@lzear/repo-lint 4.3.0 → 4.4.1

package/README.md

@@ -83,7 +83,7 @@ const report = await runUpdate({ dry: true })
 | `readme-npm-badge`    | README has an npm badge                                   |
 | `codacy`              | Codacy grade & coverage badges in README, `.codacy.yml`   |
 | `license`             | `LICENSE` exists                                          |
-| `ci-workflow`         | `.github/workflows/ci.yml` exists                         |
+| `ci-workflow`         | a workflow calls the forge reusable CI workflow           |
 | `renovate`            | `renovate.json` exists                                    |
 | `pkg-publint`         | All published packages pass `publint`                     |
 | `pkg-attw`            | All published packages pass `attw` (ESM-only profile)     |

package/dist/bin.js

@@ -22,6 +22,7 @@ import { maxSatisfying, satisfies } from "semver";
 
 // src/update.ts
 import { spawnSync } from "child_process";
+import { createHash } from "crypto";
 import { existsSync, readFileSync, writeFileSync } from "fs";
 import path from "path";
 import { pathToFileURL } from "url";
@@ -129,6 +130,17 @@ var readmeIncludes = (dir, needle) => {
   const f = path2.join(dir, "README.md");
   return existsSync2(f) && readFileSync2(f, "utf8").includes(needle);
 };
+var FORGE_WORKFLOW_RE = /uses:\s*lzear\/forge\/\.github\/workflows\/ci\.yml@/;
+var isForgeRepo = (dir) => getWorkspaceDirectories(dir).some(
+  (d) => readPackage(d)?.name === "@lzear/forge"
+);
+var callsForgeWorkflow = (dir) => {
+  const wfDir = path2.join(dir, ".github", "workflows");
+  if (!existsSync2(wfDir)) return false;
+  return readdirSync(wfDir).filter((f) => /\.ya?ml$/.test(f)).some(
+    (f) => FORGE_WORKFLOW_RE.test(readFileSync2(path2.join(wfDir, f), "utf8"))
+  );
+};
 var auditCommand = (pm) => {
   switch (pm.name) {
     case "npm":
@@ -232,10 +244,16 @@ var LOCAL_CHECKS = [
   },
   {
     id: "ci-workflow",
-    desc: "CI workflow",
+    desc: "CI calls forge workflow",
     type: "local",
     publishedOnly: true,
-    check: (dir) => existsSync2(path2.join(dir, ".github/workflows/ci.yml"))
+    check: (dir) => {
+      if (callsForgeWorkflow(dir) || isForgeRepo(dir)) return true;
+      return {
+        pass: false,
+        detail: "no workflow calls the forge reusable CI \u2014 replace the local ci.yml copy with:\n  jobs:\n    ci:\n      uses: lzear/forge/.github/workflows/ci.yml@<sha> # vX.Y.Z\n(pin to a commit SHA; renovate keeps it fresh)"
+      };
+    }
   },
   {
     id: "renovate",

package/dist/index.js

@@ -15,6 +15,7 @@ import { maxSatisfying, satisfies } from "semver";
 
 // src/update.ts
 import { spawnSync } from "child_process";
+import { createHash } from "crypto";
 import { existsSync, readFileSync, writeFileSync } from "fs";
 import path from "path";
 import { pathToFileURL } from "url";
@@ -297,7 +298,8 @@ var installCommands = (pm) => {
         ["yarn", "upgrade"]
       ] : [
         ["yarn", "install"],
-        ["yarn", "up", "--recursive", "*"],
+        // '*' alone skips scoped packages (@foo/bar) — needs '@*/*' too
+        ["yarn", "up", "--recursive", "*", "@*/*"],
         ["yarn", "dedupe"]
       ];
     case "npm":
@@ -308,11 +310,13 @@ var installCommands = (pm) => {
       ];
   }
 };
+var lockfileHash = (dir) => LOCKFILES.map(([f]) => path.join(dir, f)).filter((f) => existsSync(f)).map((f) => createHash("sha256").update(readFileSync(f)).digest("hex")).join("|");
 var stepInstall = (dir, pm) => {
   const base = {
     id: "install",
     desc: `install & refresh lockfile (${pm.name})`
   };
+  const before = lockfileHash(dir);
   const lines = [];
   for (const [command, ...arguments_] of installCommands(pm)) {
     lines.push(`$ ${[command, ...arguments_].join(" ")}`);
@@ -324,12 +328,18 @@ var stepInstall = (dir, pm) => {
       return {
         ...base,
         pass: false,
-        changed: true,
+        changed: lockfileHash(dir) !== before,
         detail: `${lines.join("\n")}
 exited with ${result.status ?? "signal"}`
       };
   }
-  return { ...base, pass: true, changed: true, detail: lines.join("\n") };
+  const changed = lockfileHash(dir) !== before;
+  return {
+    ...base,
+    pass: true,
+    changed,
+    detail: changed ? lines.join("\n") : "lockfile unchanged"
+  };
 };
 var runUpdate = async (options = {}) => {
   const {
@@ -423,6 +433,17 @@ var readmeIncludes = (dir, needle) => {
   const f = path2.join(dir, "README.md");
   return existsSync2(f) && readFileSync2(f, "utf8").includes(needle);
 };
+var FORGE_WORKFLOW_RE = /uses:\s*lzear\/forge\/\.github\/workflows\/ci\.yml@/;
+var isForgeRepo = (dir) => getWorkspaceDirectories(dir).some(
+  (d) => readPackage(d)?.name === "@lzear/forge"
+);
+var callsForgeWorkflow = (dir) => {
+  const wfDir = path2.join(dir, ".github", "workflows");
+  if (!existsSync2(wfDir)) return false;
+  return readdirSync(wfDir).filter((f) => /\.ya?ml$/.test(f)).some(
+    (f) => FORGE_WORKFLOW_RE.test(readFileSync2(path2.join(wfDir, f), "utf8"))
+  );
+};
 var auditCommand = (pm) => {
   switch (pm.name) {
     case "npm":
@@ -526,10 +547,16 @@ var LOCAL_CHECKS = [
   },
   {
     id: "ci-workflow",
-    desc: "CI workflow",
+    desc: "CI calls forge workflow",
     type: "local",
     publishedOnly: true,
-    check: (dir) => existsSync2(path2.join(dir, ".github/workflows/ci.yml"))
+    check: (dir) => {
+      if (callsForgeWorkflow(dir) || isForgeRepo(dir)) return true;
+      return {
+        pass: false,
+        detail: "no workflow calls the forge reusable CI \u2014 replace the local ci.yml copy with:\n  jobs:\n    ci:\n      uses: lzear/forge/.github/workflows/ci.yml@<sha> # vX.Y.Z\n(pin to a commit SHA; renovate keeps it fresh)"
+      };
+    }
   },
   {
     id: "renovate",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lzear/repo-lint",
-  "version": "4.3.0",
+  "version": "4.4.1",
   "description": "Checks lzear repos against forge standards",
   "license": "MIT",
   "repository": {
@@ -51,7 +51,7 @@
     "sherif": "^1"
   },
   "devDependencies": {
-    "@lzear/configs": "4.3.0",
+    "@lzear/configs": "4.4.1",
     "@types/node": "^26",
     "@types/semver": "^7",
     "@vitest/coverage-v8": "^4",