@openrewrite/rewrite 8.69.0-20251210-164937 → 8.69.0-20251210-194227

package/dist/javascript/recipes/upgrade-transitive-dependency-version.js

@@ -0,0 +1,388 @@
+"use strict";
+/*
+ * Copyright 2025 the original author or authors.
+ * <p>
+ * Licensed under the Moderne Source Available License (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * <p>
+ * https://docs.moderne.io/licensing/moderne-source-available-license
+ * <p>
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __asyncValues = (this && this.__asyncValues) || function (o) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var m = o[Symbol.asyncIterator], i;
+    return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
+    function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
+    function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpgradeTransitiveDependencyVersion = void 0;
+const recipe_1 = require("../../recipe");
+const json_1 = require("../../json");
+const node_resolution_result_1 = require("../node-resolution-result");
+const path = __importStar(require("path"));
+const semver = __importStar(require("semver"));
+const markers_1 = require("../../markers");
+const print_1 = require("../../print");
+const package_manager_1 = require("../package-manager");
+const dependency_manager_1 = require("../dependency-manager");
+/**
+ * Upgrades the version of a transitive dependency by adding override entries to package.json.
+ *
+ * This recipe is used when you need to upgrade a dependency that is not directly declared
+ * in your package.json, but is pulled in transitively by one of your direct dependencies.
+ * This is commonly needed for security vulnerability remediation.
+ *
+ * The recipe adds entries to:
+ * - `overrides` for npm and Bun
+ * - `resolutions` for Yarn (Classic and Berry)
+ * - `pnpm.overrides` for pnpm
+ *
+ * @see UpgradeDependencyVersion for upgrading direct dependencies
+ */
+class UpgradeTransitiveDependencyVersion extends recipe_1.ScanningRecipe {
+    constructor() {
+        super(...arguments);
+        this.name = "org.openrewrite.javascript.dependencies.upgrade-transitive-dependency-version";
+        this.displayName = "Upgrade transitive npm dependency version";
+        this.description = "Upgrades the version of a transitive dependency by adding override/resolution entries to `package.json` and updates the lock file by running the package manager.";
+    }
+    initialValue(_ctx) {
+        return {
+            projectsToUpdate: new Map(),
+            updatedLockFiles: new Map(),
+            updatedPackageJsons: new Map(),
+            processedProjects: new Set(),
+            failedProjects: new Map()
+        };
+    }
+    scanner(acc) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const recipe = this;
+            return new class extends json_1.JsonVisitor {
+                visitDocument(doc, _ctx) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        var _a;
+                        // Only process package.json files
+                        if (!doc.sourcePath.endsWith('package.json')) {
+                            return doc;
+                        }
+                        const marker = (0, node_resolution_result_1.findNodeResolutionResult)(doc);
+                        if (!marker) {
+                            return doc;
+                        }
+                        // Get the project directory and package manager
+                        const projectDir = path.dirname(path.resolve(doc.sourcePath));
+                        const pm = (_a = marker.packageManager) !== null && _a !== void 0 ? _a : node_resolution_result_1.PackageManager.Npm;
+                        // Check if package is a direct dependency - if so, skip (use UpgradeDependencyVersion instead)
+                        const scopes = ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies'];
+                        for (const scope of scopes) {
+                            const deps = marker[scope];
+                            if (deps === null || deps === void 0 ? void 0 : deps.find(d => d.name === recipe.packageName)) {
+                                // Package is a direct dependency, don't add override
+                                return doc;
+                            }
+                        }
+                        // Check if package exists as a transitive dependency (in resolvedDependencies)
+                        // Note: There may be multiple versions of the same package installed
+                        const resolvedVersions = node_resolution_result_1.NodeResolutionResultQueries.getAllResolvedVersions(marker, recipe.packageName);
+                        if (resolvedVersions.length === 0) {
+                            // Package not found in resolved dependencies at all
+                            return doc;
+                        }
+                        // Check if ANY resolved version needs upgrading
+                        // We need an override if at least one installed version doesn't satisfy the constraint
+                        const anyVersionNeedsUpgrade = resolvedVersions.some(rd => !semver.satisfies(rd.version, recipe.newVersion));
+                        if (!anyVersionNeedsUpgrade) {
+                            // All installed versions already satisfy the constraint
+                            return doc;
+                        }
+                        // Parse dependency path if specified
+                        const dependencyPathSegments = recipe.dependencyPath
+                            ? (0, dependency_manager_1.parseDependencyPath)(recipe.dependencyPath)
+                            : undefined;
+                        acc.projectsToUpdate.set(doc.sourcePath, {
+                            projectDir,
+                            packageJsonPath: doc.sourcePath,
+                            originalPackageJson: yield this.printDocument(doc),
+                            newVersion: recipe.newVersion,
+                            packageManager: pm,
+                            skipInstall: false, // Always need to run install for overrides
+                            dependencyPathSegments
+                        });
+                        return doc;
+                    });
+                }
+                printDocument(doc) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        return print_1.TreePrinters.print(doc);
+                    });
+                }
+            };
+        });
+    }
+    editorWithData(acc) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const recipe = this;
+            return new class extends json_1.JsonVisitor {
+                visitDocument(doc, ctx) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        const sourcePath = doc.sourcePath;
+                        // Handle package.json files
+                        if (sourcePath.endsWith('package.json')) {
+                            const updateInfo = acc.projectsToUpdate.get(sourcePath);
+                            if (!updateInfo) {
+                                return doc; // This package.json doesn't need updating
+                            }
+                            // Run package manager install if we haven't processed this project yet
+                            if (!acc.processedProjects.has(sourcePath)) {
+                                yield recipe.runPackageManagerInstall(acc, updateInfo, ctx);
+                                acc.processedProjects.add(sourcePath);
+                            }
+                            // Check if the install failed - if so, don't update, just add warning
+                            const failureMessage = acc.failedProjects.get(sourcePath);
+                            if (failureMessage) {
+                                return (0, markers_1.markupWarn)(doc, `Failed to add override for ${recipe.packageName} to ${recipe.newVersion}`, failureMessage);
+                            }
+                            // Add override entries
+                            const modifiedDoc = yield this.addOverrideEntry(doc, updateInfo);
+                            // Update the NodeResolutionResult marker
+                            return recipe.updateMarker(modifiedDoc, updateInfo, acc);
+                        }
+                        // Handle lock files for all package managers
+                        for (const lockFileName of (0, package_manager_1.getAllLockFileNames)()) {
+                            if (sourcePath.endsWith(lockFileName)) {
+                                // Find the corresponding package.json path
+                                const packageJsonPath = sourcePath.replace(lockFileName, 'package.json');
+                                const updateInfo = acc.projectsToUpdate.get(packageJsonPath);
+                                if (updateInfo && acc.updatedLockFiles.has(sourcePath)) {
+                                    // Parse the updated lock file content and return it
+                                    const updatedContent = acc.updatedLockFiles.get(sourcePath);
+                                    return this.parseUpdatedLockFile(doc, updatedContent);
+                                }
+                                break;
+                            }
+                        }
+                        return doc;
+                    });
+                }
+                /**
+                 * Adds override entry to package.json for transitive dependency upgrade.
+                 */
+                addOverrideEntry(doc, updateInfo) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        var _a, e_1, _b, _c;
+                        // Parse current package.json content
+                        const currentContent = yield print_1.TreePrinters.print(doc);
+                        let packageJson;
+                        try {
+                            packageJson = JSON.parse(currentContent);
+                        }
+                        catch (_d) {
+                            return doc; // Can't parse, return unchanged
+                        }
+                        // Apply override
+                        const modifiedPackageJson = (0, dependency_manager_1.applyOverrideToPackageJson)(packageJson, updateInfo.packageManager, recipe.packageName, updateInfo.newVersion, updateInfo.dependencyPathSegments);
+                        // Serialize back to JSON, preserving indentation
+                        const indentMatch = currentContent.match(/^(\s+)"/m);
+                        const indent = indentMatch ? indentMatch[1].length : 2;
+                        const newContent = JSON.stringify(modifiedPackageJson, null, indent);
+                        // Re-parse with JsonParser to get proper AST
+                        const parser = new json_1.JsonParser({});
+                        const parsed = [];
+                        try {
+                            for (var _e = true, _f = __asyncValues(parser.parse({ text: newContent, sourcePath: doc.sourcePath })), _g; _g = yield _f.next(), _a = _g.done, !_a; _e = true) {
+                                _c = _g.value;
+                                _e = false;
+                                const sf = _c;
+                                parsed.push(sf);
+                            }
+                        }
+                        catch (e_1_1) { e_1 = { error: e_1_1 }; }
+                        finally {
+                            try {
+                                if (!_e && !_a && (_b = _f.return)) yield _b.call(_f);
+                            }
+                            finally { if (e_1) throw e_1.error; }
+                        }
+                        if (parsed.length > 0) {
+                            return Object.assign(Object.assign({}, parsed[0]), { sourcePath: doc.sourcePath, markers: doc.markers });
+                        }
+                        return doc;
+                    });
+                }
+                /**
+                 * Parses updated lock file content and creates a new document.
+                 */
+                parseUpdatedLockFile(originalDoc, updatedContent) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        var _a, e_2, _b, _c;
+                        const parser = new json_1.JsonParser({});
+                        const parsed = [];
+                        try {
+                            for (var _d = true, _e = __asyncValues(parser.parse({ text: updatedContent, sourcePath: originalDoc.sourcePath })), _f; _f = yield _e.next(), _a = _f.done, !_a; _d = true) {
+                                _c = _f.value;
+                                _d = false;
+                                const sf = _c;
+                                parsed.push(sf);
+                            }
+                        }
+                        catch (e_2_1) { e_2 = { error: e_2_1 }; }
+                        finally {
+                            try {
+                                if (!_d && !_a && (_b = _e.return)) yield _b.call(_e);
+                            }
+                            finally { if (e_2) throw e_2.error; }
+                        }
+                        if (parsed.length > 0) {
+                            return Object.assign(Object.assign({}, parsed[0]), { sourcePath: originalDoc.sourcePath, markers: originalDoc.markers });
+                        }
+                        return originalDoc;
+                    });
+                }
+            };
+        });
+    }
+    /**
+     * Runs the package manager in a temporary directory to update the lock file.
+     */
+    runPackageManagerInstall(acc, updateInfo, _ctx) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // Create modified package.json with the override
+            const modifiedPackageJson = this.createModifiedPackageJson(updateInfo.originalPackageJson, updateInfo);
+            const result = yield (0, package_manager_1.runInstallInTempDir)(updateInfo.projectDir, updateInfo.packageManager, modifiedPackageJson);
+            if (result.success) {
+                acc.updatedPackageJsons.set(updateInfo.packageJsonPath, modifiedPackageJson);
+                // Store the updated lock file content
+                if (result.lockFileContent) {
+                    const lockFileName = (0, package_manager_1.getLockFileName)(updateInfo.packageManager);
+                    const lockFilePath = updateInfo.packageJsonPath.replace('package.json', lockFileName);
+                    acc.updatedLockFiles.set(lockFilePath, result.lockFileContent);
+                }
+            }
+            else {
+                acc.failedProjects.set(updateInfo.packageJsonPath, result.error || 'Unknown error');
+            }
+        });
+    }
+    /**
+     * Creates a modified package.json with the override.
+     */
+    createModifiedPackageJson(originalContent, updateInfo) {
+        let packageJson = JSON.parse(originalContent);
+        packageJson = (0, dependency_manager_1.applyOverrideToPackageJson)(packageJson, updateInfo.packageManager, this.packageName, updateInfo.newVersion, updateInfo.dependencyPathSegments);
+        return JSON.stringify(packageJson, null, 2);
+    }
+    /**
+     * Updates the NodeResolutionResult marker with new dependency information.
+     */
+    updateMarker(doc, updateInfo, acc) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const existingMarker = (0, node_resolution_result_1.findNodeResolutionResult)(doc);
+            if (!existingMarker) {
+                return doc;
+            }
+            // Parse the updated package.json and lock file to create new marker
+            const updatedPackageJson = acc.updatedPackageJsons.get(updateInfo.packageJsonPath);
+            const lockFileName = (0, package_manager_1.getLockFileName)(updateInfo.packageManager);
+            const updatedLockFile = acc.updatedLockFiles.get(updateInfo.packageJsonPath.replace('package.json', lockFileName));
+            let packageJsonContent;
+            let lockContent;
+            try {
+                packageJsonContent = JSON.parse(updatedPackageJson || updateInfo.originalPackageJson);
+            }
+            catch (_a) {
+                return doc;
+            }
+            if (updatedLockFile) {
+                try {
+                    lockContent = JSON.parse(updatedLockFile);
+                }
+                catch (_b) {
+                    // Continue without lock file content
+                }
+            }
+            const npmrcConfigs = yield (0, node_resolution_result_1.readNpmrcConfigs)(updateInfo.projectDir);
+            const newMarker = (0, node_resolution_result_1.createNodeResolutionResultMarker)(existingMarker.path, packageJsonContent, lockContent, existingMarker.workspacePackagePaths, existingMarker.packageManager, npmrcConfigs.length > 0 ? npmrcConfigs : undefined);
+            return Object.assign(Object.assign({}, doc), { markers: (0, markers_1.replaceMarkerByKind)(doc.markers, newMarker) });
+        });
+    }
+}
+exports.UpgradeTransitiveDependencyVersion = UpgradeTransitiveDependencyVersion;
+__decorate([
+    (0, recipe_1.Option)({
+        displayName: "Package name",
+        description: "The name of the npm package to upgrade (e.g., 'lodash', '@types/node')",
+        example: "lodash"
+    })
+], UpgradeTransitiveDependencyVersion.prototype, "packageName", void 0);
+__decorate([
+    (0, recipe_1.Option)({
+        displayName: "New version",
+        description: "The new version constraint to set (e.g., '^5.0.0', '~2.1.0', '3.0.0')",
+        example: "^5.0.0"
+    })
+], UpgradeTransitiveDependencyVersion.prototype, "newVersion", void 0);
+__decorate([
+    (0, recipe_1.Option)({
+        displayName: "Dependency path",
+        description: "Optional path to scope the override to a specific dependency chain. Use '>' as separator (e.g., 'express>accepts'). When not specified, applies globally to all transitive occurrences.",
+        required: false,
+        example: "express>accepts"
+    })
+], UpgradeTransitiveDependencyVersion.prototype, "dependencyPath", void 0);
+//# sourceMappingURL=upgrade-transitive-dependency-version.js.map

package/dist/javascript/recipes/upgrade-transitive-dependency-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-transitive-dependency-version.js","sourceRoot":"","sources":["../../../src/javascript/recipes/upgrade-transitive-dependency-version.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,yCAAoD;AAGpD,qCAAyD;AACzD,sEAQmC;AACnC,2CAA6B;AAC7B,+CAAiC;AACjC,2CAA8D;AAC9D,uCAAyC;AACzC,wDAA6F;AAC7F,8DAA6G;AA6C7G;;;;;;;;;;;;;GAaG;AACH,MAAa,kCAAmC,SAAQ,uBAA2B;IAAnF;;QACa,SAAI,GAAG,+EAA+E,CAAC;QACvF,gBAAW,GAAG,2CAA2C,CAAC;QAC1D,gBAAW,GAAG,mKAAmK,CAAC;IA4V/L,CAAC;IApUG,YAAY,CAAC,IAAsB;QAC/B,OAAO;YACH,gBAAgB,EAAE,IAAI,GAAG,EAAE;YAC3B,gBAAgB,EAAE,IAAI,GAAG,EAAE;YAC3B,mBAAmB,EAAE,IAAI,GAAG,EAAE;YAC9B,iBAAiB,EAAE,IAAI,GAAG,EAAE;YAC5B,cAAc,EAAE,IAAI,GAAG,EAAE;SAC5B,CAAC;IACN,CAAC;IAEK,OAAO,CAAC,GAAgB;;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC;YAEpB,OAAO,IAAI,KAAM,SAAQ,kBAA6B;gBAClC,aAAa,CAAC,GAAkB,EAAE,IAAsB;;;wBACpE,kCAAkC;wBAClC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;4BAC3C,OAAO,GAAG,CAAC;wBACf,CAAC;wBAED,MAAM,MAAM,GAAG,IAAA,iDAAwB,EAAC,GAAG,CAAC,CAAC;wBAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;4BACV,OAAO,GAAG,CAAC;wBACf,CAAC;wBAED,gDAAgD;wBAChD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;wBAC9D,MAAM,EAAE,GAAG,MAAA,MAAM,CAAC,cAAc,mCAAI,uCAAc,CAAC,GAAG,CAAC;wBAEvD,+FAA+F;wBAC/F,MAAM,MAAM,GAAG,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,CAAU,CAAC;wBACxG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;4BACzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;4BAC3B,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gCACjD,qDAAqD;gCACrD,OAAO,GAAG,CAAC;4BACf,CAAC;wBACL,CAAC;wBAED,+EAA+E;wBAC/E,qEAAqE;wBACrE,MAAM,gBAAgB,GAAG,oDAA2B,CAAC,sBAAsB,CACvE,MAAM,EACN,MAAM,CAAC,WAAW,CACrB,CAAC;wBAEF,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BAChC,oDAAoD;4BACpD,OAAO,GAAG,CAAC;wBACf,CAAC;wBAED,gDAAgD;wBAChD,uFAAuF;wBACvF,MAAM,sBAAsB,GAAG,gBAAgB,CAAC,IAAI,CAChD,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CACzD,CAAC;wBAEF,IAAI,CAAC,sBAAsB,EAAE,CAAC;4BAC1B,wDAAwD;4BACxD,OAAO,GAAG,CAAC;wBACf,CAAC;wBAED,qCAAqC;wBACrC,MAAM,sBAAsB,GAAG,MAAM,CAAC,cAAc;4BAChD,CAAC,CAAC,IAAA,wCAAmB,EAAC,MAAM,CAAC,cAAc,CAAC;4BAC5C,CAAC,CAAC,SAAS,CAAC;wBAEhB,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;4BACrC,UAAU;4BACV,eAAe,EAAE,GAAG,CAAC,UAAU;4BAC/B,mBAAmB,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;4BAClD,UAAU,EAAE,MAAM,CAAC,UAAU;4BAC7B,cAAc,EAAE,EAAE;4BAClB,WAAW,EAAE,KAAK,EAAE,2CAA2C;4BAC/D,sBAAsB;yBACzB,CAAC,CAAC;wBAEH,OAAO,GAAG,CAAC;oBACf,CAAC;iBAAA;gBAEa,aAAa,CAAC,GAAkB;;wBAC1C,OAAO,oBAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACnC,CAAC;iBAAA;aACJ,CAAC;QACN,CAAC;KAAA;IAEK,cAAc,CAAC,GAAgB;;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC;YAEpB,OAAO,IAAI,KAAM,SAAQ,kBAA6B;gBAClC,aAAa,CAAC,GAAkB,EAAE,GAAqB;;wBACnE,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;wBAElC,4BAA4B;wBAC5B,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;4BACtC,MAAM,UAAU,GAAG,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;4BACxD,IAAI,CAAC,UAAU,EAAE,CAAC;gCACd,OAAO,GAAG,CAAC,CAAC,0CAA0C;4BAC1D,CAAC;4BAED,uEAAuE;4BACvE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gCACzC,MAAM,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;gCAC5D,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;4BAC1C,CAAC;4BAED,sEAAsE;4BACtE,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;4BAC1D,IAAI,cAAc,EAAE,CAAC;gCACjB,OAAO,IAAA,oBAAU,EACb,GAAG,EACH,8BAA8B,MAAM,CAAC,WAAW,OAAO,MAAM,CAAC,UAAU,EAAE,EAC1E,cAAc,CACjB,CAAC;4BACN,CAAC;4BAED,uBAAuB;4BACvB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;4BAEjE,yCAAyC;4BACzC,OAAO,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;wBAC7D,CAAC;wBAED,6CAA6C;wBAC7C,KAAK,MAAM,YAAY,IAAI,IAAA,qCAAmB,GAAE,EAAE,CAAC;4BAC/C,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gCACpC,2CAA2C;gCAC3C,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;gCACzE,MAAM,UAAU,GAAG,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gCAE7D,IAAI,UAAU,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oCACrD,oDAAoD;oCACpD,MAAM,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;oCAC7D,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;gCAC1D,CAAC;gCACD,MAAM;4BACV,CAAC;wBACL,CAAC;wBAED,OAAO,GAAG,CAAC;oBACf,CAAC;iBAAA;gBAED;;mBAEG;gBACW,gBAAgB,CAC1B,GAAkB,EAClB,UAA6B;;;wBAE7B,qCAAqC;wBACrC,MAAM,cAAc,GAAG,MAAM,oBAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACrD,IAAI,WAAgC,CAAC;wBACrC,IAAI,CAAC;4BACD,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;wBAC7C,CAAC;wBAAC,WAAM,CAAC;4BACL,OAAO,GAAG,CAAC,CAAC,gCAAgC;wBAChD,CAAC;wBAED,iBAAiB;wBACjB,MAAM,mBAAmB,GAAG,IAAA,+CAA0B,EAClD,WAAW,EACX,UAAU,CAAC,cAAc,EACzB,MAAM,CAAC,WAAW,EAClB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,sBAAsB,CACpC,CAAC;wBAEF,iDAAiD;wBACjD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;wBACrD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;wBACvD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;wBAErE,6CAA6C;wBAC7C,MAAM,MAAM,GAAG,IAAI,iBAAU,CAAC,EAAE,CAAC,CAAC;wBAClC,MAAM,MAAM,GAAoB,EAAE,CAAC;;4BACnC,KAAuB,eAAA,KAAA,cAAA,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAC,CAAC,CAAA,IAAA,sDAAE,CAAC;gCAA/D,cAA4D;gCAA5D,WAA4D;gCAAxE,MAAM,EAAE,KAAA,CAAA;gCACf,MAAM,CAAC,IAAI,CAAC,EAAmB,CAAC,CAAC;4BACrC,CAAC;;;;;;;;;wBAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACpB,uCACO,MAAM,CAAC,CAAC,CAAC,KACZ,UAAU,EAAE,GAAG,CAAC,UAAU,EAC1B,OAAO,EAAE,GAAG,CAAC,OAAO,IACtB;wBACN,CAAC;wBAED,OAAO,GAAG,CAAC;oBACf,CAAC;iBAAA;gBAED;;mBAEG;gBACW,oBAAoB,CAC9B,WAA0B,EAC1B,cAAsB;;;wBAEtB,MAAM,MAAM,GAAG,IAAI,iBAAU,CAAC,EAAE,CAAC,CAAC;wBAClC,MAAM,MAAM,GAAoB,EAAE,CAAC;;4BAEnC,KAAuB,eAAA,KAAA,cAAA,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAC,CAAC,CAAA,IAAA,sDAAE,CAAC;gCAA3E,cAAwE;gCAAxE,WAAwE;gCAApF,MAAM,EAAE,KAAA,CAAA;gCACf,MAAM,CAAC,IAAI,CAAC,EAAmB,CAAC,CAAC;4BACrC,CAAC;;;;;;;;;wBAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACpB,uCACO,MAAM,CAAC,CAAC,CAAC,KACZ,UAAU,EAAE,WAAW,CAAC,UAAU,EAClC,OAAO,EAAE,WAAW,CAAC,OAAO,IAC9B;wBACN,CAAC;wBAED,OAAO,WAAW,CAAC;oBACvB,CAAC;iBAAA;aACJ,CAAC;QACN,CAAC;KAAA;IAED;;OAEG;IACW,wBAAwB,CAClC,GAAgB,EAChB,UAA6B,EAC7B,IAAsB;;YAEtB,iDAAiD;YACjD,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CACtD,UAAU,CAAC,mBAAmB,EAC9B,UAAU,CACb,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAA,qCAAmB,EACpC,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,cAAc,EACzB,mBAAmB,CACtB,CAAC;YAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;gBAE7E,sCAAsC;gBACtC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;oBACzB,MAAM,YAAY,GAAG,IAAA,iCAAe,EAAC,UAAU,CAAC,cAAc,CAAC,CAAC;oBAChE,MAAM,YAAY,GAAG,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;oBACtF,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;gBACnE,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;YACxF,CAAC;QACL,CAAC;KAAA;IAED;;OAEG;IACK,yBAAyB,CAC7B,eAAuB,EACvB,UAA6B;QAE7B,IAAI,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAE9C,WAAW,GAAG,IAAA,+CAA0B,EACpC,WAAW,EACX,UAAU,CAAC,cAAc,EACzB,IAAI,CAAC,WAAW,EAChB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,sBAAsB,CACpC,CAAC;QAEF,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACW,YAAY,CACtB,GAAkB,EAClB,UAA6B,EAC7B,GAAgB;;YAEhB,MAAM,cAAc,GAAG,IAAA,iDAAwB,EAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClB,OAAO,GAAG,CAAC;YACf,CAAC;YAED,oEAAoE;YACpE,MAAM,kBAAkB,GAAG,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YACnF,MAAM,YAAY,GAAG,IAAA,iCAAe,EAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAChE,MAAM,eAAe,GAAG,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAC5C,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CACnE,CAAC;YAEF,IAAI,kBAAsC,CAAC;YAC3C,IAAI,WAA2C,CAAC;YAEhD,IAAI,CAAC;gBACD,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;YAC1F,CAAC;YAAC,WAAM,CAAC;gBACL,OAAO,GAAG,CAAC;YACf,CAAC;YAED,IAAI,eAAe,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACD,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBAC9C,CAAC;gBAAC,WAAM,CAAC;oBACL,qCAAqC;gBACzC,CAAC;YACL,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,IAAA,yCAAgB,EAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAEnE,MAAM,SAAS,GAAG,IAAA,yDAAgC,EAC9C,cAAc,CAAC,IAAI,EACnB,kBAAkB,EAClB,WAAW,EACX,cAAc,CAAC,qBAAqB,EACpC,cAAc,CAAC,cAAc,EAC7B,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;YAEF,uCACO,GAAG,KACN,OAAO,EAAE,IAAA,6BAAmB,EAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,IACtD;QACN,CAAC;KAAA;CACJ;AA/VD,gFA+VC;AArVG;IALC,IAAA,eAAM,EAAC;QACJ,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,wEAAwE;QACrF,OAAO,EAAE,QAAQ;KACpB,CAAC;uEACmB;AAOrB;IALC,IAAA,eAAM,EAAC;QACJ,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,uEAAuE;QACpF,OAAO,EAAE,QAAQ;KACpB,CAAC;sEACkB;AAQpB;IANC,IAAA,eAAM,EAAC;QACJ,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,yLAAyL;QACtM,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,iBAAiB;KAC7B,CAAC;0EACsB"}

package/dist/version.txt

@@ -1 +1 @@
-8.69.0-20251210-164937
+8.69.0-20251210-194227

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openrewrite/rewrite",
-  "version": "8.69.0-20251210-164937",
+  "version": "8.69.0-20251210-194227",
   "license": "Moderne Source Available License",
   "description": "OpenRewrite JavaScript.",
   "homepage": "https://github.com/openrewrite/rewrite",

package/src/index.ts

@@ -38,7 +38,7 @@ export async function activate(registry: RecipeRegistry): Promise<void> {
     const {ModernizeOctalEscapeSequences, ModernizeOctalLiterals, RemoveDuplicateObjectKeys} = await import("./javascript/migrate/es6/index.js");
     const {ExportAssignmentToExportDefault} = await import("./javascript/migrate/typescript/index.js");
     const {UseObjectPropertyShorthand, PreferOptionalChain, AddParseIntRadix} = await import("./javascript/cleanup/index.js");
-    const {AsyncCallbackInSyncArrayMethod, AutoFormat, UpgradeDependencyVersion, OrderImports, ChangeImport} = await import("./javascript/recipes/index.js");
+    const {AsyncCallbackInSyncArrayMethod, AutoFormat, UpgradeDependencyVersion, UpgradeTransitiveDependencyVersion, OrderImports, ChangeImport} = await import("./javascript/recipes/index.js");
     const {FindDependency} = await import("./javascript/search/index.js");
 
     registry.register(ExportAssignmentToExportDefault);
@@ -54,6 +54,7 @@ export async function activate(registry: RecipeRegistry): Promise<void> {
     registry.register(AsyncCallbackInSyncArrayMethod);
     registry.register(AutoFormat);
     registry.register(UpgradeDependencyVersion);
+    registry.register(UpgradeTransitiveDependencyVersion);
 }
 
 RpcCodecs.registerCodec(MarkersKind.ParseExceptionResult, {