@ykdz/template 0.0.25 → 0.0.27

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check-playwright.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: package.json
       - run: corepack enable

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check-rust.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: package.json
       - run: corepack enable

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check.dynamic.template

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest{{DEPLOYMENT_MATRIX}}
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: package.json
       - run: corepack enable{{RUST_CI_PREPARATION}}{{DEPLOYMENT_DOCKER_PREPARATION}}

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: package.json
       - run: corepack enable

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/pnpm-workspace.dynamic.txt

@@ -11,6 +11,9 @@ syncInjectedDepsAfterScripts:
 
 minimumReleaseAge: 1440
 minimumReleaseAgeStrict: true
+
+minimumReleaseAgeExclude:
+  - "@ykdz/template"
 {{DEPENDENCY_OVERRIDES_SECTION}}
 allowBuilds:
   esbuild: true

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/pnpm-workspace.yaml

@@ -13,6 +13,9 @@ syncInjectedDepsAfterScripts:
 minimumReleaseAge: 1440
 minimumReleaseAgeStrict: true
 
+minimumReleaseAgeExclude:
+  - "@ykdz/template"
+
 overrides:
 
 allowBuilds:
@@ -23,6 +26,6 @@ catalog:
   oxfmt: ^0.58.0
   oxlint: ^1.73.0
   oxlint-tsgolint: ^0.24.0
-  turbo: 2.10.2
+  turbo: 2.10.5
   typescript-7: npm:typescript@^7.0.2
   valibot: ^1.4.2

package/node_modules/@ykdz/template-builtin-presets/templates/rust-bin/.github/workflows/check.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: package.json
       - run: corepack enable

package/node_modules/@ykdz/template-builtin-presets/templates/rust-bin/Cargo.lock

@@ -4,9 +4,9 @@ version = 4
 
 [[package]]
 name = "anyhow"
-version = "1.0.103"
+version = "1.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a4385e2e34eb35d6b3efe798b9eb88096925d87726c0798709bf56d9ed84af3"
+checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
 
 [[package]]
 name = "{{CARGO_PACKAGE_NAME}}"

package/node_modules/@ykdz/template-builtin-presets/templates/rust-bin/Cargo.toml

@@ -4,7 +4,7 @@ version = "0.1.0"
 edition = "2024"
 
 [dependencies]
-anyhow = "1.0.100"
+anyhow = "1.0.104"
 
 [lints]
 workspace = true

package/node_modules/@ykdz/template-builtin-presets/templates/shared/devcontainer/node-pnpm.Dockerfile

@@ -5,8 +5,11 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 ARG PACKAGE_MANAGER_PIN
 ENV COREPACK_HOME="/corepack"
 ENV PNPM_HOME="/pnpm"
-ENV PATH="$PNPM_HOME:$PATH"
-RUN install -d -m 0755 "$COREPACK_HOME" "$PNPM_HOME" \
+ENV PATH="$PNPM_HOME/bin:$PNPM_HOME:$PATH"
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends ca-certificates \
+    && rm -rf /var/lib/apt/lists/* \
+    && install -d -m 0755 "$COREPACK_HOME" "$PNPM_HOME" "$PNPM_HOME/bin" \
     && corepack enable --install-directory "$PNPM_HOME" \
     && corepack prepare "${PACKAGE_MANAGER_PIN}" --activate \
     && chmod -R a+rX "$COREPACK_HOME" "$PNPM_HOME"

package/node_modules/@ykdz/template-builtin-presets/templates/ts-lib/.github/workflows/check.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: package.json
       - run: corepack enable

package/node_modules/@ykdz/template-builtin-presets/templates/vike-app/web/Dockerfile

@@ -6,9 +6,9 @@ FROM node:{{NODE_VERSION}}-bookworm-slim AS base
 ARG PACKAGE_MANAGER_PIN="{{PACKAGE_MANAGER_PIN}}"
 ENV COREPACK_HOME="/corepack"
 ENV PNPM_HOME="/pnpm"
-ENV PATH="$PNPM_HOME:$PATH"
+ENV PATH="$PNPM_HOME/bin:$PNPM_HOME:$PATH"
 WORKDIR /repo
-RUN install -d -m 0755 "$COREPACK_HOME" "$PNPM_HOME" \
+RUN install -d -m 0755 "$COREPACK_HOME" "$PNPM_HOME" "$PNPM_HOME/bin" \
   && corepack enable --install-directory "$PNPM_HOME" \
   && for attempt in 1 2 3; do \
     if corepack prepare "$PACKAGE_MANAGER_PIN" --activate; then break; fi; \

package/node_modules/@ykdz/template-builtin-presets/templates/vike-app/web/tsconfig.json

@@ -1,7 +1,7 @@
 {
   "files": [],
   "references": [
-    { "path": "../../packages/db" },
+    { "path": "../../packages/db/tsconfig.json" },
     { "path": "./tsconfig.app.json" },
     { "path": "./tsconfig.test.json" },
     { "path": "./tsconfig.node.json" }

package/node_modules/@ykdz/template-builtin-presets/templates/vue-app/.github/workflows/check.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: package.json
       - run: corepack enable

package/node_modules/@ykdz/template-core/dist/Cargo.lock

@@ -4,9 +4,9 @@ version = 4
 
 [[package]]
 name = "anyhow"
-version = "1.0.103"
+version = "1.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a4385e2e34eb35d6b3efe798b9eb88096925d87726c0798709bf56d9ed84af3"
+checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
 
 [[package]]
 name = "template-cargo-dependencies"

package/node_modules/@ykdz/template-core/dist/Cargo.toml

@@ -9,4 +9,4 @@ name = "template-cargo-dependencies"
 path = "packages/builtin-presets/templates/rust-bin/src/main.rs"
 
 [dependencies]
-anyhow = "1.0.100"
+anyhow = "1.0.104"

package/node_modules/@ykdz/template-core/dist/dependency-catalog.js

@@ -2,6 +2,7 @@ import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 const exactNpmPackageIdentityPattern = /^(?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9][a-z0-9._~-]*$/;
+const defaultGeneratedMinimumReleaseAgeExclusions = ["@ykdz/template"];
 function assertMinimumReleaseAgeExclusions(exclusions) {
     if (exclusions.some((dependency) => dependency.length === 0)) {
         throw new Error("Dependency maturity exclusions must be non-empty");
@@ -199,7 +200,14 @@ export function pnpmWorkspaceYamlWithCatalogDependencies(workspaceYaml, dependen
     ].join("\n");
 }
 export function renderGeneratedPnpmWorkspaceYaml(options) {
-    assertMinimumReleaseAgeExclusions(options.minimumReleaseAgeExclude ?? []);
+    const configuredMinimumReleaseAgeExclusions = options.minimumReleaseAgeExclude ?? [];
+    assertMinimumReleaseAgeExclusions(configuredMinimumReleaseAgeExclusions);
+    const minimumReleaseAgeExclude = [
+        ...new Set([
+            ...defaultGeneratedMinimumReleaseAgeExclusions,
+            ...configuredMinimumReleaseAgeExclusions,
+        ]),
+    ];
     if (options.dependencyLinker?.kind === "hoisted" &&
         (options.dependencyLinker.evidence.trim().length === 0 ||
             options.dependencyLinker.evidence.includes("\n"))) {
@@ -228,8 +236,8 @@ export function renderGeneratedPnpmWorkspaceYaml(options) {
         "minimumReleaseAgeStrict: true",
         "",
     ];
-    if (options.minimumReleaseAgeExclude?.length) {
-        lines.push("minimumReleaseAgeExclude:", ...options.minimumReleaseAgeExclude
+    if (minimumReleaseAgeExclude.length) {
+        lines.push("minimumReleaseAgeExclude:", ...minimumReleaseAgeExclude
             .toSorted()
             .map((dependency) => `  - ${JSON.stringify(dependency)}`), "");
     }

package/node_modules/@ykdz/template-core/dist/pnpm-workspace.yaml

@@ -26,24 +26,24 @@ catalog:
   "@tailwindcss/vite": ^4.3.2
   "@types/node": ^24.13.3
   "@types/web-bluetooth": ^0.0.21
-  "@vitejs/plugin-vue": ^6.0.7
+  "@vitejs/plugin-vue": ^6.0.8
   "@vikejs/hono": ^0.2.1
   "@vue/tsconfig": ^0.9.1
   drizzle-kit: 1.0.0-rc.4
   drizzle-orm: 1.0.0-rc.4
-  execa: ^9.6.1
-  hono: ^4.12.27
+  execa: ^10.0.0
+  hono: ^4.12.31
   oxfmt: ^0.58.0
   oxlint: ^1.73.0
   oxlint-tsgolint: ^0.24.0
   semver: ^7.8.5
   "@types/semver": ^7.7.1
   pinia: ^3.0.4
-  srvx: ^0.11.21
+  srvx: ^0.12.1
   tailwindcss: ^4.3.2
   telefunc: ^0.2.22
   tsc-alias: ^1.8.17
-  turbo: 2.10.2
+  turbo: 2.10.5
   typescript: npm:@typescript/typescript6@^6.0.2
   typescript-7: npm:typescript@^7.0.2
   valibot: ^1.4.2

package/node_modules/@ykdz/template-core/dist/project-github.js

@@ -39,7 +39,7 @@ export function projectCheckWorkflow(options) {
         "      - uses: actions/checkout@v7",
     ];
     if (environmentPreparation.nodeFromPackageMetadata) {
-        lines.push("      - uses: actions/setup-node@v6", "        with:", "          node-version-file: package.json", "      - run: corepack enable");
+        lines.push("      - uses: actions/setup-node@v7", "        with:", "          node-version-file: package.json", "      - run: corepack enable");
     }
     if (hasDeploymentTask && needsDocker) {
         lines.push("      - uses: docker/setup-buildx-action@v3", "        if: matrix.check == 'deployment'");

package/node_modules/@ykdz/template-core/dist/renderer.js

@@ -461,19 +461,27 @@ export async function renderProjectAtomically(options) {
     const parent = path.dirname(targetRoot);
     const stagingRoot = await mkdtemp(path.join(parent, `.${path.basename(targetRoot)}.template-update-`));
     const backupRoot = await mkdtemp(path.join(parent, `.${path.basename(targetRoot)}.template-backup-`));
-    const changedEntries = changedRootEntries(options.operations);
+    const changedPaths = changedOutputPaths(options.operations);
     let committed = false;
     try {
-        await cp(targetRoot, stagingRoot, { recursive: true });
+        await cp(targetRoot, stagingRoot, {
+            recursive: true,
+            filter: generatedDependencyTreeCopyFilter,
+        });
         await renderProject({ ...options, targetRoot: stagingRoot });
-        // Commit only the entries changed by the staged plan.  In particular, do
+        // Commit only the files changed by the staged plan.  In particular, do
         // not rename the target directory: callers commonly run `template add`
         // from that directory, and renaming it leaves their shell on a deleted
-        // inode.  Each entry has a rollback copy before it is made visible.
-        for (const entry of changedEntries) {
-            const current = path.join(targetRoot, entry);
+        // inode.  Each path has a rollback copy before it is made visible.
+        for (const changedPath of changedPaths) {
+            const current = path.join(targetRoot, changedPath);
             try {
-                await cp(current, path.join(backupRoot, entry), { recursive: true });
+                const backup = path.join(backupRoot, changedPath);
+                await mkdir(path.dirname(backup), { recursive: true });
+                await cp(current, backup, {
+                    recursive: true,
+                    filter: generatedDependencyTreeCopyFilter,
+                });
             }
             catch (error) {
                 if (!isNodeError(error) || error.code !== "ENOENT")
@@ -481,16 +489,19 @@ export async function renderProjectAtomically(options) {
             }
         }
         try {
-            for (const entry of changedEntries) {
-                await cp(path.join(stagingRoot, entry), path.join(targetRoot, entry), {
+            for (const changedPath of changedPaths) {
+                const target = path.join(targetRoot, changedPath);
+                await mkdir(path.dirname(target), { recursive: true });
+                await cp(path.join(stagingRoot, changedPath), target, {
                     recursive: true,
                     force: true,
+                    filter: generatedDependencyTreeCopyFilter,
                 });
             }
             committed = true;
         }
         catch (error) {
-            await rollbackStagedEntries({ targetRoot, backupRoot, changedEntries });
+            await rollbackStagedPaths({ targetRoot, backupRoot, changedPaths });
             throw error;
         }
     }
@@ -502,25 +513,31 @@ export async function renderProjectAtomically(options) {
             await rm(stagingRoot, { recursive: true, force: true });
     }
 }
-function changedRootEntries(operations) {
-    const entries = new Set();
+function changedOutputPaths(operations) {
+    const changedPaths = new Set();
     for (const operation of operations) {
         const outputPath = operation.kind === "setExecutable" || operation.kind === "replaceAnchors"
             ? operation.path
             : operation.to;
-        const entry = outputPath.split(/[\\/]/)[0];
-        if (entry !== undefined && entry.length > 0)
-            entries.add(entry);
+        if (outputPath.length > 0)
+            changedPaths.add(path.normalize(outputPath));
     }
-    return [...entries];
+    return [...changedPaths];
 }
-async function rollbackStagedEntries(options) {
-    for (const entry of options.changedEntries) {
-        const target = path.join(options.targetRoot, entry);
-        const backup = path.join(options.backupRoot, entry);
+function generatedDependencyTreeCopyFilter(source) {
+    return !source.split(/[\\/]/).includes("node_modules");
+}
+async function rollbackStagedPaths(options) {
+    for (const changedPath of options.changedPaths) {
+        const target = path.join(options.targetRoot, changedPath);
+        const backup = path.join(options.backupRoot, changedPath);
         await rm(target, { recursive: true, force: true });
         try {
-            await cp(backup, target, { recursive: true });
+            await mkdir(path.dirname(target), { recursive: true });
+            await cp(backup, target, {
+                recursive: true,
+                filter: generatedDependencyTreeCopyFilter,
+            });
         }
         catch (error) {
             if (!isNodeError(error) || error.code !== "ENOENT")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ykdz/template",
-  "version": "0.0.25",
+  "version": "0.0.27",
   "private": false,
   "description": "Project template generator for YKDZ starter projects.",
   "keywords": [