dependfix 0.0.0 → 0.1.0

package/dist/index.mjs

@@ -1,48 +1,28 @@
-import { createRequire } from "node:module";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
+import { A as createPullRequest, B as fetchDependabotAlerts, C as parseMajorVersion, D as computeFixAndPrPlan, E as closePullRequest, F as getBranchPrStatus, H as createGitHubClient, I as isConfirmAnswer, L as listDependfixBranches, M as extractFingerprintFromBranch, N as findDependfixOpenPR, O as computeFixFingerprint, P as generatePRBody, R as pushBranch, S as overrideTransitiveDependency, T as upgradeDependency, V as mapGitHubError, _ as repairLockfile, a as RUNTIME_MODES, b as extractPrefix, c as readEnvConfig, d as resolveRepoList, f as DependfixApp, g as computeLockfileDiff, h as classifyLockfileFailure, i as DEFAULT_RUNTIME_CONFIG, j as deleteRemoteBranch, k as createFixBranch, l as resolveRuntimeConfig, m as sanitizeOutput, n as parseCliArgs, o as SEVERITY_THRESHOLDS, p as runVerification, r as runCli, s as inferRepoFromGitRemote, t as dependfixCommand, u as readReposFile, v as resolvePnpmVersion, w as readLockfileVersion, x as findDependencyVersion, y as ensurePnpmOverrides, z as stageAndCommit } from "./cli.mjs";
+import { pathToFileURL } from "node:url";
+import { runMain } from "citty";
+import { toAppError } from "@dependfix/core";
 
-//#region \0rolldown/runtime.js
-var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
+export * from "@dependfix/core"
 
-//#endregion
-//#region node_modules/.pnpm/tsdown@0.22.3_tsx@4.23.1_typescript@6.0.3/node_modules/tsdown/esm-shims.js
-const getFilename = () => fileURLToPath(import.meta.url);
-const getDirname = () => path.dirname(getFilename());
-const __dirname = /* @__PURE__ */ getDirname();
-const __filename = /* @__PURE__ */ getFilename();
-
-//#endregion
-//#region src/env.ts
-const __PROD__ = process.env.NODE_ENV === "production";
-const __DEV__ = process.env.NODE_ENV === "development";
-
-//#endregion
 //#region src/index.ts
 /**
-* say hello
-*
-* @author CaoMeiYouRen
-* @date 2020-11-28
-* @export
+* 简化调用的入口（内部数据处理，非 CLI 使用）。
 */
-function hello() {
-	if (__PROD__) console.log("Hello production");
-	if (__DEV__) console.log("Hello development");
-	console.log("你好，世界！");
+function main(args = process.argv.slice(2)) {
+	return runCli(args);
 }
-console.log("__dirname:", typeof __dirname !== "undefined" ? __dirname : "not defined");
-console.log("__filename:", typeof __filename !== "undefined" ? __filename : "not defined");
-try {
-	const os = __require && __require("node:os");
-	console.log("require(\"os\"):", !!os);
-} catch (e) {
-	console.log("require is not available:", e);
+function isExecutedAsEntryPoint() {
+	const entry = process.argv[1];
+	if (!entry) return false;
+	return import.meta.url === pathToFileURL(entry).href;
 }
-console.log("import.meta.url:", import.meta.url || "not defined");
-console.log("import.meta.dirname:", import.meta.dirname || "not defined");
-console.log("import.meta.filename:", import.meta.filename || "not defined");
+if (isExecutedAsEntryPoint()) runMain(dependfixCommand).catch((error) => {
+	const appError = toAppError(error, "CLI_EXECUTION_FAILED");
+	console.error(appError.message);
+	process.exitCode = 1;
+});
 
 //#endregion
-export { hello };
+export { DEFAULT_RUNTIME_CONFIG, DependfixApp, RUNTIME_MODES, SEVERITY_THRESHOLDS, classifyLockfileFailure, closePullRequest, computeFixAndPrPlan, computeFixFingerprint, computeLockfileDiff, createFixBranch, createGitHubClient, createPullRequest, deleteRemoteBranch, dependfixCommand, ensurePnpmOverrides, extractFingerprintFromBranch, extractPrefix, fetchDependabotAlerts, findDependencyVersion, findDependfixOpenPR, generatePRBody, getBranchPrStatus, inferRepoFromGitRemote, isConfirmAnswer, listDependfixBranches, main, mapGitHubError, overrideTransitiveDependency, parseCliArgs, parseMajorVersion, pushBranch, readEnvConfig, readLockfileVersion, readReposFile, repairLockfile, resolvePnpmVersion, resolveRepoList, resolveRuntimeConfig, runCli, runVerification, sanitizeOutput, stageAndCommit, upgradeDependency };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../node_modules/.pnpm/tsdown@0.22.3_tsx@4.23.1_typescript@6.0.3/node_modules/tsdown/esm-shims.js","../src/env.ts","../src/index.ts"],"sourcesContent":["// Shim globals in esm bundle\nimport path from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nconst getFilename = () => fileURLToPath(import.meta.url)\nconst getDirname = () => path.dirname(getFilename())\n\nexport const __dirname = /* @__PURE__ */ getDirname()\nexport const __filename = /* @__PURE__ */ getFilename()\n","export const __PROD__ = process.env.NODE_ENV === 'production'\nexport const __DEV__ = process.env.NODE_ENV === 'development'\n","import { __PROD__, __DEV__ } from '@/env'\n/**\n * say hello\n *\n * @author CaoMeiYouRen\n * @date 2020-11-28\n * @export\n */\nexport function hello() {\n    if (__PROD__) {\n        console.log('Hello production')\n    }\n    if (__DEV__) {\n        console.log('Hello development')\n    }\n    console.log('你好，世界！')\n}\n\n// 测试 ESM 中的 CommonJS 变量（需要 shims 支持）\nconsole.log('__dirname:', typeof __dirname !== 'undefined' ? __dirname : 'not defined')\nconsole.log('__filename:', typeof __filename !== 'undefined' ? __filename : 'not defined')\n\n// 测试 ESM 中的 require（Node.js 平台自动注入）\ntry {\n    const os = require && require('os')\n    console.log('require(\"os\"):', !!os)\n} catch (e) {\n    console.log('require is not available:', e)\n}\n\n// 测试 CommonJS 中的 ESM 变量（始终可用）\nconsole.log('import.meta.url:', import.meta.url || 'not defined')\nconsole.log('import.meta.dirname:', import.meta.dirname || 'not defined')\nconsole.log('import.meta.filename:', import.meta.filename || 'not defined')\n"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;AAIA,MAAM,oBAAoB,cAAc,OAAO,KAAK,GAAG;AACvD,MAAM,mBAAmB,KAAK,QAAQ,YAAY,CAAC;AAEnD,MAAa,YAA4B,2BAAW;AACpD,MAAa,aAA6B,4BAAY;;;;ACRtD,MAAa,WAAW,QAAQ,IAAI,aAAa;AACjD,MAAa,UAAU,QAAQ,IAAI,aAAa;;;;;;;;;;;ACOhD,SAAgB,QAAQ;CACpB,IAAI,UACA,QAAQ,IAAI,kBAAkB;CAElC,IAAI,SACA,QAAQ,IAAI,mBAAmB;CAEnC,QAAQ,IAAI,QAAQ;AACxB;AAGA,QAAQ,IAAI,cAAc,OAAO,cAAc,cAAc,YAAY,aAAa;AACtF,QAAQ,IAAI,eAAe,OAAO,eAAe,cAAc,aAAa,aAAa;AAGzF,IAAI;CACA,MAAM,4BAAwB,SAAI;CAClC,QAAQ,IAAI,oBAAkB,CAAC,CAAC,EAAE;AACtC,SAAS,GAAG;CACR,QAAQ,IAAI,6BAA6B,CAAC;AAC9C;AAGA,QAAQ,IAAI,oBAAoB,OAAO,KAAK,OAAO,aAAa;AAChE,QAAQ,IAAI,wBAAwB,OAAO,KAAK,WAAW,aAAa;AACxE,QAAQ,IAAI,yBAAyB,OAAO,KAAK,YAAY,aAAa"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/index.ts"],"sourcesContent":["import { pathToFileURL } from 'node:url'\nimport { runMain } from 'citty'\nimport { toAppError } from '@dependfix/core'\nimport { dependfixCommand, runCli, type CliRunResult } from './cli'\n\nexport * from '@dependfix/core'\nexport * from './app'\nexport * from './cli'\nexport * from './config'\nexport * from './fixers/dependency'\nexport * from './fixers/pnpm'\nexport * from './github'\nexport * from './runners'\n\n/**\n * 简化调用的入口（内部数据处理，非 CLI 使用）。\n */\nexport function main(args: string[] = process.argv.slice(2)): CliRunResult {\n    return runCli(args)\n}\n\nfunction isExecutedAsEntryPoint(): boolean {\n    const entry = process.argv[1]\n\n    if (!entry) {\n        return false\n    }\n\n    return import.meta.url === pathToFileURL(entry).href\n}\n\nif (isExecutedAsEntryPoint()) {\n    // 优先使用 citty 接管（自动 --help、子命令等）\n    void runMain(dependfixCommand).catch((error: unknown) => {\n        const appError = toAppError(error, 'CLI_EXECUTION_FAILED')\n        console.error(appError.message)\n        process.exitCode = 1\n    })\n}\n"],"mappings":";;;;;;;;;;;AAiBA,SAAgB,KAAK,OAAiB,QAAQ,KAAK,MAAM,EAAE,EAAgB;AACvE,QAAO,OAAO,KAAK;;AAGvB,SAAS,yBAAkC;CACvC,MAAM,QAAQ,QAAQ,KAAK;AAE3B,KAAI,CAAC,MACD,QAAO;AAGX,QAAO,OAAO,KAAK,QAAQ,cAAc,MAAM,CAAC;;AAGpD,IAAI,wBAAwB,CAExB,CAAK,QAAQ,iBAAiB,CAAC,OAAO,UAAmB;CACrD,MAAM,WAAW,WAAW,OAAO,uBAAuB;AAC1D,SAAQ,MAAM,SAAS,QAAQ;AAC/B,SAAQ,WAAW;EACrB"}

package/package.json

@@ -1,95 +1,81 @@
 {
   "name": "dependfix",
-  "version": "0.0.0",
-  "description": "这是一个面向多项目维护者的自动化工具，旨在自动处理 Dependabot 和 Code Scanning 产生的大量简单、重复的告警修复工作，如依赖版本升级、安全漏洞修复等，从而显著提升维护效率。",
+  "version": "0.1.0",
+  "description": "一个自动化修复 github security 告警的方案",
   "author": "CaoMeiYouRen",
-  "private": false,
   "license": "MIT",
+  "type": "module",
+  "keywords": [
+    "security",
+    "dependabot",
+    "code-scanning",
+    "dependabot-alerts",
+    "cli"
+  ],
+  "homepage": "https://github.com/dependfix/dependfix#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dependfix/dependfix.git"
+  },
+  "bugs": {
+    "url": "https://github.com/dependfix/dependfix/issues"
+  },
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.mts",
   "exports": {
     ".": {
+      "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
-      "require": "./dist/index.cjs",
-      "types": "./dist/index.d.mts"
+      "require": "./dist/index.cjs"
     },
     "./package.json": "./package.json"
   },
   "files": [
     "dist"
   ],
+  "bin": {
+    "dependfix": "./dist/bin.mjs"
+  },
   "engines": {
     "node": ">=20"
   },
-  "scripts": {
-    "release": "semantic-release",
-    "lint": "cross-env NODE_ENV=production eslint . --fix",
-    "prebuild": "rimraf dist",
-    "build": "cross-env NODE_ENV=production tsdown",
-    "dev": "cross-env NODE_ENV=development tsx watch src/index.ts",
-    "dev:tsdown": "cross-env NODE_ENV=development tsdown --watch",
-    "start": "node ./dist/index",
-    "start:tsx": "cross-env NODE_ENV=production tsx src/index.ts",
-    "commit": "cz",
-    "prepare": "husky",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage"
+  "dependencies": {
+    "@octokit/rest": "^22.0.1",
+    "citty": "^0.2.2",
+    "dayjs": "^1.11.20",
+    "dotenv": "^17.3.1",
+    "fs-extra": "^11.3.4",
+    "isomorphic-unfetch": "^4.0.2",
+    "lodash-es": "^4.17.23",
+    "p-queue": "^9.1.0",
+    "tslib": "^2.8.1",
+    "yaml": "^2.8.3",
+    "zx": "^8.8.5",
+    "@dependfix/core": "0.1.0"
   },
   "devDependencies": {
+    "@octokit/request-error": "^5.1.1",
     "@types/debug": "^4.1.13",
-    "@types/node": "^26.0.1",
-    "commitizen": "^4.3.2",
-    "commitlint": "^21.2.1",
-    "commitlint-config-cmyr": "^1.0.1",
+    "@types/fs-extra": "^11.0.4",
+    "@types/lodash-es": "^4.17.12",
+    "@types/node": "^25.5.0",
     "cross-env": "^10.0.0",
-    "cz-conventional-changelog-cmyr": "^2.0.0",
     "debug": "^4.4.3",
-    "eslint": "^9.34.0",
-    "eslint-config-cmyr": "^2.3.1",
-    "husky": "^9.1.7",
-    "lint-staged": "^17.2.0",
+    "nock": "^14.0.16",
     "rimraf": "^6.1.3",
-    "semantic-release": "^25.0.8",
-    "semantic-release-cmyr-config": "^1.0.2",
-    "tsdown": "^0.22.0",
-    "tsx": "^4.23.1",
-    "typescript": "^6.0.2",
-    "vite": "^7.0.5",
-    "vitest": "^3.2.4"
-  },
-  "config": {},
-  "lint-staged": {
-    "*.{js,ts}": [
-      "npm run lint",
-      "git add"
-    ]
+    "tsdown": "^0.21.5",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
   },
-  "keywords": [
-    "dependabot",
-    "automation",
-    "security-fixes",
-    "dependency-management",
-    "github-actions",
-    "typescript"
-  ],
-  "homepage": "https://github.com/CaoMeiYouRen/dependfix#readme",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/CaoMeiYouRen/dependfix.git"
-  },
-  "bugs": {
-    "url": "https://github.com/CaoMeiYouRen/dependfix/issues"
-  },
-  "dependencies": {
-    "tslib": "^2.8.1"
-  },
-  "type": "module",
-  "publishConfig": {
-    "access": "public"
-  },
-  "changelog": {
-    "language": "zh"
+  "scripts": {
+    "build": "tsdown",
+    "prebuild": "rimraf dist",
+    "dev": "cross-env NODE_ENV=development tsx watch src/index.ts",
+    "dev:tsdown": "cross-env NODE_ENV=development tsdown --watch",
+    "start": "node ./dist/index.mjs",
+    "start:tsx": "cross-env NODE_ENV=production tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint . --fix"
   }
 }