@bensandee/tooling 0.53.0 → 0.53.1

package/dist/bin.mjs

@@ -1188,6 +1188,45 @@ function preserveDevBinaryPath(generated, existing) {
 	if (!match) return generated;
 	return generated.replaceAll("pnpm exec bst", match[0]).replaceAll("pnpm dlx @bensandee/tooling", match[0]);
 }
+function escapeRegex(value) {
+	return value.replaceAll(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/** Match a `uses: <name>@<ref>` line, capturing indentation, action name, ref, and trailing comment. */
+const USES_LINE_PATTERN = /^(?<indent>\s*(?:-\s+)?uses:\s*)(?<name>[^\s@#]+)@(?<ref>\S+)(?<comment>[ \t]+#[^\n]*)?$/gm;
+/**
+* Extract a map of action-name → full verbatim tail (`<ref>` + optional inline comment)
+* from an existing workflow's `uses:` lines. Local actions (starting with `./` or
+* `docker://`) are skipped. First occurrence wins.
+*/
+function extractPinnedActions(existing) {
+	const map = /* @__PURE__ */ new Map();
+	for (const match of existing.matchAll(USES_LINE_PATTERN)) {
+		const { name, ref, comment } = match.groups ?? {};
+		if (!name || !ref) continue;
+		if (name.startsWith("./") || name.startsWith("docker://")) continue;
+		if (!map.has(name)) map.set(name, `${ref}${comment ?? ""}`);
+	}
+	return map;
+}
+/**
+* Preserve existing Renovate-managed action pins when rewriting a workflow.
+*
+* For each `uses: <name>@<ref>` in the existing file, if the generated file references the
+* same action name, substitute the existing ref (including any inline comment like `# v6`)
+* into the generated output. This keeps SHA pins and their version annotations stable when
+* unrelated workflow changes force a rewrite.
+*/
+function preservePinnedActions(generated, existing) {
+	if (!existing) return generated;
+	const pins = extractPinnedActions(existing);
+	if (pins.size === 0) return generated;
+	let result = generated;
+	for (const [name, tail] of pins) {
+		const pattern = new RegExp(String.raw`^(\s*(?:-\s+)?uses:\s*)${escapeRegex(name)}@\S+(?:[ \t]+#[^\n]*)?$`, "gm");
+		result = result.replace(pattern, `$1${name}@${tail}`);
+	}
+	return result;
+}
 /** Build a complete workflow YAML string from structured options. Single source of truth for workflow files. */
 function buildWorkflowYaml(options) {
 	const doc = { name: options.name };
@@ -1350,8 +1389,8 @@ async function generateDeployCi(ctx) {
 			description: "Publish workflow already up to date"
 		};
 	}
-	const withDevPath = preserveDevBinaryPath(content, existing);
-	const final = existing ? insertCustomBlocks(withDevPath, extractCustomBlocks(existing)) : withDevPath;
+	const withPinnedActions = preservePinnedActions(preserveDevBinaryPath(content, existing), existing);
+	const final = existing ? insertCustomBlocks(withPinnedActions, extractCustomBlocks(existing)) : withPinnedActions;
 	ctx.write(workflowPath, final);
 	return {
 		filePath: workflowPath,
@@ -1635,7 +1674,7 @@ async function generatePackageJson(ctx) {
 	const devDeps = { ...ROOT_DEV_DEPS };
 	if (!isMonorepo) Object.assign(devDeps, PER_PACKAGE_DEV_DEPS);
 	devDeps["@bensandee/config"] = isWorkspacePackage(ctx, "@bensandee/config") ? "workspace:*" : "0.10.2";
-	devDeps["@bensandee/tooling"] = isWorkspacePackage(ctx, "@bensandee/tooling") ? "workspace:*" : "0.53.0";
+	devDeps["@bensandee/tooling"] = isWorkspacePackage(ctx, "@bensandee/tooling") ? "workspace:*" : "0.53.1";
 	if (ctx.config.useEslintPlugin) devDeps["@bensandee/eslint-plugin"] = isWorkspacePackage(ctx, "@bensandee/eslint-plugin") ? "workspace:*" : "0.12.0";
 	if (ctx.config.formatter === "oxfmt") devDeps["oxfmt"] = {
 		"@changesets/cli": "2.30.0",
@@ -2427,8 +2466,8 @@ async function generateReleaseCi(ctx) {
 			description: "Release workflow already up to date"
 		};
 	}
-	const withDevPath = preserveDevBinaryPath(content, existing);
-	const final = existing ? insertCustomBlocks(withDevPath, extractCustomBlocks(existing)) : withDevPath;
+	const withPinnedActions = preservePinnedActions(preserveDevBinaryPath(content, existing), existing);
+	const final = existing ? insertCustomBlocks(withPinnedActions, extractCustomBlocks(existing)) : withPinnedActions;
 	ctx.write(workflowPath, final);
 	return {
 		filePath: workflowPath,
@@ -2557,8 +2596,8 @@ async function generateCi(ctx) {
 			description: "CI workflow already up to date"
 		};
 	}
-	const withDevPath = preserveDevBinaryPath(content, existing);
-	const final = existing ? insertCustomBlocks(withDevPath, extractCustomBlocks(existing)) : withDevPath;
+	const withPinnedActions = preservePinnedActions(preserveDevBinaryPath(content, existing), existing);
+	const final = existing ? insertCustomBlocks(withPinnedActions, extractCustomBlocks(existing)) : withPinnedActions;
 	ctx.write(filePath, final);
 	return {
 		filePath,
@@ -3411,7 +3450,7 @@ async function runGenerators(ctx) {
 function generateMigratePrompt(results, config, detected) {
 	const sections = [];
 	const timestamp = (/* @__PURE__ */ new Date()).toISOString();
-	sections.push(`# Migration Prompt\n\n_Generated by \`@bensandee/tooling@0.53.0 repo:sync\` on ${timestamp}_\n`);
+	sections.push(`# Migration Prompt\n\n_Generated by \`@bensandee/tooling@0.53.1 repo:sync\` on ${timestamp}_\n`);
 	const changed = results.filter((r) => r.action === "created" || r.action === "updated" || r.action === "archived");
 	if (changed.length > 0) {
 		const items = changed.map((r) => {
@@ -6714,7 +6753,7 @@ async function sendWebhookWithLogging(url, secret, payload) {
 const main = defineCommand({
 	meta: {
 		name: "bst",
-		version: "0.53.0",
+		version: "0.53.1",
 		description: "Bootstrap and maintain standardized TypeScript project tooling"
 	},
 	subCommands: {
@@ -6782,7 +6821,7 @@ const main = defineCommand({
 		})
 	}
 });
-console.log(`@bensandee/tooling v0.53.0`);
+console.log(`@bensandee/tooling v0.53.1`);
 async function run() {
 	await runMain(main);
 	process.exit(process.exitCode ?? 0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bensandee/tooling",
-  "version": "0.53.0",
+  "version": "0.53.1",
   "description": "CLI tool to bootstrap and maintain standardized TypeScript project tooling",
   "license": "MIT",
   "repository": {