@nx/workspace 22.4.3 → 22.4.5

package/README.md

@@ -1,7 +1,7 @@
 <p style="text-align: center;">
   <picture>
     <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/nrwl/nx/master/images/nx-dark.svg">
-    <img alt="Nx - Smart Repos · Fast Builds" src="https://raw.githubusercontent.com/nrwl/nx/master/images/nx-light.svg" width="100%">
+    <img alt="Nx - Smart Monorepos · Fast Builds" src="https://raw.githubusercontent.com/nrwl/nx/master/images/nx-light.svg" width="100%">
   </picture>
 </p>
 
@@ -20,7 +20,7 @@
 
 <hr>
 
-# Nx: Smart Repos · Fast Builds
+# Nx: Smart Monorepos · Fast Builds
 
 Get to green PRs in half the time. Nx optimizes your builds, scales your CI, and fixes failed PRs. Built for developers and AI agents.
 
@@ -62,5 +62,5 @@ npx nx@latest init
 - [Blog Posts About Nx](https://nx.dev/blog)
 
 <p style="text-align: center;"><a href="https://nx.dev/#learning-materials" target="_blank" rel="noreferrer"><img src="https://raw.githubusercontent.com/nrwl/nx/master/images/nx-courses-and-videos.svg" 
-width="100%" alt="Nx - Smart Repos · Fast Builds"></a></p>
+width="100%" alt="Nx - Smart Monorepos · Fast Builds"></a></p>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nx/workspace",
-  "version": "22.4.3",
+  "version": "22.4.5",
   "private": false,
   "description": "The Workspace plugin contains executors and generators that are useful for any Nx workspace. It should be present in every Nx workspace and other plugins build on it.",
   "repository": {
@@ -38,7 +38,7 @@
     }
   },
   "dependencies": {
-    "@nx/devkit": "22.4.3",
+    "@nx/devkit": "22.4.5",
     "@zkochan/js-yaml": "0.0.7",
     "chalk": "^4.1.0",
     "enquirer": "~2.3.6",
@@ -46,10 +46,10 @@
     "semver": "^7.6.3",
     "tslib": "^2.3.0",
     "yargs-parser": "21.1.1",
-    "nx": "22.4.3"
+    "nx": "22.4.5"
   },
   "devDependencies": {
-    "nx": "22.4.3"
+    "nx": "22.4.5"
   },
   "publishConfig": {
     "access": "public"

package/src/generators/utils/get-npm-package-version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-npm-package-version.d.ts","sourceRoot":"","sources":["../../../../../../packages/workspace/src/generators/utils/get-npm-package-version.ts"],"names":[],"mappings":"AAAA,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,GAAG,IAAI,CA0Bf"}
+{"version":3,"file":"get-npm-package-version.d.ts","sourceRoot":"","sources":["../../../../../../packages/workspace/src/generators/utils/get-npm-package-version.ts"],"names":[],"mappings":"AAKA,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,GAAG,IAAI,CAmCf"}

package/src/generators/utils/get-npm-package-version.js

@@ -1,9 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getNpmPackageVersion = getNpmPackageVersion;
+// Valid npm package names: optional @scope/ prefix, then URL-safe chars (A-Za-z0-9 . - _ ~)
+// Must not start with . or _ per npm rules. Uppercase allowed for legacy packages.
+const validNpmPackageNameRegex = /^(@[a-zA-Z0-9~-][a-zA-Z0-9._~-]*\/)?[a-zA-Z0-9~-][a-zA-Z0-9._~-]*$/;
 function getNpmPackageVersion(packageName, packageVersion) {
+    if (!validNpmPackageNameRegex.test(packageName)) {
+        throw new Error(`Invalid npm package name: "${packageName}". Package names can only contain URL-safe characters (letters, digits, hyphens, dots, underscores, and tildes).`);
+    }
     try {
-        const version = require('child_process').execSync(`npm view ${packageName}${packageVersion ? '@' + packageVersion : ''} version --json`, {
+        const packageSpec = packageVersion
+            ? `${packageName}@${packageVersion}`
+            : packageName;
+        // Use npm.cmd on Windows since execFileSync without a shell can't run .cmd files
+        const npmBin = process.platform === 'win32' ? 'npm.cmd' : 'npm';
+        const version = require('child_process').execFileSync(npmBin, ['view', packageSpec, 'version', '--json'], {
             stdio: ['pipe', 'pipe', 'ignore'],
             windowsHide: false,
         });