@bleedingdev/modern-js-create 3.5.0-ultramodern.3 → 3.5.0-ultramodern.5

package/README.md

@@ -193,8 +193,8 @@ For strict Effect API migrations, update generated package metadata and Modern
 package aliases through the framework command before hand-editing app code:
 
 ```bash
-pnpm dlx @bleedingdev/modern-js-create@3.5.0-ultramodern.3 ultramodern \
-  migrate-strict-effect --version 3.5.0-ultramodern.3
+pnpm dlx @bleedingdev/modern-js-create@3.5.0-ultramodern.5 ultramodern \
+  migrate-strict-effect --version 3.5.0-ultramodern.5
 pnpm api:check
 pnpm contract:check
 pnpm check
@@ -212,9 +212,10 @@ your back. If `pnpm api:check` still fails, migrate the source to
 Generated strict Effect workspaces pin the compatible Effect cohort through
 `pnpm-workspace.yaml` overrides: `effect@4.0.0-beta.91` and
 `@effect/vitest@4.0.0-beta.91`. The generated pnpm policy also excludes the
-known `@effect/opentelemetry@4.0.0-beta.91` trusted-publisher to provenance
-transition from no-downgrade checks. Do not override those in app packages;
-update the framework cohort when the runtime moves.
+known `effect@4.0.0-beta.91` and `@effect/opentelemetry@4.0.0-beta.91`
+versions from the 24-hour minimum-release-age gate and their trusted-publisher
+to provenance transitions from no-downgrade checks. Do not override those in
+app packages; update the framework cohort when the runtime moves.
 
 Use `--ultramodern-package-source=install` for published cohort proof and pin a
 specific release with `--ultramodern-package-version` when CI must prove an

package/dist/cjs/ultramodern-tooling/commands.cjs

@@ -229,6 +229,10 @@ const generatedToolingDependencyPins = new Map([
         versions_cjs_namespaceObject.ZEPHYR_RSPACK_PLUGIN_VERSION
     ]
 ]);
+const strictEffectPackageVersionPolicyExclusions = [
+    `effect@${versions_cjs_namespaceObject.EFFECT_VERSION}`,
+    `@effect/opentelemetry@${versions_cjs_namespaceObject.EFFECT_VERSION}`
+];
 function updateGeneratedToolingDependencies(packageJson) {
     let changed = false;
     for (const section of [
@@ -322,16 +326,17 @@ function replaceYamlLine(source, pattern, replacement) {
 function ensureYamlListItem(source, key, item) {
     const itemLine = `  - '${item}'`;
     const headerPattern = new RegExp(`^${key}:\\n(?:(?:  - .+\\n)*)`, 'mu');
-    const existingItemPattern = new RegExp(`^  - '${item.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&')}'$`, 'mu');
-    if (existingItemPattern.test(source)) return {
-        source,
-        changed: false
-    };
     const header = source.match(headerPattern);
-    if (header) return {
-        source: source.replace(headerPattern, `${header[0]}${itemLine}\n`),
-        changed: true
-    };
+    if (header) {
+        if (header[0].split('\n').includes(itemLine)) return {
+            source,
+            changed: false
+        };
+        return {
+            source: source.replace(headerPattern, `${header[0]}${itemLine}\n`),
+            changed: true
+        };
+    }
     const block = `${key}:\n${itemLine}\n`;
     const afterTrustPolicyIgnore = source.replace(/^(trustPolicyIgnoreAfter: .+\n)/mu, `$1${block}`);
     if (afterTrustPolicyIgnore !== source) return {
@@ -360,10 +365,6 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         [
             /^ {2}effect: .+$/mu,
             `  effect: ${versions_cjs_namespaceObject.EFFECT_VERSION}`
-        ],
-        [
-            /^ {2}- '@effect\/opentelemetry@[^']+'$/mu,
-            `  - '@effect/opentelemetry@${versions_cjs_namespaceObject.EFFECT_VERSION}'`
         ]
     ];
     for (const [pattern, replacement] of replacements){
@@ -371,9 +372,21 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         source = result.source;
         changed = result.changed || changed;
     }
-    const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', `@effect/opentelemetry@${versions_cjs_namespaceObject.EFFECT_VERSION}`);
-    source = trustPolicyExclude.source;
-    changed = trustPolicyExclude.changed || changed;
+    for (const item of strictEffectPackageVersionPolicyExclusions){
+        const packageName = item.slice(0, item.lastIndexOf('@'));
+        const escapedPackageName = packageName.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+        const currentVersion = replaceYamlLine(source, new RegExp(`^ {2}- '${escapedPackageName}@[^']+'$`, 'gmu'), `  - '${item}'`);
+        source = currentVersion.source;
+        changed = currentVersion.changed || changed;
+        for (const policyKey of [
+            'minimumReleaseAgeExclude',
+            'trustPolicyExclude'
+        ]){
+            const policyExclude = ensureYamlListItem(source, policyKey, item);
+            source = policyExclude.source;
+            changed = policyExclude.changed || changed;
+        }
+    }
     if (changed) external_node_fs_default().writeFileSync(workspaceFile, source, 'utf-8');
     return changed;
 }

package/dist/esm/ultramodern-tooling/commands.js

@@ -182,6 +182,10 @@ const generatedToolingDependencyPins = new Map([
         ZEPHYR_RSPACK_PLUGIN_VERSION
     ]
 ]);
+const strictEffectPackageVersionPolicyExclusions = [
+    `effect@${EFFECT_VERSION}`,
+    `@effect/opentelemetry@${EFFECT_VERSION}`
+];
 function updateGeneratedToolingDependencies(packageJson) {
     let changed = false;
     for (const section of [
@@ -275,16 +279,17 @@ function replaceYamlLine(source, pattern, replacement) {
 function ensureYamlListItem(source, key, item) {
     const itemLine = `  - '${item}'`;
     const headerPattern = new RegExp(`^${key}:\\n(?:(?:  - .+\\n)*)`, 'mu');
-    const existingItemPattern = new RegExp(`^  - '${item.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&')}'$`, 'mu');
-    if (existingItemPattern.test(source)) return {
-        source,
-        changed: false
-    };
     const header = source.match(headerPattern);
-    if (header) return {
-        source: source.replace(headerPattern, `${header[0]}${itemLine}\n`),
-        changed: true
-    };
+    if (header) {
+        if (header[0].split('\n').includes(itemLine)) return {
+            source,
+            changed: false
+        };
+        return {
+            source: source.replace(headerPattern, `${header[0]}${itemLine}\n`),
+            changed: true
+        };
+    }
     const block = `${key}:\n${itemLine}\n`;
     const afterTrustPolicyIgnore = source.replace(/^(trustPolicyIgnoreAfter: .+\n)/mu, `$1${block}`);
     if (afterTrustPolicyIgnore !== source) return {
@@ -313,10 +318,6 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         [
             /^ {2}effect: .+$/mu,
             `  effect: ${EFFECT_VERSION}`
-        ],
-        [
-            /^ {2}- '@effect\/opentelemetry@[^']+'$/mu,
-            `  - '@effect/opentelemetry@${EFFECT_VERSION}'`
         ]
     ];
     for (const [pattern, replacement] of replacements){
@@ -324,9 +325,21 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         source = result.source;
         changed = result.changed || changed;
     }
-    const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', `@effect/opentelemetry@${EFFECT_VERSION}`);
-    source = trustPolicyExclude.source;
-    changed = trustPolicyExclude.changed || changed;
+    for (const item of strictEffectPackageVersionPolicyExclusions){
+        const packageName = item.slice(0, item.lastIndexOf('@'));
+        const escapedPackageName = packageName.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+        const currentVersion = replaceYamlLine(source, new RegExp(`^ {2}- '${escapedPackageName}@[^']+'$`, 'gmu'), `  - '${item}'`);
+        source = currentVersion.source;
+        changed = currentVersion.changed || changed;
+        for (const policyKey of [
+            'minimumReleaseAgeExclude',
+            'trustPolicyExclude'
+        ]){
+            const policyExclude = ensureYamlListItem(source, policyKey, item);
+            source = policyExclude.source;
+            changed = policyExclude.changed || changed;
+        }
+    }
     if (changed) node_fs.writeFileSync(workspaceFile, source, 'utf-8');
     return changed;
 }

package/dist/esm-node/ultramodern-tooling/commands.js

@@ -183,6 +183,10 @@ const generatedToolingDependencyPins = new Map([
         ZEPHYR_RSPACK_PLUGIN_VERSION
     ]
 ]);
+const strictEffectPackageVersionPolicyExclusions = [
+    `effect@${EFFECT_VERSION}`,
+    `@effect/opentelemetry@${EFFECT_VERSION}`
+];
 function updateGeneratedToolingDependencies(packageJson) {
     let changed = false;
     for (const section of [
@@ -276,16 +280,17 @@ function replaceYamlLine(source, pattern, replacement) {
 function ensureYamlListItem(source, key, item) {
     const itemLine = `  - '${item}'`;
     const headerPattern = new RegExp(`^${key}:\\n(?:(?:  - .+\\n)*)`, 'mu');
-    const existingItemPattern = new RegExp(`^  - '${item.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&')}'$`, 'mu');
-    if (existingItemPattern.test(source)) return {
-        source,
-        changed: false
-    };
     const header = source.match(headerPattern);
-    if (header) return {
-        source: source.replace(headerPattern, `${header[0]}${itemLine}\n`),
-        changed: true
-    };
+    if (header) {
+        if (header[0].split('\n').includes(itemLine)) return {
+            source,
+            changed: false
+        };
+        return {
+            source: source.replace(headerPattern, `${header[0]}${itemLine}\n`),
+            changed: true
+        };
+    }
     const block = `${key}:\n${itemLine}\n`;
     const afterTrustPolicyIgnore = source.replace(/^(trustPolicyIgnoreAfter: .+\n)/mu, `$1${block}`);
     if (afterTrustPolicyIgnore !== source) return {
@@ -314,10 +319,6 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         [
             /^ {2}effect: .+$/mu,
             `  effect: ${EFFECT_VERSION}`
-        ],
-        [
-            /^ {2}- '@effect\/opentelemetry@[^']+'$/mu,
-            `  - '@effect/opentelemetry@${EFFECT_VERSION}'`
         ]
     ];
     for (const [pattern, replacement] of replacements){
@@ -325,9 +326,21 @@ function updateGeneratedPnpmWorkspacePolicy(workspaceRoot) {
         source = result.source;
         changed = result.changed || changed;
     }
-    const trustPolicyExclude = ensureYamlListItem(source, 'trustPolicyExclude', `@effect/opentelemetry@${EFFECT_VERSION}`);
-    source = trustPolicyExclude.source;
-    changed = trustPolicyExclude.changed || changed;
+    for (const item of strictEffectPackageVersionPolicyExclusions){
+        const packageName = item.slice(0, item.lastIndexOf('@'));
+        const escapedPackageName = packageName.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+        const currentVersion = replaceYamlLine(source, new RegExp(`^ {2}- '${escapedPackageName}@[^']+'$`, 'gmu'), `  - '${item}'`);
+        source = currentVersion.source;
+        changed = currentVersion.changed || changed;
+        for (const policyKey of [
+            'minimumReleaseAgeExclude',
+            'trustPolicyExclude'
+        ]){
+            const policyExclude = ensureYamlListItem(source, policyKey, item);
+            source = policyExclude.source;
+            changed = policyExclude.changed || changed;
+        }
+    }
     if (changed) node_fs.writeFileSync(workspaceFile, source, 'utf-8');
     return changed;
 }

package/package.json

@@ -21,7 +21,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.5.0-ultramodern.3",
+  "version": "3.5.0-ultramodern.5",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/esm-node/index.js",
   "bin": {
@@ -77,7 +77,7 @@
     "@modern-js/codesmith": "2.6.9",
     "oxfmt": "0.56.0",
     "ultracite": "7.8.3",
-    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.5.0-ultramodern.3"
+    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.5.0-ultramodern.5"
   },
   "devDependencies": {
     "@rslib/core": "0.23.1",
@@ -99,6 +99,6 @@
     "test": "rm -rf dist && rslib build -c rslibconfig.mts && rstest --passWithNoTests"
   },
   "ultramodern": {
-    "frameworkVersion": "3.5.0-ultramodern.3"
+    "frameworkVersion": "3.5.0-ultramodern.5"
   }
 }

package/template-workspace/README.md.handlebars

@@ -169,15 +169,16 @@ in API modules.
 Generated pnpm overrides pin the framework-compatible Effect cohort. Keep
 `effect` and `@effect/vitest` aligned with `pnpm-workspace.yaml`; do not add
 new direct package-level Effect versions unless the whole UltraModern cohort is
-upgraded. The generated pnpm trust policy intentionally excludes the matching
-`@effect/opentelemetry` cohort package from no-downgrade checks while Effect's
-beta publishes move from trusted-publisher metadata to provenance attestations.
+upgraded. The generated pnpm policy intentionally excludes the matching
+`effect` and `@effect/opentelemetry` cohort versions from the
+minimum-release-age and no-downgrade checks while Effect's beta publishes move
+from trusted-publisher metadata to provenance attestations.
 
 For older generated workspaces, run the framework migration command first:
 
 ```bash
-pnpm dlx @bleedingdev/modern-js-create@3.5.0-ultramodern.3 ultramodern \
-  migrate-strict-effect --version 3.5.0-ultramodern.3
+pnpm dlx @bleedingdev/modern-js-create@3.5.0-ultramodern.5 ultramodern \
+  migrate-strict-effect --version 3.5.0-ultramodern.5
 pnpm api:check
 pnpm contract:check
 ```

package/template-workspace/pnpm-workspace.yaml.handlebars

@@ -8,6 +8,8 @@ minimumReleaseAgeStrict: true
 minimumReleaseAgeIgnoreMissingTime: false
 minimumReleaseAgeExclude:
   - '@bleedingdev/modern-js-*'
+  - 'effect@{{effectVersion}}'
+  - '@effect/opentelemetry@{{effectVersion}}'
   - '@tanstack/react-router'
   - '@tanstack/router-core'
   - 'typescript'
@@ -25,6 +27,7 @@ minimumReleaseAgeExclude:
 trustPolicy: no-downgrade
 trustPolicyIgnoreAfter: 1440
 trustPolicyExclude:
+  - 'effect@{{effectVersion}}'
   - '@effect/opentelemetry@{{effectVersion}}'
 blockExoticSubdeps: true
 engineStrict: true