@visulima/vis 1.0.0-alpha.24 → 1.0.0-alpha.26

package/README.md

@@ -140,7 +140,9 @@ vis check
 # Check with security vulnerability scanning
 vis check --security
 
-# Update catalog dependencies interactively
+# Update catalog dependencies interactively, plus any
+# GitHub Actions, Dockerfile, docker-compose, or GitLab CI
+# references in the workspace (auto-detected).
 vis update --interactive
 
 # Install git hooks
@@ -194,7 +196,7 @@ When aube is the active installer, `vis audit` delegates to `aube audit` so a si
 3. `security.audit.backend` in `vis.config.ts`.
 4. Defaults to `auto` — delegates only when `install.backend` (or `VIS_INSTALLER`) resolves to aube AND `aube` is on `PATH`.
 
-Vis-only features (`--report`, `--fix-transitive`, `--usage`, `--policies`, `--format sarif|csaf|cyclonedx-vex`, `--ecosystem` beyond npm) print a warning and are dropped when delegating; pass `--backend vis` to force the built-in OSV/Socket scanner.
+Vis-only features (`--report`, `--fix-transitive`, `--usage`, `--policies`, `--format sarif|csaf|cyclonedx-vex|gitlab|junit`, `--ecosystem` beyond npm) print a warning and are dropped when delegating; pass `--backend vis` to force the built-in OSV/Socket scanner.
 
 ### Doctor visibility
 
@@ -212,7 +214,7 @@ When aube is the installer, `vis doctor` surfaces aube's effective hardening pos
 | `vis ignore <project>`  |        | CI build gating for Vercel / Netlify "Ignored Build Step"            |
 | `vis graph`             |        | Visualize the project dependency graph                               |
 | `vis check [packages]`  | `c`    | Check for outdated dependencies in workspace catalogs                |
-| `vis update [packages]` | `up`   | Update packages to their latest versions                             |
+| `vis update [packages]` | `up`   | Update packages, GitHub Actions, Dockerfiles, and GitLab CI refs     |
 | `vis install`           | `i`    | Install dependencies via the detected package manager                |
 | `vis info <package>`    | `view` | Show npm registry metadata for a package (wraps `npm view` et al.)   |
 | `vis dlx <package>`     |        | Execute a remote package without permanent installation              |

package/dist/bin.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import"./packem_shared/index-B8Ko8mwG.js";import"./packem_chunks/bin.js";import"./packem_chunks/config.js";import"./packem_shared/readFileSync-CGmzMUF2-D6rUjGDn.js";
+import"./packem_shared/index-CS6a2wFB.js";import"./packem_chunks/bin.js";import"./packem_chunks/config.js";import"./packem_shared/readFileSync-CGmzMUF2-D6rUjGDn.js";

package/dist/binx.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import{N as r,m as o,i as c,T as i,w as a,a as n}from"./packem_shared/index-B8Ko8mwG.js";r();process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${o.version}
+import{N as r,m as o,i as c,T as i,w as a,a as n}from"./packem_shared/index-CS6a2wFB.js";r();process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${o.version}
 `),process.exit(0));process.argv.splice(2,0,"dlx");c();const e=i("visx",{packageName:"visx",packageVersion:o.version}),p=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(a({detailed:p,exitOnError:!1}));e.addCommand(n);(async()=>{try{await e.run({shouldExitProcess:!1})}catch{process.exitCode=process.exitCode||1}finally{process.exit(process.exitCode??0)}})();

package/dist/config/index.d.ts

@@ -632,6 +632,12 @@ interface ProjectJson {
   language?: string;
   /** Project layer, used for constraint inheritance and query filtering. */
   layer?: "application" | "automation" | "configuration" | "library" | "scaffolding" | "tool";
+  /**
+  * Project name. When set, takes precedence over `package.json#name`
+  * as the project's identity in the workspace graph and CLI filters.
+  * Falls back to `package.json#name` when omitted.
+  */
+  name?: string;
   /** Code owners for paths inside this project. */
   owners?: OwnersEntry[];
   /** Project-level metadata. */
@@ -720,6 +726,19 @@ interface VisConfig {
   */
   codeowners?: CodeownersConfig;
   /**
+  * Default base branch used by `vis affected`, `vis ci`, and `vis run --affected`
+  * when no explicit `--base` is passed and no CI smart-resolver fires.
+  *
+  * Resolved as `origin/<defaultBase>` against the local clone; should be a
+  * branch name (not a fully-qualified ref) such as `main`, `master`, or `trunk`.
+  * Falls back to `main` when omitted.
+  *
+  * Migrated automatically from `nx.json#affected.defaultBase` /
+  * `nx.json#defaultBase` by `vis migrate nx`.
+  * @default "main"
+  */
+  defaultBase?: string;
+  /**
   * Project dependency constraints.
   * Enforced after building the project graph, before running tasks.
   */