@skilly-hand/skilly-hand 0.19.0 → 0.20.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -16,6 +16,27 @@ All notable changes to this project are documented in this file.
|
|
|
16
16
|
### Removed
|
|
17
17
|
- _None._
|
|
18
18
|
|
|
19
|
+
## [0.20.0] - 2026-04-11
|
|
20
|
+
[View on npm](https://www.npmjs.com/package/@skilly-hand/skilly-hand/v/0.20.0)
|
|
21
|
+
|
|
22
|
+
### Added
|
|
23
|
+
- Added `scripts/dependency-policy-check.mjs` and `deps:policy:check` to enforce exact runtime dependency pins plus synchronized `package-lock.json`/`npm-shrinkwrap.json`.
|
|
24
|
+
- Added `scripts/dependency-update-safe.mjs` and `deps:update:safe` to enforce safe dependency upgrades with full validation gates.
|
|
25
|
+
- Added `npm-shrinkwrap.json` to the repository and release workflow for npm lockfile parity.
|
|
26
|
+
- Added regression test coverage for dependency policy checks, safe dependency update flow, and managed git hook installation behavior.
|
|
27
|
+
|
|
28
|
+
### Changed
|
|
29
|
+
- Updated `verify:publish` to run dependency policy checks before security, catalog, test, and packlist gates.
|
|
30
|
+
- Updated `scripts/setup-hooks.mjs` to install both managed `pre-commit` and `pre-push` hooks with safety checks for foreign hooks.
|
|
31
|
+
- Updated `scripts/dependency-security-check.mjs` to recognize `npm-shrinkwrap.json` as a valid npm lockfile.
|
|
32
|
+
- Updated docs with dependency update policy guidance and hook setup requirements.
|
|
33
|
+
|
|
34
|
+
### Fixed
|
|
35
|
+
- Expanded script JSON contract tests to cover `dependency-policy-check`.
|
|
36
|
+
|
|
37
|
+
### Removed
|
|
38
|
+
- _None._
|
|
39
|
+
|
|
19
40
|
## [0.19.0] - 2026-04-11
|
|
20
41
|
[View on npm](https://www.npmjs.com/package/@skilly-hand/skilly-hand/v/0.19.0)
|
|
21
42
|
|
package/README.md
CHANGED
|
@@ -105,6 +105,10 @@ See [catalog/README.md](./catalog/README.md) for generated skill metadata.
|
|
|
105
105
|
|
|
106
106
|
- `npm run security:check` runs repository secret/config checks plus strict dependency security checks.
|
|
107
107
|
- `npm run security:deps` runs strict dependency audit + outdated reporting only.
|
|
108
|
+
- `npm run deps:policy:check` enforces exact runtime dependency pins and lockfile sync (`package-lock.json` + `npm-shrinkwrap.json`).
|
|
109
|
+
- `npm run deps:update:safe -- <pkg[@version]>` is the required dependency update path; it pins exact versions, syncs shrinkwrap, and blocks completion unless all validation gates pass.
|
|
110
|
+
- Do not use raw `npm install` for dependency upgrades in this repo; use `deps:update:safe` so tests and security gates run before accepting version changes.
|
|
111
|
+
- Run `npm run setup:hooks` once per clone to install `pre-commit` (fast checks) and `pre-push` (full gate) hooks.
|
|
108
112
|
|
|
109
113
|
---
|
|
110
114
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@skilly-hand/skilly-hand",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.20.0",
|
|
4
4
|
"license": "CC-BY-NC-4.0",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"publishConfig": {
|
|
@@ -29,11 +29,13 @@
|
|
|
29
29
|
"catalog:sync": "node ./scripts/sync-catalog.mjs",
|
|
30
30
|
"agentic:self:sync": "node ./scripts/sync-self-agentic.mjs",
|
|
31
31
|
"test": "node --test tests/*.test.js && node ./scripts/test-in-sandbox.mjs",
|
|
32
|
+
"deps:policy:check": "node ./scripts/dependency-policy-check.mjs",
|
|
33
|
+
"deps:update:safe": "node ./scripts/dependency-update-safe.mjs",
|
|
32
34
|
"security:deps": "node ./scripts/dependency-security-check.mjs --strict",
|
|
33
35
|
"security:check": "node ./scripts/security-check.mjs --strict-deps",
|
|
34
36
|
"verify:packlist": "node ./scripts/verify-packlist.mjs",
|
|
35
37
|
"verify:versions": "node ./scripts/verify-versions.mjs",
|
|
36
|
-
"verify:publish": "npm run verify:versions && npm run security:check && npm run catalog:check && npm test && npm run verify:packlist",
|
|
38
|
+
"verify:publish": "npm run verify:versions && npm run deps:policy:check && npm run security:check && npm run catalog:check && npm test && npm run verify:packlist",
|
|
37
39
|
"publish:prepare": "npm run verify:publish && npm pack --dry-run --json",
|
|
38
40
|
"publish:otp": "node ./scripts/publish-with-otp.mjs",
|
|
39
41
|
"publish:next": "node ./scripts/publish-with-otp.mjs --tag next",
|
|
@@ -47,7 +49,7 @@
|
|
|
47
49
|
"doctor": "node ./packages/cli/src/bin.js doctor"
|
|
48
50
|
},
|
|
49
51
|
"dependencies": {
|
|
50
|
-
"ink": "
|
|
51
|
-
"react": "
|
|
52
|
+
"ink": "5.2.1",
|
|
53
|
+
"react": "18.3.1"
|
|
52
54
|
}
|
|
53
55
|
}
|