@leverege/build-tools 2.104.0 → 2.105.0

package/README.md

@@ -17,6 +17,7 @@ Most tools assume the following are installed and configured:
 - `helm` (v3+)
 - `fzf` (for interactive pod selection in `k8x` and `klog`)
 - Node.js 22+ - prefer 24
+- npm 11.10+
 
 ---
 
@@ -121,12 +122,14 @@ Secrets are defined as JSON files in `src/service-man/config/secrets/`. See the
 ### Docker Image Management
 
 **`docker-to-registry`** — Builds and pushes Docker images (Node.js/general) to GCP
-Artifact Registry with git tagging.
+Artifact Registry with git tagging. Any non-semver version string (e.g. `latest`) is
+treated as a beta build and skips git tagging.
 ```bash
-docker-to-registry <version>          # e.g. docker-to-registry v1.2.3
-docker-to-registry latest             # beta build — any non-semver version skips git tagging
+docker-to-registry v1.2.3            # tagged release build
+docker-to-registry latest            # beta build — skips git tagging
 docker-to-registry v1.2.3 --dry-run  # skip confirmation prompt
 docker-to-registry guide-me          # print helm/registry migration guidance
+docker-to-registry v1.2.3 --debug    # enable debug logging
 ```
 
 **`build-cnpg-image`** — Builds a custom CloudNative PostgreSQL image with jsquery and
@@ -221,11 +224,20 @@ package releases. Runs automatically as the npm `prepare` lifecycle hook.
 prepack [--compile] [--manual-tag] [--force-tag] [--push-tag]
 ```
 
-**`refresh-npm-token`** — Refreshes the Leverege npm registry token from GCP Secret
-Manager, updating `.npmrc` / `.yarnrc.yml`. Skips refresh if the token is less than
-24 hours old.
-```bash
-refresh-npm-token [--project <id>] [--force] [--dry-run]
+**`refresh-npm-token`** — Fetches the current npm token and rc file templates from GCP
+Secret Manager and overwrites `~/.npmrc` and `~/.yarnrc.yml`. DevOps controls the full
+content of both files via three secrets: `REFRESH_NPM_TOKEN` (raw token),
+`REFRESH_NPM_NPMRC`, and `REFRESH_NPM_YARNRC` (templates with `${REFRESH_NPM_TOKEN}`
+placeholder). Skips refresh if `~/.npmrc` is less than 24 hours old. On first run,
+existing rc files are preserved as `.LEGACY` before being overwritten.
+```bash
+refresh-npm-token                        # refresh if older than 24h
+refresh-npm-token --force                # always refresh
+refresh-npm-token --beta                 # use _BETA template secrets (migration testing)
+refresh-npm-token --dry-run              # fetch and validate without writing files
+refresh-npm-token --no-version-check     # warn on version requirements but continue
+refresh-npm-token --no-update-yarnrc     # skip ~/.yarnrc.yml update
+refresh-npm-token --npmrc-age 1h         # custom age threshold
 ```
 
 **`repo-panopticon`** — Multi-repo health dashboard. Checks each repository against a suite

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.104.0",
+  "version": "2.105.0",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {
@@ -71,8 +71,8 @@
   },
   "author": "Leverege Devs",
   "engines": {
-    "node": "^22.11 || >=24",
-    "npm": ">=10.2 || >=11.6"
+    "node": "^22.22 || >=24.15",
+    "npm": ">=11.10"
   },
   "license": "SEE LICENSE IN LICENSE.md",
   "dependencies": {
@@ -87,24 +87,24 @@
     "execa": "^9.6.1",
     "find-yarn-workspace-root": "^2.0.0",
     "glob": "^13.0.6",
-    "googleapis": "^171.4.0",
+    "googleapis": "^172.0.0",
     "handlebars": "^4.7.9",
     "ignore": "^7.0.5",
-    "inquirer": "^13.4.3",
+    "inquirer": "^14.0.0",
     "js-yaml": "^4.1.1",
     "jsdoc": "^4.0.5",
     "ms": "^2.1.3",
-    "npm-registry-fetch": "^19.1.1",
+    "npm-registry-fetch": "^20.0.0",
     "ora": "^9.4.0",
     "p-limit": "^7.3.0",
     "package-up": "^5.0.0",
     "readline-sync": "^1.4.10",
-    "semver": "^7.8.0",
-    "shell-quote": "^1.8.3",
+    "semver": "^7.8.1",
+    "shell-quote": "^1.8.4",
     "simple-git": "^3.36.0",
     "sloc": "^0.3.2",
     "superstruct": "^2.0.2",
-    "tmp": "^0.2.5",
+    "tmp": "^0.2.6",
     "toml": "^4.1.1",
     "yaml": "^2.9.0",
     "zx": "^8.8.5"
@@ -113,7 +113,7 @@
     "@leverege/eslint-config-leverege": "^9.0.1",
     "chai": "^6.2.2",
     "eslint": "^9",
-    "mocha": "^11.7.5",
-    "npm": "^11.14.1"
+    "mocha": "^11.7.6",
+    "npm": "^11.15.0"
   }
 }

package/src/Utils.mjs

@@ -146,6 +146,35 @@ export const shellCmd = async ( cmd, opts = {} ) => {
   }
 }
 
+export const versionChecks = async ( { node, npm, strict = true } = {} ) => {
+  const check = ( tool, raw, { min, preferred, hint } = {} ) => {
+    const current = semver.coerce( raw )
+    if ( !current ) {
+      warning( `could not parse ${tool} version: "${raw}"` )
+      return
+    }
+    debug( { tool, current : current.version, min, preferred, strict }, '<==versionChecks' )
+    const hintSuffix = hint ? ` — ${hint}` : ''
+    if ( min && semver.lt( current, min ) ) {
+      const msg = `${tool} ${min} or later is required (found ${current.version})${hintSuffix}`
+      if ( strict ) {
+        errorExit( `***ERROR: ${msg}` )
+      } else {
+        warning( `${msg} — continuing due to --no-version-check` )
+      }
+    }
+    if ( preferred && semver.lt( current, preferred ) ) {
+      warning( `${tool} ${preferred} or later is preferred (found ${current.version})` )
+    }
+  }
+
+  if ( node ) { check( 'node', process.version, node ) }
+  if ( npm ) {
+    const raw = ( await shellCmd( 'npm --version' ) ).trim()
+    check( 'npm', raw, npm )
+  }
+}
+
 export const establishOauthAccess = async ( registryLocation = 'us-docker.pkg.dev' ) => {
   // gcloud auth print-access-token | helm registry login -u oauth2accesstoken \
   // -p ${password} https://us-docker.pkg.dev

package/src/bash-funcs

@@ -270,7 +270,7 @@ function sendToSlack() {
   read -rd '' slackmsg<<EOSLACK
 --- $running by \`$account\` in \`$GCP_PROJECT_ID\` @ $dts
 \`$toPost\`
-node `node --version` / `build-tools --version` /  helm `helm version --short`
+node `node --version` / npm `npm --version` / `build-tools --version` /  helm `helm version --short`
 EOSLACK
   send-to-slack --project ${REFRESH_NPM_PROJECT:-leverege-registry} \
                 --config REFRESH_NPM_SLACK_CONFIG \