deplift 1.0.0 → 1.1.0

package/README.md

@@ -9,3 +9,12 @@
 ```bash
 npm install -D deplift
 ```
+
+## Usage
+
+```bash
+npx deplift
+
+# dry run mode
+npx deplift --dry-run
+```

package/dist/cjs/index.cjs

@@ -10,8 +10,18 @@ const defaultIgnore = ["**/node_modules/**", "**/dist/**", "**/coverage/**", "**
 const depSections = ["dependencies", "devDependencies"];
 const args = process.argv.slice(2);
 const dryRun = args.includes("--dry-run");
+const noInstall = args.includes("--no-install");
 if (dryRun) console.log("💡 Dry run enabled — no files will be changed or installed.");
 const stripPrefix = version => version.replace(/^[^0-9]*/, "");
+const isStableRelease = version => /^\d+\.\d+\.\d+$/.test(version);
+const extractSemVerParts = semver => semver.split(".").map(Number);
+function isSemVerGreater(v1, v2) {
+  const [major1, minor1, patch1] = extractSemVerParts(v1);
+  const [major2, minor2, patch2] = extractSemVerParts(v2);
+  if (major1 !== major2) return major1 > major2;
+  if (minor1 !== minor2) return minor1 > minor2;
+  return patch1 > patch2;
+}
 const loadConfig = async () => {
   const configPath = path.resolve("deplift.config.json");
   try {
@@ -86,26 +96,38 @@ async function main() {
     } of latestDeps) {
       // Failed to fetch the pkg
       if (!latest) continue;
-      if (stripPrefix(current) === latest) {
-        console.log(`    ${pkg} is already at latest version (${latest})`);
+      if (!isStableRelease(latest)) {
+        console.log(`  ⚠️ [skipped] ${pkg}: latest version is not a stable release (${latest})`);
+        continue;
+      }
+      const currentVersion = stripPrefix(current);
+      if (currentVersion === latest) {
+        console.log(`    ${pkg} is already up to date (${latest})`);
+        continue;
+      }
+      if (isSemVerGreater(currentVersion, latest)) {
+        console.log(`  ⚠️ [skipped] ${pkg}: current (${currentVersion}) version is higher than the latest (${latest})`);
         continue;
       }
-      console.log(`  ✔ ${section} -> ${pkg}: ${current} → ^${latest}`);
+      const [currentMajor] = extractSemVerParts(currentVersion);
+      const [latestMajor] = extractSemVerParts(latest);
+      console.log(`  ${currentMajor === latestMajor ? "✔" : "🚨[major]"} ${pkg}(${section}): ${current} → ^${latest}`);
       updated = true;
       if (!dryRun) {
         pkgData[section][pkg] = `^${latest}`;
       }
     }
-    if (!updated) {
+    if (updated) {
+      await promises.writeFile(packageJsonPath, JSON.stringify(pkgData, null, 2) + "\n");
+      console.log(`  💾 ${packageJson} updated.`);
+    } else {
       console.log(`  ✅ No changes needed for ${packageJson}.`);
-      continue;
     }
+    if (noInstall) continue;
     if (dryRun) {
       console.log(`  📥 [Dry run] "npm install" for ${packageJson}.`);
       continue;
     }
-    await promises.writeFile(packageJsonPath, JSON.stringify(pkgData, null, 2) + "\n");
-    console.log(`  💾 ${packageJson} updated.`);
     try {
       const targetDir = path.dirname(packageJsonPath);
       console.log("  📥 Installing...");
@@ -113,6 +135,10 @@ async function main() {
         stdio: "inherit",
         cwd: targetDir
       });
+      node_child_process.execSync("npm audit fix", {
+        stdio: "inherit",
+        cwd: targetDir
+      });
     } catch (err) {
       console.error(`  ❌ Failed to install in ${packageJson}: ${err.message}`);
     }

package/dist/esm/index.mjs

@@ -8,8 +8,18 @@ const defaultIgnore = ["**/node_modules/**", "**/dist/**", "**/coverage/**", "**
 const depSections = ["dependencies", "devDependencies"];
 const args = process.argv.slice(2);
 const dryRun = args.includes("--dry-run");
+const noInstall = args.includes("--no-install");
 if (dryRun) console.log("💡 Dry run enabled — no files will be changed or installed.");
 const stripPrefix = version => version.replace(/^[^0-9]*/, "");
+const isStableRelease = version => /^\d+\.\d+\.\d+$/.test(version);
+const extractSemVerParts = semver => semver.split(".").map(Number);
+function isSemVerGreater(v1, v2) {
+  const [major1, minor1, patch1] = extractSemVerParts(v1);
+  const [major2, minor2, patch2] = extractSemVerParts(v2);
+  if (major1 !== major2) return major1 > major2;
+  if (minor1 !== minor2) return minor1 > minor2;
+  return patch1 > patch2;
+}
 const loadConfig = async () => {
   const configPath = path.resolve("deplift.config.json");
   try {
@@ -84,26 +94,38 @@ async function main() {
     } of latestDeps) {
       // Failed to fetch the pkg
       if (!latest) continue;
-      if (stripPrefix(current) === latest) {
-        console.log(`    ${pkg} is already at latest version (${latest})`);
+      if (!isStableRelease(latest)) {
+        console.log(`  ⚠️ [skipped] ${pkg}: latest version is not a stable release (${latest})`);
+        continue;
+      }
+      const currentVersion = stripPrefix(current);
+      if (currentVersion === latest) {
+        console.log(`    ${pkg} is already up to date (${latest})`);
+        continue;
+      }
+      if (isSemVerGreater(currentVersion, latest)) {
+        console.log(`  ⚠️ [skipped] ${pkg}: current (${currentVersion}) version is higher than the latest (${latest})`);
         continue;
       }
-      console.log(`  ✔ ${section} -> ${pkg}: ${current} → ^${latest}`);
+      const [currentMajor] = extractSemVerParts(currentVersion);
+      const [latestMajor] = extractSemVerParts(latest);
+      console.log(`  ${currentMajor === latestMajor ? "✔" : "🚨[major]"} ${pkg}(${section}): ${current} → ^${latest}`);
       updated = true;
       if (!dryRun) {
         pkgData[section][pkg] = `^${latest}`;
       }
     }
-    if (!updated) {
+    if (updated) {
+      await writeFile(packageJsonPath, JSON.stringify(pkgData, null, 2) + "\n");
+      console.log(`  💾 ${packageJson} updated.`);
+    } else {
       console.log(`  ✅ No changes needed for ${packageJson}.`);
-      continue;
     }
+    if (noInstall) continue;
     if (dryRun) {
       console.log(`  📥 [Dry run] "npm install" for ${packageJson}.`);
       continue;
     }
-    await writeFile(packageJsonPath, JSON.stringify(pkgData, null, 2) + "\n");
-    console.log(`  💾 ${packageJson} updated.`);
     try {
       const targetDir = path.dirname(packageJsonPath);
       console.log("  📥 Installing...");
@@ -111,6 +133,10 @@ async function main() {
         stdio: "inherit",
         cwd: targetDir
       });
+      execSync("npm audit fix", {
+        stdio: "inherit",
+        cwd: targetDir
+      });
     } catch (err) {
       console.error(`  ❌ Failed to install in ${packageJson}: ${err.message}`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deplift",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "CLI to update deps in monorepos",
   "author": "Zheng Song",
   "license": "MIT",
@@ -13,7 +13,9 @@
   "main": "./dist/cjs/index.cjs",
   "module": "./dist/esm/index.mjs",
   "types": "./types/index.d.ts",
-  "bin": "./dist/cjs/index.cjs",
+  "bin": {
+    "deplift": "dist/cjs/index.cjs"
+  },
   "sideEffects": false,
   "files": [
     "dist/",
@@ -31,17 +33,17 @@
     "deplift:dry-run": "node ./dist/cjs/index.cjs --dry-run"
   },
   "devDependencies": {
-    "@babel/core": "^7.27.1",
-    "@babel/preset-env": "^7.27.2",
-    "@babel/preset-typescript": "^7.27.1",
-    "@rollup/plugin-babel": "^6.0.4",
-    "@rollup/plugin-node-resolve": "^16.0.1",
-    "@types/node": "^22.15.21",
+    "@babel/core": "^7.28.5",
+    "@babel/preset-env": "^7.28.5",
+    "@babel/preset-typescript": "^7.28.5",
+    "@rollup/plugin-babel": "^6.1.0",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@types/node": "^25.0.5",
     "npm-run-all": "^4.1.5",
-    "rollup": "^4.41.0",
-    "typescript": "^5.8.3"
+    "rollup": "^4.55.1",
+    "typescript": "^5.9.3"
   },
   "dependencies": {
     "fast-glob": "^3.3.3"
   }
-}
+}