@bleedingdev/modern-js-create 3.5.0-ultramodern.3 → 3.5.0-ultramodern.4

package/README.md

@@ -193,8 +193,8 @@ For strict Effect API migrations, update generated package metadata and Modern
 package aliases through the framework command before hand-editing app code:
 
 ```bash
-pnpm dlx @bleedingdev/modern-js-create@3.5.0-ultramodern.3 ultramodern \
-  migrate-strict-effect --version 3.5.0-ultramodern.3
+pnpm dlx @bleedingdev/modern-js-create@3.5.0-ultramodern.4 ultramodern \
+  migrate-strict-effect --version 3.5.0-ultramodern.4
 pnpm api:check
 pnpm contract:check
 pnpm check
@@ -212,9 +212,10 @@ your back. If `pnpm api:check` still fails, migrate the source to
 Generated strict Effect workspaces pin the compatible Effect cohort through
 `pnpm-workspace.yaml` overrides: `effect@4.0.0-beta.91` and
 `@effect/vitest@4.0.0-beta.91`. The generated pnpm policy also excludes the
-known `@effect/opentelemetry@4.0.0-beta.91` trusted-publisher to provenance
-transition from no-downgrade checks. Do not override those in app packages;
-update the framework cohort when the runtime moves.
+known `effect@4.0.0-beta.91` and `@effect/opentelemetry@4.0.0-beta.91`
+trusted-publisher to provenance transitions from no-downgrade checks. Do not
+override those in app packages; update the framework cohort when the runtime
+moves.
 
 Use `--ultramodern-package-source=install` for published cohort proof and pin a
 specific release with `--ultramodern-package-version` when CI must prove an

package/dist/cjs/ultramodern-tooling/commands.cjs

@@ -229,6 +229,10 @@ const generatedToolingDependencyPins = new Map([
         versions_cjs_namespaceObject.ZEPHYR_RSPACK_PLUGIN_VERSION
     ]
 ]);
+const strictEffectTrustPolicyExclusions = [
+    `effect@${versions_cjs_namespaceObject.EFFECT_VERSION}`,
+    `@effect/opentelemetry@${versions_cjs_namespaceObject.EFFECT_VERSION}`
+];
 function updateGeneratedToolingDependencies(packageJson) {
     let changed = false;
     for (const section of [
@@ -360,10 +364,6 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         [
             /^ {2}effect: .+$/mu,
             `  effect: ${versions_cjs_namespaceObject.EFFECT_VERSION}`
-        ],
-        [
-            /^ {2}- '@effect\/opentelemetry@[^']+'$/mu,
-            `  - '@effect/opentelemetry@${versions_cjs_namespaceObject.EFFECT_VERSION}'`
         ]
     ];
     for (const [pattern, replacement] of replacements){
@@ -371,9 +371,16 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         source = result.source;
         changed = result.changed || changed;
     }
-    const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', `@effect/opentelemetry@${versions_cjs_namespaceObject.EFFECT_VERSION}`);
-    source = trustPolicyExclude.source;
-    changed = trustPolicyExclude.changed || changed;
+    for (const item of strictEffectTrustPolicyExclusions){
+        const packageName = item.slice(0, item.lastIndexOf('@'));
+        const escapedPackageName = packageName.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+        const currentVersion = replaceYamlLine(source, new RegExp(`^ {2}- '${escapedPackageName}@[^']+'$`, 'mu'), `  - '${item}'`);
+        source = currentVersion.source;
+        changed = currentVersion.changed || changed;
+        const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', item);
+        source = trustPolicyExclude.source;
+        changed = trustPolicyExclude.changed || changed;
+    }
     if (changed) external_node_fs_default().writeFileSync(workspaceFile, source, 'utf-8');
     return changed;
 }

package/dist/esm/ultramodern-tooling/commands.js

@@ -182,6 +182,10 @@ const generatedToolingDependencyPins = new Map([
         ZEPHYR_RSPACK_PLUGIN_VERSION
     ]
 ]);
+const strictEffectTrustPolicyExclusions = [
+    `effect@${EFFECT_VERSION}`,
+    `@effect/opentelemetry@${EFFECT_VERSION}`
+];
 function updateGeneratedToolingDependencies(packageJson) {
     let changed = false;
     for (const section of [
@@ -313,10 +317,6 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         [
             /^ {2}effect: .+$/mu,
             `  effect: ${EFFECT_VERSION}`
-        ],
-        [
-            /^ {2}- '@effect\/opentelemetry@[^']+'$/mu,
-            `  - '@effect/opentelemetry@${EFFECT_VERSION}'`
         ]
     ];
     for (const [pattern, replacement] of replacements){
@@ -324,9 +324,16 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         source = result.source;
         changed = result.changed || changed;
     }
-    const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', `@effect/opentelemetry@${EFFECT_VERSION}`);
-    source = trustPolicyExclude.source;
-    changed = trustPolicyExclude.changed || changed;
+    for (const item of strictEffectTrustPolicyExclusions){
+        const packageName = item.slice(0, item.lastIndexOf('@'));
+        const escapedPackageName = packageName.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+        const currentVersion = replaceYamlLine(source, new RegExp(`^ {2}- '${escapedPackageName}@[^']+'$`, 'mu'), `  - '${item}'`);
+        source = currentVersion.source;
+        changed = currentVersion.changed || changed;
+        const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', item);
+        source = trustPolicyExclude.source;
+        changed = trustPolicyExclude.changed || changed;
+    }
     if (changed) node_fs.writeFileSync(workspaceFile, source, 'utf-8');
     return changed;
 }

package/dist/esm-node/ultramodern-tooling/commands.js

@@ -183,6 +183,10 @@ const generatedToolingDependencyPins = new Map([
         ZEPHYR_RSPACK_PLUGIN_VERSION
     ]
 ]);
+const strictEffectTrustPolicyExclusions = [
+    `effect@${EFFECT_VERSION}`,
+    `@effect/opentelemetry@${EFFECT_VERSION}`
+];
 function updateGeneratedToolingDependencies(packageJson) {
     let changed = false;
     for (const section of [
@@ -314,10 +318,6 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         [
             /^ {2}effect: .+$/mu,
             `  effect: ${EFFECT_VERSION}`
-        ],
-        [
-            /^ {2}- '@effect\/opentelemetry@[^']+'$/mu,
-            `  - '@effect/opentelemetry@${EFFECT_VERSION}'`
         ]
     ];
     for (const [pattern, replacement] of replacements){
@@ -325,9 +325,16 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         source = result.source;
         changed = result.changed || changed;
     }
-    const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', `@effect/opentelemetry@${EFFECT_VERSION}`);
-    source = trustPolicyExclude.source;
-    changed = trustPolicyExclude.changed || changed;
+    for (const item of strictEffectTrustPolicyExclusions){
+        const packageName = item.slice(0, item.lastIndexOf('@'));
+        const escapedPackageName = packageName.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+        const currentVersion = replaceYamlLine(source, new RegExp(`^ {2}- '${escapedPackageName}@[^']+'$`, 'mu'), `  - '${item}'`);
+        source = currentVersion.source;
+        changed = currentVersion.changed || changed;
+        const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', item);
+        source = trustPolicyExclude.source;
+        changed = trustPolicyExclude.changed || changed;
+    }
     if (changed) node_fs.writeFileSync(workspaceFile, source, 'utf-8');
     return changed;
 }

package/package.json

@@ -21,7 +21,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.5.0-ultramodern.3",
+  "version": "3.5.0-ultramodern.4",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/esm-node/index.js",
   "bin": {
@@ -77,7 +77,7 @@
     "@modern-js/codesmith": "2.6.9",
     "oxfmt": "0.56.0",
     "ultracite": "7.8.3",
-    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.5.0-ultramodern.3"
+    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.5.0-ultramodern.4"
   },
   "devDependencies": {
     "@rslib/core": "0.23.1",
@@ -99,6 +99,6 @@
     "test": "rm -rf dist && rslib build -c rslibconfig.mts && rstest --passWithNoTests"
   },
   "ultramodern": {
-    "frameworkVersion": "3.5.0-ultramodern.3"
+    "frameworkVersion": "3.5.0-ultramodern.4"
   }
 }

package/template-workspace/README.md.handlebars

@@ -170,14 +170,15 @@ Generated pnpm overrides pin the framework-compatible Effect cohort. Keep
 `effect` and `@effect/vitest` aligned with `pnpm-workspace.yaml`; do not add
 new direct package-level Effect versions unless the whole UltraModern cohort is
 upgraded. The generated pnpm trust policy intentionally excludes the matching
-`@effect/opentelemetry` cohort package from no-downgrade checks while Effect's
-beta publishes move from trusted-publisher metadata to provenance attestations.
+`effect` and `@effect/opentelemetry` cohort packages from no-downgrade checks
+while Effect's beta publishes move from trusted-publisher metadata to
+provenance attestations.
 
 For older generated workspaces, run the framework migration command first:
 
 ```bash
-pnpm dlx @bleedingdev/modern-js-create@3.5.0-ultramodern.3 ultramodern \
-  migrate-strict-effect --version 3.5.0-ultramodern.3
+pnpm dlx @bleedingdev/modern-js-create@3.5.0-ultramodern.4 ultramodern \
+  migrate-strict-effect --version 3.5.0-ultramodern.4
 pnpm api:check
 pnpm contract:check
 ```

package/template-workspace/pnpm-workspace.yaml.handlebars

@@ -25,6 +25,7 @@ minimumReleaseAgeExclude:
 trustPolicy: no-downgrade
 trustPolicyIgnoreAfter: 1440
 trustPolicyExclude:
+  - 'effect@{{effectVersion}}'
   - '@effect/opentelemetry@{{effectVersion}}'
 blockExoticSubdeps: true
 engineStrict: true