binary-collections 2.0.6 → 2.0.8

package/lib/package-resolutions-updater.cjs

@@ -0,0 +1,274 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/package-resolutions-updater.mjs
+var import_ansi_colors = __toESM(require("ansi-colors"), 1);
+var dotenv = __toESM(require("dotenv"), 1);
+var import_fs = __toESM(require("fs"), 1);
+var import_https = __toESM(require("https"), 1);
+var import_os = __toESM(require("os"), 1);
+var import_path = __toESM(require("path"), 1);
+var projectDir = process.cwd();
+var envPath = import_path.default.join(projectDir, ".env");
+if (import_fs.default.existsSync(envPath)) dotenv.config({ path: envPath });
+var specialPackageOverrides = [
+  // SBG packages
+  { pkg: "sbg-utility", branch: "sbg-utility", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "sbg-api", branch: "sbg-api", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "instant-indexing", branch: "instant-indexing", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "sbg-server", branch: "master", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "sbg-cli", branch: "master", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "static-blog-generator", branch: "master", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  // Hexo family
+  { pkg: "hexo", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-util", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "warehouse", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-server", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-log", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-front-matter", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-cli", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-asset-link", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-post-parser", branch: "pre-release", repo: "hexo-post-parser", owner: "dimaslanjaka" },
+  { pkg: "hexo-seo", branch: "pre-release", repo: "hexo-seo", owner: "dimaslanjaka" },
+  { pkg: "hexo-is", branch: "master", repo: "hexo-is", owner: "dimaslanjaka" },
+  { pkg: "markdown-it", branch: "master", repo: "markdown-it", owner: "dimaslanjaka" },
+  { pkg: "hexo-renderers", branch: "pre-release", repo: "hexo-renderers", owner: "dimaslanjaka" },
+  { pkg: "hexo-shortcodes", branch: "pre-release", repo: "hexo-shortcodes", owner: "dimaslanjaka" },
+  { pkg: "google-news-sitemap", branch: "master", repo: "google-news-sitemap", owner: "dimaslanjaka" },
+  { pkg: "git-command-helper", branch: "pre-release", repo: "git-command-helper", owner: "dimaslanjaka" },
+  {
+    pkg: "nodejs-package-types",
+    branch: "main",
+    repo: "nodejs-package-types",
+    owner: "dimaslanjaka"
+  },
+  { pkg: "cross-spawn", branch: "private", repo: "node-cross-spawn", owner: "dimaslanjaka" },
+  { pkg: "hexo-generator-redirect", branch: "master", repo: "hexo-generator-redirect", owner: "dimaslanjaka" },
+  { pkg: "binary-collections", branch: "master", repo: "bin", owner: "dimaslanjaka" },
+  { pkg: "@types/hexo", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "@types/git-command-helper", branch: "pre-release", repo: "git-command-helper", owner: "dimaslanjaka" }
+];
+var pkgPath = import_path.default.join(process.cwd(), "package.json");
+var pkg;
+try {
+  pkg = JSON.parse(import_fs.default.readFileSync(pkgPath, "utf-8"));
+} catch (e) {
+  console.error(import_ansi_colors.default.red(`Failed to read package.json: ${e.message}`));
+  process.exit(1);
+}
+var GITHUB_USER_AGENTS = [
+  "octokit-rest.js/19.0.7",
+  "GitHub CLI/2.40.0",
+  "Mozilla/5.0 (compatible; GitHubCopilot/1.0)",
+  "PostmanRuntime/7.32.3",
+  "binary-collections-resolver/1.0 (+https://github.com/dimaslanjaka/bin)"
+];
+var userAgentDir = import_path.default.join(import_os.default.tmpdir(), "nodejs");
+var userAgentFile = import_path.default.join(userAgentDir, "useragent.txt");
+var selectedUserAgent;
+try {
+  if (!import_fs.default.existsSync(userAgentDir)) import_fs.default.mkdirSync(userAgentDir, { recursive: true });
+  if (import_fs.default.existsSync(userAgentFile)) {
+    const fileAgent = import_fs.default.readFileSync(userAgentFile, "utf-8").trim();
+    if (GITHUB_USER_AGENTS.includes(fileAgent)) {
+      selectedUserAgent = fileAgent;
+    }
+  }
+  if (!selectedUserAgent) {
+    selectedUserAgent = GITHUB_USER_AGENTS[Math.floor(Math.random() * GITHUB_USER_AGENTS.length)];
+    import_fs.default.writeFileSync(userAgentFile, selectedUserAgent, "utf-8");
+  }
+} catch (_e) {
+  selectedUserAgent = GITHUB_USER_AGENTS[Math.floor(Math.random() * GITHUB_USER_AGENTS.length)];
+}
+function fetchJson(url) {
+  const headers = {
+    "User-Agent": selectedUserAgent,
+    Accept: "application/vnd.github.v3+json",
+    "X-GitHub-Api-Version": "2022-11-28",
+    ...process.env.GITHUB_TOKEN ? { Authorization: `token ${process.env.GITHUB_TOKEN}` } : {}
+  };
+  return new Promise((resolve, reject) => {
+    import_https.default.get(url, { headers }, (res) => {
+      let data = "";
+      res.on("data", (chunk) => data += chunk);
+      res.on("end", () => {
+        try {
+          const json = JSON.parse(data);
+          if (res.statusCode < 200 || res.statusCode >= 300) {
+            return reject(
+              new Error(`GitHub API Error ${res.statusCode}: ${json.message || "Unknown error"}
+URL: ${url}`)
+            );
+          }
+          resolve(json);
+        } catch {
+          reject(new Error(`Invalid JSON from: ${url}`));
+        }
+      });
+    }).on("error", reject);
+  });
+}
+async function getLatestCommit(owner, repo, branch = "main") {
+  var _a, _b, _c, _d;
+  const url = `https://api.github.com/repos/${owner}/${repo}/commits/${branch}`;
+  const json = await fetchJson(url);
+  const sha = json.sha;
+  const dateStr = ((_b = (_a = json.commit) == null ? void 0 : _a.committer) == null ? void 0 : _b.date) || ((_d = (_c = json.commit) == null ? void 0 : _c.author) == null ? void 0 : _d.date);
+  if (!sha || !dateStr) {
+    console.log(json);
+    throw new Error(`Missing SHA or date for ${owner}/${repo}@${branch}`);
+  }
+  return {
+    owner,
+    repo,
+    branch,
+    sha,
+    date: new Date(dateStr).toISOString()
+  };
+}
+async function getLatestCommitAcrossBranches(owner, repo) {
+  const branches = await fetchJson(`https://api.github.com/repos/${owner}/${repo}/branches`);
+  const commits = await Promise.all(
+    branches.map(async ({ name, commit }) => {
+      var _a, _b, _c, _d;
+      const commitSha = commit == null ? void 0 : commit.sha;
+      if (!commitSha) {
+        console.warn(`No commit SHA for '${owner}/${repo}' branch: ${name}`);
+        return { branch: name, sha: "", date: /* @__PURE__ */ new Date(0) };
+      }
+      try {
+        const commitData = await fetchJson(`https://api.github.com/repos/${owner}/${repo}/commits/${commitSha}`);
+        const dateStr = ((_b = (_a = commitData.commit) == null ? void 0 : _a.committer) == null ? void 0 : _b.date) || ((_d = (_c = commitData.commit) == null ? void 0 : _c.author) == null ? void 0 : _d.date);
+        const date = dateStr ? new Date(dateStr) : /* @__PURE__ */ new Date(0);
+        return { branch: name, sha: commitData.sha, date };
+      } catch (e) {
+        console.warn(`Failed to fetch commit for ${name}: ${e.message}`);
+        return { branch: name, sha: commitSha, date: /* @__PURE__ */ new Date(0) };
+      }
+    })
+  );
+  const latest = commits.reduce((a, b) => a.date > b.date ? a : b, { date: /* @__PURE__ */ new Date(0) });
+  return {
+    owner,
+    repo,
+    branch: latest.branch,
+    sha: latest.sha,
+    date: latest.date.toISOString()
+  };
+}
+function replaceRawWithLatestHash(url, latestHash) {
+  const match = url.match(/^https:\/\/github\.com\/([^/]+)\/([^/]+)\/raw\/([^/]+)\/(.+)$/);
+  if (!match) throw new Error("Invalid GitHub raw URL");
+  const [, owner, repo, _oldHash, path2] = match;
+  return `https://github.com/${owner}/${repo}/raw/${latestHash}/${path2}`;
+}
+function parseGitHubUrl(url) {
+  const ghRepoRoot = /^https:\/\/github\.com\/([^/]+)\/([^/]+)\/?$/;
+  const ghTreeOrBlob = /^https:\/\/github\.com\/([^/]+)\/([^/]+)\/(tree|blob)\/([^/]+(?:\/[^/]+)*)/;
+  const ghRaw = /^https:\/\/raw\.githubusercontent\.com\/([^/]+)\/([^/]+)\/([^/]+)(\/.+)?$/;
+  const ghDotComRaw = /^https:\/\/github\.com\/([^/]+)\/([^/]+)\/raw\/([^/]+)\/.+/;
+  let match;
+  if (match = url.match(ghRaw)) {
+    const [, owner, repo, branch] = match;
+    return { owner, repo, branch, url };
+  }
+  if (match = url.match(ghDotComRaw)) {
+    const [, owner, repo, branch] = match;
+    return { owner, repo, branch, url };
+  }
+  if (match = url.match(ghTreeOrBlob)) {
+    const [, owner, repo, , branchPath] = match;
+    return { owner, repo, branch: branchPath, url };
+  }
+  if (match = url.match(ghRepoRoot)) {
+    const [, owner, repo] = match;
+    return { owner, repo, url };
+  }
+  throw new Error(`Unsupported GitHub URL: ${url}`);
+}
+(async () => {
+  const entries = Object.entries(pkg.resolutions || {});
+  if (entries.length === 0) {
+    console.log(import_ansi_colors.default.yellow("No resolutions found in package.json"));
+    return;
+  }
+  console.log(`Processing ${entries.length} resolution(s)...`);
+  const updates = [];
+  for (const [currentPkgName, url] of entries) {
+    let repo;
+    try {
+      repo = parseGitHubUrl(url);
+      console.log(`\u2705 Valid GitHub URL for ${import_ansi_colors.default.cyan(currentPkgName)}: ${url}`);
+    } catch (error) {
+      console.log(`\u23ED\uFE0F  Skipping ${import_ansi_colors.default.yellow(currentPkgName)}: ${error.message}`);
+      continue;
+    }
+    try {
+      const override = specialPackageOverrides.find((p) => p.pkg === currentPkgName);
+      const latest = override ? await getLatestCommit(override.owner, override.repo, override.branch) : await getLatestCommitAcrossBranches(repo.owner, repo.repo);
+      const new_url = replaceRawWithLatestHash(url, latest.sha);
+      updates.push({
+        currentPkgName,
+        url,
+        new_url,
+        repo,
+        latest
+      });
+    } catch (error) {
+      console.log(`\u274C Failed to process ${import_ansi_colors.default.red(currentPkgName)}: ${error.message}`);
+    }
+  }
+  if (updates.length === 0) {
+    console.log(import_ansi_colors.default.yellow("No GitHub URLs were processed"));
+    return;
+  }
+  console.log(`
+\u{1F4DD} Applying updates to ${updates.length} GitHub URL(s)...`);
+  let changed = false;
+  for (const { currentPkgName, url, new_url, repo, latest } of updates) {
+    if (url !== new_url) {
+      console.log(`
+${import_ansi_colors.default.cyan(currentPkgName)}:`);
+      console.log("  from:", url.replace(repo.branch, import_ansi_colors.default.red(repo.branch)));
+      console.log("    to:", new_url.replace(latest.sha, import_ansi_colors.default.green(latest.sha)));
+      pkg.resolutions[currentPkgName] = new_url;
+      changed = true;
+    } else {
+      console.log(`
+${import_ansi_colors.default.cyan(currentPkgName)}: ${import_ansi_colors.default.gray("already up-to-date")}`);
+    }
+  }
+  if (changed) {
+    try {
+      import_fs.default.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+      console.log(`
+\u2705 package.json updated successfully`);
+    } catch (e) {
+      console.error(import_ansi_colors.default.red(`Failed to write package.json: ${e.message}`));
+      process.exit(1);
+    }
+  } else {
+    console.log(import_ansi_colors.default.green("No changes to package.json were necessary."));
+  }
+})();

package/lib/package-resolutions-updater.d.mts

@@ -0,0 +1 @@
+export {};

package/lib/package-resolutions-updater.d.ts

@@ -0,0 +1,326 @@
+import ansiColors from 'ansi-colors';
+import * as dotenv from 'dotenv';
+import fs from 'fs';
+import https from 'https';
+import os from 'os';
+import path from 'path';
+
+/**
+ * 📦 GitHub Package Resolver
+ *
+ * This script updates the commit hashes in `package.json`'s `resolutions` field
+ * for GitHub tarball URLs (typically using `raw/branch-name/...`) to point to the
+ * latest commit SHA of the corresponding repository and branch.
+ *
+ * 🔍 Features:
+ * - Parses GitHub URLs to extract repository owner, name, and branch.
+ * - Fetches the latest commit SHA across all branches using GitHub's API.
+ * - Replaces the old branch or commit in the URL with the latest SHA.
+ * - Overwrites `package.json` with the updated URLs.
+ *
+ * 🛠 Requirements:
+ * - GitHub Personal Access Token (GITHUB_TOKEN) via `.env`
+ * - ESM support (`type: "module"` in `package.json`)
+ * - Node.js v18+ recommended for ESM and `fetch` fallback compatibility
+ *
+ * 🧩 Dependencies:
+ * - `ansi-colors` – for styled terminal output
+ * - `dotenv` – to load GitHub token from `.env`
+ *
+ * ✅ Use case:
+ * - Ensures package resolutions always use immutable SHAs instead of mutable branch names.
+ * - Helps achieve deterministic builds in monorepos or projects with internal GitHub packages.
+ */
+
+
+const projectDir = process.cwd();
+const envPath = path.join(projectDir, ".env");
+
+// Load the .env file using dotenv (ESM import)
+if (fs.existsSync(envPath)) dotenv.config({ path: envPath });
+
+// 📌 Static override rules
+const specialPackageOverrides = [
+  // SBG packages
+  { pkg: "sbg-utility", branch: "sbg-utility", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "sbg-api", branch: "sbg-api", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "instant-indexing", branch: "instant-indexing", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "sbg-server", branch: "master", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "sbg-cli", branch: "master", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  { pkg: "static-blog-generator", branch: "master", repo: "static-blog-generator", owner: "dimaslanjaka" },
+  // Hexo family
+  { pkg: "hexo", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-util", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "warehouse", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-server", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-log", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-front-matter", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-cli", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-asset-link", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "hexo-post-parser", branch: "pre-release", repo: "hexo-post-parser", owner: "dimaslanjaka" },
+  { pkg: "hexo-seo", branch: "pre-release", repo: "hexo-seo", owner: "dimaslanjaka" },
+  { pkg: "hexo-is", branch: "master", repo: "hexo-is", owner: "dimaslanjaka" },
+  { pkg: "markdown-it", branch: "master", repo: "markdown-it", owner: "dimaslanjaka" },
+  { pkg: "hexo-renderers", branch: "pre-release", repo: "hexo-renderers", owner: "dimaslanjaka" },
+  { pkg: "hexo-shortcodes", branch: "pre-release", repo: "hexo-shortcodes", owner: "dimaslanjaka" },
+  { pkg: "google-news-sitemap", branch: "master", repo: "google-news-sitemap", owner: "dimaslanjaka" },
+  { pkg: "git-command-helper", branch: "pre-release", repo: "git-command-helper", owner: "dimaslanjaka" },
+  {
+    pkg: "nodejs-package-types",
+    branch: "main",
+    repo: "nodejs-package-types",
+    owner: "dimaslanjaka"
+  },
+  { pkg: "cross-spawn", branch: "private", repo: "node-cross-spawn", owner: "dimaslanjaka" },
+  { pkg: "hexo-generator-redirect", branch: "master", repo: "hexo-generator-redirect", owner: "dimaslanjaka" },
+  { pkg: "binary-collections", branch: "master", repo: "bin", owner: "dimaslanjaka" },
+  { pkg: "@types/hexo", branch: "monorepo-v7", repo: "hexo", owner: "dimaslanjaka" },
+  { pkg: "@types/git-command-helper", branch: "pre-release", repo: "git-command-helper", owner: "dimaslanjaka" }
+];
+
+// --- Optimized: Load package.json once at the top ---
+const pkgPath = path.join(process.cwd(), "package.json");
+let pkg;
+try {
+  pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
+} catch (e) {
+  console.error(ansiColors.red(`Failed to read package.json: ${e.message}`));
+  process.exit(1);
+}
+
+// --- Use a random User-Agent for GitHub API requests ---
+const GITHUB_USER_AGENTS = [
+  "octokit-rest.js/19.0.7",
+  "GitHub CLI/2.40.0",
+  "Mozilla/5.0 (compatible; GitHubCopilot/1.0)",
+  "PostmanRuntime/7.32.3",
+  "binary-collections-resolver/1.0 (+https://github.com/dimaslanjaka/bin)"
+];
+
+// --- User-Agent persistence in system temp folder ---
+const userAgentDir = path.join(os.tmpdir(), "nodejs");
+const userAgentFile = path.join(userAgentDir, "useragent.txt");
+let selectedUserAgent;
+try {
+  if (!fs.existsSync(userAgentDir)) fs.mkdirSync(userAgentDir, { recursive: true });
+  if (fs.existsSync(userAgentFile)) {
+    const fileAgent = fs.readFileSync(userAgentFile, "utf-8").trim();
+    if (GITHUB_USER_AGENTS.includes(fileAgent)) {
+      selectedUserAgent = fileAgent;
+    }
+  }
+  if (!selectedUserAgent) {
+    selectedUserAgent = GITHUB_USER_AGENTS[Math.floor(Math.random() * GITHUB_USER_AGENTS.length)];
+    fs.writeFileSync(userAgentFile, selectedUserAgent, "utf-8");
+  }
+} catch (_e) {
+  // fallback to random if any error
+  selectedUserAgent = GITHUB_USER_AGENTS[Math.floor(Math.random() * GITHUB_USER_AGENTS.length)];
+}
+
+/**
+ * Fetch JSON from a URL with GitHub headers.
+ * @param {string} url
+ * @returns {Promise<any>}
+ */
+function fetchJson(url) {
+  const headers = {
+    "User-Agent": selectedUserAgent,
+    Accept: "application/vnd.github.v3+json",
+    "X-GitHub-Api-Version": "2022-11-28",
+    ...(process.env.GITHUB_TOKEN ? { Authorization: `token ${process.env.GITHUB_TOKEN}` } : {})
+  };
+  return new Promise((resolve, reject) => {
+    https
+      .get(url, { headers }, (res) => {
+        let data = "";
+        res.on("data", (chunk) => (data += chunk));
+        res.on("end", () => {
+          try {
+            const json = JSON.parse(data);
+            if (res.statusCode < 200 || res.statusCode >= 300) {
+              return reject(
+                new Error(`GitHub API Error ${res.statusCode}: ${json.message || "Unknown error"}\nURL: ${url}`)
+              );
+            }
+            resolve(json);
+          } catch {
+            reject(new Error(`Invalid JSON from: ${url}`));
+          }
+        });
+      })
+      .on("error", reject);
+  });
+}
+
+/**
+ * Get latest commit SHA from a specific branch.
+ */
+async function getLatestCommit(owner, repo, branch = "main") {
+  const url = `https://api.github.com/repos/${owner}/${repo}/commits/${branch}`;
+  const json = await fetchJson(url);
+
+  const sha = json.sha;
+  const dateStr = json.commit?.committer?.date || json.commit?.author?.date;
+
+  if (!sha || !dateStr) {
+    console.log(json);
+    throw new Error(`Missing SHA or date for ${owner}/${repo}@${branch}`);
+  }
+
+  return {
+    owner,
+    repo,
+    branch,
+    sha,
+    date: new Date(dateStr).toISOString()
+  };
+}
+
+/**
+ * Get latest commit SHA from all branches and pick the latest.
+ */
+async function getLatestCommitAcrossBranches(owner, repo) {
+  const branches = await fetchJson(`https://api.github.com/repos/${owner}/${repo}/branches`);
+
+  const commits = await Promise.all(
+    branches.map(async ({ name, commit }) => {
+      const commitSha = commit?.sha;
+      if (!commitSha) {
+        console.warn(`No commit SHA for '${owner}/${repo}' branch: ${name}`);
+        return { branch: name, sha: "", date: new Date(0) };
+      }
+
+      try {
+        const commitData = await fetchJson(`https://api.github.com/repos/${owner}/${repo}/commits/${commitSha}`);
+        const dateStr = commitData.commit?.committer?.date || commitData.commit?.author?.date;
+        const date = dateStr ? new Date(dateStr) : new Date(0);
+        return { branch: name, sha: commitData.sha, date };
+      } catch (e) {
+        console.warn(`Failed to fetch commit for ${name}: ${e.message}`);
+        return { branch: name, sha: commitSha, date: new Date(0) };
+      }
+    })
+  );
+
+  const latest = commits.reduce((a, b) => (a.date > b.date ? a : b), { date: new Date(0) });
+
+  return {
+    owner,
+    repo,
+    branch: latest.branch,
+    sha: latest.sha,
+    date: latest.date.toISOString()
+  };
+}
+
+/**
+ * Replace the branch or commit in a GitHub raw URL with the latest hash.
+ */
+function replaceRawWithLatestHash(url, latestHash) {
+  const match = url.match(/^https:\/\/github\.com\/([^/]+)\/([^/]+)\/raw\/([^/]+)\/(.+)$/);
+  if (!match) throw new Error("Invalid GitHub raw URL");
+
+  const [, owner, repo, _oldHash, path] = match;
+  return `https://github.com/${owner}/${repo}/raw/${latestHash}/${path}`;
+}
+
+/**
+ * Parse GitHub URLs and extract owner, repo, branch, and original URL.
+ */
+function parseGitHubUrl(url) {
+  const ghRepoRoot = /^https:\/\/github\.com\/([^/]+)\/([^/]+)\/?$/;
+  const ghTreeOrBlob = /^https:\/\/github\.com\/([^/]+)\/([^/]+)\/(tree|blob)\/([^/]+(?:\/[^/]+)*)/;
+  const ghRaw = /^https:\/\/raw\.githubusercontent\.com\/([^/]+)\/([^/]+)\/([^/]+)(\/.+)?$/;
+  const ghDotComRaw = /^https:\/\/github\.com\/([^/]+)\/([^/]+)\/raw\/([^/]+)\/.+/;
+
+  let match;
+
+  if ((match = url.match(ghRaw))) {
+    const [, owner, repo, branch] = match;
+    return { owner, repo, branch, url };
+  }
+
+  if ((match = url.match(ghDotComRaw))) {
+    const [, owner, repo, branch] = match;
+    return { owner, repo, branch, url };
+  }
+
+  if ((match = url.match(ghTreeOrBlob))) {
+    const [, owner, repo, , branchPath] = match;
+    return { owner, repo, branch: branchPath, url };
+  }
+
+  if ((match = url.match(ghRepoRoot))) {
+    const [, owner, repo] = match;
+    return { owner, repo, url };
+  }
+
+  throw new Error(`Unsupported GitHub URL: ${url}`);
+}
+
+// --- Main logic ---
+(async () => {
+  const entries = Object.entries(pkg.resolutions || {});
+  if (entries.length === 0) {
+    console.log(ansiColors.yellow("No resolutions found in package.json"));
+    return;
+  }
+  console.log(`Processing ${entries.length} resolution(s)...`);
+  const updates = [];
+  for (const [currentPkgName, url] of entries) {
+    // Validate if URL is a GitHub URL
+    let repo;
+    try {
+      repo = parseGitHubUrl(url);
+      console.log(`✅ Valid GitHub URL for ${ansiColors.cyan(currentPkgName)}: ${url}`);
+    } catch (error) {
+      console.log(`⏭️  Skipping ${ansiColors.yellow(currentPkgName)}: ${error.message}`);
+      continue;
+    }
+    try {
+      const override = specialPackageOverrides.find((p) => p.pkg === currentPkgName);
+      const latest = override
+        ? await getLatestCommit(override.owner, override.repo, override.branch)
+        : await getLatestCommitAcrossBranches(repo.owner, repo.repo);
+      const new_url = replaceRawWithLatestHash(url, latest.sha);
+      updates.push({
+        currentPkgName,
+        url,
+        new_url,
+        repo,
+        latest
+      });
+    } catch (error) {
+      console.log(`❌ Failed to process ${ansiColors.red(currentPkgName)}: ${error.message}`);
+    }
+  }
+  if (updates.length === 0) {
+    console.log(ansiColors.yellow("No GitHub URLs were processed"));
+    return;
+  }
+  console.log(`\n📝 Applying updates to ${updates.length} GitHub URL(s)...`);
+  let changed = false;
+  for (const { currentPkgName, url, new_url, repo, latest } of updates) {
+    if (url !== new_url) {
+      console.log(`\n${ansiColors.cyan(currentPkgName)}:`);
+      console.log("  from:", url.replace(repo.branch, ansiColors.red(repo.branch)));
+      console.log("    to:", new_url.replace(latest.sha, ansiColors.green(latest.sha)));
+      pkg.resolutions[currentPkgName] = new_url;
+      changed = true;
+    } else {
+      console.log(`\n${ansiColors.cyan(currentPkgName)}: ${ansiColors.gray("already up-to-date")}`);
+    }
+  }
+  if (changed) {
+    try {
+      fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+      console.log(`\n✅ package.json updated successfully`);
+    } catch (e) {
+      console.error(ansiColors.red(`Failed to write package.json: ${e.message}`));
+      process.exit(1);
+    }
+  } else {
+    console.log(ansiColors.green("No changes to package.json were necessary."));
+  }
+})();