@codedrifters/configulator 0.0.94 → 0.0.96

package/README.md

@@ -14,6 +14,7 @@ A library of [Projen](https://projen.io/) components used by CodeDrifters to man
 - [Configuration Options](#configuration-options)
 - [Turbo Repo](#turbo-repo)
 - [PNPM Workspace](#pnpm-workspace)
+- [Updating VERSION constants](#updating-version-constants)
 - [File Management Rules](#file-management-rules)
 - [Workflow Tips](#workflow-tips)
 - [API Reference](#api-reference)
@@ -472,6 +473,39 @@ deps: ['react@catalog:react']
 deps: ['react@catalog:frontend/react']
 ```
 
+### Updating VERSION constants
+
+The catalog versions (e.g. `VERSION.PROJEN_VERSION`, `VERSION.TURBO_VERSION`) in `src/versions.ts` can be updated automatically so they stay in sync with npm releases while respecting the PNPM workspace `minimumReleaseAge` (so only versions published long enough ago are considered).
+
+**What it does**
+
+- A script (`scripts/update-versions.ts` at monorepo root) fetches the latest eligible version for each npm-backed constant from the npm registry using the `time` field.
+- Only versions that have been published for at least `minimumReleaseAge` minutes (from the PNPM workspace) are considered.
+- The script runs as part of the **upgrade** task, so when the upgrade workflow runs (e.g. nightly or `workflow_dispatch`), version updates are included in the same PR as dependency upgrades.
+
+**How to run**
+
+From the monorepo root:
+
+- **Propose only** (print suggested changes, do not edit files):
+  ```bash
+  pnpm run update-versions
+  ```
+- **Apply locally** (update `versions.ts` and run `npx projen`):
+  ```bash
+  pnpm run update-versions -- --apply
+  ```
+- **In CI**: When run from the upgrade workflow, the script auto-applies when there are updates so changes are included in the upgrade PR.
+
+**Adding a new npm-backed constant**
+
+1. Add the constant to `src/versions.ts` (e.g. `MY_PACKAGE_VERSION: "1.0.0"`).
+2. Add an entry to `VERSION_NPM_PACKAGES` in `src/version-package-map.ts`:
+   ```typescript
+   { key: "MY_PACKAGE_VERSION", npmPackage: "my-package" },
+   ```
+   Constants not listed in `VERSION_NPM_PACKAGES` (e.g. `NODE_WORKFLOWS`) are skipped by the update script.
+
 ### Turborepo Integration
 
 When you create a `MonorepoProject` with `turbo: true` (the default), Turborepo is automatically configured. Sub-projects created with `TypeScriptProject` automatically get Turborepo task configuration if their parent has Turborepo enabled.

package/lib/index.d.mts

@@ -347,6 +347,25 @@ interface AwsOrganization {
     accounts: Array<AwsAccount>;
 }
 
+/**
+ * Returns the latest full-release version of an npm package that has been
+ * published for at least `minimumReleaseAgeMinutes` minutes. Prefers the
+ * version indicated by the registry's "latest" dist-tag when it is a full
+ * release: if that version's publish time is in the registry and old enough,
+ * it is used; if it is not in the registry's "time" object (e.g. truncated
+ * for large packages), the dist-tag is still used so npm's "latest" is
+ * followed. When the dist-tag version is too new (in time but not old enough),
+ * we fall back to the highest full-release version that is old enough and
+ * ≤ latest (e.g. latest 2.x that's old enough, not 3.0.0). Prerelease
+ * versions are excluded. Returns null if `time` is missing or no version is
+ * eligible.
+ *
+ * @param packageName - npm package name (e.g. "projen").
+ * @param minimumReleaseAgeMinutes - minimum age in minutes (e.g. 1440 for 24h).
+ * @returns The latest eligible version string, or null.
+ */
+declare function getLatestEligibleVersion(packageName: string, minimumReleaseAgeMinutes: number): Promise<string | null>;
+
 declare const VERSION: {
     /**
      * CDK CLI for workflows and command line operations.
@@ -382,6 +401,27 @@ declare const VERSION: {
     readonly TURBO_VERSION: "2.8.3";
 };
 
+/**
+ * Keys of the VERSION object in versions.ts.
+ */
+type VersionKey = keyof typeof VERSION;
+/**
+ * Mapping of VERSION keys that are backed by an npm package and eligible
+ * for auto-update. Only these keys should be updated by version-update
+ * automation; others (e.g. NODE_WORKFLOWS) are skipped.
+ *
+ * @see {@link VERSION_KEYS_SKIP} for keys that must not be auto-updated.
+ */
+declare const VERSION_NPM_PACKAGES: ReadonlyArray<{
+    key: VersionKey;
+    npmPackage: string;
+}>;
+/**
+ * VERSION keys that are not backed by npm and must be skipped by
+ * auto-update (e.g. runtime versions like Node.js).
+ */
+declare const VERSION_KEYS_SKIP: ReadonlyArray<VersionKey>;
+
 /**
  * The FQNs for the base classes and options used by Jsii.
  *
@@ -1344,4 +1384,4 @@ declare class AwsDeployWorkflow extends Component {
     preSynthesize(): void;
 }
 
-export { type AwsAccount, AwsDeployWorkflow, AwsDeploymentConfig, AwsDeploymentTarget, type AwsDeploymentTargetOptions, type AwsLocalDeploymentConfig, type AwsOrganization, type AwsRegion, type CiDeploymentConfig, type ClassTypeOptions, type DeployWorkflowOptions, type GitBranch, type IDependencyResolver, JsiiFaker, MIMIMUM_RELEASE_AGE, MonorepoProject, type MonorepoProjectOptions, PROD_DEPLOY_NAME, PnpmWorkspace, type PnpmWorkspaceOptions, ROOT_CI_TASK_NAME, ROOT_TURBO_TASK_NAME, type RemoteCacheOptions, ResetTask, type ResetTaskOptions, TurboRepo, type TurboRepoOptions, TurboRepoTask, type TurboRepoTaskOptions, TypeScriptConfig, TypeScriptProject, type TypeScriptProjectOptions, VERSION, VSCodeConfig };
+export { type AwsAccount, AwsDeployWorkflow, AwsDeploymentConfig, AwsDeploymentTarget, type AwsDeploymentTargetOptions, type AwsLocalDeploymentConfig, type AwsOrganization, type AwsRegion, type CiDeploymentConfig, type ClassTypeOptions, type DeployWorkflowOptions, type GitBranch, type IDependencyResolver, JsiiFaker, MIMIMUM_RELEASE_AGE, MonorepoProject, type MonorepoProjectOptions, PROD_DEPLOY_NAME, PnpmWorkspace, type PnpmWorkspaceOptions, ROOT_CI_TASK_NAME, ROOT_TURBO_TASK_NAME, type RemoteCacheOptions, ResetTask, type ResetTaskOptions, TurboRepo, type TurboRepoOptions, TurboRepoTask, type TurboRepoTaskOptions, TypeScriptConfig, TypeScriptProject, type TypeScriptProjectOptions, VERSION, VERSION_KEYS_SKIP, VERSION_NPM_PACKAGES, VSCodeConfig, type VersionKey, getLatestEligibleVersion };

package/lib/index.d.ts

@@ -396,6 +396,25 @@ interface AwsOrganization {
     accounts: Array<AwsAccount>;
 }
 
+/**
+ * Returns the latest full-release version of an npm package that has been
+ * published for at least `minimumReleaseAgeMinutes` minutes. Prefers the
+ * version indicated by the registry's "latest" dist-tag when it is a full
+ * release: if that version's publish time is in the registry and old enough,
+ * it is used; if it is not in the registry's "time" object (e.g. truncated
+ * for large packages), the dist-tag is still used so npm's "latest" is
+ * followed. When the dist-tag version is too new (in time but not old enough),
+ * we fall back to the highest full-release version that is old enough and
+ * ≤ latest (e.g. latest 2.x that's old enough, not 3.0.0). Prerelease
+ * versions are excluded. Returns null if `time` is missing or no version is
+ * eligible.
+ *
+ * @param packageName - npm package name (e.g. "projen").
+ * @param minimumReleaseAgeMinutes - minimum age in minutes (e.g. 1440 for 24h).
+ * @returns The latest eligible version string, or null.
+ */
+declare function getLatestEligibleVersion(packageName: string, minimumReleaseAgeMinutes: number): Promise<string | null>;
+
 declare const VERSION: {
     /**
      * CDK CLI for workflows and command line operations.
@@ -431,6 +450,27 @@ declare const VERSION: {
     readonly TURBO_VERSION: "2.8.3";
 };
 
+/**
+ * Keys of the VERSION object in versions.ts.
+ */
+type VersionKey = keyof typeof VERSION;
+/**
+ * Mapping of VERSION keys that are backed by an npm package and eligible
+ * for auto-update. Only these keys should be updated by version-update
+ * automation; others (e.g. NODE_WORKFLOWS) are skipped.
+ *
+ * @see {@link VERSION_KEYS_SKIP} for keys that must not be auto-updated.
+ */
+declare const VERSION_NPM_PACKAGES: ReadonlyArray<{
+    key: VersionKey;
+    npmPackage: string;
+}>;
+/**
+ * VERSION keys that are not backed by npm and must be skipped by
+ * auto-update (e.g. runtime versions like Node.js).
+ */
+declare const VERSION_KEYS_SKIP: ReadonlyArray<VersionKey>;
+
 /**
  * The FQNs for the base classes and options used by Jsii.
  *
@@ -1393,5 +1433,5 @@ declare class AwsDeployWorkflow extends Component {
     preSynthesize(): void;
 }
 
-export { AwsDeployWorkflow, AwsDeploymentConfig, AwsDeploymentTarget, JsiiFaker, MIMIMUM_RELEASE_AGE, MonorepoProject, PROD_DEPLOY_NAME, PnpmWorkspace, ROOT_CI_TASK_NAME, ROOT_TURBO_TASK_NAME, ResetTask, TurboRepo, TurboRepoTask, TypeScriptConfig, TypeScriptProject, VERSION, VSCodeConfig };
-export type { AwsAccount, AwsDeploymentTargetOptions, AwsLocalDeploymentConfig, AwsOrganization, AwsRegion, CiDeploymentConfig, ClassTypeOptions, DeployWorkflowOptions, GitBranch, IDependencyResolver, MonorepoProjectOptions, PnpmWorkspaceOptions, RemoteCacheOptions, ResetTaskOptions, TurboRepoOptions, TurboRepoTaskOptions, TypeScriptProjectOptions };
+export { AwsDeployWorkflow, AwsDeploymentConfig, AwsDeploymentTarget, JsiiFaker, MIMIMUM_RELEASE_AGE, MonorepoProject, PROD_DEPLOY_NAME, PnpmWorkspace, ROOT_CI_TASK_NAME, ROOT_TURBO_TASK_NAME, ResetTask, TurboRepo, TurboRepoTask, TypeScriptConfig, TypeScriptProject, VERSION, VERSION_KEYS_SKIP, VERSION_NPM_PACKAGES, VSCodeConfig, getLatestEligibleVersion };
+export type { AwsAccount, AwsDeploymentTargetOptions, AwsLocalDeploymentConfig, AwsOrganization, AwsRegion, CiDeploymentConfig, ClassTypeOptions, DeployWorkflowOptions, GitBranch, IDependencyResolver, MonorepoProjectOptions, PnpmWorkspaceOptions, RemoteCacheOptions, ResetTaskOptions, TurboRepoOptions, TurboRepoTaskOptions, TypeScriptProjectOptions, VersionKey };

package/lib/index.js

@@ -191,7 +191,10 @@ __export(index_exports, {
   TypeScriptConfig: () => TypeScriptConfig,
   TypeScriptProject: () => TypeScriptProject,
   VERSION: () => VERSION,
-  VSCodeConfig: () => VSCodeConfig
+  VERSION_KEYS_SKIP: () => VERSION_KEYS_SKIP,
+  VERSION_NPM_PACKAGES: () => VERSION_NPM_PACKAGES,
+  VSCodeConfig: () => VSCodeConfig,
+  getLatestEligibleVersion: () => getLatestEligibleVersion
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -667,6 +670,99 @@ var AwsDeploymentTarget = class _AwsDeploymentTarget extends import_projen2.Comp
   }
 };
 
+// src/latest-eligible-version.ts
+var NPM_REGISTRY = "https://registry.npmjs.org";
+function isPrerelease(version) {
+  const v = version.replace(/^v/, "");
+  return /^\d+\.\d+\.\d+-/.test(v);
+}
+function compareVersions(a, b) {
+  const parse = (v) => {
+    const parts = v.replace(/^v/, "").split(/[-+]/)[0].split(".");
+    return parts.map((p) => {
+      const n = parseInt(p, 10);
+      return Number.isNaN(n) ? 0 : n;
+    });
+  };
+  const pa = parse(a);
+  const pb = parse(b);
+  const len = Math.max(pa.length, pb.length);
+  for (let i = 0; i < len; i++) {
+    const na = pa[i] ?? 0;
+    const nb = pb[i] ?? 0;
+    if (na !== nb) return na - nb;
+  }
+  return 0;
+}
+async function getLatestEligibleVersion(packageName, minimumReleaseAgeMinutes) {
+  const url = `${NPM_REGISTRY}/${encodeURIComponent(packageName)}`;
+  let res;
+  try {
+    res = await fetch(url, {
+      headers: { Accept: "application/json" }
+    });
+  } catch {
+    return null;
+  }
+  if (!res.ok) return null;
+  let data;
+  try {
+    data = await res.json();
+  } catch {
+    return null;
+  }
+  const time = data.time;
+  if (!time || typeof time !== "object") return null;
+  const nowMs = Date.now();
+  const minAgeMs = minimumReleaseAgeMinutes * 60 * 1e3;
+  const distTagLatest = data["dist-tags"]?.latest;
+  if (distTagLatest && !isPrerelease(distTagLatest)) {
+    const publishedAtStr = time[distTagLatest];
+    if (typeof publishedAtStr === "string") {
+      const publishedAt = Date.parse(publishedAtStr);
+      if (!Number.isNaN(publishedAt) && nowMs - publishedAt >= minAgeMs) {
+        return distTagLatest;
+      }
+    } else {
+      return distTagLatest;
+    }
+  }
+  const versionTimestamps = [];
+  for (const [key, value] of Object.entries(time)) {
+    if (key === "created" || key === "modified" || typeof value !== "string") {
+      continue;
+    }
+    if (isPrerelease(key)) continue;
+    const publishedAt = Date.parse(value);
+    if (Number.isNaN(publishedAt)) continue;
+    const ageMs = nowMs - publishedAt;
+    if (ageMs >= minAgeMs) {
+      versionTimestamps.push({ version: key, publishedAt });
+    }
+  }
+  if (versionTimestamps.length === 0) return null;
+  let candidates = versionTimestamps;
+  if (distTagLatest && !isPrerelease(distTagLatest)) {
+    candidates = versionTimestamps.filter(
+      (e) => compareVersions(e.version, distTagLatest) <= 0
+    );
+  }
+  if (candidates.length === 0) return null;
+  candidates.sort((a, b) => compareVersions(b.version, a.version));
+  return candidates[0].version;
+}
+
+// src/version-package-map.ts
+var VERSION_NPM_PACKAGES = [
+  { key: "AWS_CDK_CLI_VERSION", npmPackage: "aws-cdk" },
+  { key: "AWS_CDK_LIB_VERSION", npmPackage: "aws-cdk-lib" },
+  { key: "AWS_CONSTRUCTS_VERSION", npmPackage: "constructs" },
+  { key: "PNPM_VERSION", npmPackage: "pnpm" },
+  { key: "PROJEN_VERSION", npmPackage: "projen" },
+  { key: "TURBO_VERSION", npmPackage: "turbo" }
+];
+var VERSION_KEYS_SKIP = ["NODE_WORKFLOWS"];
+
 // src/versions.ts
 var VERSION = {
   /**
@@ -790,7 +886,7 @@ var PnpmWorkspace = class _PnpmWorkspace extends import_projen4.Component {
     super(project);
     project.tryFindObjectFile("package.json")?.addDeletionOverride("pnpm");
     this.fileName = options.fileName ?? "pnpm-workspace.yaml";
-    this.minimumReleaseAge = options.minimumReleaseAge ? options.minimumReleaseAge : MIMIMUM_RELEASE_AGE.ONE_DAY;
+    this.minimumReleaseAge = options.minimumReleaseAge ?? MIMIMUM_RELEASE_AGE.ONE_DAY;
     this.minimumReleaseAgeExclude = options.minimumReleaseAgeExclude ? ["@codedrifters/*", ...options.minimumReleaseAgeExclude] : ["@codedrifters/*"];
     this.onlyBuiltDependencies = options.onlyBuiltDependencies ? options.onlyBuiltDependencies : [];
     this.ignoredBuiltDependencies = options.ignoredBuiltDependencies ? options.ignoredBuiltDependencies : [];
@@ -1169,7 +1265,7 @@ var MonorepoProject = class extends import_typescript.TypeScriptAppProject {
       depsUpgrade: true,
       depsUpgradeOptions: {
         workflowOptions: {
-          schedule: import_javascript2.UpgradeDependenciesSchedule.WEEKLY
+          schedule: import_javascript2.UpgradeDependenciesSchedule.expressions(["0 23 * * *"])
         },
         cooldown: 1
       },
@@ -1625,6 +1721,9 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen9.Componen
   TypeScriptConfig,
   TypeScriptProject,
   VERSION,
-  VSCodeConfig
+  VERSION_KEYS_SKIP,
+  VERSION_NPM_PACKAGES,
+  VSCodeConfig,
+  getLatestEligibleVersion
 });
 //# sourceMappingURL=index.js.map