@npmcli/template-oss 3.1.1 → 3.2.1

package/lib/apply/apply-files.js

@@ -18,7 +18,7 @@ module.exports = [{
     options.config.repoFiles,
     options
   ),
-  when: ({ config: c }) => c.isForce || (c.needsUpdate && c.applyRepo),
+  when: ({ config: c }) => c.applyRepo && c.needsUpdate,
   name: 'apply-repo',
 }, {
   run: (options) => run(
@@ -26,6 +26,6 @@ module.exports = [{
     options.config.moduleFiles,
     options
   ),
-  when: ({ config: c }) => c.isForce || (c.needsUpdate && c.applyModule),
+  when: ({ config: c }) => c.applyModule && c.needsUpdate,
   name: 'apply-module',
 }]

package/lib/apply/apply-version.js

@@ -0,0 +1,26 @@
+const log = require('proc-log')
+const PackageJson = require('@npmcli/package-json')
+
+const run = async ({ config: c }) => {
+  const {
+    moduleDir: dir,
+    __CONFIG_KEY__: key,
+    __VERSION__: version,
+  } = c
+
+  log.verbose('apply-version', dir)
+
+  const pkg = await PackageJson.load(dir)
+  if (!pkg.content[key]) {
+    pkg.content[key] = { version }
+  } else {
+    pkg.content[key].version = version
+  }
+  await pkg.save()
+}
+
+module.exports = {
+  run,
+  when: ({ config: c }) => c.needsUpdate && !c.isDogFood,
+  name: 'apply-version',
+}

package/lib/apply/index.js

@@ -2,4 +2,5 @@ const run = require('../index.js')
 
 module.exports = (root, content) => run(root, content, [
   require('./apply-files.js'),
+  require('./apply-version.js'),
 ])

package/lib/config.js

@@ -56,6 +56,7 @@ const getConfig = async ({
   const isRoot = root === path
   const isLatest = version === LATEST_VERSION
   const isDogFood = pkg.name === NAME
+  const isForce = process.argv.includes('--force')
 
   // this is written to ci yml files so it needs to always use posix
   const pkgRelPath = makePosix(relative(root, path))
@@ -111,16 +112,17 @@ const getConfig = async ({
     pkgName: pkg.name,
     pkgNameFs: pkg.name.replace(/\//g, '-').replace(/@/g, ''),
     pkgRelPath: pkgRelPath,
-    // force changes if we are dogfooding this repo or with force argv
-    // XXX: setup proper cli arg parsing
-    isForce: isDogFood || process.argv.includes('--force'),
+    // booleans to control application of updates
+    isForce,
+    isDogFood,
     isLatest,
-    needsUpdate: !isLatest,
+    // needs update if we are dogfooding this repo, with force argv, or its
+    // behind the current version
+    needsUpdate: isForce || isDogFood || !isLatest,
     // templateoss specific values
     __NAME__: NAME,
     __CONFIG_KEY__: CONFIG_KEY,
     __VERSION__: LATEST_VERSION,
-    __DOGFOOD__: isDogFood,
   }
 
   // merge the rest of base and pkg content to make the

package/lib/content/audit.yml

@@ -12,5 +12,5 @@ jobs:
     steps:
       {{> setupGit}}
       {{> setupNode}}
-      - run: npm i --package-lock
+      - run: npm i --ignore-scripts --package-lock
       - run: npm audit

package/lib/content/ci.yml

@@ -28,7 +28,7 @@ jobs:
     steps:
       {{> setupGit}}
       {{> setupNode}}
-      - run: npm i
+      - run: npm i --ignore-scripts
       - run: npm run lint {{~#if isWorkspace}} -w {{pkgName}}{{/if}}
 
   test:
@@ -55,5 +55,5 @@ jobs:
     steps:
       {{> setupGit}}
       {{> setupNode useMatrix=true}}
-      - run: npm i
+      - run: npm i --ignore-scripts
       - run: npm test --ignore-scripts {{~#if isWorkspace}} -w {{pkgName}}{{/if}}

package/lib/content/eslintrc.js

@@ -5,6 +5,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,

package/lib/content/index.js

@@ -53,6 +53,7 @@ const workspaceModule = {
   rm: [
     '.npmrc',
     '.eslintrc.!(js|local.*)',
+    'SECURITY.md',
   ],
 }
 

package/lib/content/pkg.json

@@ -20,7 +20,7 @@
     "node": {{{json engines}}}
   },
   {{{json __CONFIG_KEY__}}}: {
-    "version": {{#if __DOGFOOD__}}{{{del}}}{{else}}{{{json __VERSION__}}}{{/if}}
+    "version": {{#if isDogFood}}{{{del}}}{{else}}{{{json __VERSION__}}}{{/if}}
   },
   "templateVersion": {{{del}}},
   "standard": {{{del}}}

package/lib/content/post-dependabot.yml

@@ -5,6 +5,7 @@ on:
 
 # https://docs.github.com/en/rest/overview/permissions-required-for-github-apps
 permissions:
+  actions: write
   contents: write
 
 jobs:
@@ -25,7 +26,7 @@ jobs:
           GITHUB_TOKEN: $\{{ secrets.GITHUB_TOKEN }}
         run: |
           gh pr checkout $\{{ github.event.pull_request.number }}
-          npm install --no-scripts
+          npm install --ignore-scripts
           npm run template-oss-apply
           git add .
           git commit -am "chore: postinstall for dependabot template-oss PR"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@npmcli/template-oss",
-  "version": "3.1.1",
+  "version": "3.2.1",
   "description": "templated files used in npm CLI team oss projects",
   "main": "lib/content/index.js",
   "bin": {