@vltpkg/cli-sdk 1.3.0 → 1.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,6 +1,6 @@
1
1
  import type { CommandFn, CommandUsage } from '../index.ts';
2
2
  import type { InstallResult } from './install.ts';
3
- export type CIResult = Omit<InstallResult, 'buildQueue'>;
3
+ export type CIResult = Pick<InstallResult, 'buildQueue' | 'graph'>;
4
4
  export declare const needsRegistry = true;
5
5
  export declare const needsNpmRegistry = true;
6
6
  export declare const usage: CommandUsage;
@@ -6,10 +6,14 @@ export const needsNpmRegistry = true;
6
6
  export const usage = () => commandUsage({
7
7
  command: 'ci',
8
8
  usage: '',
9
- description: `Clean install from lockfile. Deletes node_modules and installs
10
- dependencies exactly as specified in vlt-lock.json. This is
11
- similar to running 'vlt install --expect-lockfile' but performs
12
- a clean install by removing node_modules first.`,
9
+ description: `Clean install from lockfile. Deletes node_modules and installs
10
+ dependencies exactly as specified in vlt-lock.json. This is
11
+ similar to running 'vlt install --expect-lockfile' but performs
12
+ a clean install by removing node_modules first.
13
+
14
+ Like install, runs no dependency lifecycle scripts unless
15
+ allowed with --allow-scripts; run 'vlt build' afterwards to
16
+ build packages.`,
13
17
  examples: {
14
18
  '': { description: 'Clean install from lockfile' },
15
19
  },
@@ -30,13 +34,13 @@ export const views = {
30
34
  export const command = async (conf) => {
31
35
  const ciOptions = {
32
36
  ...conf.options,
33
- // allow scripts but filter out malware via security archive
34
- allowScripts: conf.get('allow-scripts') ?? ':scripts:not(:malware)',
37
+ // same default as install: no scripts
38
+ allowScripts: conf.get('allow-scripts') ?? ':not(*)',
35
39
  expectLockfile: true,
36
40
  frozenLockfile: true,
37
41
  cleanInstall: true,
38
42
  lockfileOnly: conf.options['lockfile-only'],
39
43
  };
40
- const { graph } = await install(ciOptions);
41
- return { graph };
44
+ const { buildQueue, graph } = await install(ciOptions);
45
+ return { buildQueue, graph };
42
46
  };
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@vltpkg/cli-sdk",
3
3
  "description": "The source for the vlt CLI",
4
- "version": "1.3.0",
4
+ "version": "1.3.2",
5
5
  "repository": {
6
6
  "type": "git",
7
7
  "url": "git+https://github.com/vltpkg/vltpkg.git",
@@ -14,31 +14,31 @@
14
14
  },
15
15
  "dependencies": {
16
16
  "@resvg/resvg-wasm": "^2.6.2",
17
- "@vltpkg/config": "1.3.0",
18
- "@vltpkg/dep-id": "1.3.0",
19
- "@vltpkg/dot-prop": "1.3.0",
20
- "@vltpkg/error-cause": "1.3.0",
21
- "@vltpkg/git": "1.3.0",
22
- "@vltpkg/graph": "1.3.0",
23
- "@vltpkg/graph-run": "1.3.0",
24
- "@vltpkg/init": "1.3.0",
25
- "@vltpkg/output": "1.3.0",
26
- "@vltpkg/package-info": "1.3.0",
27
- "@vltpkg/package-json": "1.3.0",
28
- "@vltpkg/promise-spawn": "1.3.0",
29
- "@vltpkg/query": "1.3.0",
30
- "@vltpkg/registry-client": "1.3.0",
31
- "@vltpkg/rollback-remove": "1.3.0",
32
- "@vltpkg/run": "1.3.0",
33
- "@vltpkg/security-archive": "1.3.0",
34
- "@vltpkg/spec": "1.3.0",
35
- "@vltpkg/tar": "1.3.0",
36
- "@vltpkg/types": "1.3.0",
37
- "@vltpkg/url-open": "1.3.0",
38
- "@vltpkg/vlt-json": "1.3.0",
39
- "@vltpkg/vlx": "1.3.0",
40
- "@vltpkg/workspaces": "1.3.0",
41
- "@vltpkg/xdg": "1.3.0",
17
+ "@vltpkg/config": "1.3.2",
18
+ "@vltpkg/dep-id": "1.3.2",
19
+ "@vltpkg/dot-prop": "1.3.2",
20
+ "@vltpkg/error-cause": "1.3.2",
21
+ "@vltpkg/git": "1.3.2",
22
+ "@vltpkg/graph": "1.3.2",
23
+ "@vltpkg/graph-run": "1.3.2",
24
+ "@vltpkg/init": "1.3.2",
25
+ "@vltpkg/output": "1.3.2",
26
+ "@vltpkg/package-info": "1.3.2",
27
+ "@vltpkg/package-json": "1.3.2",
28
+ "@vltpkg/promise-spawn": "1.3.2",
29
+ "@vltpkg/query": "1.3.2",
30
+ "@vltpkg/registry-client": "1.3.2",
31
+ "@vltpkg/rollback-remove": "1.3.2",
32
+ "@vltpkg/run": "1.3.2",
33
+ "@vltpkg/security-archive": "1.3.2",
34
+ "@vltpkg/spec": "1.3.2",
35
+ "@vltpkg/tar": "1.3.2",
36
+ "@vltpkg/types": "1.3.2",
37
+ "@vltpkg/url-open": "1.3.2",
38
+ "@vltpkg/vlt-json": "1.3.2",
39
+ "@vltpkg/vlx": "1.3.2",
40
+ "@vltpkg/workspaces": "1.3.2",
41
+ "@vltpkg/xdg": "1.3.2",
42
42
  "ansi-to-pre": "^1.0.6",
43
43
  "beautiful-mermaid": "^1.1.3",
44
44
  "chalk": "^5.6.2",