create-medusa-app 3.0.0-snapshot-20250410112222 → 3.0.0-snapshot-20251104004624

package/CHANGELOG.md

@@ -1,11 +1,166 @@
 # Change Log
 
-## 3.0.0-snapshot-20250410112222
+## 3.0.0-snapshot-20251104004624
+
+### Patch Changes
+
+- [#13910](https://github.com/medusajs/medusa/pull/13910) [`224ab39a81e8d3cf3d6fa3ff5eee82541f64728d`](https://github.com/medusajs/medusa/commit/224ab39a81e8d3cf3d6fa3ff5eee82541f64728d) Thanks [@adrien2p](https://github.com/adrien2p)! - chore(): Dependencies cleanup and improvements
+
+- [#13940](https://github.com/medusajs/medusa/pull/13940) [`afb40d437b3cc4ceb015df70985b2f005f40eaff`](https://github.com/medusajs/medusa/commit/afb40d437b3cc4ceb015df70985b2f005f40eaff) Thanks [@adrien2p](https://github.com/adrien2p)! - chore(): Cleanup and organize deps
+
+- [#13932](https://github.com/medusajs/medusa/pull/13932) [`37563987b8fe75c9acfe62957a33e8398977647a`](https://github.com/medusajs/medusa/commit/37563987b8fe75c9acfe62957a33e8398977647a) Thanks [@adrien2p](https://github.com/adrien2p)! - chore(): Fix dependencies vulnerabilities
+
+- Updated dependencies [[`224ab39a81e8d3cf3d6fa3ff5eee82541f64728d`](https://github.com/medusajs/medusa/commit/224ab39a81e8d3cf3d6fa3ff5eee82541f64728d), [`afb40d437b3cc4ceb015df70985b2f005f40eaff`](https://github.com/medusajs/medusa/commit/afb40d437b3cc4ceb015df70985b2f005f40eaff), [`37563987b8fe75c9acfe62957a33e8398977647a`](https://github.com/medusajs/medusa/commit/37563987b8fe75c9acfe62957a33e8398977647a)]:
+  - @medusajs/deps@3.0.0-snapshot-20251104004624
+  - @medusajs/telemetry@3.0.0-snapshot-20251104004624
+
+## 2.11.2
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/deps@2.11.2
+  - @medusajs/telemetry@2.11.2
+
+## 2.11.1
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/deps@2.11.1
+  - @medusajs/telemetry@2.11.1
+
+## 2.11.0
+
+### Patch Changes
+
+- [#13439](https://github.com/medusajs/medusa/pull/13439) [`12a96a7c7015f011f5e29a1d387f835e514ba536`](https://github.com/medusajs/medusa/commit/12a96a7c7015f011f5e29a1d387f835e514ba536) Thanks [@adrien2p](https://github.com/adrien2p)! - chore(): Move peer deps into a single package and re export from framework
+
+- [#13450](https://github.com/medusajs/medusa/pull/13450) [`8ece06d8ed6a197ebb370918c49a3ec5c21dd186`](https://github.com/medusajs/medusa/commit/8ece06d8ed6a197ebb370918c49a3ec5c21dd186) Thanks [@adrien2p](https://github.com/adrien2p)! - chore(): Upgrade mikro orm 6.5.4
+
+- Updated dependencies [[`0cbd9f0bc315b3eda1770ac301061f1576856387`](https://github.com/medusajs/medusa/commit/0cbd9f0bc315b3eda1770ac301061f1576856387), [`12a96a7c7015f011f5e29a1d387f835e514ba536`](https://github.com/medusajs/medusa/commit/12a96a7c7015f011f5e29a1d387f835e514ba536), [`41651721450c99e5f38cfbb87a6a47ab067ece86`](https://github.com/medusajs/medusa/commit/41651721450c99e5f38cfbb87a6a47ab067ece86), [`fc67fd0b36f53f0c0897df54ecea02061e65e816`](https://github.com/medusajs/medusa/commit/fc67fd0b36f53f0c0897df54ecea02061e65e816), [`c54c5ed6de2c9686f89aeef86c5c607c4b5f1cf3`](https://github.com/medusajs/medusa/commit/c54c5ed6de2c9686f89aeef86c5c607c4b5f1cf3), [`02b6d013822b9665f868c4ea6d1b5cfe58723459`](https://github.com/medusajs/medusa/commit/02b6d013822b9665f868c4ea6d1b5cfe58723459)]:
+  - @medusajs/deps@2.11.0
+  - @medusajs/telemetry@2.11.0
+
+## 2.10.3
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.10.3
+
+## 2.10.2
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.10.2
+
+## 2.10.1
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.10.1
+
+## 2.10.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.10.0
+
+## 2.9.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.9.0
+
+## 2.8.8
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.8
+
+## 2.8.7
+
+### Patch Changes
+
+- [#12882](https://github.com/medusajs/medusa/pull/12882) [`779ed018b9c1328d6554a0f3d3569147edaeae56`](https://github.com/medusajs/medusa/commit/779ed018b9c1328d6554a0f3d3569147edaeae56) Thanks [@adrien2p](https://github.com/adrien2p)! - feat(create-medusa-app): Allow to create project with specific medusa version
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.7
+
+## 2.8.6
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.6
+
+## 2.8.5
+
+### Patch Changes
+
+- [#12707](https://github.com/medusajs/medusa/pull/12707) [`774702153f389e59476ea0a027b8caeb5075f92a`](https://github.com/medusajs/medusa/commit/774702153f389e59476ea0a027b8caeb5075f92a) Thanks [@shahednasser](https://github.com/shahednasser)! - fix(create-medusa-app): remove "Created admin user" message
+
+- [#12714](https://github.com/medusajs/medusa/pull/12714) [`2e861a94492a486e2cbdb8d442f25611be1bc3bf`](https://github.com/medusajs/medusa/commit/2e861a94492a486e2cbdb8d442f25611be1bc3bf) Thanks [@shahednasser](https://github.com/shahednasser)! - fix(create-medusa-app): ensure the same package manager is used consistently
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.5
+
+## 2.8.4
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.4
+
+## 2.8.3
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.3
+
+## 2.8.2
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.2
+
+## 2.8.1
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.1
+
+## 2.8.0
+
+### Patch Changes
+
+- [#12360](https://github.com/medusajs/medusa/pull/12360) [`f74586e772f2800952e52b6eaceb25de93c1691c`](https://github.com/medusajs/medusa/commit/f74586e772f2800952e52b6eaceb25de93c1691c) Thanks [@shahednasser](https://github.com/shahednasser)! - fix(create-medusa-app): updates to text and prompts
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.8.0
+
+## 2.7.1
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @medusajs/telemetry@2.7.1
+
+## 2.7.0
 
 ### Patch Changes
 
 - Updated dependencies []:
-  - @medusajs/telemetry@3.0.0-snapshot-20250410112222
+  - @medusajs/telemetry@2.7.0
 
 ## 2.6.1
 

package/dist/index.js

@@ -6,6 +6,7 @@ program
     .argument("[project-name]", "Name of the project to create.")
     .option("--plugin", "Create a plugin instead of a project.")
     .option("--repo-url <url>", "URL of repository to use to setup project.")
+    .option("--version <version>", "The version of Medusa packages to install.")
     .option("--seed", "Seed the created database with demo data.")
     .option("--skip-db", "Skips creating the database, running migrations, and seeding, and subsequently skips opening the browser.", false)
     .option("--db-url <url>", "Skips database creation and sets the database URL to the provided URL. Throws an error if can't connect to the database. Will still run migrations and open the admin after project creation.")

package/dist/utils/execute.js

@@ -8,12 +8,14 @@ const execute = async (command, { verbose = false, needOutput = false }) => {
         const childProcess = spawnSync(commandStr, {
             ...options,
             shell: true,
-            stdio: needOutput
-                ? "pipe"
-                : [process.stdin, process.stdout, process.stderr],
+            stdio: needOutput ?
+                "pipe" :
+                [process.stdin, process.stdout, process.stderr],
         });
-        if (childProcess.error) {
-            throw childProcess.error;
+        if (childProcess.error || childProcess.status !== 0) {
+            throw childProcess.error ||
+                childProcess.stderr?.toString() ||
+                `${commandStr} failed with status ${childProcess.status}`;
         }
         if (childProcess.signal &&
             ["SIGINT", "SIGTERM"].includes(childProcess.signal)) {

package/dist/utils/facts.js

@@ -2,24 +2,24 @@ import boxen from "boxen";
 import chalk from "chalk";
 import { emojify } from "node-emoji";
 const facts = [
-    "You can specify a product's availability in one or more sales channels.",
-    "Payment and shipping options and providers can be configured per region.",
-    "Tax-inclusive pricing allows you to set prices for products, shipping options, and more without having to worry about calculating taxes.",
+    "Specify a product's availability in one or more sales channels.",
+    "Payment providers can be configured per region.",
+    "Tax-inclusive pricing allows you to set prices for products and shipping options while delegating tax calculations to Medusa.",
     "Medusa provides multi-currency and region support, with full control over prices for each currency and region.",
-    "You can organize customers by customer groups and set special prices for them.",
-    "You can specify the inventory of products per location and sales channel.",
-    "Publishable-API Keys allow you to send requests to the backend within a scoped resource.",
-    "You can create custom endpoints by creating a TypeScript file under the src/api directory.",
-    "You can listen to events to perform asynchronous actions using Subscribers.",
-    "A data model represents a table in the database. You can create a table by creating a custom data model and migration in a module.",
-    "Medusa's store endpoint paths are prefixed by /store. The admin endpoints are prefixed by /admin.",
-    "Medusa provides a JavaScript client and a React library that you can use to build a storefront or a custom admin.",
-    "Modules hold your custom features and data models. You create them under the src/modules directory. Each module must have a service.",
-    "A service is a class with methods related to a functionality or a data model. You create a service in a module.",
+    "Organize customers by customer groups and set special prices for them.",
+    "Specify the inventory of products per location and sales channel.",
+    "Publishable-API Keys allow you to send scoped requests to the server's store API routes.",
+    "API Routes expose business logic to clients, such as storefronts and admin customizations.",
+    "Subscribers are asynchronous functions that are executed when an event is emitted.",
+    "Data models represent tables in the database. They are created using Medusa's Data Modeling Language (DML).",
+    "Medusa's store API routes are prefixed by /store. The admin API routes are prefixed by /admin.",
+    "The JS SDK allows you to send requests to the Medusa server from your storefront or admin customizations.",
+    "Modules are reusable packages of functionalities related to a single commerce domain or integration.",
+    "Modules have a main service that provides data-management and integration functionalities.",
     "Modules allow you to replace an entire functionality with your custom logic.",
-    "The event bus module is responsible for triggering events and relaying them to subscribers.",
-    "The cache module is responsible for caching data that requires heavy computation.",
-    "A workflow is a series of steps that are defined once and executed anywhere. Workflows are created under the src/workflows directory.",
+    "Infrastructure Modules are interchangeable modules that implement features and integrations related to the Medusa server's infrastructure.",
+    "Commerce Modules are built-in modules that provide core commerce logic specific to domains like Product, Cart and Order.",
+    "Workflows are a series of queries and actions, called steps, that complete a task.",
     "A workflow's steps can be retried or rolled back in case of an error.",
 ];
 export const getFact = () => {

package/dist/utils/nextjs-utils.js

@@ -7,6 +7,7 @@ import { isAbortError } from "./create-abort-controller.js";
 import execute from "./execute.js";
 import { displayFactBox } from "./facts.js";
 import logMessage from "./log-message.js";
+import { updatePackageVersions } from "./update-package-versions.js";
 const NEXTJS_REPO = "https://github.com/medusajs/nextjs-starter-medusa";
 const NEXTJS_BRANCH = "main";
 export async function askForNextjsStarter() {
@@ -14,16 +15,16 @@ export async function askForNextjsStarter() {
         {
             type: "confirm",
             name: "installNextjs",
-            message: `Would you like to create the Next.js storefront? You can also create it later`,
+            message: `Would you like to install the Next.js Starter Storefront? You can also install it later.`,
             default: false,
         },
     ]);
     return installNextjs;
 }
-export async function installNextjsStarter({ directoryName, abortController, factBoxOptions, verbose = false, processManager, }) {
+export async function installNextjsStarter({ directoryName, abortController, factBoxOptions, verbose = false, processManager, version, }) {
     factBoxOptions.interval = displayFactBox({
         ...factBoxOptions,
-        title: "Installing Next.js Storefront...",
+        title: "Installing Next.js Starter Storefront...",
     });
     let nextjsDirectory = `${directoryName}-storefront`;
     if (fs.existsSync(nextjsDirectory) &&
@@ -41,6 +42,10 @@ export async function installNextjsStarter({ directoryName, abortController, fac
                 env: process.env,
             },
         ], { verbose });
+        if (version) {
+            const packageJsonPath = path.join(nextjsDirectory, "package.json");
+            updatePackageVersions(packageJsonPath, version, { applyChanges: true });
+        }
         const execOptions = {
             signal: abortController?.signal,
             cwd: nextjsDirectory,
@@ -66,7 +71,7 @@ export async function installNextjsStarter({ directoryName, abortController, fac
             process.exit();
         }
         logMessage({
-            message: `An error occurred while installing Next.js storefront: ${e}`,
+            message: `An error occurred while installing Next.js Starter Storefront: ${e}`,
             type: "error",
         });
     }
@@ -77,7 +82,7 @@ export async function installNextjsStarter({ directoryName, abortController, fac
     fs.renameSync(path.join(nextjsDirectory, ".env.template"), path.join(nextjsDirectory, ".env.local"));
     displayFactBox({
         ...factBoxOptions,
-        message: `Installed Next.js Starter successfully in the ${nextjsDirectory} directory.`,
+        message: `Installed Next.js Starter Storefront successfully in the ${nextjsDirectory} directory.`,
     });
     return nextjsDirectory;
 }

package/dist/utils/package-manager.js

@@ -0,0 +1,68 @@
+import execute from "./execute.js";
+export default class PackageManager {
+    packageManager;
+    processManager;
+    verbose;
+    constructor(processManager, verbose = false) {
+        this.processManager = processManager;
+        this.verbose = verbose;
+    }
+    async setPackageManager(execOptions) {
+        if (this.packageManager) {
+            return;
+        }
+        // check whether yarn is available
+        await this.processManager.runProcess({
+            process: async () => {
+                try {
+                    await execute([`yarn -v`, execOptions], { verbose: this.verbose });
+                    // yarn is available
+                    this.packageManager = "yarn";
+                }
+                catch (e) {
+                    // yarn isn't available
+                    // use npm
+                    this.packageManager = "npm";
+                }
+            },
+            ignoreERESOLVE: true,
+        });
+    }
+    async installDependencies(execOptions) {
+        if (!this.packageManager) {
+            await this.setPackageManager(execOptions);
+        }
+        const command = this.packageManager === "yarn" ?
+            `yarn` : `npm install`;
+        await this.processManager.runProcess({
+            process: async () => {
+                await execute([command, execOptions], {
+                    verbose: this.verbose
+                });
+            },
+            ignoreERESOLVE: true,
+        });
+    }
+    async runCommand(command, execOptions) {
+        if (!this.packageManager) {
+            await this.setPackageManager(execOptions);
+        }
+        const commandStr = this.getCommandStr(command);
+        await this.processManager.runProcess({
+            process: async () => {
+                await execute([commandStr, execOptions], {
+                    verbose: this.verbose
+                });
+            },
+            ignoreERESOLVE: true,
+        });
+    }
+    getCommandStr(command) {
+        if (!this.packageManager) {
+            throw new Error("Package manager not set");
+        }
+        return this.packageManager === "yarn"
+            ? `yarn ${command}`
+            : `npm run ${command}`;
+    }
+}

package/dist/utils/postgres-client.js

@@ -1,4 +1,4 @@
-import pg from "pg";
+import pg from "@medusajs/deps/pg";
 const { Client } = pg;
 export const DEFAULT_HOST = "localhost";
 export const DEFAULT_PORT = 5432;

package/dist/utils/prepare-project.js

@@ -3,6 +3,7 @@ import path from "path";
 import execute from "./execute.js";
 import { EOL } from "os";
 import { displayFactBox } from "./facts.js";
+import { updatePackageVersions } from "./update-package-versions.js";
 const ADMIN_EMAIL = "admin@medusa-test.com";
 let STORE_CORS = "http://localhost:8000";
 let ADMIN_CORS = "http://localhost:5173,http://localhost:9000";
@@ -17,7 +18,7 @@ export default async (prepareOptions) => {
     }
     return prepareProject(prepareOptions);
 };
-async function preparePlugin({ directory, projectName, spinner, processManager, abortController, verbose = false, }) {
+async function preparePlugin({ directory, projectName, spinner, processManager, abortController, verbose = false, packageManager, }) {
     // initialize execution options
     const execOptions = {
         cwd: directory,
@@ -43,28 +44,14 @@ async function preparePlugin({ directory, projectName, spinner, processManager,
         title: "Installing dependencies...",
         processManager,
     });
-    await processManager.runProcess({
-        process: async () => {
-            try {
-                await execute([`yarn`, execOptions], { verbose });
-            }
-            catch (e) {
-                // yarn isn't available
-                // use npm
-                await execute([`npm install --legacy-peer-deps`, execOptions], {
-                    verbose,
-                });
-            }
-        },
-        ignoreERESOLVE: true,
-    });
+    await packageManager.installDependencies(execOptions);
     factBoxOptions.interval = displayFactBox({
         ...factBoxOptions,
         message: "Installed Dependencies",
     });
     displayFactBox({ ...factBoxOptions, message: "Finished Preparation" });
 }
-async function prepareProject({ directory, projectName, dbName, dbConnectionString, seed, spinner, processManager, abortController, skipDb, migrations, onboardingType = "default", nextjsDirectory = "", client, verbose = false, }) {
+async function prepareProject({ directory, projectName, dbName, dbConnectionString, seed, spinner, processManager, abortController, skipDb, migrations, onboardingType = "default", nextjsDirectory = "", client, verbose = false, packageManager, version, }) {
     // initialize execution options
     const execOptions = {
         cwd: directory,
@@ -90,6 +77,10 @@ async function prepareProject({ directory, projectName, dbName, dbConnectionStri
     const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, "utf-8"));
     // Update name
     packageJson.name = projectName;
+    // Update medusa dependencies versions
+    if (version) {
+        updatePackageVersions(packageJson, version);
+    }
     fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2));
     // initialize the invite token to return
     let inviteToken = undefined;
@@ -112,21 +103,7 @@ async function prepareProject({ directory, projectName, dbName, dbConnectionStri
         title: "Installing dependencies...",
         processManager,
     });
-    await processManager.runProcess({
-        process: async () => {
-            try {
-                await execute([`yarn`, execOptions], { verbose });
-            }
-            catch (e) {
-                // yarn isn't available
-                // use npm
-                await execute([`npm install --legacy-peer-deps`, execOptions], {
-                    verbose,
-                });
-            }
-        },
-        ignoreERESOLVE: true,
-    });
+    await packageManager.installDependencies(execOptions);
     factBoxOptions.interval = displayFactBox({
         ...factBoxOptions,
         message: "Installed Dependencies",
@@ -167,11 +144,6 @@ async function prepareProject({ directory, projectName, dbName, dbConnectionStri
             ...factBoxOptions,
             message: "Ran Migrations",
         });
-        // create admin user
-        factBoxOptions.interval = displayFactBox({
-            ...factBoxOptions,
-            title: "Creating an admin user...",
-        });
         await processManager.runProcess({
             process: async () => {
                 const proc = await execute([`npx medusa user -e ${ADMIN_EMAIL} --invite`, npxOptions], { verbose, needOutput: true });
@@ -180,10 +152,6 @@ async function prepareProject({ directory, projectName, dbName, dbConnectionStri
                 inviteToken = match?.groups?.token;
             },
         });
-        factBoxOptions.interval = displayFactBox({
-            ...factBoxOptions,
-            message: "Created admin user",
-        });
         // TODO for now we just seed the default data
         // we should add onboarding seeding again if it makes
         // since once we re-introduce the onboarding flow.
@@ -191,19 +159,7 @@ async function prepareProject({ directory, projectName, dbName, dbConnectionStri
             ...factBoxOptions,
             title: "Seeding database...",
         });
-        await processManager.runProcess({
-            process: async () => {
-                try {
-                    await execute([`yarn seed`, execOptions], { verbose });
-                }
-                catch (e) {
-                    // yarn isn't available
-                    // use npm
-                    await execute([`npm run seed`, execOptions], { verbose });
-                }
-            },
-            ignoreERESOLVE: true,
-        });
+        await packageManager.runCommand("seed", execOptions);
         displayFactBox({
             ...factBoxOptions,
             message: "Seeded database with demo data",

package/dist/utils/project-creator/creator.js

@@ -2,12 +2,14 @@ import ora from "ora";
 import path from "path";
 import createAbortController from "../create-abort-controller.js";
 import ProcessManager from "../process-manager.js";
+import PackageManager from "../package-manager.js";
 // Base class for common project functionality
 export class BaseProjectCreator {
     options;
     args;
     spinner;
     processManager;
+    packageManager;
     abortController;
     factBoxOptions;
     projectName;
@@ -19,6 +21,7 @@ export class BaseProjectCreator {
         this.args = args;
         this.spinner = ora();
         this.processManager = new ProcessManager();
+        this.packageManager = new PackageManager(this.processManager);
         this.abortController = createAbortController(this.processManager);
         this.projectName = projectName;
         const basePath = typeof options.directoryPath === "string" ? options.directoryPath : "";

package/dist/utils/project-creator/medusa-plugin-creator.js

@@ -55,6 +55,7 @@ export class PluginProjectCreator extends BaseProjectCreator {
             processManager: this.processManager,
             abortController: this.abortController,
             verbose: this.options.verbose,
+            packageManager: this.packageManager,
         });
     }
     handleError(e) {

package/dist/utils/project-creator/medusa-project-creator.js

@@ -70,6 +70,7 @@ export class MedusaProjectCreator extends BaseProjectCreator {
                     factBoxOptions: this.factBoxOptions,
                     verbose: this.options.verbose,
                     processManager: this.processManager,
+                    version: this.options.version,
                 });
             }
         }
@@ -121,6 +122,8 @@ export class MedusaProjectCreator extends BaseProjectCreator {
                 nextjsDirectory: this.nextjsDirectory,
                 client: this.client,
                 verbose: this.options.verbose,
+                packageManager: this.packageManager,
+                version: this.options.version,
             });
         }
         finally {
@@ -170,11 +173,12 @@ export class MedusaProjectCreator extends BaseProjectCreator {
         });
     }
     showSuccessMessage() {
+        const commandStr = this.packageManager.getCommandStr(`dev`);
         logMessage({
-            message: boxen(chalk.green(`Change to the \`${this.projectName}\` directory to explore your Medusa project.${EOL}${EOL}Start your Medusa app again with the following command:${EOL}${EOL}yarn dev${EOL}${EOL}${this.inviteToken
-                ? `After you start the Medusa app, you can set a password for your admin user with the URL http://localhost:7001/invite?token=${this.inviteToken}&first_run=true${EOL}${EOL}`
+            message: boxen(chalk.green(`Change to the \`${this.projectName}\` directory to explore your Medusa project.${EOL}${EOL}Start your Medusa application again with the following command:${EOL}${EOL}${commandStr}${EOL}${EOL}${this.inviteToken
+                ? `After you start the Medusa application, you can create an admin user with the URL http://localhost:9000/app/invite?token=${this.inviteToken}&first_run=true${EOL}${EOL}`
                 : ""}${this.nextjsDirectory?.length
-                ? `The Next.js Starter storefront was installed in the \`${this.nextjsDirectory}\` directory. Change to that directory and start it with the following command:${EOL}${EOL}npm run dev${EOL}${EOL}`
+                ? `The Next.js Starter Storefront was installed in the \`${this.nextjsDirectory}\` directory. Change to that directory and start it with the following command:${EOL}${EOL}${commandStr}${EOL}${EOL}`
                 : ""}Check out the Medusa documentation to start your development:${EOL}${EOL}https://docs.medusajs.com/${EOL}${EOL}Star us on GitHub if you like what we're building:${EOL}${EOL}https://github.com/medusajs/medusa/stargazers`), {
                 titleAlignment: "center",
                 textAlignment: "center",

package/dist/utils/project-creator/project-creator-factory.js

@@ -36,6 +36,15 @@ export class ProjectCreatorFactory {
                 });
                 askProjectName = true;
             }
+            else if (args[0].includes(".")) {
+                // We don't allow projects to have a dot in the name, as this causes issues for
+                // for MikroORM path resolutions.
+                logMessage({
+                    message: `Project names cannot contain a dot (.) character. Please enter a different ${isPlugin ? "plugin" : "project"} name.`,
+                    type: "error",
+                });
+                askProjectName = true;
+            }
         }
         return askProjectName
             ? await askForProjectName(directoryPath, isPlugin)
@@ -53,6 +62,11 @@ async function askForProjectName(directoryPath, isPlugin) {
                 return slugify(input).toLowerCase();
             },
             validate: (input) => {
+                // We don't allow projects to have a dot in the name, as this causes issues for
+                // for MikroORM path resolutions.
+                if (input.includes(".")) {
+                    return `Project names cannot contain a dot (.) character. Please enter a different ${isPlugin ? "plugin" : "project"} name.`;
+                }
                 if (!input.length) {
                     return `Please enter a ${isPlugin ? "plugin" : "project"} name`;
                 }

package/dist/utils/update-package-versions.js

@@ -0,0 +1,23 @@
+import { readFileSync, writeFileSync } from "fs";
+export function updatePackageVersions(packageJsonOrPath, version, { applyChanges = false } = {}) {
+    const packageJson = typeof packageJsonOrPath === "string"
+        ? JSON.parse(readFileSync(packageJsonOrPath, "utf-8"))
+        : packageJsonOrPath;
+    if (packageJson.dependencies) {
+        for (const dependency of Object.keys(packageJson.dependencies)) {
+            if (dependency.startsWith("@medusajs/")) {
+                packageJson.dependencies[dependency] = version;
+            }
+        }
+    }
+    if (packageJson.devDependencies) {
+        for (const dependency of Object.keys(packageJson.devDependencies)) {
+            if (dependency.startsWith("@medusajs/")) {
+                packageJson.devDependencies[dependency] = version;
+            }
+        }
+    }
+    if (applyChanges && typeof packageJsonOrPath === "string") {
+        writeFileSync(packageJsonOrPath, JSON.stringify(packageJson, null, 2));
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-medusa-app",
-  "version": "3.0.0-snapshot-20250410112222",
+  "version": "3.0.0-snapshot-20251104004624",
   "description": "Create a Medusa project using a single command.",
   "type": "module",
   "exports": "./dist/index.js",
@@ -10,48 +10,26 @@
     "dev": "node --loader ts-node/esm src/index.ts",
     "start": "node dist/index.js",
     "build": "tsc",
-    "watch": "tsc --watch"
+    "watch": "yarn run -T tsc --watch"
   },
   "dependencies": {
-    "@medusajs/telemetry": "3.0.0-snapshot-20250410112222",
-    "boxen": "^5",
-    "chalk": "^5.2.0",
-    "commander": "^10.0.1",
-    "inquirer": "^9.2.2",
+    "@medusajs/deps": "3.0.0-snapshot-20251104004624",
+    "@medusajs/telemetry": "3.0.0-snapshot-20251104004624",
+    "boxen": "^5.0.1",
+    "chalk": "^4.1.2",
+    "commander": "^11.0.0",
+    "inquirer": "^8.0.0",
     "nanoid": "^4.0.2",
     "node-emoji": "^2.0.2",
     "node-fetch": "^3.3.1",
     "open": "^9.1.0",
-    "ora": "^6.3.0",
-    "pg": "^8.11.3",
+    "ora": "^5.4.1",
     "slugify": "^1.6.6",
     "uuid": "^9.0.0",
-    "validator": "^13.9.0",
-    "wait-on": "^7.0.1",
+    "validator": "^13.15.20",
+    "wait-on": "^9.0.1",
     "winston": "^3.9.0"
   },
-  "devDependencies": {
-    "@types/chalk": "^2.2.0",
-    "@types/commander": "^2.12.2",
-    "@types/configstore": "^6.0.0",
-    "@types/inquirer": "^9.0.3",
-    "@types/node": "^20.12.11",
-    "@types/node-emoji": "^1.8.2",
-    "@types/pg": "^8.6.6",
-    "@types/uuid": "^9.0.1",
-    "@types/validator": "^13.7.17",
-    "@types/wait-on": "^5.3.1",
-    "@typescript-eslint/eslint-plugin": "^6.19.0",
-    "@typescript-eslint/parser": "^6.19.0",
-    "configstore": "^6.0.0",
-    "eslint": "^8.40.0",
-    "eslint-config-google": "^0.14.0",
-    "eslint-config-prettier": "^8.8.0",
-    "eslint-plugin-prettier": "^4.2.1",
-    "prettier": "^2.8.8",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.6.2"
-  },
   "engines": {
     "node": ">=14.16"
   },

package/src/index.ts

@@ -7,6 +7,7 @@ program
   .argument("[project-name]", "Name of the project to create.")
   .option("--plugin", "Create a plugin instead of a project.")
   .option("--repo-url <url>", "URL of repository to use to setup project.")
+  .option("--version <version>", "The version of Medusa packages to install.")
   .option("--seed", "Seed the created database with demo data.")
   .option(
     "--skip-db",

package/src/utils/create-db.ts

@@ -1,5 +1,5 @@
 import { EOL } from "os"
-import pg from "pg"
+import type pg from "@medusajs/deps/pg"
 import postgresClient, {
   DEFAULT_HOST,
   DEFAULT_PORT,

package/src/utils/execute.ts

@@ -32,13 +32,15 @@ const execute = async (
     const childProcess = spawnSync(commandStr, {
       ...options,
       shell: true,
-      stdio: needOutput
-        ? "pipe"
-        : [process.stdin, process.stdout, process.stderr],
+      stdio: needOutput ? 
+        "pipe" : 
+        [process.stdin, process.stdout, process.stderr],
     })
 
-    if (childProcess.error) {
-      throw childProcess.error
+    if (childProcess.error || childProcess.status !== 0) {
+      throw childProcess.error || 
+        childProcess.stderr?.toString() || 
+        `${commandStr} failed with status ${childProcess.status}`
     }
 
     if (

package/src/utils/facts.ts

@@ -14,24 +14,24 @@ export type FactBoxOptions = {
 }
 
 const facts = [
-  "You can specify a product's availability in one or more sales channels.",
-  "Payment and shipping options and providers can be configured per region.",
-  "Tax-inclusive pricing allows you to set prices for products, shipping options, and more without having to worry about calculating taxes.",
+  "Specify a product's availability in one or more sales channels.",
+  "Payment providers can be configured per region.",
+  "Tax-inclusive pricing allows you to set prices for products and shipping options while delegating tax calculations to Medusa.",
   "Medusa provides multi-currency and region support, with full control over prices for each currency and region.",
-  "You can organize customers by customer groups and set special prices for them.",
-  "You can specify the inventory of products per location and sales channel.",
-  "Publishable-API Keys allow you to send requests to the backend within a scoped resource.",
-  "You can create custom endpoints by creating a TypeScript file under the src/api directory.",
-  "You can listen to events to perform asynchronous actions using Subscribers.",
-  "A data model represents a table in the database. You can create a table by creating a custom data model and migration in a module.",
-  "Medusa's store endpoint paths are prefixed by /store. The admin endpoints are prefixed by /admin.",
-  "Medusa provides a JavaScript client and a React library that you can use to build a storefront or a custom admin.",
-  "Modules hold your custom features and data models. You create them under the src/modules directory. Each module must have a service.",
-  "A service is a class with methods related to a functionality or a data model. You create a service in a module.",
+  "Organize customers by customer groups and set special prices for them.",
+  "Specify the inventory of products per location and sales channel.",
+  "Publishable-API Keys allow you to send scoped requests to the server's store API routes.",
+  "API Routes expose business logic to clients, such as storefronts and admin customizations.",
+  "Subscribers are asynchronous functions that are executed when an event is emitted.",
+  "Data models represent tables in the database. They are created using Medusa's Data Modeling Language (DML).",
+  "Medusa's store API routes are prefixed by /store. The admin API routes are prefixed by /admin.",
+  "The JS SDK allows you to send requests to the Medusa server from your storefront or admin customizations.",
+  "Modules are reusable packages of functionalities related to a single commerce domain or integration.",
+  "Modules have a main service that provides data-management and integration functionalities.",
   "Modules allow you to replace an entire functionality with your custom logic.",
-  "The event bus module is responsible for triggering events and relaying them to subscribers.",
-  "The cache module is responsible for caching data that requires heavy computation.",
-  "A workflow is a series of steps that are defined once and executed anywhere. Workflows are created under the src/workflows directory.",
+  "Infrastructure Modules are interchangeable modules that implement features and integrations related to the Medusa server's infrastructure.",
+  "Commerce Modules are built-in modules that provide core commerce logic specific to domains like Product, Cart and Order.",
+  "Workflows are a series of queries and actions, called steps, that complete a task.",
   "A workflow's steps can be retried or rolled back in case of an error.",
 ]
 

package/src/utils/logger.ts

@@ -1,7 +1,7 @@
 import winston from "winston"
 
 const consoleTransport = new winston.transports.Console({
-  format: winston.format.printf((log) => log.message),
+  format: winston.format.printf((log) => log.message as string),
 })
 const options = {
   transports: [consoleTransport],

package/src/utils/nextjs-utils.ts

@@ -8,6 +8,7 @@ import execute from "./execute.js"
 import { displayFactBox, FactBoxOptions } from "./facts.js"
 import logMessage from "./log-message.js"
 import ProcessManager from "./process-manager.js"
+import { updatePackageVersions } from "./update-package-versions.js"
 
 const NEXTJS_REPO = "https://github.com/medusajs/nextjs-starter-medusa"
 const NEXTJS_BRANCH = "main"
@@ -17,7 +18,7 @@ export async function askForNextjsStarter(): Promise<boolean> {
     {
       type: "confirm",
       name: "installNextjs",
-      message: `Would you like to create the Next.js storefront? You can also create it later`,
+      message: `Would you like to install the Next.js Starter Storefront? You can also install it later.`,
       default: false,
     },
   ])
@@ -31,6 +32,7 @@ type InstallOptions = {
   factBoxOptions: FactBoxOptions
   verbose?: boolean
   processManager: ProcessManager
+  version?: string
 }
 
 export async function installNextjsStarter({
@@ -39,10 +41,11 @@ export async function installNextjsStarter({
   factBoxOptions,
   verbose = false,
   processManager,
+  version,
 }: InstallOptions): Promise<string> {
   factBoxOptions.interval = displayFactBox({
     ...factBoxOptions,
-    title: "Installing Next.js Storefront...",
+    title: "Installing Next.js Starter Storefront...",
   })
 
   let nextjsDirectory = `${directoryName}-storefront`
@@ -70,6 +73,12 @@ export async function installNextjsStarter({
       ],
       { verbose }
     )
+
+    if (version) {
+      const packageJsonPath = path.join(nextjsDirectory, "package.json")
+      updatePackageVersions(packageJsonPath, version, { applyChanges: true })
+    }
+
     const execOptions = {
       signal: abortController?.signal,
       cwd: nextjsDirectory,
@@ -94,7 +103,7 @@ export async function installNextjsStarter({
     }
 
     logMessage({
-      message: `An error occurred while installing Next.js storefront: ${e}`,
+      message: `An error occurred while installing Next.js Starter Storefront: ${e}`,
       type: "error",
     })
   }
@@ -111,7 +120,7 @@ export async function installNextjsStarter({
 
   displayFactBox({
     ...factBoxOptions,
-    message: `Installed Next.js Starter successfully in the ${nextjsDirectory} directory.`,
+    message: `Installed Next.js Starter Storefront successfully in the ${nextjsDirectory} directory.`,
   })
 
   return nextjsDirectory

package/src/utils/package-manager.ts

@@ -0,0 +1,87 @@
+import execute from "./execute.js"
+import ProcessManager from "./process-manager.js"
+
+export default class PackageManager {
+  protected packageManager?: "npm" | "yarn"
+  protected processManager: ProcessManager
+  protected verbose
+
+  constructor(processManager: ProcessManager, verbose = false) {
+    this.processManager = processManager
+    this.verbose = verbose
+  }
+
+  async setPackageManager(execOptions: Record<string, unknown>): Promise<void> {
+    if (this.packageManager) {
+      return
+    }
+
+    // check whether yarn is available
+    await this.processManager.runProcess({
+      process: async () => {
+        try {
+          await execute([`yarn -v`, execOptions], { verbose: this.verbose })
+          // yarn is available
+          this.packageManager = "yarn"
+        } catch (e) {
+          // yarn isn't available
+          // use npm
+          this.packageManager = "npm"
+        }
+      },
+      ignoreERESOLVE: true,
+    })
+  }
+
+  async installDependencies(
+    execOptions: Record<string, unknown>,
+  ) {
+    if (!this.packageManager) {
+      await this.setPackageManager(execOptions)
+    }
+
+    const command = this.packageManager === "yarn" ? 
+      `yarn` : `npm install`
+
+    await this.processManager.runProcess({
+      process: async () => {
+        await execute([command, execOptions], {
+          verbose: this.verbose
+        })
+      },
+      ignoreERESOLVE: true,
+    })
+  }
+
+  async runCommand(
+    command: string,
+    execOptions: Record<string, unknown>,
+  ) {
+    if (!this.packageManager) {
+      await this.setPackageManager(execOptions)
+    }
+
+    const commandStr = this.getCommandStr(command)
+
+    await this.processManager.runProcess({
+        process: async () => {
+          await execute([commandStr, execOptions], {
+            verbose: this.verbose
+          })
+        },
+        ignoreERESOLVE: true,
+      })
+  }
+
+  getCommandStr(
+    command: string,
+  ): string {
+    if (!this.packageManager) {
+      throw new Error("Package manager not set")
+    }
+
+    return this.packageManager === "yarn"
+      ? `yarn ${command}`
+      : `npm run ${command}`
+  }
+}

package/src/utils/postgres-client.ts

@@ -1,6 +1,6 @@
-import pg from "pg"
+import pg from "@medusajs/deps/pg"
 
-const { Client } = pg
+const { Client } = pg as any
 
 export const DEFAULT_HOST = "localhost"
 export const DEFAULT_PORT = 5432

package/src/utils/prepare-project.ts

@@ -5,7 +5,9 @@ import execute from "./execute.js"
 import { EOL } from "os"
 import { displayFactBox, FactBoxOptions } from "./facts.js"
 import ProcessManager from "./process-manager.js"
-import type { Client } from "pg"
+import type { Client } from "@medusajs/deps/pg"
+import PackageManager from "./package-manager.js"
+import { updatePackageVersions } from "./update-package-versions.js"
 
 const ADMIN_EMAIL = "admin@medusa-test.com"
 let STORE_CORS = "http://localhost:8000"
@@ -24,6 +26,7 @@ type PreparePluginOptions = {
   processManager: ProcessManager
   abortController?: AbortController
   verbose?: boolean
+  packageManager: PackageManager
 }
 
 type PrepareProjectOptions = {
@@ -42,6 +45,8 @@ type PrepareProjectOptions = {
   nextjsDirectory?: string
   client: Client | null
   verbose?: boolean
+  packageManager: PackageManager
+  version?: string
 }
 
 type PrepareOptions = PreparePluginOptions | PrepareProjectOptions
@@ -66,6 +71,7 @@ async function preparePlugin({
   processManager,
   abortController,
   verbose = false,
+  packageManager,
 }: PreparePluginOptions) {
   // initialize execution options
   const execOptions = {
@@ -98,20 +104,7 @@ async function preparePlugin({
     processManager,
   })
 
-  await processManager.runProcess({
-    process: async () => {
-      try {
-        await execute([`yarn`, execOptions], { verbose })
-      } catch (e) {
-        // yarn isn't available
-        // use npm
-        await execute([`npm install --legacy-peer-deps`, execOptions], {
-          verbose,
-        })
-      }
-    },
-    ignoreERESOLVE: true,
-  })
+  await packageManager.installDependencies(execOptions)
 
   factBoxOptions.interval = displayFactBox({
     ...factBoxOptions,
@@ -136,6 +129,8 @@ async function prepareProject({
   nextjsDirectory = "",
   client,
   verbose = false,
+  packageManager,
+  version,
 }: PrepareProjectOptions) {
   // initialize execution options
   const execOptions = {
@@ -167,6 +162,11 @@ async function prepareProject({
   // Update name
   packageJson.name = projectName
 
+  // Update medusa dependencies versions
+  if (version) {
+    updatePackageVersions(packageJson, version)
+  }
+
   fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2))
 
   // initialize the invite token to return
@@ -196,20 +196,7 @@ async function prepareProject({
     processManager,
   })
 
-  await processManager.runProcess({
-    process: async () => {
-      try {
-        await execute([`yarn`, execOptions], { verbose })
-      } catch (e) {
-        // yarn isn't available
-        // use npm
-        await execute([`npm install --legacy-peer-deps`, execOptions], {
-          verbose,
-        })
-      }
-    },
-    ignoreERESOLVE: true,
-  })
+  await packageManager.installDependencies(execOptions)
 
   factBoxOptions.interval = displayFactBox({
     ...factBoxOptions,
@@ -262,12 +249,6 @@ async function prepareProject({
       message: "Ran Migrations",
     })
 
-    // create admin user
-    factBoxOptions.interval = displayFactBox({
-      ...factBoxOptions,
-      title: "Creating an admin user...",
-    })
-
     await processManager.runProcess({
       process: async () => {
         const proc = await execute(
@@ -283,11 +264,6 @@ async function prepareProject({
       },
     })
 
-    factBoxOptions.interval = displayFactBox({
-      ...factBoxOptions,
-      message: "Created admin user",
-    })
-
     // TODO for now we just seed the default data
     // we should add onboarding seeding again if it makes
     // since once we re-introduce the onboarding flow.
@@ -296,18 +272,7 @@ async function prepareProject({
       title: "Seeding database...",
     })
 
-    await processManager.runProcess({
-      process: async () => {
-        try {
-          await execute([`yarn seed`, execOptions], { verbose })
-        } catch (e) {
-          // yarn isn't available
-          // use npm
-          await execute([`npm run seed`, execOptions], { verbose })
-        }
-      },
-      ignoreERESOLVE: true,
-    })
+    await packageManager.runCommand("seed", execOptions)
 
     displayFactBox({
       ...factBoxOptions,

package/src/utils/project-creator/creator.ts

@@ -3,6 +3,7 @@ import path from "path"
 import createAbortController from "../create-abort-controller.js"
 import { FactBoxOptions } from "../facts.js"
 import ProcessManager from "../process-manager.js"
+import PackageManager from "../package-manager.js"
 
 export interface ProjectOptions {
   repoUrl?: string
@@ -15,6 +16,7 @@ export interface ProjectOptions {
   withNextjsStarter?: boolean
   verbose?: boolean
   plugin?: boolean
+  version?: string
 }
 
 export interface ProjectCreator {
@@ -25,6 +27,7 @@ export interface ProjectCreator {
 export abstract class BaseProjectCreator {
   protected spinner: Ora
   protected processManager: ProcessManager
+  protected packageManager: PackageManager
   protected abortController: AbortController
   protected factBoxOptions: FactBoxOptions
   protected projectName: string
@@ -39,6 +42,7 @@ export abstract class BaseProjectCreator {
   ) {
     this.spinner = ora()
     this.processManager = new ProcessManager()
+    this.packageManager = new PackageManager(this.processManager)
     this.abortController = createAbortController(this.processManager)
     this.projectName = projectName
     const basePath =

package/src/utils/project-creator/medusa-plugin-creator.ts

@@ -72,6 +72,7 @@ export class PluginProjectCreator
       processManager: this.processManager,
       abortController: this.abortController,
       verbose: this.options.verbose,
+      packageManager: this.packageManager,
     })
   }
 

package/src/utils/project-creator/medusa-project-creator.ts

@@ -96,6 +96,7 @@ export class MedusaProjectCreator
           factBoxOptions: this.factBoxOptions,
           verbose: this.options.verbose,
           processManager: this.processManager,
+          version: this.options.version,
         })
       }
     } catch (e) {
@@ -153,6 +154,8 @@ export class MedusaProjectCreator
         nextjsDirectory: this.nextjsDirectory,
         client: this.client,
         verbose: this.options.verbose,
+        packageManager: this.packageManager,
+        version: this.options.version,
       })
     } finally {
       await this.client?.end()
@@ -214,18 +217,19 @@ export class MedusaProjectCreator
   }
 
   protected showSuccessMessage(): void {
+    const commandStr = this.packageManager.getCommandStr(`dev`)
     logMessage({
       message: boxen(
         chalk.green(
           `Change to the \`${
             this.projectName
-          }\` directory to explore your Medusa project.${EOL}${EOL}Start your Medusa app again with the following command:${EOL}${EOL}yarn dev${EOL}${EOL}${
+          }\` directory to explore your Medusa project.${EOL}${EOL}Start your Medusa application again with the following command:${EOL}${EOL}${commandStr}${EOL}${EOL}${
             this.inviteToken
-              ? `After you start the Medusa app, you can set a password for your admin user with the URL http://localhost:7001/invite?token=${this.inviteToken}&first_run=true${EOL}${EOL}`
+              ? `After you start the Medusa application, you can create an admin user with the URL http://localhost:9000/app/invite?token=${this.inviteToken}&first_run=true${EOL}${EOL}`
               : ""
           }${
             this.nextjsDirectory?.length
-              ? `The Next.js Starter storefront was installed in the \`${this.nextjsDirectory}\` directory. Change to that directory and start it with the following command:${EOL}${EOL}npm run dev${EOL}${EOL}`
+              ? `The Next.js Starter Storefront was installed in the \`${this.nextjsDirectory}\` directory. Change to that directory and start it with the following command:${EOL}${EOL}${commandStr}${EOL}${EOL}`
               : ""
           }Check out the Medusa documentation to start your development:${EOL}${EOL}https://docs.medusajs.com/${EOL}${EOL}Star us on GitHub if you like what we're building:${EOL}${EOL}https://github.com/medusajs/medusa/stargazers`
         ),

package/src/utils/project-creator/project-creator-factory.ts

@@ -57,6 +57,16 @@ export class ProjectCreatorFactory {
           type: "warn",
         })
         askProjectName = true
+      } else if (args[0].includes(".")) {
+        // We don't allow projects to have a dot in the name, as this causes issues for
+        // for MikroORM path resolutions.
+        logMessage({
+          message: `Project names cannot contain a dot (.) character. Please enter a different ${
+            isPlugin ? "plugin" : "project"
+          } name.`,
+          type: "error",
+        })
+        askProjectName = true
       }
     }
 
@@ -80,6 +90,14 @@ async function askForProjectName(
         return slugify(input).toLowerCase()
       },
       validate: (input) => {
+        // We don't allow projects to have a dot in the name, as this causes issues for
+        // for MikroORM path resolutions.
+        if (input.includes(".")) {
+          return `Project names cannot contain a dot (.) character. Please enter a different ${
+            isPlugin ? "plugin" : "project"
+          } name.`
+        }
+
         if (!input.length) {
           return `Please enter a ${isPlugin ? "plugin" : "project"} name`
         }

package/src/utils/update-package-versions.ts

@@ -0,0 +1,31 @@
+import { readFileSync, writeFileSync } from "fs"
+
+export function updatePackageVersions(
+  packageJsonOrPath: string | Record<string, any>,
+  version: string,
+  { applyChanges = false }: { applyChanges?: boolean } = {}
+) {
+  const packageJson =
+    typeof packageJsonOrPath === "string"
+      ? JSON.parse(readFileSync(packageJsonOrPath, "utf-8"))
+      : packageJsonOrPath
+
+  if (packageJson.dependencies) {
+    for (const dependency of Object.keys(packageJson.dependencies)) {
+      if (dependency.startsWith("@medusajs/")) {
+        packageJson.dependencies[dependency] = version
+      }
+    }
+  }
+  if (packageJson.devDependencies) {
+    for (const dependency of Object.keys(packageJson.devDependencies)) {
+      if (dependency.startsWith("@medusajs/")) {
+        packageJson.devDependencies[dependency] = version
+      }
+    }
+  }
+
+  if (applyChanges && typeof packageJsonOrPath === "string") {
+    writeFileSync(packageJsonOrPath, JSON.stringify(packageJson, null, 2))
+  }
+}