@depup/vercel 57.0.0-depup.0 → 58.9.0-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/vercel
 
 | Field | Value |
 |-------|-------|
-| Original | [vercel](https://www.npmjs.com/package/vercel) @ 57.0.0 |
-| Processed | 2026-07-26 |
+| Original | [vercel](https://www.npmjs.com/package/vercel) @ 58.9.0 |
+| Processed | 2026-08-09 |
 | Smoke test | failed |
 | Deps updated | 11 |
 
@@ -22,16 +22,16 @@ npm install @depup/vercel
 
 | Dependency | From | To |
 |------------|------|-----|
-| @vercel/blob | 2.4.0 | ^2.6.1 |
+| @vercel/blob | 2.4.0 | ^2.7.0 |
 | @vercel/fun | 1.3.0 | ^1.3.1 |
 | @vercel/prepare-flags-definitions | 0.3.0 | ^0.4.0 |
 | chokidar | 4.0.0 | ^5.0.0 |
-| esbuild | 0.27.0 | ^0.28.1 |
-| jose | 5.9.6 | ^6.2.4 |
+| esbuild | 0.27.0 | ^0.28.2 |
+| jose | 5.9.6 | ^6.2.8 |
 | luxon | ^3.4.0 | ^3.7.2 |
-| sandbox | 3.4.0 | ^3.5.3 |
-| smol-toml | 1.5.2 | ^1.7.0 |
-| undici | 5.29.0 | ^8.9.0 |
+| sandbox | 3.4.0 | ^4.0.0 |
+| smol-toml | 1.5.2 | ^1.7.1 |
+| undici | 5.29.0 | ^8.10.0 |
 | zod | 4.1.11 | ^4.4.3 |
 
 ---

package/changes.json

@@ -2,7 +2,7 @@
   "bumped": {
     "@vercel/blob": {
       "from": "2.4.0",
-      "to": "^2.6.1"
+      "to": "^2.7.0"
     },
     "@vercel/fun": {
       "from": "1.3.0",
@@ -18,11 +18,11 @@
     },
     "esbuild": {
       "from": "0.27.0",
-      "to": "^0.28.1"
+      "to": "^0.28.2"
     },
     "jose": {
       "from": "5.9.6",
-      "to": "^6.2.4"
+      "to": "^6.2.8"
     },
     "luxon": {
       "from": "^3.4.0",
@@ -30,21 +30,21 @@
     },
     "sandbox": {
       "from": "3.4.0",
-      "to": "^3.5.3"
+      "to": "^4.0.0"
     },
     "smol-toml": {
       "from": "1.5.2",
-      "to": "^1.7.0"
+      "to": "^1.7.1"
     },
     "undici": {
       "from": "5.29.0",
-      "to": "^8.9.0"
+      "to": "^8.10.0"
     },
     "zod": {
       "from": "4.1.11",
       "to": "^4.4.3"
     }
   },
-  "timestamp": "2026-07-26T01:06:04.242Z",
+  "timestamp": "2026-08-09T00:37:00.760Z",
   "totalUpdated": 11
 }

package/dist/chunks/{add-YRZTDNXX.js → add-EN4KBTT6.js}

@@ -9,38 +9,43 @@ import {
   handleVcrApiError,
   resolveVcrScope,
   validateVcrJsonOutput
-} from "./chunk-GP5VCTEU.js";
+} from "./chunk-TIBP3CPZ.js";
+import "./chunk-G75NFPIT.js";
 import {
   outputError
-} from "./chunk-BUZRVER7.js";
-import "./chunk-XPKWKPWA.js";
+} from "./chunk-P65EEFTR.js";
+import "./chunk-KXDWXXJH.js";
 import {
   addSubcommand
-} from "./chunk-3VS4DTAU.js";
-import "./chunk-GIL3VAUR.js";
-import "./chunk-FYQPTH5C.js";
-import "./chunk-TBR2Q37Y.js";
+} from "./chunk-ELA5VN3A.js";
+import "./chunk-B3JTF4CF.js";
+import "./chunk-A5KP5HAI.js";
+import "./chunk-J6LK45HT.js";
+import "./chunk-R6IGDGX3.js";
+import "./chunk-BX4IGDGM.js";
 import "./chunk-ECCWJHC6.js";
 import {
   AGENT_REASON,
   buildCommandWithGlobalFlags,
   outputAgentError
-} from "./chunk-UDWRZXIT.js";
+} from "./chunk-TJJ562C5.js";
+import "./chunk-GGP5R3FU.js";
 import {
-  parseArguments,
   printError
-} from "./chunk-SZXT3PDQ.js";
+} from "./chunk-KBEX5MYS.js";
+import {
+  parseArguments
+} from "./chunk-XLKFJPMT.js";
 import {
   getFlagsSpecification,
   isAPIError,
   packageName
-} from "./chunk-KSSNLCL4.js";
+} from "./chunk-SOFC4MLS.js";
 import "./chunk-P4QNYOFB.js";
 import "./chunk-52QYYTM5.js";
 import {
   output_manager_default
 } from "./chunk-OX7KI3LF.js";
-import "./chunk-GGP5R3FU.js";
 import "./chunk-S7KYDPEM.js";
 import "./chunk-TZ2YI2VH.js";
 

package/dist/chunks/add-HFK7NUGY.js

@@ -0,0 +1,187 @@
+import { createRequire as __createRequire } from 'node:module';
+import { fileURLToPath as __fileURLToPath } from 'node:url';
+import { dirname as __dirname_ } from 'node:path';
+const require = __createRequire(import.meta.url);
+const __filename = __fileURLToPath(import.meta.url);
+const __dirname = __dirname_(__filename);
+import {
+  MAX_CONCURRENT_REQUESTS,
+  parseTeamRefs,
+  require_async_sema,
+  teamRefBody
+} from "./chunk-3ZE5CFVM.js";
+import {
+  repositoryPermissionsPath
+} from "./chunk-BEQV3X2L.js";
+import {
+  emitVcrArgParseError,
+  resolveVcrScope,
+  validateVcrJsonOutput
+} from "./chunk-TIBP3CPZ.js";
+import "./chunk-G75NFPIT.js";
+import {
+  outputError
+} from "./chunk-P65EEFTR.js";
+import "./chunk-KXDWXXJH.js";
+import {
+  permissionsAddSubcommand
+} from "./chunk-J6LK45HT.js";
+import "./chunk-R6IGDGX3.js";
+import "./chunk-BX4IGDGM.js";
+import "./chunk-ECCWJHC6.js";
+import {
+  AGENT_REASON,
+  buildCommandWithGlobalFlags,
+  outputAgentError
+} from "./chunk-TJJ562C5.js";
+import "./chunk-GGP5R3FU.js";
+import {
+  printError
+} from "./chunk-KBEX5MYS.js";
+import {
+  parseArguments
+} from "./chunk-XLKFJPMT.js";
+import {
+  getFlagsSpecification,
+  isAPIError,
+  packageName
+} from "./chunk-SOFC4MLS.js";
+import "./chunk-P4QNYOFB.js";
+import "./chunk-52QYYTM5.js";
+import {
+  output_manager_default
+} from "./chunk-OX7KI3LF.js";
+import "./chunk-S7KYDPEM.js";
+import {
+  __toESM
+} from "./chunk-TZ2YI2VH.js";
+
+// src/commands/vcr/permissions/add.ts
+var import_async_sema = __toESM(require_async_sema(), 1);
+var USAGE = "vcr permissions <repository> add <team>[,<team>...]";
+async function add(client, argv, telemetry) {
+  let parsedArgs;
+  try {
+    parsedArgs = parseArguments(
+      argv,
+      getFlagsSpecification(permissionsAddSubcommand.options)
+    );
+  } catch (err) {
+    emitVcrArgParseError(client, err, USAGE);
+    printError(err);
+    return 1;
+  }
+  const fr = validateVcrJsonOutput(client, parsedArgs.flags);
+  if (typeof fr === "number") {
+    return fr;
+  }
+  const repository = parsedArgs.args[0];
+  const teamRefs = parseTeamRefs(parsedArgs.args.slice(2));
+  const project = parsedArgs.flags["--project"];
+  telemetry.trackCliOptionProject(project);
+  telemetry.trackCliOptionFormat(parsedArgs.flags["--format"]);
+  if (teamRefs.length === 0) {
+    outputAgentError(
+      client,
+      {
+        status: "error",
+        reason: AGENT_REASON.MISSING_ARGUMENTS,
+        message: `Missing team. Example: ${packageName} vcr permissions ${repository} add team_1a2b3c4d`,
+        next: [
+          {
+            command: buildCommandWithGlobalFlags(client.argv, USAGE),
+            when: "Replace <team> with a team id or slug (comma-separate multiple teams)"
+          }
+        ]
+      },
+      1
+    );
+    return outputError(
+      client,
+      fr.jsonOutput,
+      "MISSING_ARGUMENTS",
+      `Usage: \`vercel ${USAGE}\``
+    );
+  }
+  const scope = await resolveVcrScope(client, {
+    project,
+    jsonOutput: fr.jsonOutput
+  });
+  if (typeof scope === "number") {
+    return scope;
+  }
+  const path = repositoryPermissionsPath(scope, repository);
+  const added = [];
+  const failed = [];
+  output_manager_default.spinner(
+    `Sharing ${repository} with ${teamRefs.length === 1 ? teamRefs[0] : `${teamRefs.length} teams`}...`
+  );
+  const sema = new import_async_sema.default(MAX_CONCURRENT_REQUESTS);
+  let results;
+  try {
+    results = await Promise.all(
+      teamRefs.map(async (team) => {
+        await sema.acquire();
+        try {
+          const result = await client.fetch(path, {
+            method: "POST",
+            body: teamRefBody(team)
+          });
+          return { ok: true, team, permission: result.permission };
+        } catch (err) {
+          if (!isAPIError(err)) {
+            throw err;
+          }
+          const message = err.serverMessage || `API error (${err.status}).`;
+          return {
+            ok: false,
+            team,
+            failure: { team, code: err.code || "API_ERROR", message }
+          };
+        } finally {
+          sema.release();
+        }
+      })
+    );
+  } finally {
+    output_manager_default.stopSpinner();
+  }
+  for (const result of results) {
+    if (result.ok) {
+      added.push(result.permission);
+      if (!fr.jsonOutput) {
+        output_manager_default.success(
+          `Shared ${repository} with ${result.permission?.teamSlug ?? result.team}`
+        );
+      }
+    } else {
+      failed.push(result.failure);
+      if (!fr.jsonOutput) {
+        output_manager_default.error(
+          `Failed to share ${repository} with ${result.team}: ${result.failure.message}`
+        );
+      }
+    }
+  }
+  if (failed.length > 0) {
+    outputAgentError(
+      client,
+      {
+        status: "error",
+        reason: AGENT_REASON.API_ERROR,
+        message: `Failed to share ${repository} with ${failed.map((f) => `${f.team} (${f.message})`).join(", ")}`
+      },
+      1
+    );
+  }
+  if (fr.jsonOutput) {
+    client.stdout.write(
+      `${JSON.stringify({ permissions: added, failed }, null, 2)}
+`
+    );
+  }
+  return failed.length > 0 ? 1 : 0;
+}
+export {
+  add as default
+};

package/dist/chunks/{add-7M577U56.js → add-ZVQJE6BF.js}

@@ -4,42 +4,59 @@ import { dirname as __dirname_ } from 'node:path';
 const require = __createRequire(import.meta.url);
 const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
+import {
+  parseCustomAlertQueryBody,
+  resolveCustomAlertProjectName,
+  setMissingCustomAlertProjectScope
+} from "./chunk-G2S2QKKF.js";
 import {
   emitRulesArgParseError,
   handleRulesApiError,
   parseRulesFlagsAndScope,
   rulesCollectionPath
-} from "./chunk-MAHINYBW.js";
-import "./chunk-T4NODP6Y.js";
-import "./chunk-BUZRVER7.js";
+} from "./chunk-QRRCK6VX.js";
+import {
+  isCustomAlertRule
+} from "./chunk-TEQKKTJQ.js";
+import "./chunk-DQXBNALU.js";
+import "./chunk-A3NYPUKZ.js";
+import "./chunk-P65EEFTR.js";
+import "./chunk-FGDKMNEN.js";
+import "./chunk-YUISINFV.js";
+import "./chunk-V5P25P7F.js";
+import "./chunk-RQ7H43CJ.js";
 import {
   validateJsonOutput
-} from "./chunk-XPKWKPWA.js";
+} from "./chunk-KXDWXXJH.js";
 import {
   rulesAddSubcommand
-} from "./chunk-KCF6S3XF.js";
-import "./chunk-TBR2Q37Y.js";
+} from "./chunk-UMA66MKW.js";
+import "./chunk-7AB6QOKM.js";
+import "./chunk-KT4XXKJK.js";
+import "./chunk-BX4IGDGM.js";
 import "./chunk-ECCWJHC6.js";
 import {
   AGENT_REASON,
   buildCommandWithGlobalFlags,
   outputAgentError
-} from "./chunk-UDWRZXIT.js";
+} from "./chunk-TJJ562C5.js";
+import "./chunk-GGP5R3FU.js";
 import {
-  parseArguments,
   printError
-} from "./chunk-SZXT3PDQ.js";
+} from "./chunk-KBEX5MYS.js";
+import {
+  parseArguments
+} from "./chunk-XLKFJPMT.js";
 import {
   getFlagsSpecification,
   isAPIError,
   packageName
-} from "./chunk-KSSNLCL4.js";
+} from "./chunk-SOFC4MLS.js";
 import "./chunk-P4QNYOFB.js";
 import "./chunk-52QYYTM5.js";
 import {
   output_manager_default
 } from "./chunk-OX7KI3LF.js";
-import "./chunk-GGP5R3FU.js";
 import "./chunk-S7KYDPEM.js";
 import "./chunk-TZ2YI2VH.js";
 
@@ -146,11 +163,31 @@ async function add(client, argv) {
     output_manager_default.error("Invalid JSON in --body file.");
     return 1;
   }
+  const parsedCustomAlertQuery = parseCustomAlertQueryBody(client, body);
+  if (typeof parsedCustomAlertQuery === "number") {
+    return parsedCustomAlertQuery;
+  }
+  const customAlertRule = isCustomAlertRule(body);
+  if (!customAlertRule && parsedArgs.flags["--project"] && scope.projectId && body.projectId === void 0) {
+    body.projectId = `projectId eq '${scope.projectId}'`;
+  }
+  const customAlertProjectId = typeof body.projectId === "string" ? body.projectId : scope.projectId;
+  if (parsedCustomAlertQuery && customAlertProjectId) {
+    body.projectId ??= customAlertProjectId;
+    const projectName = await resolveCustomAlertProjectName(
+      client,
+      scope,
+      customAlertProjectId
+    );
+    setMissingCustomAlertProjectScope(
+      parsedCustomAlertQuery,
+      scope.teamId,
+      customAlertProjectId,
+      projectName
+    );
+  }
   delete body.id;
   delete body.teamId;
-  if (scope.projectId !== void 0 && body.projectId === void 0) {
-    body.projectId = scope.projectId;
-  }
   const path = rulesCollectionPath(scope);
   output_manager_default.spinner("Creating alert rule...");
   try {

package/dist/chunks/build-IDCBAC3R.js

@@ -0,0 +1,243 @@
+import { createRequire as __createRequire } from 'node:module';
+import { fileURLToPath as __fileURLToPath } from 'node:url';
+import { dirname as __dirname_ } from 'node:path';
+const require = __createRequire(import.meta.url);
+const __filename = __fileURLToPath(import.meta.url);
+const __dirname = __dirname_(__filename);
+import {
+  DEFAULT_TAG,
+  buildRepositoryReference,
+  parseNameArg,
+  validateImageParts
+} from "./chunk-RBIFXFZX.js";
+import {
+  VCR_ENGINES,
+  emitVcrArgParseError,
+  isBuildxAvailable,
+  isEngineInstalled,
+  pushCompressionArgs,
+  reportEngineCommandFailure,
+  reportEnginePushFailure,
+  resolveRegistry,
+  resolveVcrScope,
+  runEngine,
+  splitPassthrough,
+  validateVcrChoice
+} from "./chunk-TIBP3CPZ.js";
+import "./chunk-G75NFPIT.js";
+import {
+  outputError
+} from "./chunk-P65EEFTR.js";
+import "./chunk-KXDWXXJH.js";
+import {
+  buildSubcommand
+} from "./chunk-ELA5VN3A.js";
+import "./chunk-B3JTF4CF.js";
+import "./chunk-A5KP5HAI.js";
+import "./chunk-J6LK45HT.js";
+import "./chunk-R6IGDGX3.js";
+import "./chunk-BX4IGDGM.js";
+import "./chunk-ECCWJHC6.js";
+import {
+  AGENT_REASON,
+  buildCommandWithGlobalFlags,
+  outputAgentError
+} from "./chunk-TJJ562C5.js";
+import "./chunk-GGP5R3FU.js";
+import {
+  printError
+} from "./chunk-KBEX5MYS.js";
+import {
+  parseArguments
+} from "./chunk-XLKFJPMT.js";
+import {
+  getFlagsSpecification
+} from "./chunk-SOFC4MLS.js";
+import "./chunk-P4QNYOFB.js";
+import "./chunk-52QYYTM5.js";
+import {
+  output_manager_default
+} from "./chunk-OX7KI3LF.js";
+import "./chunk-S7KYDPEM.js";
+import "./chunk-TZ2YI2VH.js";
+
+// src/commands/vcr/build.ts
+var DEFAULT_PLATFORM = "linux/amd64";
+async function build(client, telemetry) {
+  const { own, passthrough } = splitPassthrough(client.argv);
+  let parsedArgs;
+  try {
+    parsedArgs = parseArguments(
+      own,
+      getFlagsSpecification(buildSubcommand.options)
+    );
+  } catch (err) {
+    emitVcrArgParseError(client, err, "vcr build <engine> [path] [name[:tag]]");
+    printError(err);
+    return 1;
+  }
+  const [engineArg, pathArg, nameArg] = parsedArgs.args.slice(2);
+  const project = parsedArgs.flags["--project"];
+  const platform = parsedArgs.flags["--platform"];
+  const push = Boolean(parsedArgs.flags["--push"]);
+  telemetry.trackCliArgumentEngine(engineArg);
+  telemetry.trackCliArgumentPath(pathArg);
+  telemetry.trackCliArgumentName(nameArg);
+  telemetry.trackCliOptionProject(project);
+  telemetry.trackCliOptionPlatform(platform);
+  telemetry.trackCliFlagPush(push);
+  if (!engineArg) {
+    const message = `Missing engine. Choose one of: ${VCR_ENGINES.join(", ")}.`;
+    outputAgentError(
+      client,
+      {
+        status: "error",
+        reason: AGENT_REASON.MISSING_ARGUMENTS,
+        message,
+        next: [
+          {
+            command: buildCommandWithGlobalFlags(
+              client.argv,
+              "vcr build docker"
+            ),
+            when: "Replace docker with the container tool you use"
+          }
+        ]
+      },
+      1
+    );
+    return outputError(client, false, "MISSING_ARGUMENTS", message);
+  }
+  const choiceError = validateVcrChoice(
+    client,
+    "engine",
+    engineArg,
+    VCR_ENGINES,
+    false
+  );
+  if (typeof choiceError === "number") {
+    return choiceError;
+  }
+  const engine = engineArg;
+  if (!isEngineInstalled(engine)) {
+    const message = `\`${engine}\` is not installed or not on your PATH. Install it and try again.`;
+    outputAgentError(
+      client,
+      {
+        status: "error",
+        reason: "engine_not_found",
+        message
+      },
+      1
+    );
+    return outputError(client, false, "ENGINE_NOT_FOUND", message);
+  }
+  const scope = await resolveVcrScope(client, { project, jsonOutput: false });
+  if (typeof scope === "number") {
+    return scope;
+  }
+  const parsed = parseNameArg(nameArg, scope.projectName);
+  if ("error" in parsed) {
+    outputAgentError(
+      client,
+      {
+        status: "error",
+        reason: AGENT_REASON.INVALID_ARGUMENTS,
+        message: parsed.error
+      },
+      1
+    );
+    return outputError(client, false, "INVALID_ARGUMENTS", parsed.error);
+  }
+  const validationError = validateImageParts(parsed);
+  if (validationError) {
+    outputAgentError(
+      client,
+      {
+        status: "error",
+        reason: AGENT_REASON.INVALID_ARGUMENTS,
+        message: validationError
+      },
+      1
+    );
+    return outputError(client, false, "INVALID_ARGUMENTS", validationError);
+  }
+  const base = buildRepositoryReference({
+    registry: resolveRegistry(),
+    teamSlug: scope.teamSlug,
+    projectName: scope.projectName,
+    repository: parsed.repository
+  });
+  const ref = `${base}:${parsed.tag ?? DEFAULT_TAG}`;
+  const contextPath = pathArg ?? ".";
+  const buildPlatform = platform ?? DEFAULT_PLATFORM;
+  if (push && engine === "docker" && await isBuildxAvailable()) {
+    const outputSpec = `type=image,name=${ref},push=true,oci-mediatypes=true,compression=zstd,compression-level=3,force-compression=true`;
+    const engineArgs2 = [
+      "buildx",
+      "build",
+      "--platform",
+      buildPlatform,
+      "--output",
+      outputSpec,
+      ...passthrough,
+      contextPath
+    ];
+    output_manager_default.log(`Running: ${engine} ${engineArgs2.join(" ")}`);
+    const result2 = await runEngine(engine, engineArgs2, {
+      cwd: client.cwd,
+      captureStderr: true
+    });
+    if (result2.exitCode !== 0) {
+      return reportEnginePushFailure(client, engine, "buildx build", result2);
+    }
+    output_manager_default.success(`Built and pushed ${ref} (zstd compression)`);
+    return 0;
+  }
+  if (push && engine === "docker") {
+    output_manager_default.warn(
+      "Docker Buildx is not available; building and pushing without zstd compression. Install Buildx for smaller, faster image pushes."
+    );
+  }
+  const engineArgs = [
+    "build",
+    "--platform",
+    buildPlatform,
+    "--tag",
+    ref,
+    ...passthrough,
+    contextPath
+  ];
+  output_manager_default.log(`Running: ${engine} ${engineArgs.join(" ")}`);
+  const result = await runEngine(engine, engineArgs, { cwd: client.cwd });
+  if (result.exitCode !== 0) {
+    return reportEngineCommandFailure(client, engine, "build", result);
+  }
+  if (!push) {
+    output_manager_default.success(`Built ${ref}`);
+    output_manager_default.log(
+      `Push it with \`${buildCommandWithGlobalFlags(
+        client.argv,
+        `vcr push ${engine}${nameArg ? ` ${nameArg}` : ""}`
+      )}\`.`
+    );
+    return 0;
+  }
+  const pushArgs = ["push", ...pushCompressionArgs(engine), ref];
+  output_manager_default.log(`Running: ${engine} ${pushArgs.join(" ")}`);
+  const pushResult = await runEngine(engine, pushArgs, {
+    cwd: client.cwd,
+    captureStderr: true
+  });
+  if (pushResult.exitCode !== 0) {
+    return reportEnginePushFailure(client, engine, "push", pushResult);
+  }
+  const compressed = engine !== "docker";
+  output_manager_default.success(
+    `Built and pushed ${ref}${compressed ? " (zstd compression)" : ""}`
+  );
+  return 0;
+}
+export {
+  build as default
+};

package/dist/chunks/{chunk-F5PQWDOC.js → chunk-2PPATWD6.js}

@@ -6,7 +6,7 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   ALIGNED_LABEL_WIDTH
-} from "./chunk-TBR2Q37Y.js";
+} from "./chunk-BX4IGDGM.js";
 import {
   require_ms
 } from "./chunk-GGP5R3FU.js";

package/dist/chunks/{chunk-DWMH5M4Q.js → chunk-2SFMOCWR.js}

@@ -6,7 +6,7 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   truncateEnd
-} from "./chunk-OF2GNB42.js";
+} from "./chunk-RQ7H43CJ.js";
 import {
   require_dist
 } from "./chunk-OX7KI3LF.js";