@lzear/repo-lint 4.4.0 → 4.4.1

package/dist/bin.js

@@ -22,6 +22,7 @@ import { maxSatisfying, satisfies } from "semver";
 
 // src/update.ts
 import { spawnSync } from "child_process";
+import { createHash } from "crypto";
 import { existsSync, readFileSync, writeFileSync } from "fs";
 import path from "path";
 import { pathToFileURL } from "url";

package/dist/index.js

@@ -15,6 +15,7 @@ import { maxSatisfying, satisfies } from "semver";
 
 // src/update.ts
 import { spawnSync } from "child_process";
+import { createHash } from "crypto";
 import { existsSync, readFileSync, writeFileSync } from "fs";
 import path from "path";
 import { pathToFileURL } from "url";
@@ -297,7 +298,8 @@ var installCommands = (pm) => {
         ["yarn", "upgrade"]
       ] : [
         ["yarn", "install"],
-        ["yarn", "up", "--recursive", "*"],
+        // '*' alone skips scoped packages (@foo/bar) — needs '@*/*' too
+        ["yarn", "up", "--recursive", "*", "@*/*"],
         ["yarn", "dedupe"]
       ];
     case "npm":
@@ -308,11 +310,13 @@ var installCommands = (pm) => {
       ];
   }
 };
+var lockfileHash = (dir) => LOCKFILES.map(([f]) => path.join(dir, f)).filter((f) => existsSync(f)).map((f) => createHash("sha256").update(readFileSync(f)).digest("hex")).join("|");
 var stepInstall = (dir, pm) => {
   const base = {
     id: "install",
     desc: `install & refresh lockfile (${pm.name})`
   };
+  const before = lockfileHash(dir);
   const lines = [];
   for (const [command, ...arguments_] of installCommands(pm)) {
     lines.push(`$ ${[command, ...arguments_].join(" ")}`);
@@ -324,12 +328,18 @@ var stepInstall = (dir, pm) => {
       return {
         ...base,
         pass: false,
-        changed: true,
+        changed: lockfileHash(dir) !== before,
         detail: `${lines.join("\n")}
 exited with ${result.status ?? "signal"}`
       };
   }
-  return { ...base, pass: true, changed: true, detail: lines.join("\n") };
+  const changed = lockfileHash(dir) !== before;
+  return {
+    ...base,
+    pass: true,
+    changed,
+    detail: changed ? lines.join("\n") : "lockfile unchanged"
+  };
 };
 var runUpdate = async (options = {}) => {
   const {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lzear/repo-lint",
-  "version": "4.4.0",
+  "version": "4.4.1",
   "description": "Checks lzear repos against forge standards",
   "license": "MIT",
   "repository": {
@@ -51,7 +51,7 @@
     "sherif": "^1"
   },
   "devDependencies": {
-    "@lzear/configs": "4.4.0",
+    "@lzear/configs": "4.4.1",
     "@types/node": "^26",
     "@types/semver": "^7",
     "@vitest/coverage-v8": "^4",