@leverege/build-tools 2.115.0 → 2.115.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.115.0",
+  "version": "2.115.2",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {
@@ -38,6 +38,7 @@
     "generate-docs": "src/generate-docs.mjs",
     "getfbcfg": "src/getfbcfg.mjs",
     "getjson": "src/getjson.mjs",
+    "gh-audit-log": "src/gh-audit-log.mjs",
     "git-tar": "src/git-tar.sh",
     "github-actions-it": "src/github-actions-it.mjs",
     "helm-audit": "src/helm-audit.mjs",
@@ -89,7 +90,7 @@
     }
   },
   "dependencies": {
-    "@kubernetes/client-node": "^1.4.0",
+    "@kubernetes/client-node": "^2.0.0",
     "@leverege/jsdoc-template": "^1.0.1",
     "chalk": "^6.0.0",
     "command-line-args": "^6.0.2",
@@ -100,10 +101,10 @@
     "execa": "^10.0.1",
     "find-yarn-workspace-root": "^2.0.0",
     "glob": "^13.0.6",
-    "googleapis": "^174.0.1",
+    "googleapis": "^176.0.0",
     "handlebars": "^4.7.9",
     "ignore": "^7.0.6",
-    "inquirer": "^14.0.2",
+    "inquirer": "^14.1.0",
     "js-yaml": "^4.2.0",
     "jsdoc": "^4.0.5",
     "ms": "^2.1.3",

package/src/helm-charts/cnpg-operator/helmup.bootstrap

@@ -124,6 +124,29 @@ SKIP_CNPG_SA_CREATION
     gsutil ubla set on $BARMAN_BUCKET # uniform bucket access
   fi
 
+  # Apply WAL lifecycle policy idempotently: Coldline after 7 days, delete after 30.
+  # Matches the 21-day snapshot retention window with buffer.
+  if gsutil lifecycle get $BARMAN_BUCKET 2>/dev/null | grep -q "COLDLINE"; then
+    printf "\nBarman bucket lifecycle already configured - skipping\n"
+  else
+    printf "\nApplying lifecycle policy to barman bucket `color g $BARMAN_BUCKET`\n"
+    cat<<LIFECYCLE | gsutil lifecycle set /dev/stdin $BARMAN_BUCKET
+{
+  "rule": [
+    {
+      "action": {"type": "SetStorageClass", "storageClass": "COLDLINE"},
+      "condition": {"age": 7}
+    },
+    {
+      "action": {"type": "Delete"},
+      "condition": {"age": 30}
+    }
+  ]
+}
+LIFECYCLE
+    exitOnError $? "Failed to set lifecycle policy on $BARMAN_BUCKET"
+  fi
+
   # define the snapshot storage class
   printf "\nApplying the CNPG VolumeSnapshotClass `color g cnpg-snapshotclass` definition\n"
   cat<<EOSNAPSC | kubectl apply -f -

package/src/helm-charts/cnpg-operator/helmup.plugin

@@ -3,7 +3,7 @@
 # See => https://cloudnative-pg.io/documentation/current/installation_upgrade/
 #
 OPVER="1.26.1"      # 10/08/2025
-BARMAN_VER="0.11.0"
+BARMAN_VER="0.14.0"
 
 createNamespaceIfNeeded cnpg-system
 

package/src/helmup.sh

@@ -59,7 +59,7 @@ for arg in "$@"; do
       export BUILD_TOOLS_DEBUG=1
       ;;
     --dry-run)
-      export HELM_WHAT="--dry-run --debug"
+      export HELM_WHAT="--dry-run=client --debug"
       export K8S_WHAT="--dry-run=server -o yaml"
       ;;
     *)
@@ -741,7 +741,7 @@ function doInstall() {
     [ ! -z "$CHARTVER" ] && CHARTVER="--version $CHARTVER"
 
     # set the dry-run flag on what
-    [ "$INVOKED_AS" == "helmwhat" ] && HELM_WHAT="--dry-run --debug" && K8S_WHAT="--dry-run=server -o yaml"
+    [ "$INVOKED_AS" == "helmwhat" ] && HELM_WHAT="--dry-run=client --debug" && K8S_WHAT="--dry-run=server -o yaml"
 
     # helminit is used to redeploy an existing service
     if [[ "$INVOKED_AS" == "helminit" ]] && isLeveregeService $SERVICE;

package/src/overwhelm.mjs

@@ -400,6 +400,9 @@ log( `\n\nExecuting: ${chalk.bold.yellow( cmd )}\n\n` )
 try {
   await shellCmd( cmd )
 } catch ( error ) {
-  err( { error, cmd }, '***ERROR overwhelm' )
+  if ( error.stderr ) {
+    err( chalk.red( error.stderr ) )
+  }
+  err( chalk.red( '\n***ERROR: failed to fetch the Kubernetes context\n' ) )
   process.exit( 1 )
 }

package/src/prepack.mjs

@@ -18,15 +18,20 @@ const { compile, 'manual-tag' : manualTag, 'force-tag' : forceTag, 'push-tag' :
   boolean : [ 'compile', 'manual-tag', 'force-tag', 'push-tag' ]
 } )
 
-try {
-  await $`git diff --exit-code --quiet`
-} catch ( err ) {
-  console.log( chalk.redBright( 'Your git index is not clean. Stage and/or commit all changes before attempting to publish a version to npm.' ) )
-  process.exit( err.exitCode )
-}
-
-const isYarn = ( await fs.exists( path.join( process.cwd(), 'yarn.lock' ) ) ) || ( await fs.exists( path.join( process.cwd(), '.yarn' ) ) )
 const packageJson = await fs.readJSON( path.join( process.cwd(), 'package.json' ) )
+const isYarn = ( await fs.exists( path.join( process.cwd(), 'yarn.lock' ) ) ) || ( await fs.exists( path.join( process.cwd(), '.yarn' ) ) )
+const version = packageJson.version
+const semanticVersion = semverParse( version )
+const isPrerelease = semanticVersion.prerelease.length > 0
+
+if ( !isPrerelease ) {
+  try {
+    await $`git diff --exit-code --quiet`
+  } catch ( err ) {
+    console.log( chalk.redBright( 'Your git index is not clean. Stage and/or commit all changes before attempting to publish a version to npm.' ) )
+    process.exit( err.exitCode )
+  }
+}
 
 if ( compile && packageJson.scripts?.compile != null ) {
   try {
@@ -38,10 +43,6 @@ if ( compile && packageJson.scripts?.compile != null ) {
   }
 }
 
-const version = packageJson.version
-const semanticVersion = semverParse( version )
-const isPrerelease = semanticVersion.prerelease.length > 0
-
 if ( !isPrerelease || forceTag ) {
   const name = packageJson.name.replace( /^@leverege\//, '' )
   const isWorkspace = await isInWorkspace( process.cwd() )
@@ -66,7 +67,7 @@ if ( !isPrerelease || forceTag ) {
     try {
       await $( {
         quiet : true
-      } )`git push --tags`
+      } )`git push origin ${tagName}`
     } catch ( error ) {
       process.stderr.write( chalk.redBright( 'Failed to push git tag with error:\n' ) )
       process.stderr.write( error.text() )
@@ -90,14 +91,14 @@ function compileCmd( { isYarn } ) {
 async function isInWorkspace( dir ) {
   const parent = path.dirname( dir )
   if ( parent === dir ) {
-    return false 
+    return false
   }
 
   const parentPkgPath = path.join( parent, 'package.json' )
   if ( await fs.exists( parentPkgPath ) ) {
     const pkg = JSON.parse( await fs.readFile( parentPkgPath, 'utf8' ) )
     if ( pkg.workspaces ) {
-      return true 
+      return true
     }
   }
 

package/src/repo-panopticon.mjs

@@ -29,7 +29,10 @@ const CHECKS = [
     label : 'cir',
     fn    : ( { gitRoot } ) => {
       const cfgPath = path.join( gitRoot, '.circleci', 'config.yml' )
-      if ( !fs.existsSync( cfgPath ) ) return { value : SYM_BAD }
+      if ( !fs.existsSync( cfgPath ) ) {
+        const hasGHA = fs.existsSync( path.join( gitRoot, '.github', 'workflows', 'ci.yml' ) )
+        return { value : hasGHA ? chalk.cyan( '★' ) : SYM_BAD }
+      }
       try {
         const content = fs.readFileSync( cfgPath, 'utf8' )
         const match = content.match( /leverege\/circle-nodejs-ci@(\d+\.\d+\.\d+)/ )
@@ -339,7 +342,7 @@ ${chalk.yellow( 'Columns:' )}
   ${chalk.green( 'tag' )}    latest semver git tag (green=match, yellow=mismatch, red=untagged)
   ${chalk.green( 'name' )}  orange if dirty: pull/fetch failed (regular repos) or local modifications present (workspace packages)
   ${chalk.green( 'scope' )}  package scope: @org, PRVT, or PUBL
-  ${chalk.green( 'cir' )}    CI status: ✘=missing, L=legacy, 1=orb v1, green 2/★=orb v2 current, yellow 2/★=orb v2 stale
+  ${chalk.green( 'cir' )}    CI status: ✘=missing, cyan ★=fully on GHA, L=legacy, 1=orb v1, green 2/★=orb v2 current, yellow 2/★=orb v2 stale
   ${chalk.green( 'ESM' )}    "type": "module" in package.json
   ${chalk.green( 'har' )}    .har directory present at repo root
   ${chalk.green( 'lnt' )}    ESLint version from node_modules (✘=no lint script, ?=not installed, yellow=v8, green=v9+)