@unisphere/nx 4.12.4 → 4.12.6

package/dist/migrations/4-12-5/disable-module-boundaries-for-rollup-config.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Migration: Disable @nx/enforce-module-boundaries for rollup.config files
+ *
+ * Under nx 22.7.x the @nx/enforce-module-boundaries rule started flagging the
+ * relative `require('../../node_modules/@unisphere/cli/bundler/.../rollup.js')`
+ * that every generated rollup.config.js uses:
+ *   "External resources cannot be imported using a relative or absolute path"
+ *
+ * That require is intentional — @unisphere/cli's `exports` map does not expose
+ * the bundler entry, so a bare specifier cannot resolve. rollup.config.js is a
+ * build-config file, not application code, so the boundaries rule should not
+ * apply to it. This migration adds an override to the workspace-root
+ * .eslintrc.json that turns the rule off for rollup.config.{js,mjs} files.
+ *
+ * Idempotent: re-running makes no further changes.
+ */
+import { Tree } from '@nx/devkit';
+export default function update(tree: Tree): Promise<void>;
+//# sourceMappingURL=disable-module-boundaries-for-rollup-config.d.ts.map

package/dist/migrations/4-12-5/disable-module-boundaries-for-rollup-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disable-module-boundaries-for-rollup-config.d.ts","sourceRoot":"","sources":["../../../src/migrations/4-12-5/disable-module-boundaries-for-rollup-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,IAAI,EAA+B,MAAM,YAAY,CAAC;AAY/D,wBAA8B,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CA+C9D"}

package/dist/migrations/4-12-5/disable-module-boundaries-for-rollup-config.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * Migration: Disable @nx/enforce-module-boundaries for rollup.config files
+ *
+ * Under nx 22.7.x the @nx/enforce-module-boundaries rule started flagging the
+ * relative `require('../../node_modules/@unisphere/cli/bundler/.../rollup.js')`
+ * that every generated rollup.config.js uses:
+ *   "External resources cannot be imported using a relative or absolute path"
+ *
+ * That require is intentional — @unisphere/cli's `exports` map does not expose
+ * the bundler entry, so a bare specifier cannot resolve. rollup.config.js is a
+ * build-config file, not application code, so the boundaries rule should not
+ * apply to it. This migration adds an override to the workspace-root
+ * .eslintrc.json that turns the rule off for rollup.config.{js,mjs} files.
+ *
+ * Idempotent: re-running makes no further changes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = update;
+const devkit_1 = require("@nx/devkit");
+const ESLINTRC_PATH = '.eslintrc.json';
+const ROLLUP_FILES_PATTERN = '**/rollup.config.{js,mjs}';
+const RULE = '@nx/enforce-module-boundaries';
+async function update(tree) {
+    devkit_1.logger.info(`🔄 Disabling ${RULE} for rollup.config files in ${ESLINTRC_PATH}...`);
+    if (!tree.exists(ESLINTRC_PATH)) {
+        devkit_1.logger.info(`ℹ️ No ${ESLINTRC_PATH} found, skipping migration`);
+        return;
+    }
+    const eslintrc = (0, devkit_1.readJson)(tree, ESLINTRC_PATH);
+    if (!Array.isArray(eslintrc.overrides)) {
+        eslintrc.overrides = [];
+    }
+    const overrides = eslintrc.overrides;
+    // Idempotency: skip if an override already turns the rule off for rollup configs
+    const alreadyDisabled = overrides.some((override) => {
+        const files = Array.isArray(override.files)
+            ? override.files
+            : override.files
+                ? [override.files]
+                : [];
+        return (files.includes(ROLLUP_FILES_PATTERN) &&
+            override.rules?.[RULE] === 'off');
+    });
+    if (alreadyDisabled) {
+        devkit_1.logger.info(`✅ ${RULE} already disabled for rollup configs, skipping`);
+        return;
+    }
+    // Append last so it wins over the earlier *.js override that enables the rule
+    overrides.push({
+        files: [ROLLUP_FILES_PATTERN],
+        rules: {
+            [RULE]: 'off',
+        },
+    });
+    (0, devkit_1.writeJson)(tree, ESLINTRC_PATH, eslintrc);
+    devkit_1.logger.info(`✅ Disabled ${RULE} for ${ROLLUP_FILES_PATTERN}`);
+}

package/dist/migrations/4-12-6/comment-out-security-audit.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Migration: Comment out the "Security Audit" step in cicd.yml
+ *
+ * The `Security Audit` step (`npx unisphere tools audit`) is temporarily
+ * disabled across projects. This migration comments out the step's lines in
+ * .github/workflows/cicd.yml by prefixing each with `#`:
+ *
+ *   #      - name: Security Audit
+ *   #        run: npx unisphere tools audit
+ *   #        env:
+ *   #          KALTURA_JFROG_TOKEN: ${{ steps.setup-jfrog.outputs.oidc-token }}
+ *
+ * The step's block is matched by its `- name: Security Audit` anchor and the
+ * following contiguous body lines (stopping at the first blank line or the next
+ * `- name:` step), so it is resilient to indentation differences between repos.
+ *
+ * Idempotent: if the step is already commented out (or absent), re-running
+ * makes no further changes.
+ */
+import { Tree } from '@nx/devkit';
+export default function update(tree: Tree): Promise<void>;
+//# sourceMappingURL=comment-out-security-audit.d.ts.map

package/dist/migrations/4-12-6/comment-out-security-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comment-out-security-audit.d.ts","sourceRoot":"","sources":["../../../src/migrations/4-12-6/comment-out-security-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAU,MAAM,YAAY,CAAC;AAK1C,wBAA8B,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAkD9D"}

package/dist/migrations/4-12-6/comment-out-security-audit.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Migration: Comment out the "Security Audit" step in cicd.yml
+ *
+ * The `Security Audit` step (`npx unisphere tools audit`) is temporarily
+ * disabled across projects. This migration comments out the step's lines in
+ * .github/workflows/cicd.yml by prefixing each with `#`:
+ *
+ *   #      - name: Security Audit
+ *   #        run: npx unisphere tools audit
+ *   #        env:
+ *   #          KALTURA_JFROG_TOKEN: ${{ steps.setup-jfrog.outputs.oidc-token }}
+ *
+ * The step's block is matched by its `- name: Security Audit` anchor and the
+ * following contiguous body lines (stopping at the first blank line or the next
+ * `- name:` step), so it is resilient to indentation differences between repos.
+ *
+ * Idempotent: if the step is already commented out (or absent), re-running
+ * makes no further changes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = update;
+const devkit_1 = require("@nx/devkit");
+const CICD_PATH = '.github/workflows/cicd.yml';
+const STEP_ANCHOR = '- name: Security Audit';
+async function update(tree) {
+    devkit_1.logger.info(`🔄 Commenting out the Security Audit step in ${CICD_PATH}...`);
+    if (!tree.exists(CICD_PATH)) {
+        devkit_1.logger.info(`ℹ️ No ${CICD_PATH} found, skipping migration`);
+        return;
+    }
+    const content = tree.read(CICD_PATH, 'utf-8') ?? '';
+    const lines = content.split('\n');
+    // Match the anchor whether or not it is already commented out, so re-running
+    // recognises the existing state instead of treating it as "not found".
+    const stripComment = (line) => line.replace(/^\s*#/, '').trim();
+    const anchorIndex = lines.findIndex((line) => stripComment(line) === STEP_ANCHOR);
+    if (anchorIndex === -1) {
+        devkit_1.logger.info(`ℹ️ Security Audit step not found in ${CICD_PATH}, skipping migration`);
+        return;
+    }
+    // Already commented? (anchor line begins with #) — don't add a second #.
+    if (lines[anchorIndex].trimStart().startsWith('#')) {
+        devkit_1.logger.info('✅ Security Audit step already commented out, skipping');
+        return;
+    }
+    // Comment the step's contiguous block: the anchor line plus the following
+    // body lines, stopping at the first blank line or the next `- name:` step.
+    let commented = 0;
+    for (let i = anchorIndex; i < lines.length; i++) {
+        const line = lines[i];
+        if (i > anchorIndex &&
+            (line.trim() === '' || stripComment(line).startsWith('- name:'))) {
+            break;
+        }
+        // Per-line guard: never prefix a line that is already commented.
+        if (!line.trimStart().startsWith('#')) {
+            lines[i] = `#${line}`;
+            commented++;
+        }
+    }
+    tree.write(CICD_PATH, lines.join('\n'));
+    devkit_1.logger.info(`✅ Commented out ${commented} lines of the Security Audit step`);
+}

package/migrations.json

@@ -506,6 +506,22 @@
       "cli": {
         "postUpdateMessage": "✅ .gitignore updated to exclude migrations-*.json"
       }
+    },
+    "4.12.5-disable-module-boundaries-for-rollup-config": {
+      "version": "4.12.5",
+      "description": "Disables @nx/enforce-module-boundaries for rollup.config.{js,mjs} in the root ESLint config (nx 22.7.x flags the bundler's relative require into node_modules)",
+      "factory": "./dist/migrations/4-12-5/disable-module-boundaries-for-rollup-config.js",
+      "cli": {
+        "postUpdateMessage": "✅ ESLint: @nx/enforce-module-boundaries disabled for rollup.config.{js,mjs}"
+      }
+    },
+    "4.12.6-comment-out-security-audit": {
+      "version": "4.12.6",
+      "description": "Comments out the Security Audit step (npx unisphere tools audit) in .github/workflows/cicd.yml",
+      "factory": "./dist/migrations/4-12-6/comment-out-security-audit.js",
+      "cli": {
+        "postUpdateMessage": "✅ Security Audit step commented out in .github/workflows/cicd.yml"
+      }
     }
   },
   "packageJsonUpdates": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unisphere/nx",
-  "version": "4.12.4",
+  "version": "4.12.6",
   "private": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",