,OAAOf,YAAY8B,YAAYA,YAAY/B,KAAKC;IAClD;IAEA,KAAK,MAAM8C,QAAQH,MAAO;QACxB,MAAM,EAAEpC,MAAM,EAAEC,SAAS,EAAEyB,KAAK,EAAEc,MAAM,EAAE,GAAGD;QAC7C,MAAME,QAAQrC,OACXG,MAAM,CAAC,CAACS,QAAUf,UAAUyC,IAAI,CAAC,CAAClC,OAASQ,MAAME,QAAQ,CAACV,QAC1DmC,IAAI;QACP,MAAMC,UAAU;eACX,IAAIC,IAAI;gBAAC7C;mBAAWC;mBAAcwC;mBAAUf;aAAM;SACtD,CAACnB,MAAM,CAAC,CAACC,OAASH,OAAO,CAACG,KAAK,KAAKe;QAErC,yEAAyE;QACzE,uCAAuC;QACvC,MAAMuB,OAAO,CAACC;YACZ,MAAMC,WAAWJ,QAAQrC,MAAM,CAC7B,CAACC,OACC6B,QAAQ,CAAC7B,KAAK,KAAKe,aAAac,QAAQ,CAAC7B,KAAK,KAAKH,OAAO,CAACG,KAAK;YAEpE8B,MAAMJ,IAAI,CAAC;gBACT1B,MAAMR;gBACNiD,MACE,GAAGjD,OAAO,SAAS,EAAEK,OAAO,CAACL,OAAO,CAAC,OAAO,EAAE4C,QAC3CrC,MAAM,CAAC,CAACC,OAASA,SAASR,QAC1BW,IAAI,CAAC,MAAM,0BAA0B,CAAC,GACxCqC,CAAAA,SAASvC,MAAM,GAAG,IACf,CAAC,aAAa,EAAEuC,SACblC,GAAG,CAAC,CAACN,OAAS,GAAGA,KAAK,CAAC,EAAE6B,QAAQ,CAAC7B,KAAK,EAAE,EACzCG,IAAI,CAAC,MAAM,CAAC,CAAC,GAChB,EAAC,IACL,CAAC,EAAE,EAAEoC,KAAK;YACd;YACA,KAAK,MAAMvC,QAAQoC,QAASP,QAAQ,CAAC7B,KAAK,GAAGH,OAAO,CAACG,KAAK;QAC5D;QAEA,MAAMN,gBAAgByB,QAAQ3B;QAC9B,IAAIE,kBAAkBqB,WAAW;QAEjC,IAAIpB;QACJ,IAAI;YACFA,eAAe,MAAMyB,OAAO5B,QAAQE,eAAe;QACrD,EAAE,OAAON,OAAO;YACdkD,KACE,CAAC,mCAAmC,EAAE9C,OAAO,CAAC,EAAEE,cAAc,EAAE,EAAEP,QAAQC,OAAO,CAAC,CAAC;YAErF;QACF;QAEA,MAAMgB,UAAUb,YACdwC,MACArC,eACAC,cACAC,QACAC;QAEF,IAAI,CAAEO,CAAAA,mBAAmBC,GAAE,GAAI;YAC7BiC,KAAKlC,QAAQF,IAAI;YACjB;QACF;QAEA,MAAMmB,QAAQ,MAAMJ,WAClBc,MACArC,eACAU,SACAe,SACAC;QAEF,IAAIC,OAAO;YACTiB,KAAKjB;YACL;QACF;QAEA,KAAK,MAAM,CAACrB,MAAMf,QAAQ,IAAImB,QAAS;YACrC,MAAMsC,SAASb,QAAQ,CAAC7B,KAAK,IAAIH,OAAO,CAACG,KAAK;YAC9C,IAAI0C,WAAWzD,SAAS;YACxB4C,QAAQ,CAAC7B,KAAK,GAAGf;YACjB6C,MAAMJ,IAAI,CAAC;gBACT1B;gBACAyC,MAAM,GAAGzC,KAAK,QAAQ,EAAEf,QAAQ,EAAE,EAAEyD,OAAO,8CAA8C,EAAElD,OAAO,CAAC,EAAEE,cAAc,EAAE,EAAEsC,QAAQ;YACjI;QACF;IACF;IAEA,OAAOF;AACT,EAAE"}
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/version-lockstep/exact-dependency.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { readJson, type Tree, writeJson } from '@nx/devkit';\nimport { coerce, satisfies, valid } from 'semver';\nimport type {\n  IVersionedDep,\n  LockstepNote,\n  ProposedVersions,\n} from './lockstep.js';\n\n/**\n * Pins that must equal the exact `dependencies` a published release of another\n * pin declares, for packages that don't share a version line.\n */\nexport interface ExactDependencyPin {\n  /** The pin whose published `dependencies` the followers take. */\n  source: IVersionedDep;\n  /** Pins set to exactly the version `source` depends on. */\n  followers: readonly [IVersionedDep, ...IVersionedDep[]];\n  /** Pins whose published `peerDependencies` must accept the followers. */\n  peers: readonly IVersionedDep[];\n  /** Why the followers must match, for the update's PR. */\n  reason: string;\n}\n\n/** The manifest fields the rule reads. */\nexport type ManifestField = 'dependencies' | 'peerDependencies';\n\n/**\n * Reads one field of a published release's manifest, for example from\n * `https://registry.npmjs.org/<name>/<version>`. Resolves to `{}` when the\n * release has no such field, and rejects when the release can't be read.\n */\nexport type DependencyLookup = (\n  name: string,\n  version: string,\n  field: ManifestField,\n) => Promise<Record<string, string>>;\n\n/** Groups of pins held at one version, as in `LOCKSTEP_GROUPS`. */\ntype Groups = readonly (readonly string[])[];\n\n/** The version each pin must take, or why there isn't one. */\ntype Targets = Map<IVersionedDep, string> | { held: string };\n\n/** The bare version in a pin, whatever range syntax it was written with. */\nconst bare = (version: string): string | undefined =>\n  coerce(version, { includePrerelease: true })?.version;\n\nconst message = (error: unknown): string =>\n  error instanceof Error ? error.message : String(error);\n\n/**\n * The versions the source's `dependencies` give its followers, and the version\n * of the follower each group mate is grouped with, so the group stays in step.\n */\nconst targetsFrom = (\n  { source, followers }: ExactDependencyPin,\n  sourceVersion: string,\n  dependencies: Record<string, string>,\n  groups: Groups,\n  current: Readonly<ProposedVersions>,\n): Targets => {\n  const missing = followers.filter((name) => !dependencies[name]);\n  if (missing.length > 0) {\n    return {\n      held: `${source} ${sourceVersion} does not depend on ${missing.join(', ')}`,\n    };\n  }\n\n  // Releases so far declare exact versions. If one declares a range, take its\n  // bare version: our pins are exact, and a single copy needs that version.\n  const targets = new Map<IVersionedDep, string>(\n    followers.map((name) => {\n      const declared = dependencies[name];\n      return [name, valid(declared) ?? bare(declared) ?? declared];\n    }),\n  );\n\n  for (const group of groups) {\n    const inGroup = followers.filter((name) => group.includes(name));\n    if (inGroup.length === 0) continue;\n    const version = targets.get(inGroup[0]) as string;\n    const disagreeing = inGroup.find((name) => targets.get(name) !== version);\n    if (disagreeing) {\n      return {\n        held: `${source} ${sourceVersion} depends on ${inGroup[0]} ${version} but ${disagreeing} ${targets.get(disagreeing)}, which must move in step`,\n      };\n    }\n    for (const name of group as readonly IVersionedDep[]) {\n      if (!targets.has(name) && current[name] !== undefined) {\n        targets.set(name, version);\n      }\n    }\n  }\n\n  return targets;\n};\n\n/** Why the peers being written would reject the targets, if they would. */\nconst unmetPeers = async (\n  { source, peers }: ExactDependencyPin,\n  sourceVersion: string,\n  targets: Map<IVersionedDep, string>,\n  written: (name: IVersionedDep) => string | undefined,\n  lookup: DependencyLookup,\n): Promise<string | undefined> => {\n  const unmet: string[] = [];\n  for (const peer of peers) {\n    const peerVersion = written(peer);\n    if (peerVersion === undefined) continue;\n    let ranges: Record<string, string>;\n    try {\n      ranges = await lookup(peer, peerVersion, 'peerDependencies');\n    } catch (error) {\n      return `could not read the peerDependencies of ${peer} ${peerVersion} (${message(error)})`;\n    }\n    for (const [name, version] of targets) {\n      const range = ranges[name];\n      if (range && !satisfies(version, range, { includePrerelease: true })) {\n        unmet.push(\n          `${peer} ${peerVersion} requires ${name} ${range}, but ${source} ${sourceVersion} needs ${version}`,\n        );\n      }\n    }\n  }\n  return unmet.length > 0 ? unmet.join('; ') : undefined;\n};\n\n/**\n * Set each rule's followers, and their lockstep group mates, to the exact\n * versions the source being written depends on. Runs after the lockstep, which\n * can only hold a group back and so can't move one up to what the source needs.\n *\n * Mutates `proposed`, which holds versions not yet written anywhere. When a peer\n * would reject the result, or a manifest can't be read, every pin the rule covers\n * is put back to `current` for this run instead. Returns a note for each pin set\n * and each rule held, so the reason reaches the update's PR.\n */\nexport const pinToExactDependencies = async (\n  rules: readonly ExactDependencyPin[],\n  groups: Groups,\n  current: Readonly<ProposedVersions>,\n  proposed: ProposedVersions,\n  lookup: DependencyLookup,\n): Promise<LockstepNote[]> => {\n  const notes: LockstepNote[] = [];\n  const written = (name: IVersionedDep): string | undefined => {\n    const version = proposed[name] ?? current[name];\n    return version === undefined ? undefined : bare(version);\n  };\n\n  for (const rule of rules) {\n    const { source, followers, peers, reason } = rule;\n    const mates = groups\n      .filter((group) => followers.some((name) => group.includes(name)))\n      .flat() as IVersionedDep[];\n    const covered = [\n      ...new Set([source, ...followers, ...mates, ...peers]),\n    ].filter((name) => current[name] !== undefined);\n\n    // Every pin the rule covers goes back to its current version, so nothing\n    // the rule could not check is written.\n    const hold = (why: string) => {\n      const notTaken = covered.filter(\n        (name) =>\n          proposed[name] !== undefined && proposed[name] !== current[name],\n      );\n      notes.push({\n        name: source,\n        note:\n          `${source} held at ${current[source]}, with ${covered\n            .filter((name) => name !== source)\n            .join(', ')} at their current versions` +\n          (notTaken.length > 0\n            ? ` (not taken: ${notTaken\n                .map((name) => `${name} ${proposed[name]}`)\n                .join(', ')})`\n            : '') +\n          `: ${why}`,\n      });\n      for (const name of covered) proposed[name] = current[name];\n    };\n\n    const sourceVersion = written(source);\n    if (sourceVersion === undefined) continue;\n\n    let dependencies: Record<string, string>;\n    try {\n      dependencies = await lookup(source, sourceVersion, 'dependencies');\n    } catch (error) {\n      hold(\n        `could not read the dependencies of ${source} ${sourceVersion} (${message(error)})`,\n      );\n      continue;\n    }\n\n    const targets = targetsFrom(\n      rule,\n      sourceVersion,\n      dependencies,\n      groups,\n      current,\n    );\n    if (!(targets instanceof Map)) {\n      hold(targets.held);\n      continue;\n    }\n\n    const unmet = await unmetPeers(\n      rule,\n      sourceVersion,\n      targets,\n      written,\n      lookup,\n    );\n    if (unmet) {\n      hold(unmet);\n      continue;\n    }\n\n    for (const [name, version] of targets) {\n      const before = proposed[name] ?? current[name];\n      if (before === version) continue;\n      proposed[name] = version;\n      notes.push({\n        name,\n        note: `${name} set to ${version} (${before} proposed) to match the exact dependencies of ${source} ${sourceVersion}: ${reason}`,\n      });\n    }\n  }\n\n  return notes;\n};\n\n/** Reads each release's field once; a failed read fails the same way when repeated. */\nexport const memoizeLookup = (lookup: DependencyLookup): DependencyLookup => {\n  const cache = new Map<string, Promise<Record<string, string>>>();\n  return async (name, version, field) => {\n    const key = `${name}@${version} ${field}`;\n    let cached = cache.get(key);\n    if (!cached) {\n      cached = lookup(name, version, field);\n      cache.set(key, cached);\n    }\n    return { ...(await cached) };\n  };\n};\n\n/** Where the update records what each rule's source release depends on. */\nexport const EXACT_DEPENDENCY_SOURCES_PATH =\n  'packages/nx-plugin/exact-dependency-sources.json';\n\n/** Per rule source: the version pinned and the exact versions it depends on for its followers. */\nexport type ExactDependencySources = Record<\n  string,\n  { version: string; dependencies: Record<string, string> }\n>;\n\n/**\n * What each rule's source, at the version being written, depends on for its\n * followers. Reuses `recorded` for a source that did not move and reads the\n * registry otherwise. Throws when a follower being written is not that version,\n * or when the source's dependencies can't be read or omit a follower.\n */\nexport const verifyExactDependencies = async (\n  rules: readonly ExactDependencyPin[],\n  versions: Readonly<ProposedVersions>,\n  recorded: Readonly<ExactDependencySources>,\n  lookup: DependencyLookup,\n): Promise<ExactDependencySources> => {\n  const sources: ExactDependencySources = {};\n  const written = (name: IVersionedDep): string | undefined => {\n    const version = versions[name];\n    return version === undefined ? undefined : bare(version);\n  };\n\n  for (const { source, followers, reason } of rules) {\n    const sourceVersion = written(source);\n    if (sourceVersion === undefined) continue;\n\n    let dependencies: Record<string, string>;\n    if (recorded[source]?.version === sourceVersion) {\n      dependencies = recorded[source].dependencies;\n    } else {\n      try {\n        dependencies = await lookup(source, sourceVersion, 'dependencies');\n      } catch (error) {\n        throw new Error(\n          `could not read the dependencies of ${source} ${sourceVersion} (${message(error)})`,\n        );\n      }\n    }\n\n    const missing = followers.filter((name) => !dependencies[name]);\n    if (missing.length > 0) {\n      throw new Error(\n        `${source} ${sourceVersion} does not depend on ${missing.join(', ')}`,\n      );\n    }\n\n    const expected = Object.fromEntries(\n      followers.map((name) => {\n        const declared = dependencies[name];\n        return [name, valid(declared) ?? bare(declared) ?? declared];\n      }),\n    );\n    const differing = followers.filter(\n      (name) => written(name) !== expected[name],\n    );\n    if (differing.length > 0) {\n      throw new Error(\n        `${differing.map((name) => `${name} ${written(name)}`).join(', ')} but ${source} ${sourceVersion} depends on ${differing.map((name) => `${name} ${expected[name]}`).join(', ')}: ${reason}`,\n      );\n    }\n\n    sources[source] = { version: sourceVersion, dependencies: expected };\n  }\n\n  return sources;\n};\n\n/**\n * Record in `EXACT_DEPENDENCY_SOURCES_PATH` what the sources being written depend\n * on, which `versions.spec.ts` checks the pins against. Throws as\n * `verifyExactDependencies` does, before anything is written.\n * @returns paths written, for the update report\n */\nexport const writeExactDependencySources = async (\n  tree: Tree,\n  rules: readonly ExactDependencyPin[],\n  versions: Readonly<ProposedVersions>,\n  lookup: DependencyLookup,\n): Promise<string[]> => {\n  const path = EXACT_DEPENDENCY_SOURCES_PATH;\n  const recorded: ExactDependencySources = tree.exists(path)\n    ? readJson(tree, path)\n    : {};\n  const sources = await verifyExactDependencies(\n    rules,\n    versions,\n    recorded,\n    lookup,\n  );\n  if (JSON.stringify(sources) === JSON.stringify(recorded)) return [];\n  writeJson(tree, path, sources);\n  return [path];\n};\n"],"names":["readJson","writeJson","coerce","satisfies","valid","bare","version","includePrerelease","message","error","Error","String","targetsFrom","source","followers","sourceVersion","dependencies","groups","current","missing","filter","name","length","held","join","targets","Map","map","declared","group","inGroup","includes","get","disagreeing","find","has","undefined","set","unmetPeers","peers","written","lookup","unmet","peer","peerVersion","ranges","range","push","pinToExactDependencies","rules","proposed","notes","rule","reason","mates","some","flat","covered","Set","hold","why","notTaken","note","before","memoizeLookup","cache","field","key","cached","EXACT_DEPENDENCY_SOURCES_PATH","verifyExactDependencies","versions","recorded","sources","expected","Object","fromEntries","differing","writeExactDependencySources","tree","path","exists","JSON","stringify"],"mappings":"AAAA;;;CAGC,GACD,SAASA,QAAQ,EAAaC,SAAS,QAAQ,aAAa;AAC5D,SAASC,MAAM,EAAEC,SAAS,EAAEC,KAAK,QAAQ,SAAS;AA0ClD,0EAA0E,GAC1E,MAAMC,OAAO,CAACC,UACZJ,OAAOI,SAAS;QAAEC,mBAAmB;IAAK,IAAID;AAEhD,MAAME,UAAU,CAACC,QACfA,iBAAiBC,QAAQD,MAAMD,OAAO,GAAGG,OAAOF;AAElD;;;CAGC,GACD,MAAMG,cAAc,CAClB,EAAEC,MAAM,EAAEC,SAAS,EAAsB,EACzCC,eACAC,cACAC,QACAC;IAEA,MAAMC,UAAUL,UAAUM,MAAM,CAAC,CAACC,OAAS,CAACL,YAAY,CAACK,KAAK;IAC9D,IAAIF,QAAQG,MAAM,GAAG,GAAG;QACtB,OAAO;YACLC,MAAM,GAAGV,OAAO,CAAC,EAAEE,cAAc,oBAAoB,EAAEI,QAAQK,IAAI,CAAC,OAAO;QAC7E;IACF;IAEA,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAMC,UAAU,IAAIC,IAClBZ,UAAUa,GAAG,CAAC,CAACN;QACb,MAAMO,WAAWZ,YAAY,CAACK,KAAK;QACnC,OAAO;YAACA;YAAMjB,MAAMwB,aAAavB,KAAKuB,aAAaA;SAAS;IAC9D;IAGF,KAAK,MAAMC,SAASZ,OAAQ;QAC1B,MAAMa,UAAUhB,UAAUM,MAAM,CAAC,CAACC,OAASQ,MAAME,QAAQ,CAACV;QAC1D,IAAIS,QAAQR,MAAM,KAAK,GAAG;QAC1B,MAAMhB,UAAUmB,QAAQO,GAAG,CAACF,OAAO,CAAC,EAAE;QACtC,MAAMG,cAAcH,QAAQI,IAAI,CAAC,CAACb,OAASI,QAAQO,GAAG,CAACX,UAAUf;QACjE,IAAI2B,aAAa;YACf,OAAO;gBACLV,MAAM,GAAGV,OAAO,CAAC,EAAEE,cAAc,YAAY,EAAEe,OAAO,CAAC,EAAE,CAAC,CAAC,EAAExB,QAAQ,KAAK,EAAE2B,YAAY,CAAC,EAAER,QAAQO,GAAG,CAACC,aAAa,yBAAyB,CAAC;YAChJ;QACF;QACA,KAAK,MAAMZ,QAAQQ,MAAmC;YACpD,IAAI,CAACJ,QAAQU,GAAG,CAACd,SAASH,OAAO,CAACG,KAAK,KAAKe,WAAW;gBACrDX,QAAQY,GAAG,CAAChB,MAAMf;YACpB;QACF;IACF;IAEA,OAAOmB;AACT;AAEA,yEAAyE,GACzE,MAAMa,aAAa,OACjB,EAAEzB,MAAM,EAAE0B,KAAK,EAAsB,EACrCxB,eACAU,SACAe,SACAC;IAEA,MAAMC,QAAkB,EAAE;IAC1B,KAAK,MAAMC,QAAQJ,MAAO;QACxB,MAAMK,cAAcJ,QAAQG;QAC5B,IAAIC,gBAAgBR,WAAW;QAC/B,IAAIS;QACJ,IAAI;YACFA,SAAS,MAAMJ,OAAOE,MAAMC,aAAa;QAC3C,EAAE,OAAOnC,OAAO;YACd,OAAO,CAAC,uCAAuC,EAAEkC,KAAK,CAAC,EAAEC,YAAY,EAAE,EAAEpC,QAAQC,OAAO,CAAC,CAAC;QAC5F;QACA,KAAK,MAAM,CAACY,MAAMf,QAAQ,IAAImB,QAAS;YACrC,MAAMqB,QAAQD,MAAM,CAACxB,KAAK;YAC1B,IAAIyB,SAAS,CAAC3C,UAAUG,SAASwC,OAAO;gBAAEvC,mBAAmB;YAAK,IAAI;gBACpEmC,MAAMK,IAAI,CACR,GAAGJ,KAAK,CAAC,EAAEC,YAAY,UAAU,EAAEvB,KAAK,CAAC,EAAEyB,MAAM,MAAM,EAAEjC,OAAO,CAAC,EAAEE,cAAc,OAAO,EAAET,SAAS;YAEvG;QACF;IACF;IACA,OAAOoC,MAAMpB,MAAM,GAAG,IAAIoB,MAAMlB,IAAI,CAAC,QAAQY;AAC/C;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMY,yBAAyB,OACpCC,OACAhC,QACAC,SACAgC,UACAT;IAEA,MAAMU,QAAwB,EAAE;IAChC,MAAMX,UAAU,CAACnB;QACf,MAAMf,UAAU4C,QAAQ,CAAC7B,KAAK,IAAIH,OAAO,CAACG,KAAK;QAC/C,OAAOf,YAAY8B,YAAYA,YAAY/B,KAAKC;IAClD;IAEA,KAAK,MAAM8C,QAAQH,MAAO;QACxB,MAAM,EAAEpC,MAAM,EAAEC,SAAS,EAAEyB,KAAK,EAAEc,MAAM,EAAE,GAAGD;QAC7C,MAAME,QAAQrC,OACXG,MAAM,CAAC,CAACS,QAAUf,UAAUyC,IAAI,CAAC,CAAClC,OAASQ,MAAME,QAAQ,CAACV,QAC1DmC,IAAI;QACP,MAAMC,UAAU;eACX,IAAIC,IAAI;gBAAC7C;mBAAWC;mBAAcwC;mBAAUf;aAAM;SACtD,CAACnB,MAAM,CAAC,CAACC,OAASH,OAAO,CAACG,KAAK,KAAKe;QAErC,yEAAyE;QACzE,uCAAuC;QACvC,MAAMuB,OAAO,CAACC;YACZ,MAAMC,WAAWJ,QAAQrC,MAAM,CAC7B,CAACC,OACC6B,QAAQ,CAAC7B,KAAK,KAAKe,aAAac,QAAQ,CAAC7B,KAAK,KAAKH,OAAO,CAACG,KAAK;YAEpE8B,MAAMJ,IAAI,CAAC;gBACT1B,MAAMR;gBACNiD,MACE,GAAGjD,OAAO,SAAS,EAAEK,OAAO,CAACL,OAAO,CAAC,OAAO,EAAE4C,QAC3CrC,MAAM,CAAC,CAACC,OAASA,SAASR,QAC1BW,IAAI,CAAC,MAAM,0BAA0B,CAAC,GACxCqC,CAAAA,SAASvC,MAAM,GAAG,IACf,CAAC,aAAa,EAAEuC,SACblC,GAAG,CAAC,CAACN,OAAS,GAAGA,KAAK,CAAC,EAAE6B,QAAQ,CAAC7B,KAAK,EAAE,EACzCG,IAAI,CAAC,MAAM,CAAC,CAAC,GAChB,EAAC,IACL,CAAC,EAAE,EAAEoC,KAAK;YACd;YACA,KAAK,MAAMvC,QAAQoC,QAASP,QAAQ,CAAC7B,KAAK,GAAGH,OAAO,CAACG,KAAK;QAC5D;QAEA,MAAMN,gBAAgByB,QAAQ3B;QAC9B,IAAIE,kBAAkBqB,WAAW;QAEjC,IAAIpB;QACJ,IAAI;YACFA,eAAe,MAAMyB,OAAO5B,QAAQE,eAAe;QACrD,EAAE,OAAON,OAAO;YACdkD,KACE,CAAC,mCAAmC,EAAE9C,OAAO,CAAC,EAAEE,cAAc,EAAE,EAAEP,QAAQC,OAAO,CAAC,CAAC;YAErF;QACF;QAEA,MAAMgB,UAAUb,YACdwC,MACArC,eACAC,cACAC,QACAC;QAEF,IAAI,CAAEO,CAAAA,mBAAmBC,GAAE,GAAI;YAC7BiC,KAAKlC,QAAQF,IAAI;YACjB;QACF;QAEA,MAAMmB,QAAQ,MAAMJ,WAClBc,MACArC,eACAU,SACAe,SACAC;QAEF,IAAIC,OAAO;YACTiB,KAAKjB;YACL;QACF;QAEA,KAAK,MAAM,CAACrB,MAAMf,QAAQ,IAAImB,QAAS;YACrC,MAAMsC,SAASb,QAAQ,CAAC7B,KAAK,IAAIH,OAAO,CAACG,KAAK;YAC9C,IAAI0C,WAAWzD,SAAS;YACxB4C,QAAQ,CAAC7B,KAAK,GAAGf;YACjB6C,MAAMJ,IAAI,CAAC;gBACT1B;gBACAyC,MAAM,GAAGzC,KAAK,QAAQ,EAAEf,QAAQ,EAAE,EAAEyD,OAAO,8CAA8C,EAAElD,OAAO,CAAC,EAAEE,cAAc,EAAE,EAAEsC,QAAQ;YACjI;QACF;IACF;IAEA,OAAOF;AACT,EAAE;AAEF,qFAAqF,GACrF,OAAO,MAAMa,gBAAgB,CAACvB;IAC5B,MAAMwB,QAAQ,IAAIvC;IAClB,OAAO,OAAOL,MAAMf,SAAS4D;QAC3B,MAAMC,MAAM,GAAG9C,KAAK,CAAC,EAAEf,QAAQ,CAAC,EAAE4D,OAAO;QACzC,IAAIE,SAASH,MAAMjC,GAAG,CAACmC;QACvB,IAAI,CAACC,QAAQ;YACXA,SAAS3B,OAAOpB,MAAMf,SAAS4D;YAC/BD,MAAM5B,GAAG,CAAC8B,KAAKC;QACjB;QACA,OAAO;YAAE,GAAI,MAAMA,MAAM;QAAE;IAC7B;AACF,EAAE;AAEF,yEAAyE,GACzE,OAAO,MAAMC,gCACX,mDAAmD;AAQrD;;;;;CAKC,GACD,OAAO,MAAMC,0BAA0B,OACrCrB,OACAsB,UACAC,UACA/B;IAEA,MAAMgC,UAAkC,CAAC;IACzC,MAAMjC,UAAU,CAACnB;QACf,MAAMf,UAAUiE,QAAQ,CAAClD,KAAK;QAC9B,OAAOf,YAAY8B,YAAYA,YAAY/B,KAAKC;IAClD;IAEA,KAAK,MAAM,EAAEO,MAAM,EAAEC,SAAS,EAAEuC,MAAM,EAAE,IAAIJ,MAAO;QACjD,MAAMlC,gBAAgByB,QAAQ3B;QAC9B,IAAIE,kBAAkBqB,WAAW;QAEjC,IAAIpB;QACJ,IAAIwD,QAAQ,CAAC3D,OAAO,EAAEP,YAAYS,eAAe;YAC/CC,eAAewD,QAAQ,CAAC3D,OAAO,CAACG,YAAY;QAC9C,OAAO;YACL,IAAI;gBACFA,eAAe,MAAMyB,OAAO5B,QAAQE,eAAe;YACrD,EAAE,OAAON,OAAO;gBACd,MAAM,IAAIC,MACR,CAAC,mCAAmC,EAAEG,OAAO,CAAC,EAAEE,cAAc,EAAE,EAAEP,QAAQC,OAAO,CAAC,CAAC;YAEvF;QACF;QAEA,MAAMU,UAAUL,UAAUM,MAAM,CAAC,CAACC,OAAS,CAACL,YAAY,CAACK,KAAK;QAC9D,IAAIF,QAAQG,MAAM,GAAG,GAAG;YACtB,MAAM,IAAIZ,MACR,GAAGG,OAAO,CAAC,EAAEE,cAAc,oBAAoB,EAAEI,QAAQK,IAAI,CAAC,OAAO;QAEzE;QAEA,MAAMkD,WAAWC,OAAOC,WAAW,CACjC9D,UAAUa,GAAG,CAAC,CAACN;YACb,MAAMO,WAAWZ,YAAY,CAACK,KAAK;YACnC,OAAO;gBAACA;gBAAMjB,MAAMwB,aAAavB,KAAKuB,aAAaA;aAAS;QAC9D;QAEF,MAAMiD,YAAY/D,UAAUM,MAAM,CAChC,CAACC,OAASmB,QAAQnB,UAAUqD,QAAQ,CAACrD,KAAK;QAE5C,IAAIwD,UAAUvD,MAAM,GAAG,GAAG;YACxB,MAAM,IAAIZ,MACR,GAAGmE,UAAUlD,GAAG,CAAC,CAACN,OAAS,GAAGA,KAAK,CAAC,EAAEmB,QAAQnB,OAAO,EAAEG,IAAI,CAAC,MAAM,KAAK,EAAEX,OAAO,CAAC,EAAEE,cAAc,YAAY,EAAE8D,UAAUlD,GAAG,CAAC,CAACN,OAAS,GAAGA,KAAK,CAAC,EAAEqD,QAAQ,CAACrD,KAAK,EAAE,EAAEG,IAAI,CAAC,MAAM,EAAE,EAAE6B,QAAQ;QAE/L;QAEAoB,OAAO,CAAC5D,OAAO,GAAG;YAAEP,SAASS;YAAeC,cAAc0D;QAAS;IACrE;IAEA,OAAOD;AACT,EAAE;AAEF;;;;;CAKC,GACD,OAAO,MAAMK,8BAA8B,OACzCC,MACA9B,OACAsB,UACA9B;IAEA,MAAMuC,OAAOX;IACb,MAAMG,WAAmCO,KAAKE,MAAM,CAACD,QACjDhF,SAAS+E,MAAMC,QACf,CAAC;IACL,MAAMP,UAAU,MAAMH,wBACpBrB,OACAsB,UACAC,UACA/B;IAEF,IAAIyC,KAAKC,SAAS,CAACV,aAAaS,KAAKC,SAAS,CAACX,WAAW,OAAO,EAAE;IACnEvE,UAAU8E,MAAMC,MAAMP;IACtB,OAAO;QAACO;KAAK;AACf,EAAE"}

package/src/utils/version-lockstep/report.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/** A pin the run moves from one version to another. */
+export interface VersionChange {
+    name: string;
+    oldVersion: string;
+    newVersion: string;
+}
+/** A file the run rewrites. */
+export interface TemplateChange {
+    path: string;
+}
+/** Something the run could not do, reported so it reaches the PR body. */
+export interface ReportNote {
+    note: string;
+}
+export type ReportChange = VersionChange | TemplateChange | ReportNote;
+/** A titled section of the report. */
+export interface ChangeGroup {
+    title: string;
+    changes: ReportChange[];
+}
+/**
+ * The longest line commitlint accepts in a commit body or footer, from rule sets
+ * such as `@commitlint/config-conventional`'s rules followed by the repo's
+ * overrides. Later rule sets override earlier ones.
+ */
+export declare const commitMessageLineLimit: (...ruleSets: readonly Readonly<Record<string, unknown>>[]) => number;
+/**
+ * Splits a line longer than `limit` at spaces into lines of at most `limit`.
+ * A list item continues indented under its text, so Markdown keeps it one item,
+ * and no continuation starts with a word that would start a Markdown block. A
+ * word longer than `limit`, such as a URL, stays whole on its own line.
+ */
+export declare const wrapReportLine: (line: string, limit: number) => string[];
+/** Wraps each line of `text` with {@link wrapReportLine}. */
+export declare const wrapReport: (text: string, limit: number) => string;
+/**
+ * The version update report: each group with changes as a titled list, with
+ * lines wrapped to `limit`.
+ */
+export declare const formatReport: (changeGroups: readonly ChangeGroup[], limit: number) => string;

package/src/utils/version-lockstep/report.js

@@ -0,0 +1,108 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ /** A pin the run moves from one version to another. */ /**
+ * The longest line commitlint accepts in a commit body or footer, from rule sets
+ * such as `@commitlint/config-conventional`'s rules followed by the repo's
+ * overrides. Later rule sets override earlier ones.
+ */ export const commitMessageLineLimit = (...ruleSets)=>{
+    const limitOf = (rule)=>{
+        const value = ruleSets.map((rules)=>rules[rule]).filter((setting)=>setting !== undefined).at(-1);
+        const limit = Array.isArray(value) ? value[2] : undefined;
+        if (typeof limit !== 'number') {
+            throw new Error(`commitlint rule ${rule} sets no line limit`);
+        }
+        return limit;
+    };
+    // commitlint can parse a wrapped line as the start of the footer.
+    return Math.min(limitOf('body-max-line-length'), limitOf('footer-max-line-length'));
+};
+/** A list item marker and the spaces after it. */ const LIST_MARKER = /^(\s*)([-+*]|\d{1,9}[.)])( +)/;
+/** A word that would start a Markdown block at the start of a continuation. */ const BLOCK_START = /^(?:[-+*]|\d{1,9}[.)]|#{1,6}|[<>`~].*|[-=*_]{3,})$/;
+/**
+ * Splits a line longer than `limit` at spaces into lines of at most `limit`.
+ * A list item continues indented under its text, so Markdown keeps it one item,
+ * and no continuation starts with a word that would start a Markdown block. A
+ * word longer than `limit`, such as a URL, stays whole on its own line.
+ */ export const wrapReportLine = (line, limit)=>{
+    if (line.length <= limit) return [
+        line
+    ];
+    const marker = LIST_MARKER.exec(line)?.[0];
+    const first = marker ?? /^\s*/.exec(line)?.[0] ?? '';
+    const indent = marker ? ' '.repeat(marker.length) : first;
+    const fits = (prefix, words)=>prefix.length + words.join(' ').length <= limit;
+    const lines = [
+        {
+            prefix: first,
+            words: []
+        }
+    ];
+    for (const word of line.slice(first.length).split(/\s+/).filter(Boolean)){
+        const current = lines[lines.length - 1];
+        if (current.words.length === 0 || fits(current.prefix, [
+            ...current.words,
+            word
+        ])) {
+            current.words.push(word);
+            continue;
+        }
+        const last = current.words[current.words.length - 1];
+        if (BLOCK_START.test(word) && current.words.length > 1 && !BLOCK_START.test(last) && fits(indent, [
+            last,
+            word
+        ])) {
+            current.words.pop();
+            lines.push({
+                prefix: indent,
+                words: [
+                    last,
+                    word
+                ]
+            });
+        } else {
+            lines.push({
+                prefix: indent,
+                words: [
+                    word
+                ]
+            });
+        }
+    }
+    return lines.map(({ prefix, words })=>prefix + words.join(' '));
+};
+/** Wraps each line of `text` with {@link wrapReportLine}. */ export const wrapReport = (text, limit)=>text.split('\n').flatMap((line)=>wrapReportLine(line, limit)).join('\n');
+/**
+ * The version update report: each group with changes as a titled list, with
+ * lines wrapped to `limit`.
+ */ export const formatReport = (changeGroups, limit)=>{
+    let reportContent = '';
+    // Process each change group
+    changeGroups.forEach((group, index)=>{
+        if (group.changes.length > 0) {
+            // Add separator between groups
+            if (index > 0) {
+                reportContent += '\n';
+            }
+            reportContent += `${group.title}\n`;
+            group.changes.forEach((change)=>{
+                if ('oldVersion' in change) {
+                    reportContent += `- ${change.name} ${change.oldVersion} -> ${change.newVersion}\n`;
+                    return;
+                }
+                if ('note' in change) {
+                    reportContent += `- ${change.note}\n`;
+                    return;
+                }
+                reportContent += `- ${change.path}\n`;
+            });
+        }
+    });
+    // If no changes at all
+    if (reportContent.length === 0) {
+        reportContent = 'No version updates required.\n';
+    }
+    return wrapReport(reportContent, limit);
+};
+
+//# sourceMappingURL=report.js.map

package/src/utils/version-lockstep/report.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/version-lockstep/report.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/** A pin the run moves from one version to another. */\nexport interface VersionChange {\n  name: string;\n  oldVersion: string;\n  newVersion: string;\n}\n\n/** A file the run rewrites. */\nexport interface TemplateChange {\n  path: string;\n}\n\n/** Something the run could not do, reported so it reaches the PR body. */\nexport interface ReportNote {\n  note: string;\n}\n\nexport type ReportChange = VersionChange | TemplateChange | ReportNote;\n\n/** A titled section of the report. */\nexport interface ChangeGroup {\n  title: string;\n  changes: ReportChange[];\n}\n\n/**\n * The longest line commitlint accepts in a commit body or footer, from rule sets\n * such as `@commitlint/config-conventional`'s rules followed by the repo's\n * overrides. Later rule sets override earlier ones.\n */\nexport const commitMessageLineLimit = (\n  ...ruleSets: readonly Readonly<Record<string, unknown>>[]\n): number => {\n  const limitOf = (rule: string): number => {\n    const value = ruleSets\n      .map((rules) => rules[rule])\n      .filter((setting) => setting !== undefined)\n      .at(-1);\n    const limit = Array.isArray(value) ? value[2] : undefined;\n    if (typeof limit !== 'number') {\n      throw new Error(`commitlint rule ${rule} sets no line limit`);\n    }\n    return limit;\n  };\n  // commitlint can parse a wrapped line as the start of the footer.\n  return Math.min(\n    limitOf('body-max-line-length'),\n    limitOf('footer-max-line-length'),\n  );\n};\n\n/** A list item marker and the spaces after it. */\nconst LIST_MARKER = /^(\\s*)([-+*]|\\d{1,9}[.)])( +)/;\n\n/** A word that would start a Markdown block at the start of a continuation. */\nconst BLOCK_START = /^(?:[-+*]|\\d{1,9}[.)]|#{1,6}|[<>`~].*|[-=*_]{3,})$/;\n\n/**\n * Splits a line longer than `limit` at spaces into lines of at most `limit`.\n * A list item continues indented under its text, so Markdown keeps it one item,\n * and no continuation starts with a word that would start a Markdown block. A\n * word longer than `limit`, such as a URL, stays whole on its own line.\n */\nexport const wrapReportLine = (line: string, limit: number): string[] => {\n  if (line.length <= limit) return [line];\n\n  const marker = LIST_MARKER.exec(line)?.[0];\n  const first = marker ?? /^\\s*/.exec(line)?.[0] ?? '';\n  const indent = marker ? ' '.repeat(marker.length) : first;\n  const fits = (prefix: string, words: string[]) =>\n    prefix.length + words.join(' ').length <= limit;\n\n  const lines: { prefix: string; words: string[] }[] = [\n    { prefix: first, words: [] },\n  ];\n  for (const word of line.slice(first.length).split(/\\s+/).filter(Boolean)) {\n    const current = lines[lines.length - 1];\n    if (\n      current.words.length === 0 ||\n      fits(current.prefix, [...current.words, word])\n    ) {\n      current.words.push(word);\n      continue;\n    }\n    const last = current.words[current.words.length - 1];\n    if (\n      BLOCK_START.test(word) &&\n      current.words.length > 1 &&\n      !BLOCK_START.test(last) &&\n      fits(indent, [last, word])\n    ) {\n      current.words.pop();\n      lines.push({ prefix: indent, words: [last, word] });\n    } else {\n      lines.push({ prefix: indent, words: [word] });\n    }\n  }\n\n  return lines.map(({ prefix, words }) => prefix + words.join(' '));\n};\n\n/** Wraps each line of `text` with {@link wrapReportLine}. */\nexport const wrapReport = (text: string, limit: number): string =>\n  text\n    .split('\\n')\n    .flatMap((line) => wrapReportLine(line, limit))\n    .join('\\n');\n\n/**\n * The version update report: each group with changes as a titled list, with\n * lines wrapped to `limit`.\n */\nexport const formatReport = (\n  changeGroups: readonly ChangeGroup[],\n  limit: number,\n): string => {\n  let reportContent = '';\n\n  // Process each change group\n  changeGroups.forEach((group, index) => {\n    if (group.changes.length > 0) {\n      // Add separator between groups\n      if (index > 0) {\n        reportContent += '\\n';\n      }\n\n      reportContent += `${group.title}\\n`;\n      group.changes.forEach((change) => {\n        if ('oldVersion' in change) {\n          reportContent += `- ${change.name} ${change.oldVersion} -> ${change.newVersion}\\n`;\n          return;\n        }\n        if ('note' in change) {\n          reportContent += `- ${change.note}\\n`;\n          return;\n        }\n        reportContent += `- ${change.path}\\n`;\n      });\n    }\n  });\n\n  // If no changes at all\n  if (reportContent.length === 0) {\n    reportContent = 'No version updates required.\\n';\n  }\n\n  return wrapReport(reportContent, limit);\n};\n"],"names":["commitMessageLineLimit","ruleSets","limitOf","rule","value","map","rules","filter","setting","undefined","at","limit","Array","isArray","Error","Math","min","LIST_MARKER","BLOCK_START","wrapReportLine","line","length","marker","exec","first","indent","repeat","fits","prefix","words","join","lines","word","slice","split","Boolean","current","push","last","test","pop","wrapReport","text","flatMap","formatReport","changeGroups","reportContent","forEach","group","index","changes","title","change","name","oldVersion","newVersion","note","path"],"mappings":"AAAA;;;CAGC,GAED,qDAAqD,GAyBrD;;;;CAIC,GACD,OAAO,MAAMA,yBAAyB,CACpC,GAAGC;IAEH,MAAMC,UAAU,CAACC;QACf,MAAMC,QAAQH,SACXI,GAAG,CAAC,CAACC,QAAUA,KAAK,CAACH,KAAK,EAC1BI,MAAM,CAAC,CAACC,UAAYA,YAAYC,WAChCC,EAAE,CAAC,CAAC;QACP,MAAMC,QAAQC,MAAMC,OAAO,CAACT,SAASA,KAAK,CAAC,EAAE,GAAGK;QAChD,IAAI,OAAOE,UAAU,UAAU;YAC7B,MAAM,IAAIG,MAAM,CAAC,gBAAgB,EAAEX,KAAK,mBAAmB,CAAC;QAC9D;QACA,OAAOQ;IACT;IACA,kEAAkE;IAClE,OAAOI,KAAKC,GAAG,CACbd,QAAQ,yBACRA,QAAQ;AAEZ,EAAE;AAEF,gDAAgD,GAChD,MAAMe,cAAc;AAEpB,6EAA6E,GAC7E,MAAMC,cAAc;AAEpB;;;;;CAKC,GACD,OAAO,MAAMC,iBAAiB,CAACC,MAAcT;IAC3C,IAAIS,KAAKC,MAAM,IAAIV,OAAO,OAAO;QAACS;KAAK;IAEvC,MAAME,SAASL,YAAYM,IAAI,CAACH,OAAO,CAAC,EAAE;IAC1C,MAAMI,QAAQF,UAAU,OAAOC,IAAI,CAACH,OAAO,CAAC,EAAE,IAAI;IAClD,MAAMK,SAASH,SAAS,IAAII,MAAM,CAACJ,OAAOD,MAAM,IAAIG;IACpD,MAAMG,OAAO,CAACC,QAAgBC,QAC5BD,OAAOP,MAAM,GAAGQ,MAAMC,IAAI,CAAC,KAAKT,MAAM,IAAIV;IAE5C,MAAMoB,QAA+C;QACnD;YAAEH,QAAQJ;YAAOK,OAAO,EAAE;QAAC;KAC5B;IACD,KAAK,MAAMG,QAAQZ,KAAKa,KAAK,CAACT,MAAMH,MAAM,EAAEa,KAAK,CAAC,OAAO3B,MAAM,CAAC4B,SAAU;QACxE,MAAMC,UAAUL,KAAK,CAACA,MAAMV,MAAM,GAAG,EAAE;QACvC,IACEe,QAAQP,KAAK,CAACR,MAAM,KAAK,KACzBM,KAAKS,QAAQR,MAAM,EAAE;eAAIQ,QAAQP,KAAK;YAAEG;SAAK,GAC7C;YACAI,QAAQP,KAAK,CAACQ,IAAI,CAACL;YACnB;QACF;QACA,MAAMM,OAAOF,QAAQP,KAAK,CAACO,QAAQP,KAAK,CAACR,MAAM,GAAG,EAAE;QACpD,IACEH,YAAYqB,IAAI,CAACP,SACjBI,QAAQP,KAAK,CAACR,MAAM,GAAG,KACvB,CAACH,YAAYqB,IAAI,CAACD,SAClBX,KAAKF,QAAQ;YAACa;YAAMN;SAAK,GACzB;YACAI,QAAQP,KAAK,CAACW,GAAG;YACjBT,MAAMM,IAAI,CAAC;gBAAET,QAAQH;gBAAQI,OAAO;oBAACS;oBAAMN;iBAAK;YAAC;QACnD,OAAO;YACLD,MAAMM,IAAI,CAAC;gBAAET,QAAQH;gBAAQI,OAAO;oBAACG;iBAAK;YAAC;QAC7C;IACF;IAEA,OAAOD,MAAM1B,GAAG,CAAC,CAAC,EAAEuB,MAAM,EAAEC,KAAK,EAAE,GAAKD,SAASC,MAAMC,IAAI,CAAC;AAC9D,EAAE;AAEF,2DAA2D,GAC3D,OAAO,MAAMW,aAAa,CAACC,MAAc/B,QACvC+B,KACGR,KAAK,CAAC,MACNS,OAAO,CAAC,CAACvB,OAASD,eAAeC,MAAMT,QACvCmB,IAAI,CAAC,MAAM;AAEhB;;;CAGC,GACD,OAAO,MAAMc,eAAe,CAC1BC,cACAlC;IAEA,IAAImC,gBAAgB;IAEpB,4BAA4B;IAC5BD,aAAaE,OAAO,CAAC,CAACC,OAAOC;QAC3B,IAAID,MAAME,OAAO,CAAC7B,MAAM,GAAG,GAAG;YAC5B,+BAA+B;YAC/B,IAAI4B,QAAQ,GAAG;gBACbH,iBAAiB;YACnB;YAEAA,iBAAiB,GAAGE,MAAMG,KAAK,CAAC,EAAE,CAAC;YACnCH,MAAME,OAAO,CAACH,OAAO,CAAC,CAACK;gBACrB,IAAI,gBAAgBA,QAAQ;oBAC1BN,iBAAiB,CAAC,EAAE,EAAEM,OAAOC,IAAI,CAAC,CAAC,EAAED,OAAOE,UAAU,CAAC,IAAI,EAAEF,OAAOG,UAAU,CAAC,EAAE,CAAC;oBAClF;gBACF;gBACA,IAAI,UAAUH,QAAQ;oBACpBN,iBAAiB,CAAC,EAAE,EAAEM,OAAOI,IAAI,CAAC,EAAE,CAAC;oBACrC;gBACF;gBACAV,iBAAiB,CAAC,EAAE,EAAEM,OAAOK,IAAI,CAAC,EAAE,CAAC;YACvC;QACF;IACF;IAEA,uBAAuB;IACvB,IAAIX,cAAczB,MAAM,KAAK,GAAG;QAC9ByB,gBAAgB;IAClB;IAEA,OAAOL,WAAWK,eAAenC;AACnC,EAAE"}

package/src/utils/versions.d.ts

@@ -13,18 +13,18 @@ export declare const TS_VERSIONS: {
     readonly minimatch: "10.2.6";
     readonly 'deepmerge-ts': "8.0.2";
     readonly mysql2: "3.24.6";
-    readonly '@aws-sdk/client-dynamodb': "3.1151.0";
-    readonly '@aws-sdk/client-api-gateway': "3.1151.0";
-    readonly '@aws-sdk/client-iam': "3.1151.0";
-    readonly '@aws-sdk/client-bedrock-agentcore': "3.1151.0";
-    readonly '@aws-sdk/client-bedrock-runtime': "3.1151.0";
-    readonly '@aws-sdk/client-s3': "3.1151.0";
-    readonly '@aws-sdk/client-sts': "3.1151.0";
-    readonly '@aws-sdk/client-cognito-identity-provider': "3.1151.0";
-    readonly '@aws-sdk/credential-providers': "3.1151.0";
+    readonly '@aws-sdk/client-dynamodb': "3.1152.0";
+    readonly '@aws-sdk/client-api-gateway': "3.1152.0";
+    readonly '@aws-sdk/client-iam': "3.1152.0";
+    readonly '@aws-sdk/client-bedrock-agentcore': "3.1152.0";
+    readonly '@aws-sdk/client-bedrock-runtime': "3.1152.0";
+    readonly '@aws-sdk/client-s3': "3.1152.0";
+    readonly '@aws-sdk/client-sts': "3.1152.0";
+    readonly '@aws-sdk/client-cognito-identity-provider': "3.1152.0";
+    readonly '@aws-sdk/credential-providers': "3.1152.0";
     readonly '@aws-sdk/credential-provider-cognito-identity': "3.972.73";
-    readonly '@aws-sdk/client-secrets-manager': "3.1151.0";
-    readonly '@aws-sdk/rds-signer': "3.1151.0";
+    readonly '@aws-sdk/client-secrets-manager': "3.1152.0";
+    readonly '@aws-sdk/rds-signer': "3.1152.0";
     readonly '@smithy/server-apigateway': "0.3.4";
     readonly '@smithy/server-node': "0.3.4";
     readonly '@aws-lambda-powertools/logger': "2.36.0";
@@ -32,7 +32,7 @@ export declare const TS_VERSIONS: {
     readonly '@aws-lambda-powertools/parameters': "2.36.0";
     readonly '@aws-lambda-powertools/tracer': "2.36.0";
     readonly '@aws-lambda-powertools/parser': "2.36.0";
-    readonly '@aws-sdk/client-appconfigdata': "3.1151.0";
+    readonly '@aws-sdk/client-appconfigdata': "3.1152.0";
     readonly '@middy/core': "7.9.2";
     readonly '@nxlv/python': "23.2.1";
     readonly '@nx-extend/terraform': "10.4.1";
@@ -48,27 +48,27 @@ export declare const TS_VERSIONS: {
     readonly '@swc/core': "1.16.18";
     readonly '@modelcontextprotocol/sdk': "1.32.1";
     readonly '@modelcontextprotocol/client': "2.3.1";
-    readonly '@modelcontextprotocol/inspector': "2.10.1";
+    readonly '@modelcontextprotocol/inspector': "2.11.0";
     readonly '@ag-ui/a2ui-toolkit': "0.0.5";
     readonly '@ag-ui/aws-strands': "1.0.0";
     readonly '@ag-ui/client': "1.0.2";
     readonly '@ag-ui/core': "1.0.2";
     readonly '@ag-ui/encoder': "1.0.2";
     readonly 'agent-chat-cli': "0.3.0";
-    readonly '@copilotkit/react-core': "1.79.0";
+    readonly '@copilotkit/react-core': "1.79.1";
     readonly rxjs: "7.8.2";
-    readonly '@strands-agents/sdk': "1.20.0";
-    readonly '@tanstack/react-router': "1.170.44";
-    readonly '@tanstack/router-plugin': "1.168.45";
-    readonly '@tanstack/router-generator': "1.167.43";
+    readonly '@strands-agents/sdk': "1.21.0";
+    readonly '@tanstack/react-router': "1.170.45";
+    readonly '@tanstack/router-plugin': "1.168.47";
+    readonly '@tanstack/router-generator': "1.167.45";
     readonly '@tanstack/virtual-file-routes': "1.162.0";
-    readonly '@tanstack/router-utils': "1.162.3";
+    readonly '@tanstack/router-utils': "1.162.4";
     readonly '@cloudscape-design/board-components': "3.0.238";
     readonly '@cloudscape-design/chat-components': "1.0.179";
-    readonly '@cloudscape-design/components': "3.0.1400";
+    readonly '@cloudscape-design/components': "3.0.1401";
     readonly '@cloudscape-design/global-styles': "1.0.71";
-    readonly '@tanstack/react-query': "5.104.2";
-    readonly '@tanstack/react-query-devtools': "5.104.2";
+    readonly '@tanstack/react-query': "5.104.4";
+    readonly '@tanstack/react-query-devtools': "5.104.4";
     readonly '@trpc/tanstack-react-query': "11.19.0";
     readonly '@trpc/client': "11.19.0";
     readonly '@trpc/server': "11.19.0";
@@ -82,11 +82,11 @@ export declare const TS_VERSIONS: {
     readonly '@smithy/node-config-provider': "4.6.2";
     readonly '@smithy/node-http-handler': "4.12.1";
     readonly '@smithy/types': "4.19.0";
-    readonly '@vitest/coverage-v8': "4.1.11";
-    readonly '@vitest/ui': "4.1.11";
+    readonly '@vitest/coverage-v8': "4.1.12";
+    readonly '@vitest/ui': "4.1.12";
     readonly '@astrojs/react': "6.0.6";
     readonly '@astrojs/starlight': "0.42.6";
-    readonly astro: "7.3.8";
+    readonly astro: "7.4.0";
     readonly cookie: "2.0.1";
     readonly aws4fetch: "1.0.20";
     readonly 'aws-cdk': "2.1145.0";
@@ -96,16 +96,16 @@ export declare const TS_VERSIONS: {
     readonly cors: "2.8.6";
     readonly chalk: "6.0.1";
     readonly 'class-variance-authority': "0.7.1";
-    readonly cn: "0.4.0";
+    readonly cn: "0.5.0";
     readonly commander: "15.0.0";
     readonly electrodb: "3.9.3";
     readonly esbuild: "0.28.2";
     readonly 'event-source-polyfill': "1.0.31";
     readonly '@types/event-source-polyfill': "1.0.5";
     readonly '@biomejs/biome': "2.5.15";
-    readonly '@prisma/adapter-mariadb': "7.10.0";
-    readonly '@prisma/adapter-pg': "7.10.0";
-    readonly '@prisma/client': "7.10.0";
+    readonly '@prisma/adapter-mariadb': "7.10.1";
+    readonly '@prisma/adapter-pg': "7.10.1";
+    readonly '@prisma/client': "7.10.1";
     readonly ejs: "6.0.1";
     readonly '@types/ejs': "3.1.5";
     readonly express: "5.3.0";
@@ -114,31 +114,31 @@ export declare const TS_VERSIONS: {
     readonly 'fs-extra': "11.4.1";
     readonly '@types/fs-extra': "11.0.4";
     readonly mariadb: "3.5.4";
-    readonly mise: "2026.10.9";
-    readonly npm: "12.2.0";
+    readonly mise: "2026.10.14";
+    readonly npm: "12.2.1";
     readonly 'npm-check-updates': "23.1.1";
     readonly 'oidc-client-ts': "3.5.0";
     readonly pg: "8.23.1";
-    readonly prisma: "7.10.0";
+    readonly prisma: "7.10.1";
     readonly 'react-oidc-context': "3.3.1";
-    readonly react: "19.3.0";
-    readonly 'react-dom': "19.3.0";
-    readonly rolldown: "1.2.13";
+    readonly react: "19.3.1";
+    readonly 'react-dom': "19.3.1";
+    readonly rolldown: "1.2.14";
     readonly 'rolldown-plugin-dts': "0.28.8";
     readonly shx: "0.4.0";
     readonly 'simple-git': "4.0.2";
     readonly 'source-map-support': "0.5.21";
-    readonly 'starlight-blog': "0.30.1";
+    readonly 'starlight-blog': "0.30.2";
     readonly tailwindcss: "4.3.3";
     readonly '@tailwindcss/vite': "4.3.3";
     readonly tsx: "4.23.15";
-    readonly 'lucide-react': "1.56.0";
+    readonly 'lucide-react': "1.59.0";
     readonly 'radix-ui': "1.8.1";
-    readonly shadcn: "4.21.4";
+    readonly shadcn: "4.22.1";
     readonly 'tw-animate-css': "1.4.0";
     readonly vite: "8.3.4";
     readonly typescript: "6.0.3";
-    readonly vitest: "4.1.11";
+    readonly vitest: "4.1.12";
     readonly jsdom: "29.1.1";
     readonly zod: "4.6.7";
     readonly ws: "8.22.0";
@@ -196,29 +196,29 @@ export declare const PY_VERSIONS: {
     readonly 'ag-ui-protocol': "==0.1.22";
     readonly 'ag-ui-strands': "==0.4.1";
     readonly aiosqlite: "==0.22.1";
-    readonly 'aws-lambda-powertools': "==3.35.0";
-    readonly 'aws-lambda-powertools[tracer]': "==3.35.0";
-    readonly 'aws-lambda-powertools[parser]': "==3.35.0";
+    readonly 'aws-lambda-powertools': "==3.36.0";
+    readonly 'aws-lambda-powertools[tracer]': "==3.36.0";
+    readonly 'aws-lambda-powertools[parser]': "==3.36.0";
     readonly 'aws-opentelemetry-distro': "==0.21.0";
-    readonly 'bedrock-agentcore': "==1.24.1";
-    readonly boto3: "==1.43.113";
+    readonly 'bedrock-agentcore': "==1.24.2";
+    readonly boto3: "==1.43.115";
     readonly checkov: "==3.3.29";
-    readonly fastapi: "==0.143.1";
-    readonly 'fastapi[standard]': "==0.143.1";
+    readonly fastapi: "==0.150.0";
+    readonly 'fastapi[standard]': "==0.150.0";
     readonly httpx: "==0.28.1";
     readonly langchain: "==1.4.6";
-    readonly 'langchain-aws': "==1.8.2";
+    readonly 'langchain-aws': "==1.9.0";
     readonly 'langchain-mcp-adapters': "==0.3.2";
-    readonly langgraph: "==1.2.15";
+    readonly langgraph: "==1.2.16";
     readonly 'langgraph-checkpoint-aws': "==1.2.5";
     readonly 'langgraph-checkpoint-sqlite': "==3.1.2";
     readonly mcp: "==1.28.1";
     readonly 'pip-check-updates': "==0.29.0";
     readonly 'pip-licenses': "==5.5.5";
     readonly pydantic: "==2.14.1";
-    readonly ruff: "==0.17.0";
-    readonly 'strands-agents': "==1.60.0";
-    readonly 'strands-agents[a2a]': "==1.60.0";
+    readonly ruff: "==0.17.1";
+    readonly 'strands-agents': "==1.61.1";
+    readonly 'strands-agents[a2a]': "==1.61.1";
     readonly 'strands-agents-tools': "==0.8.9";
     readonly ty: "==0.0.87";
     readonly pynamodb: "==6.1.0";
@@ -247,10 +247,10 @@ export declare const VENDORED_VERSIONS: {
  * `<group>:<artifact>:<version>` where a generator writes it.
  */
 export declare const JAVA_VERSIONS: {
-    readonly 'software.amazon.smithy:smithy-model': "1.74.0";
-    readonly 'software.amazon.smithy:smithy-aws-traits': "1.74.0";
-    readonly 'software.amazon.smithy:smithy-validation-model': "1.74.0";
-    readonly 'software.amazon.smithy:smithy-openapi': "1.74.0";
+    readonly 'software.amazon.smithy:smithy-model': "1.74.1";
+    readonly 'software.amazon.smithy:smithy-aws-traits': "1.74.1";
+    readonly 'software.amazon.smithy:smithy-validation-model': "1.74.1";
+    readonly 'software.amazon.smithy:smithy-openapi': "1.74.1";
     readonly 'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': "0.54.0";
 };
 export type IJavaVersion = keyof typeof JAVA_VERSIONS;
@@ -266,7 +266,7 @@ export declare const javaMavenDependency: (artifact: IJavaVersion) => string;
  * command, which is what the version sync reaches to move it forward.
  */
 export declare const MISE_VERSIONS: {
-    readonly smithy: "1.74.0";
+    readonly smithy: "1.74.1";
 };
 export type IMiseVersion = keyof typeof MISE_VERSIONS;
 /** The tools the version update resolves through mise, in declaration order. */