actions-up 1.14.2 → 1.14.3

package/dist/cli/index.js

@@ -17,192 +17,197 @@ import { mergeScanResults as h } from "./merge-scan-results.js";
 import { printModeWarning as g } from "./print-mode-warning.js";
 import { scanRecursive as _ } from "../core/scan-recursive.js";
 import { buildJsonReport as v } from "./build-json-report.js";
-import { scanGitHubActions as y } from "../core/scan-github-actions.js";
+import { parseArguments as y } from "./parse-arguments.js";
+import { scanGitHubActions as b } from "../core/scan-github-actions.js";
 import "../core/index.js";
-import { version as b } from "../package.js";
-import { createSpinner as x } from "nanospinner";
-import { resolve as S } from "node:path";
+import { version as x } from "../package.js";
+import { createSpinner as S } from "nanospinner";
+import { resolve as C } from "node:path";
 import "node:worker_threads";
-import C from "picocolors";
-import w from "cac";
+import w from "picocolors";
 function T() {
-	let T = w("actions-up");
-	T.help().version(b).option("--dir <directory>", "Directory to scan (repeatable). Default: .github, or . with --recursive").option("--dry-run", "Preview changes without applying them").option("--exclude <regex>", "Exclude actions by regex (repeatable)").option("--include-branches", "Also check actions pinned to branches (default: false)").option("--json", "Output update information as machine-readable JSON").option("--min-age <days>", "Minimum age in days for updates (default: 0)", { default: 0 }).option("--mode <mode>", "Update mode: major, minor, or patch (default: major)", { default: "major" }).option("--style <style>", "Update style: sha or preserve (default: sha)", { default: "sha" }).option("--recursive, -r", "Recursively scan directories for YAML files").option("--yes, -y", "Skip all confirmations").command("", "Update GitHub Actions").action(async (b) => {
-		let w = b.json ?? !1, T = null, E = o({
-			recursive: b.recursive,
-			cwd: process.cwd(),
-			dir: b.dir
-		}), D = E.map(({ root: e, dir: t }) => S(e, t)), O = b.includeBranches ?? !1, k = d(b.mode), A = l(b.style), j = [];
-		Array.isArray(b.exclude) ? j.push(...b.exclude) : typeof b.exclude == "string" && j.push(b.exclude);
-		let M = j.flatMap((e) => e.split(",")).map((e) => e.trim()).filter(Boolean);
-		try {
-			f({
-				yes: b.yes,
-				json: w
-			}), w || (console.info(C.cyan("\n🚀 Actions Up!\n")), T = x("Scanning GitHub Actions...").start());
-			function o({ actionsToCheckCount: e, blockedByMode: t = [], outdated: n = [], skipped: r = [], scanResult: i, status: a }) {
-				process.stdout.write(`${JSON.stringify(v({
-					recursive: b.recursive ?? !1,
-					excludePatterns: M,
-					directories: D,
-					minAge: b.minAge,
-					actionsToCheckCount: e,
-					includeBranches: O,
-					blockedByMode: t,
-					scanResult: i,
-					outdated: n,
-					skipped: r,
-					status: a,
-					style: A,
-					mode: k
-				}), null, 2)}\n`);
-			}
-			let l = h(b.recursive ? await Promise.all(E.map(({ root: e, dir: t }) => _(e, t))) : await Promise.all(E.map(({ root: e, dir: t }) => y(e, t)))), d = l.actions.length, S = l.workflows.size, j = l.compositeActions.size;
-			if (T?.success(`Found ${C.yellow(d)} actions in ${C.yellow(S)} workflows and ${C.yellow(j)} composite actions`), d === 0) {
-				if (w) {
-					o({
-						status: "no-actions-found",
-						actionsToCheckCount: 0,
-						scanResult: l
-					});
-					return;
-				}
-				console.info(C.green("\n✨ No GitHub Actions found in this repository"));
+	let e = y(process.argv.slice(2), x);
+	if (e.kind === "help" || e.kind === "version") {
+		console.info(e.text);
+		return;
+	}
+	e.kind === "error" && (console.error(w.redBright("\nError:"), e.message), process.exit(1)), E(e.options);
+}
+async function E(y) {
+	let x = y.json ?? !1, T = null, E = o({
+		recursive: y.recursive,
+		cwd: process.cwd(),
+		dir: y.dir
+	}), D = E.map(({ root: e, dir: t }) => C(e, t)), O = y.includeBranches ?? !1, k = d(y.mode), A = l(y.style), j = [];
+	Array.isArray(y.exclude) ? j.push(...y.exclude) : typeof y.exclude == "string" && j.push(y.exclude);
+	let M = j.flatMap((e) => e.split(",")).map((e) => e.trim()).filter(Boolean);
+	try {
+		f({
+			yes: y.yes,
+			json: x
+		}), x || (console.info(w.cyan("\n🚀 Actions Up!\n")), T = S("Scanning GitHub Actions...").start());
+		function o({ actionsToCheckCount: e, blockedByMode: t = [], outdated: n = [], skipped: r = [], scanResult: i, status: a }) {
+			process.stdout.write(`${JSON.stringify(v({
+				recursive: y.recursive ?? !1,
+				excludePatterns: M,
+				directories: D,
+				minAge: y.minAge,
+				actionsToCheckCount: e,
+				includeBranches: O,
+				blockedByMode: t,
+				scanResult: i,
+				outdated: n,
+				skipped: r,
+				status: a,
+				style: A,
+				mode: k
+			}), null, 2)}\n`);
+		}
+		let l = h(y.recursive ? await Promise.all(E.map(({ root: e, dir: t }) => _(e, t))) : await Promise.all(E.map(({ root: e, dir: t }) => b(e, t)))), d = l.actions.length, C = l.workflows.size, j = l.compositeActions.size;
+		if (T?.success(`Found ${w.yellow(d)} actions in ${w.yellow(C)} workflows and ${w.yellow(j)} composite actions`), d === 0) {
+			if (x) {
+				o({
+					status: "no-actions-found",
+					actionsToCheckCount: 0,
+					scanResult: l
+				});
 				return;
 			}
-			let N = l.actions;
-			if (M.length > 0) {
-				let { parseExcludePatterns: e } = await import("../core/filters/parse-exclude-patterns.js"), t = e(M);
-				t.length > 0 && (N = N.filter((e) => {
-					let { name: n } = e;
-					for (let e of t) if (e.test(n)) return !1;
-					return !0;
-				}));
-			}
-			if (w || (T = x("Checking for updates...").start()), N.length === 0) {
-				if (T?.success("No actions to check after excludes"), w) {
-					o({
-						status: "nothing-to-check",
-						actionsToCheckCount: 0,
-						scanResult: l
-					});
-					return;
-				}
-				console.info(C.green("\n✨ Nothing to check after excludes\n"));
+			console.info(w.green("\n✨ No GitHub Actions found in this repository"));
+			return;
+		}
+		let N = l.actions;
+		if (M.length > 0) {
+			let { parseExcludePatterns: e } = await import("../core/filters/parse-exclude-patterns.js"), t = e(M);
+			t.length > 0 && (N = N.filter((e) => {
+				let { name: n } = e;
+				for (let e of t) if (e.test(n)) return !1;
+				return !0;
+			}));
+		}
+		if (x || (T = S("Checking for updates...").start()), N.length === 0) {
+			if (T?.success("No actions to check after excludes"), x) {
+				o({
+					status: "nothing-to-check",
+					actionsToCheckCount: 0,
+					scanResult: l
+				});
 				return;
 			}
-			let P = process.env.GITHUB_TOKEN, F = a(P), I = await m(N, P, {
-				client: F,
-				includeBranches: O,
-				style: A
-			}), L = [];
-			await Promise.all(I.map(async (e) => {
-				await p(e.action.file, e.action.line) || L.push(e);
-			}));
-			let R = L.filter((e) => e.status === "skipped"), z = L.filter((e) => e.hasUpdate), B = b.minAge * 24 * 60 * 60 * 1e3, V = Date.now();
-			z = z.filter((e) => e.publishedAt ? V - e.publishedAt.getTime() >= B : !0);
-			let H = [];
-			if (k !== "major") {
-				let n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), a = /* @__PURE__ */ new Map(), o = await Promise.all(z.map(async (n) => {
-					let r = n.currentVersion;
-					if (t(n.currentVersion)) {
-						let t = await e(n.action.file, n.action.line, a);
-						t && (r = t);
-					}
-					let i = s(r, n.latestVersion);
-					return {
-						effectiveCurrentVersion: r,
-						allowed: k === "minor" ? i === "minor" || i === "patch" || i === "none" : i === "patch" || i === "none",
-						update: n
-					};
-				})), c = [], l = await Promise.all(o.map(async (e) => {
-					if (e.allowed) return { update: e.update };
-					let t = await i(F, {
-						currentVersion: e.effectiveCurrentVersion,
-						actionName: e.update.action.name,
-						tagsCache: n,
-						shaCache: r,
-						mode: k
-					});
-					return t ? { update: {
-						...e.update,
-						latestVersion: t.version,
-						latestSha: t.sha,
-						isBreaking: !1,
-						hasUpdate: !0
-					} } : { blocked: e.update };
-				}));
-				for (let e of l) {
-					if (e.update) {
-						c.push(e.update);
-						continue;
-					}
-					H.push(e.blocked);
+			console.info(w.green("\n✨ Nothing to check after excludes\n"));
+			return;
+		}
+		let P = process.env.GITHUB_TOKEN, F = a(P), I = await m(N, P, {
+			client: F,
+			includeBranches: O,
+			style: A
+		}), L = [];
+		await Promise.all(I.map(async (e) => {
+			await p(e.action.file, e.action.line) || L.push(e);
+		}));
+		let R = L.filter((e) => e.status === "skipped"), z = L.filter((e) => e.hasUpdate), B = y.minAge * 24 * 60 * 60 * 1e3, V = Date.now();
+		z = z.filter((e) => e.publishedAt ? V - e.publishedAt.getTime() >= B : !0);
+		let H = [];
+		if (k !== "major") {
+			let n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), a = /* @__PURE__ */ new Map(), o = await Promise.all(z.map(async (n) => {
+				let r = n.currentVersion;
+				if (t(n.currentVersion)) {
+					let t = await e(n.action.file, n.action.line, a);
+					t && (r = t);
 				}
-				z = c;
-			}
-			z = z.map((e) => r(e, A));
-			let U = z.filter((e) => !e.targetRef).map((e) => ({
-				...e,
-				skipReason: "unsupported-style",
-				status: "skipped",
-				hasUpdate: !1
+				let i = s(r, n.latestVersion);
+				return {
+					effectiveCurrentVersion: r,
+					allowed: k === "minor" ? i === "minor" || i === "patch" || i === "none" : i === "patch" || i === "none",
+					update: n
+				};
+			})), c = [], l = await Promise.all(o.map(async (e) => {
+				if (e.allowed) return { update: e.update };
+				let t = await i(F, {
+					currentVersion: e.effectiveCurrentVersion,
+					actionName: e.update.action.name,
+					tagsCache: n,
+					shaCache: r,
+					mode: k
+				});
+				return t ? { update: {
+					...e.update,
+					latestVersion: t.version,
+					latestSha: t.sha,
+					isBreaking: !1,
+					hasUpdate: !0
+				} } : { blocked: e.update };
 			}));
-			R.push(...U), z = z.filter((e) => e.targetRef);
-			let W = z.filter((e) => e.isBreaking);
-			if (z.length === 0) {
-				if (T?.success("All actions are up to date!"), w) {
-					o({
-						actionsToCheckCount: N.length,
-						status: "up-to-date",
-						blockedByMode: H,
-						scanResult: l,
-						skipped: R
-					});
-					return;
+			for (let e of l) {
+				if (e.update) {
+					c.push(e.update);
+					continue;
 				}
-				R.length > 0 && u(R, O, A), H.length > 0 && g(H, k), console.info(C.green("\n✨ Everything is already at the latest version!\n"));
-				return;
+				H.push(e.blocked);
 			}
-			if (T?.success(`Found ${C.yellow(z.length)} updates available${W.length > 0 ? ` (${C.redBright(W.length)} breaking)` : ""}`), w) {
+			z = c;
+		}
+		z = z.map((e) => r(e, A));
+		let U = z.filter((e) => !e.targetRef).map((e) => ({
+			...e,
+			skipReason: "unsupported-style",
+			status: "skipped",
+			hasUpdate: !1
+		}));
+		R.push(...U), z = z.filter((e) => e.targetRef);
+		let W = z.filter((e) => e.isBreaking);
+		if (z.length === 0) {
+			if (T?.success("All actions are up to date!"), x) {
 				o({
 					actionsToCheckCount: N.length,
-					status: "updates-available",
+					status: "up-to-date",
 					blockedByMode: H,
 					scanResult: l,
-					outdated: z,
 					skipped: R
 				});
 				return;
 			}
-			if (R.length > 0 && u(R, O, A), H.length > 0 && g(H, k), b.dryRun) {
-				console.info(C.yellow("\n📋 Dry Run - No changes will be made\n"));
-				for (let e of z) {
-					let t = e.targetRefStyle === "sha" && e.targetRef ? `${e.latestVersion} ${C.gray(`(${e.targetRef.slice(0, 7)})`)}` : e.targetRef ?? e.latestVersion;
-					console.info(`${C.cyan(e.action.file ?? "unknown")}:\n${e.action.name}: ${C.redBright(e.currentVersion)} → ${C.green(t)}\n`);
-				}
-				console.info(C.gray(`\n${z.length} actions would be updated\n`));
+			R.length > 0 && u(R, O, A), H.length > 0 && g(H, k), console.info(w.green("\n✨ Everything is already at the latest version!\n"));
+			return;
+		}
+		if (T?.success(`Found ${w.yellow(z.length)} updates available${W.length > 0 ? ` (${w.redBright(W.length)} breaking)` : ""}`), x) {
+			o({
+				actionsToCheckCount: N.length,
+				status: "updates-available",
+				blockedByMode: H,
+				scanResult: l,
+				outdated: z,
+				skipped: R
+			});
+			return;
+		}
+		if (R.length > 0 && u(R, O, A), H.length > 0 && g(H, k), y.dryRun) {
+			console.info(w.yellow("\n📋 Dry Run - No changes will be made\n"));
+			for (let e of z) {
+				let t = e.targetRefStyle === "sha" && e.targetRef ? `${e.latestVersion} ${w.gray(`(${e.targetRef.slice(0, 7)})`)}` : e.targetRef ?? e.latestVersion;
+				console.info(`${w.cyan(e.action.file ?? "unknown")}:\n${e.action.name}: ${w.redBright(e.currentVersion)} → ${w.green(t)}\n`);
+			}
+			console.info(w.gray(`\n${z.length} actions would be updated\n`));
+			return;
+		}
+		if (y.yes) {
+			let e = z.filter((e) => e.targetRef);
+			if (e.length === 0) {
+				console.info(w.yellow("\n⚠️ No actionable updates available\n"));
 				return;
 			}
-			if (b.yes) {
-				let e = z.filter((e) => e.targetRef);
-				if (e.length === 0) {
-					console.info(C.yellow("\n⚠️ No actionable updates available\n"));
-					return;
-				}
-				console.info(C.yellow(`\n🔄 Updating ${e.length} actions...\n`)), await c(e), console.info(C.green("\n✓ Updates applied successfully!"));
-			} else {
-				(R.length > 0 || H.length > 0) && console.info("");
-				let e = await n(z, { showAge: b.minAge > 0 });
-				if (!e || e.length === 0) {
-					console.info(C.gray("\nNo updates applied"));
-					return;
-				}
-				console.info(C.yellow(`\n🔄 Updating ${e.length} selected actions...\n`)), await c(e), console.info(C.green("\n✓ Updates applied successfully!"));
+			console.info(w.yellow(`\n🔄 Updating ${e.length} actions...\n`)), await c(e), console.info(w.green("\n✓ Updates applied successfully!"));
+		} else {
+			(R.length > 0 || H.length > 0) && console.info("");
+			let e = await n(z, { showAge: y.minAge > 0 });
+			if (!e || e.length === 0) {
+				console.info(w.gray("\nNo updates applied"));
+				return;
 			}
-		} catch (e) {
-			T?.error("Failed"), e instanceof Error && e.name === "GitHubRateLimitError" ? (console.error(C.yellow("\n⚠️ Rate Limit Exceeded\n")), console.error(e.message), console.error(C.gray("\nExample: GITHUB_TOKEN=ghp_xxxx actions-up\n"))) : console.error(C.redBright("\nError:"), e instanceof Error ? e.message : String(e)), process.exit(1);
+			console.info(w.yellow(`\n🔄 Updating ${e.length} selected actions...\n`)), await c(e), console.info(w.green("\n✓ Updates applied successfully!"));
 		}
-	}), T.parse();
+	} catch (e) {
+		T?.error("Failed"), e instanceof Error && e.name === "GitHubRateLimitError" ? (console.error(w.yellow("\n⚠️ Rate Limit Exceeded\n")), console.error(e.message), console.error(w.gray("\nExample: GITHUB_TOKEN=ghp_xxxx actions-up\n"))) : console.error(w.redBright("\nError:"), e instanceof Error ? e.message : String(e)), process.exit(1);
+	}
 }
 export { T as run };

package/dist/cli/parse-arguments.d.ts

@@ -0,0 +1,74 @@
+/**
+ * CLI Options.
+ */
+export interface CLIOptions {
+    /**
+     * Regex patterns to exclude actions by name (repeatable).
+     */
+    exclude?: string[] | string;
+    /**
+     * Whether to include branch references in update checks.
+     */
+    includeBranches?: boolean;
+    /**
+     * Custom directory name (e.g., '.gitea' instead of '.github').
+     */
+    dir?: string[] | string;
+    /**
+     * Recursively scan directories for YAML files.
+     */
+    recursive?: boolean;
+    /**
+     * Preview changes without applying them.
+     */
+    dryRun: boolean;
+    /**
+     * Update style (sha or preserve).
+     */
+    style?: string;
+    /**
+     * Output a machine-readable JSON report.
+     */
+    json?: boolean;
+    /**
+     * Minimum age in days for updates.
+     */
+    minAge: number;
+    /**
+     * Update mode (major, minor, patch).
+     */
+    mode?: string;
+    /**
+     * Skip all confirmations.
+     */
+    yes: boolean;
+}
+/**
+ * Result of parsing CLI arguments. `kind` discriminates what the caller should
+ * do next.
+ */
+export type ParseArgumentsResult = {
+    options: CLIOptions;
+    kind: 'options';
+} | {
+    message: string;
+    kind: 'error';
+} | {
+    kind: 'version';
+    text: string;
+} | {
+    kind: 'help';
+    text: string;
+};
+/**
+ * Parse CLI arguments into normalized options.
+ *
+ * Reproduces the previous cac behavior without its runtime magic: numeric
+ * coercion for `--min-age` and the option defaults are applied manually here,
+ * and kebab-case flags are mapped to the camelCase option shape.
+ *
+ * @param argv - Raw arguments, typically `process.argv.slice(2)`.
+ * @param appVersion - Version string used for `--version`.
+ * @returns A discriminated result describing what the caller should do.
+ */
+export declare function parseArguments(argv: string[], appVersion: string): ParseArgumentsResult;

package/dist/cli/parse-arguments.js

@@ -0,0 +1,76 @@
+import { parseArgs as e } from "node:util";
+var t = "Usage:\n  $ actions-up [options]\n\nOptions:\n  --dir <directory>   Directory to scan (repeatable). Default: .github, or . with --recursive\n  --dry-run           Preview changes without applying them\n  --exclude <regex>   Exclude actions by regex (repeatable)\n  --include-branches  Also check actions pinned to branches (default: false)\n  --json              Output update information as machine-readable JSON\n  --min-age <days>    Minimum age in days for updates (default: 0)\n  --mode <mode>       Update mode: major, minor, or patch (default: major)\n  --style <style>     Update style: sha or preserve (default: sha)\n  -r, --recursive     Recursively scan directories for YAML files\n  -y, --yes           Skip all confirmations\n  -h, --help          Display this message\n  -v, --version       Display version number", n = {
+	exclude: {
+		type: "string",
+		multiple: !0
+	},
+	recursive: {
+		type: "boolean",
+		short: "r"
+	},
+	version: {
+		type: "boolean",
+		short: "v"
+	},
+	"include-branches": { type: "boolean" },
+	dir: {
+		type: "string",
+		multiple: !0
+	},
+	help: {
+		type: "boolean",
+		short: "h"
+	},
+	yes: {
+		type: "boolean",
+		short: "y"
+	},
+	"dry-run": { type: "boolean" },
+	"min-age": { type: "string" },
+	style: { type: "string" },
+	json: { type: "boolean" },
+	mode: { type: "string" }
+};
+function r(r, i) {
+	try {
+		let { values: a } = e({
+			allowPositionals: !1,
+			options: n,
+			strict: !0,
+			args: r
+		});
+		if (a.help) return {
+			text: t,
+			kind: "help"
+		};
+		if (a.version) return {
+			text: `actions-up/${i} ${process.platform}-${process.arch} node-${process.version}`,
+			kind: "version"
+		};
+		let o = a["min-age"], s = o === void 0 ? 0 : Number(o);
+		return !Number.isFinite(s) || s < 0 ? {
+			message: `Invalid --min-age "${o}". Expected a non-negative number.`,
+			kind: "error"
+		} : {
+			options: {
+				includeBranches: a["include-branches"],
+				dryRun: a["dry-run"] ?? !1,
+				style: a.style ?? "sha",
+				mode: a.mode ?? "major",
+				recursive: a.recursive,
+				yes: a.yes ?? !1,
+				exclude: a.exclude,
+				json: a.json,
+				dir: a.dir,
+				minAge: s
+			},
+			kind: "options"
+		};
+	} catch (e) {
+		return {
+			message: e.message,
+			kind: "error"
+		};
+	}
+}
+export { r as parseArguments };

package/dist/package.js

@@ -1,2 +1,2 @@
-var e = "1.14.2";
+var e = "1.14.3";
 export { e as version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "actions-up",
-  "version": "1.14.2",
+  "version": "1.14.3",
   "description": "Interactive CLI tool to update GitHub Actions with SHA pinning or preserved refs",
   "keywords": [
     "github-actions",
@@ -36,14 +36,13 @@
     "./dist"
   ],
   "dependencies": {
-    "cac": "^7.0.0",
     "enquirer": "^2.4.1",
     "nanospinner": "^1.2.2",
     "picocolors": "^1.1.1",
-    "semver": "^7.8.0",
+    "semver": "^7.8.4",
     "yaml": "^2.9.0"
   },
   "engines": {
-    "node": "^18.0.0 || >=20.0.0"
+    "node": "^18.3.0 || >=20.0.0"
   }
 }