@rushstack/lockfile-explorer 1.6.0 → 1.7.1

package/CHANGELOG.json

@@ -1,6 +1,30 @@
 {
   "name": "@rushstack/lockfile-explorer",
   "entries": [
+    {
+      "version": "1.7.1",
+      "tag": "@rushstack/lockfile-explorer_v1.7.1",
+      "date": "Mon, 30 Sep 2024 15:12:19 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@rushstack/heft\" to `0.68.0`"
+          }
+        ]
+      }
+    },
+    {
+      "version": "1.7.0",
+      "tag": "@rushstack/lockfile-explorer_v1.7.0",
+      "date": "Thu, 26 Sep 2024 21:47:44 GMT",
+      "comments": {
+        "minor": [
+          {
+            "comment": "Update to use a new API from rush-sdk."
+          }
+        ]
+      }
+    },
     {
       "version": "1.6.0",
       "tag": "@rushstack/lockfile-explorer_v1.6.0",

package/CHANGELOG.md

@@ -1,6 +1,18 @@
 # Change Log - @rushstack/lockfile-explorer
 
-This log was last generated on Tue, 24 Sep 2024 00:11:19 GMT and should not be manually modified.
+This log was last generated on Mon, 30 Sep 2024 15:12:19 GMT and should not be manually modified.
+
+## 1.7.1
+Mon, 30 Sep 2024 15:12:19 GMT
+
+_Version update only_
+
+## 1.7.0
+Thu, 26 Sep 2024 21:47:44 GMT
+
+### Minor changes
+
+- Update to use a new API from rush-sdk.
 
 ## 1.6.0
 Tue, 24 Sep 2024 00:11:19 GMT

package/lib/cli/lint/actions/CheckAction.js

@@ -47,7 +47,7 @@ class CheckAction extends ts_command_line_1.CommandLineAction {
         this._terminal.writeLine(`Checking project "${project.packageName}"`);
         const projectFolder = project.projectFolder;
         const subspace = project.subspace;
-        const shrinkwrapFilename = subspace.getCommittedShrinkwrapFilename();
+        const shrinkwrapFilename = subspace.getCommittedShrinkwrapFilePath();
         let doc;
         if (this._docMap.has(shrinkwrapFilename)) {
             doc = this._docMap.get(shrinkwrapFilename);

package/lib/cli/lint/actions/CheckAction.js.map

@@ -1 +1 @@
-{"version":3,"file":"CheckAction.js","sourceRoot":"","sources":["../../../../src/cli/lint/actions/CheckAction.ts"],"names":[],"mappings":";AAAA,4FAA4F;AAC5F,2DAA2D;;;;;;AAE3D,kDAA+D;AAC/D,gEAA+D;AAC/D,kDAAsG;AACtG,gDAAwB;AACxB,sDAA2B;AAC3B,oDAA4B;AAC5B,oEAA6G;AAE7G,2GAA4E;AAC5E,sDAAsG;AAEtG,0DAImC;AAmBnC,MAAa,WAAY,SAAQ,mCAAiB;IAOhD,YAAmB,MAA6B;QAC9C,KAAK,CAAC;YACJ,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,sDAAsD;YAC/D,aAAa,EACX,2DAA2D;gBAC3D,oCAA2B;gBAC3B,wDAAwD;SAC3D,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,+BAA+B,CAC3C,0BAAkC,EAClC,QAA8B,EAC9B,cAAsB,EACtB,gBAAwC,EACxC,sBAAmC;;QAEnC,IAAI,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACxF,sBAAsB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC3C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAA,gCAAmB,EAAC,0BAA0B,EAAE,cAAc,CAAC,CAAC;YAC1F,IAAI,IAAI,IAAI,gBAAgB,IAAI,CAAC,gBAAM,CAAC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,mBAAmB,gBAAgB,CAAC,IAAI,CAAC,IAAI;oBAClE,uBAAuB,OAAO,GAAG,CACpC,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,OAAO,CAAC,MAAA,QAAQ,CAAC,cAAc,CAAC,CAAC,YAAY,mCAAI,EAAE,CAAC,CAAC,GAAG,CAC7D,KAAK,EAAE,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,EAAE;gBAC1D,MAAM,IAAI,CAAC,+BAA+B,CACxC,0BAA0B,EAC1B,QAAQ,EACR,IAAA,qCAAwB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,CACzB,EACD,gBAAgB,EAChB,sBAAsB,CACvB,CAAC;YACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mCAAmC,CAC/C,OAAiC,EACjC,gBAAwC;QAExC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,qBAAqB,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;QAEtE,MAAM,aAAa,GAAW,OAAO,CAAC,aAAa,CAAC;QACpD,MAAM,QAAQ,GAAa,OAAO,CAAC,QAAQ,CAAC;QAC5C,MAAM,kBAAkB,GAAW,QAAQ,CAAC,8BAA8B,EAAE,CAAC;QAC7E,IAAI,GAA0B,CAAC;QAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACzC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAE,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,gBAAgB,GAAW,MAAM,8BAAU,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;YACpF,GAAG,GAAG,iBAAI,CAAC,IAAI,CAAC,gBAAgB,CAA0B,CAAC;YAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QACrD,MAAM,0BAA0B,GAAW,IAAA,0CAA6B,EAAC,eAAe,CAAC,CAAC;QAC1F,MAAM,sBAAsB,GAAgB,IAAI,GAAG,EAAU,CAAC;QAE9D,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE;;YACvE,IAAI,cAAI,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,aAAa,EAAE,CAAC;gBAChE,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,EAAE,CAAC,CAAC;gBAC/D,KAAK,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,IAAI,mBAAmB,EAAE,CAAC;oBACpE,MAAM,kBAAkB,GAAG,IAAA,qCAAwB,EACjD,0BAA0B,EAC1B,cAAc,EACd,OAAO,eAAe,KAAK,QAAQ;wBACjC,CAAC,CAAC,eAAe;wBACjB,CAAC,CACG,eAID,CAAC,OAAO,CACd,CAAC;oBACF,IAAI,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACzC,MAAM,iBAAiB,GACrB,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;wBAC3D,IAAI,iBAAiB,IAAI,CAAC,CAAA,MAAA,IAAI,CAAC,gBAAgB,0CAAE,GAAG,CAAC,iBAAiB,CAAC,CAAA,EAAE,CAAC;4BACxE,IAAI,CAAC,gBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BACpC,MAAM,IAAI,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;wBACtF,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,+BAA+B,CACxC,0BAA0B,EAC1B,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,CACvB,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oCAAoC,CAChD,gBAAwC,EACxC,WAAmB;;QAEnB,IAAI,CAAC;YACH,MAAM,OAAO,GACX,MAAA,IAAI,CAAC,kBAAkB,0CAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,sBAAsB,WAAW,uBAAuB,oCAA2B,EAAE,CACtF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAC1E,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,OAAO,CAAC;QACnB,CAAC;IACH,CAAC;IAES,KAAK,CAAC,SAAS;QACvB,MAAM,iBAAiB,GAAkC,4BAAiB,CAAC,0BAA0B,EAAE,CAAC;QACxG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,iBAAkB,CAAC;QAE7C,MAAM,WAAW,GAAW,cAAI,CAAC,OAAO,CACtC,IAAI,CAAC,kBAAkB,CAAC,YAAY,EACpC,QAAQ,EACR,qCAA4B,EAC5B,oCAA2B,CAC5B,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,GAAkB,MAAM,4BAAQ,CAAC,oBAAoB,CAClE,WAAW,EACX,8BAAU,CAAC,gBAAgB,CAAC,mCAAkB,CAAC,CAChD,CAAC;QACF,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,MAAM,yBAAK,CAAC,YAAY,CACtB,KAAK,EACL,KAAK,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;YAC5C,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,mBAAmB,CAAC,CAAC,CAAC;oBACzB,MAAM,OAAO,GAAuB,MAAM,IAAI,CAAC,oCAAoC,CACjF,gBAAgB,EAChB,OAAO,CACR,CAAC;oBACF,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC1C,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC,EACD,EAAE,WAAW,EAAE,EAAE,EAAE,CACpB,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YAE3B,sBAAsB;YACtB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAU,EAAE;gBAC/C,IAAI,IAAI,GAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,mBAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,mBAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,GAAG,IAAI,CACrF,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,wCAAoB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,mBAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,oBAAoB,CAAC,CAAC;IAC/E,CAAC;CACF;AA7MD,kCA6MC","sourcesContent":["// Copyright (c) Microsoft Corporation. All rights reserved. Licensed under the MIT license.\n// See LICENSE in the project root for license information.\n\nimport { Colorize, type ITerminal } from '@rushstack/terminal';\nimport { CommandLineAction } from '@rushstack/ts-command-line';\nimport { RushConfiguration, type RushConfigurationProject, type Subspace } from '@rushstack/rush-sdk';\nimport path from 'path';\nimport yaml from 'js-yaml';\nimport semver from 'semver';\nimport { AlreadyReportedError, Async, FileSystem, JsonFile, JsonSchema } from '@rushstack/node-core-library';\n\nimport lockfileLintSchema from '../../../schemas/lockfile-lint.schema.json';\nimport { LOCKFILE_EXPLORER_FOLDERNAME, LOCKFILE_LINT_JSON_FILENAME } from '../../../constants/common';\nimport type { LintCommandLineParser } from '../LintCommandLineParser';\nimport {\n  getShrinkwrapFileMajorVersion,\n  parseDependencyPath,\n  splicePackageWithVersion\n} from '../../../utils/shrinkwrap';\nimport type { Lockfile, LockfileV6 } from '@pnpm/lockfile-types';\n\nexport interface ILintRule {\n  rule: 'restrict-versions';\n  project: string;\n  requiredVersions: Record<string, string>;\n}\n\nexport interface ILockfileLint {\n  rules: ILintRule[];\n}\n\nexport interface ILintIssue {\n  project: string;\n  rule: string;\n  message: string;\n}\n\nexport class CheckAction extends CommandLineAction {\n  private readonly _terminal: ITerminal;\n\n  private _rushConfiguration!: RushConfiguration;\n  private _checkedProjects: Set<RushConfigurationProject>;\n  private _docMap: Map<string, Lockfile | LockfileV6>;\n\n  public constructor(parser: LintCommandLineParser) {\n    super({\n      actionName: 'check',\n      summary: 'Check and report dependency issues in your workspace',\n      documentation:\n        'This command applies the policies that are configured in ' +\n        LOCKFILE_LINT_JSON_FILENAME +\n        ', reporting any problems found in your PNPM workspace.'\n    });\n\n    this._terminal = parser.globalTerminal;\n    this._checkedProjects = new Set();\n    this._docMap = new Map();\n  }\n\n  private async _checkVersionCompatibilityAsync(\n    shrinkwrapFileMajorVersion: number,\n    packages: Lockfile['packages'],\n    dependencyPath: string,\n    requiredVersions: Record<string, string>,\n    checkedDependencyPaths: Set<string>\n  ): Promise<void> {\n    if (packages && packages[dependencyPath] && !checkedDependencyPaths.has(dependencyPath)) {\n      checkedDependencyPaths.add(dependencyPath);\n      const { name, version } = parseDependencyPath(shrinkwrapFileMajorVersion, dependencyPath);\n      if (name in requiredVersions && !semver.satisfies(version, requiredVersions[name])) {\n        throw new Error(\n          `The version of \"${name}\" should match \"${requiredVersions[name]}\";` +\n            ` actual version is \"${version}\"`\n        );\n      }\n\n      await Promise.all(\n        Object.entries(packages[dependencyPath].dependencies ?? {}).map(\n          async ([dependencyPackageName, dependencyPackageVersion]) => {\n            await this._checkVersionCompatibilityAsync(\n              shrinkwrapFileMajorVersion,\n              packages,\n              splicePackageWithVersion(\n                shrinkwrapFileMajorVersion,\n                dependencyPackageName,\n                dependencyPackageVersion\n              ),\n              requiredVersions,\n              checkedDependencyPaths\n            );\n          }\n        )\n      );\n    }\n  }\n\n  private async _searchAndValidateDependenciesAsync(\n    project: RushConfigurationProject,\n    requiredVersions: Record<string, string>\n  ): Promise<void> {\n    this._terminal.writeLine(`Checking project \"${project.packageName}\"`);\n\n    const projectFolder: string = project.projectFolder;\n    const subspace: Subspace = project.subspace;\n    const shrinkwrapFilename: string = subspace.getCommittedShrinkwrapFilename();\n    let doc: Lockfile | LockfileV6;\n    if (this._docMap.has(shrinkwrapFilename)) {\n      doc = this._docMap.get(shrinkwrapFilename)!;\n    } else {\n      const pnpmLockfileText: string = await FileSystem.readFileAsync(shrinkwrapFilename);\n      doc = yaml.load(pnpmLockfileText) as Lockfile | LockfileV6;\n      this._docMap.set(shrinkwrapFilename, doc);\n    }\n    const { importers, lockfileVersion, packages } = doc;\n    const shrinkwrapFileMajorVersion: number = getShrinkwrapFileMajorVersion(lockfileVersion);\n    const checkedDependencyPaths: Set<string> = new Set<string>();\n\n    await Promise.all(\n      Object.entries(importers).map(async ([relativePath, { dependencies }]) => {\n        if (path.resolve(projectFolder, relativePath) === projectFolder) {\n          const dependenciesEntries = Object.entries(dependencies ?? {});\n          for (const [dependencyName, dependencyValue] of dependenciesEntries) {\n            const fullDependencyPath = splicePackageWithVersion(\n              shrinkwrapFileMajorVersion,\n              dependencyName,\n              typeof dependencyValue === 'string'\n                ? dependencyValue\n                : (\n                    dependencyValue as {\n                      version: string;\n                      specifier: string;\n                    }\n                  ).version\n            );\n            if (fullDependencyPath.includes('link:')) {\n              const dependencyProject: RushConfigurationProject | undefined =\n                this._rushConfiguration.getProjectByName(dependencyName);\n              if (dependencyProject && !this._checkedProjects?.has(dependencyProject)) {\n                this._checkedProjects!.add(project);\n                await this._searchAndValidateDependenciesAsync(dependencyProject, requiredVersions);\n              }\n            } else {\n              await this._checkVersionCompatibilityAsync(\n                shrinkwrapFileMajorVersion,\n                packages,\n                fullDependencyPath,\n                requiredVersions,\n                checkedDependencyPaths\n              );\n            }\n          }\n        }\n      })\n    );\n  }\n\n  private async _performVersionRestrictionCheckAsync(\n    requiredVersions: Record<string, string>,\n    projectName: string\n  ): Promise<string | undefined> {\n    try {\n      const project: RushConfigurationProject | undefined =\n        this._rushConfiguration?.getProjectByName(projectName);\n      if (!project) {\n        throw new Error(\n          `Specified project \"${projectName}\" does not exist in ${LOCKFILE_LINT_JSON_FILENAME}`\n        );\n      }\n      this._checkedProjects.add(project);\n      await this._searchAndValidateDependenciesAsync(project, requiredVersions);\n      return undefined;\n    } catch (e) {\n      return e.message;\n    }\n  }\n\n  protected async onExecute(): Promise<void> {\n    const rushConfiguration: RushConfiguration | undefined = RushConfiguration.tryLoadFromDefaultLocation();\n    if (!rushConfiguration) {\n      throw new Error(\n        'The \"lockfile-explorer check\" must be executed in a folder that is under a Rush workspace folder'\n      );\n    }\n    this._rushConfiguration = rushConfiguration!;\n\n    const lintingFile: string = path.resolve(\n      this._rushConfiguration.commonFolder,\n      'config',\n      LOCKFILE_EXPLORER_FOLDERNAME,\n      LOCKFILE_LINT_JSON_FILENAME\n    );\n    const { rules }: ILockfileLint = await JsonFile.loadAndValidateAsync(\n      lintingFile,\n      JsonSchema.fromLoadedObject(lockfileLintSchema)\n    );\n    const issues: ILintIssue[] = [];\n    await Async.forEachAsync(\n      rules,\n      async ({ requiredVersions, project, rule }) => {\n        switch (rule) {\n          case 'restrict-versions': {\n            const message: string | undefined = await this._performVersionRestrictionCheckAsync(\n              requiredVersions,\n              project\n            );\n            if (message) {\n              issues.push({ project, rule, message });\n            }\n            break;\n          }\n\n          default: {\n            throw new Error('Unsupported rule name: ' + rule);\n          }\n        }\n      },\n      { concurrency: 50 }\n    );\n    if (issues.length > 0) {\n      this._terminal.writeLine();\n\n      // Deterministic order\n      for (const issue of issues.sort((a, b): number => {\n        let diff: number = a.project.localeCompare(b.project);\n        if (diff !== 0) {\n          return diff;\n        }\n        diff = a.rule.localeCompare(b.rule);\n        if (diff !== 0) {\n          return diff;\n        }\n        return a.message.localeCompare(b.message);\n      })) {\n        this._terminal.writeLine(\n          Colorize.red('PROBLEM: ') + Colorize.cyan(`[${issue.rule}] `) + issue.message + '\\n'\n        );\n      }\n\n      throw new AlreadyReportedError();\n    }\n    this._terminal.writeLine(Colorize.green('SUCCESS: ') + 'All checks passed.');\n  }\n}\n"]}
+{"version":3,"file":"CheckAction.js","sourceRoot":"","sources":["../../../../src/cli/lint/actions/CheckAction.ts"],"names":[],"mappings":";AAAA,4FAA4F;AAC5F,2DAA2D;;;;;;AAE3D,kDAA+D;AAC/D,gEAA+D;AAC/D,kDAAsG;AACtG,gDAAwB;AACxB,sDAA2B;AAC3B,oDAA4B;AAC5B,oEAA6G;AAE7G,2GAA4E;AAC5E,sDAAsG;AAEtG,0DAImC;AAmBnC,MAAa,WAAY,SAAQ,mCAAiB;IAOhD,YAAmB,MAA6B;QAC9C,KAAK,CAAC;YACJ,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,sDAAsD;YAC/D,aAAa,EACX,2DAA2D;gBAC3D,oCAA2B;gBAC3B,wDAAwD;SAC3D,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,+BAA+B,CAC3C,0BAAkC,EAClC,QAA8B,EAC9B,cAAsB,EACtB,gBAAwC,EACxC,sBAAmC;;QAEnC,IAAI,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACxF,sBAAsB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC3C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAA,gCAAmB,EAAC,0BAA0B,EAAE,cAAc,CAAC,CAAC;YAC1F,IAAI,IAAI,IAAI,gBAAgB,IAAI,CAAC,gBAAM,CAAC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,mBAAmB,gBAAgB,CAAC,IAAI,CAAC,IAAI;oBAClE,uBAAuB,OAAO,GAAG,CACpC,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,OAAO,CAAC,MAAA,QAAQ,CAAC,cAAc,CAAC,CAAC,YAAY,mCAAI,EAAE,CAAC,CAAC,GAAG,CAC7D,KAAK,EAAE,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,EAAE;gBAC1D,MAAM,IAAI,CAAC,+BAA+B,CACxC,0BAA0B,EAC1B,QAAQ,EACR,IAAA,qCAAwB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,CACzB,EACD,gBAAgB,EAChB,sBAAsB,CACvB,CAAC;YACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mCAAmC,CAC/C,OAAiC,EACjC,gBAAwC;QAExC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,qBAAqB,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;QAEtE,MAAM,aAAa,GAAW,OAAO,CAAC,aAAa,CAAC;QACpD,MAAM,QAAQ,GAAa,OAAO,CAAC,QAAQ,CAAC;QAC5C,MAAM,kBAAkB,GAAW,QAAQ,CAAC,8BAA8B,EAAE,CAAC;QAC7E,IAAI,GAA0B,CAAC;QAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACzC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAE,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,gBAAgB,GAAW,MAAM,8BAAU,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;YACpF,GAAG,GAAG,iBAAI,CAAC,IAAI,CAAC,gBAAgB,CAA0B,CAAC;YAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QACrD,MAAM,0BAA0B,GAAW,IAAA,0CAA6B,EAAC,eAAe,CAAC,CAAC;QAC1F,MAAM,sBAAsB,GAAgB,IAAI,GAAG,EAAU,CAAC;QAE9D,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE;;YACvE,IAAI,cAAI,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,aAAa,EAAE,CAAC;gBAChE,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,EAAE,CAAC,CAAC;gBAC/D,KAAK,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,IAAI,mBAAmB,EAAE,CAAC;oBACpE,MAAM,kBAAkB,GAAG,IAAA,qCAAwB,EACjD,0BAA0B,EAC1B,cAAc,EACd,OAAO,eAAe,KAAK,QAAQ;wBACjC,CAAC,CAAC,eAAe;wBACjB,CAAC,CACG,eAID,CAAC,OAAO,CACd,CAAC;oBACF,IAAI,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACzC,MAAM,iBAAiB,GACrB,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;wBAC3D,IAAI,iBAAiB,IAAI,CAAC,CAAA,MAAA,IAAI,CAAC,gBAAgB,0CAAE,GAAG,CAAC,iBAAiB,CAAC,CAAA,EAAE,CAAC;4BACxE,IAAI,CAAC,gBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BACpC,MAAM,IAAI,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;wBACtF,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,+BAA+B,CACxC,0BAA0B,EAC1B,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,CACvB,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oCAAoC,CAChD,gBAAwC,EACxC,WAAmB;;QAEnB,IAAI,CAAC;YACH,MAAM,OAAO,GACX,MAAA,IAAI,CAAC,kBAAkB,0CAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,sBAAsB,WAAW,uBAAuB,oCAA2B,EAAE,CACtF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAC1E,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,OAAO,CAAC;QACnB,CAAC;IACH,CAAC;IAES,KAAK,CAAC,SAAS;QACvB,MAAM,iBAAiB,GAAkC,4BAAiB,CAAC,0BAA0B,EAAE,CAAC;QACxG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,iBAAkB,CAAC;QAE7C,MAAM,WAAW,GAAW,cAAI,CAAC,OAAO,CACtC,IAAI,CAAC,kBAAkB,CAAC,YAAY,EACpC,QAAQ,EACR,qCAA4B,EAC5B,oCAA2B,CAC5B,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,GAAkB,MAAM,4BAAQ,CAAC,oBAAoB,CAClE,WAAW,EACX,8BAAU,CAAC,gBAAgB,CAAC,mCAAkB,CAAC,CAChD,CAAC;QACF,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,MAAM,yBAAK,CAAC,YAAY,CACtB,KAAK,EACL,KAAK,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;YAC5C,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,mBAAmB,CAAC,CAAC,CAAC;oBACzB,MAAM,OAAO,GAAuB,MAAM,IAAI,CAAC,oCAAoC,CACjF,gBAAgB,EAChB,OAAO,CACR,CAAC;oBACF,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC1C,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC,EACD,EAAE,WAAW,EAAE,EAAE,EAAE,CACpB,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YAE3B,sBAAsB;YACtB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAU,EAAE;gBAC/C,IAAI,IAAI,GAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,mBAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,mBAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,GAAG,IAAI,CACrF,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,wCAAoB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,mBAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,oBAAoB,CAAC,CAAC;IAC/E,CAAC;CACF;AA7MD,kCA6MC","sourcesContent":["// Copyright (c) Microsoft Corporation. All rights reserved. Licensed under the MIT license.\n// See LICENSE in the project root for license information.\n\nimport { Colorize, type ITerminal } from '@rushstack/terminal';\nimport { CommandLineAction } from '@rushstack/ts-command-line';\nimport { RushConfiguration, type RushConfigurationProject, type Subspace } from '@rushstack/rush-sdk';\nimport path from 'path';\nimport yaml from 'js-yaml';\nimport semver from 'semver';\nimport { AlreadyReportedError, Async, FileSystem, JsonFile, JsonSchema } from '@rushstack/node-core-library';\n\nimport lockfileLintSchema from '../../../schemas/lockfile-lint.schema.json';\nimport { LOCKFILE_EXPLORER_FOLDERNAME, LOCKFILE_LINT_JSON_FILENAME } from '../../../constants/common';\nimport type { LintCommandLineParser } from '../LintCommandLineParser';\nimport {\n  getShrinkwrapFileMajorVersion,\n  parseDependencyPath,\n  splicePackageWithVersion\n} from '../../../utils/shrinkwrap';\nimport type { Lockfile, LockfileV6 } from '@pnpm/lockfile-types';\n\nexport interface ILintRule {\n  rule: 'restrict-versions';\n  project: string;\n  requiredVersions: Record<string, string>;\n}\n\nexport interface ILockfileLint {\n  rules: ILintRule[];\n}\n\nexport interface ILintIssue {\n  project: string;\n  rule: string;\n  message: string;\n}\n\nexport class CheckAction extends CommandLineAction {\n  private readonly _terminal: ITerminal;\n\n  private _rushConfiguration!: RushConfiguration;\n  private _checkedProjects: Set<RushConfigurationProject>;\n  private _docMap: Map<string, Lockfile | LockfileV6>;\n\n  public constructor(parser: LintCommandLineParser) {\n    super({\n      actionName: 'check',\n      summary: 'Check and report dependency issues in your workspace',\n      documentation:\n        'This command applies the policies that are configured in ' +\n        LOCKFILE_LINT_JSON_FILENAME +\n        ', reporting any problems found in your PNPM workspace.'\n    });\n\n    this._terminal = parser.globalTerminal;\n    this._checkedProjects = new Set();\n    this._docMap = new Map();\n  }\n\n  private async _checkVersionCompatibilityAsync(\n    shrinkwrapFileMajorVersion: number,\n    packages: Lockfile['packages'],\n    dependencyPath: string,\n    requiredVersions: Record<string, string>,\n    checkedDependencyPaths: Set<string>\n  ): Promise<void> {\n    if (packages && packages[dependencyPath] && !checkedDependencyPaths.has(dependencyPath)) {\n      checkedDependencyPaths.add(dependencyPath);\n      const { name, version } = parseDependencyPath(shrinkwrapFileMajorVersion, dependencyPath);\n      if (name in requiredVersions && !semver.satisfies(version, requiredVersions[name])) {\n        throw new Error(\n          `The version of \"${name}\" should match \"${requiredVersions[name]}\";` +\n            ` actual version is \"${version}\"`\n        );\n      }\n\n      await Promise.all(\n        Object.entries(packages[dependencyPath].dependencies ?? {}).map(\n          async ([dependencyPackageName, dependencyPackageVersion]) => {\n            await this._checkVersionCompatibilityAsync(\n              shrinkwrapFileMajorVersion,\n              packages,\n              splicePackageWithVersion(\n                shrinkwrapFileMajorVersion,\n                dependencyPackageName,\n                dependencyPackageVersion\n              ),\n              requiredVersions,\n              checkedDependencyPaths\n            );\n          }\n        )\n      );\n    }\n  }\n\n  private async _searchAndValidateDependenciesAsync(\n    project: RushConfigurationProject,\n    requiredVersions: Record<string, string>\n  ): Promise<void> {\n    this._terminal.writeLine(`Checking project \"${project.packageName}\"`);\n\n    const projectFolder: string = project.projectFolder;\n    const subspace: Subspace = project.subspace;\n    const shrinkwrapFilename: string = subspace.getCommittedShrinkwrapFilePath();\n    let doc: Lockfile | LockfileV6;\n    if (this._docMap.has(shrinkwrapFilename)) {\n      doc = this._docMap.get(shrinkwrapFilename)!;\n    } else {\n      const pnpmLockfileText: string = await FileSystem.readFileAsync(shrinkwrapFilename);\n      doc = yaml.load(pnpmLockfileText) as Lockfile | LockfileV6;\n      this._docMap.set(shrinkwrapFilename, doc);\n    }\n    const { importers, lockfileVersion, packages } = doc;\n    const shrinkwrapFileMajorVersion: number = getShrinkwrapFileMajorVersion(lockfileVersion);\n    const checkedDependencyPaths: Set<string> = new Set<string>();\n\n    await Promise.all(\n      Object.entries(importers).map(async ([relativePath, { dependencies }]) => {\n        if (path.resolve(projectFolder, relativePath) === projectFolder) {\n          const dependenciesEntries = Object.entries(dependencies ?? {});\n          for (const [dependencyName, dependencyValue] of dependenciesEntries) {\n            const fullDependencyPath = splicePackageWithVersion(\n              shrinkwrapFileMajorVersion,\n              dependencyName,\n              typeof dependencyValue === 'string'\n                ? dependencyValue\n                : (\n                    dependencyValue as {\n                      version: string;\n                      specifier: string;\n                    }\n                  ).version\n            );\n            if (fullDependencyPath.includes('link:')) {\n              const dependencyProject: RushConfigurationProject | undefined =\n                this._rushConfiguration.getProjectByName(dependencyName);\n              if (dependencyProject && !this._checkedProjects?.has(dependencyProject)) {\n                this._checkedProjects!.add(project);\n                await this._searchAndValidateDependenciesAsync(dependencyProject, requiredVersions);\n              }\n            } else {\n              await this._checkVersionCompatibilityAsync(\n                shrinkwrapFileMajorVersion,\n                packages,\n                fullDependencyPath,\n                requiredVersions,\n                checkedDependencyPaths\n              );\n            }\n          }\n        }\n      })\n    );\n  }\n\n  private async _performVersionRestrictionCheckAsync(\n    requiredVersions: Record<string, string>,\n    projectName: string\n  ): Promise<string | undefined> {\n    try {\n      const project: RushConfigurationProject | undefined =\n        this._rushConfiguration?.getProjectByName(projectName);\n      if (!project) {\n        throw new Error(\n          `Specified project \"${projectName}\" does not exist in ${LOCKFILE_LINT_JSON_FILENAME}`\n        );\n      }\n      this._checkedProjects.add(project);\n      await this._searchAndValidateDependenciesAsync(project, requiredVersions);\n      return undefined;\n    } catch (e) {\n      return e.message;\n    }\n  }\n\n  protected async onExecute(): Promise<void> {\n    const rushConfiguration: RushConfiguration | undefined = RushConfiguration.tryLoadFromDefaultLocation();\n    if (!rushConfiguration) {\n      throw new Error(\n        'The \"lockfile-explorer check\" must be executed in a folder that is under a Rush workspace folder'\n      );\n    }\n    this._rushConfiguration = rushConfiguration!;\n\n    const lintingFile: string = path.resolve(\n      this._rushConfiguration.commonFolder,\n      'config',\n      LOCKFILE_EXPLORER_FOLDERNAME,\n      LOCKFILE_LINT_JSON_FILENAME\n    );\n    const { rules }: ILockfileLint = await JsonFile.loadAndValidateAsync(\n      lintingFile,\n      JsonSchema.fromLoadedObject(lockfileLintSchema)\n    );\n    const issues: ILintIssue[] = [];\n    await Async.forEachAsync(\n      rules,\n      async ({ requiredVersions, project, rule }) => {\n        switch (rule) {\n          case 'restrict-versions': {\n            const message: string | undefined = await this._performVersionRestrictionCheckAsync(\n              requiredVersions,\n              project\n            );\n            if (message) {\n              issues.push({ project, rule, message });\n            }\n            break;\n          }\n\n          default: {\n            throw new Error('Unsupported rule name: ' + rule);\n          }\n        }\n      },\n      { concurrency: 50 }\n    );\n    if (issues.length > 0) {\n      this._terminal.writeLine();\n\n      // Deterministic order\n      for (const issue of issues.sort((a, b): number => {\n        let diff: number = a.project.localeCompare(b.project);\n        if (diff !== 0) {\n          return diff;\n        }\n        diff = a.rule.localeCompare(b.rule);\n        if (diff !== 0) {\n          return diff;\n        }\n        return a.message.localeCompare(b.message);\n      })) {\n        this._terminal.writeLine(\n          Colorize.red('PROBLEM: ') + Colorize.cyan(`[${issue.rule}] `) + issue.message + '\\n'\n        );\n      }\n\n      throw new AlreadyReportedError();\n    }\n    this._terminal.writeLine(Colorize.green('SUCCESS: ') + 'All checks passed.');\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/lockfile-explorer",
-  "version": "1.6.0",
+  "version": "1.7.1",
   "description": "Rush Lockfile Explorer: The UI for solving version conflicts quickly in a large monorepo",
   "keywords": [
     "conflict",
@@ -45,8 +45,8 @@
     "@types/update-notifier": "~6.0.1",
     "@pnpm/lockfile-types": "^5.1.5",
     "@types/semver": "7.5.0",
+    "@rushstack/heft": "0.68.0",
     "@rushstack/lockfile-explorer-web": "0.0.0",
-    "@rushstack/heft": "0.67.2",
     "local-node-rig": "1.0.0"
   },
   "dependencies": {
@@ -57,11 +57,11 @@
     "update-notifier": "~5.1.0",
     "@pnpm/dependency-path": "~2.1.2",
     "semver": "~7.5.4",
-    "@rushstack/terminal": "0.14.2",
+    "@microsoft/rush-lib": "5.136.1",
     "@rushstack/node-core-library": "5.9.0",
-    "@rushstack/ts-command-line": "4.22.8",
-    "@microsoft/rush-lib": "5.135.0",
-    "@rushstack/rush-sdk": "5.135.0"
+    "@rushstack/terminal": "0.14.2",
+    "@rushstack/rush-sdk": "5.136.1",
+    "@rushstack/ts-command-line": "4.22.8"
   },
   "scripts": {
     "build": "heft build --clean",