fg-devkit 1.8.1 → 1.8.3

package/configs/lefthook.yml

@@ -1,7 +1,5 @@
 pre-commit:
   commands:
-    audit:
-      run: zsh -lc "node ./node_modules/fg-devkit/scripts/lefthook-audit-if-enabled.mjs"
     lint-check:
       run: zsh -lc "node ./node_modules/fg-devkit/scripts/fg-devkit.mjs lint ."
     typecheck:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fg-devkit",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Shared configs, scripts, and DX tooling for Vue / TypeScript frontend repos",
   "type": "module",
   "license": "UNLICENSED",
@@ -45,7 +45,6 @@
     "./scripts/poeditor-upload.mjs": "./scripts/poeditor-upload.mjs",
     "./scripts/scaffold-vue.mjs": "./scripts/scaffold-vue.mjs",
     "./scripts/fg-devkit.mjs": "./scripts/fg-devkit.mjs",
-    "./scripts/lefthook-audit-if-enabled.mjs": "./scripts/lefthook-audit-if-enabled.mjs",
     "./scripts/release.sh": "./scripts/release.sh",
     "./scripts/cz/.cz-config.cjs": "./scripts/cz/.cz-config.cjs",
     "./cursor-rules/core-coding-standards.mdc": "./.cursor/rules/core-coding-standards.mdc"

package/scaffold/vue/package.json

@@ -34,7 +34,7 @@
     "@tanstack/vue-query-devtools": "6.1.28",
     "@types/node": "22.16.5",
     "@vitejs/plugin-vue": "6.0.6",
-    "fg-devkit": "1.8.1",
+    "fg-devkit": "1.8.3",
     "start-server-and-test": "2.1.3",
     "tailwindcss": "4.3.0",
     "tsx": "4.21.0",

package/scripts/cz/.cz-config.cjs

@@ -1,9 +1,6 @@
 /**
  * cz-git config used by fg-devkit commit flows.
  * Keep this in czrc-compatible shape for `czg --config`.
- *
- * Note: interactive `fg-devkit commit` asks each dep/vuln commit whether Lefthook should run
- * `pnpm audit` for that commit only (via env, not persisted).
  */
 module.exports = {
   types: [

package/scripts/fg-devkit.mjs

@@ -273,18 +273,6 @@ async function runCzg(args = [], extraEnv = {}) {
     })
   }
 
-  let runLefthookAuditThisCommit = true
-  if (isDepOrVuln) {
-    runLefthookAuditThisCommit = await selectPrompt({
-      message: 'Run pnpm audit on commit (Lefthook pre-commit)?',
-      choices: [
-        { value: true, name: 'Yes' },
-        { value: false, name: 'No' },
-      ],
-      default: true,
-    })
-  }
-
   if (!isDepOrVuln) {
     shortcutId = await ask('Shortcut ID digits only (optional, e.g. 1234):')
     subject = await ask('Commit subject (imperative, no trailing period):', {
@@ -305,16 +293,10 @@ async function runCzg(args = [], extraEnv = {}) {
   const finalSubject = selectedType === 'dep' ? depSubject : selectedType === 'vuln' ? vulnSubject : subject
   const commitMessage = `${selectedType}${scopePart}: ${finalSubject}${shortcutPart}${bodyPart}`
 
-  const gitEnv = { ...process.env, ...extraEnv }
-  delete gitEnv.FG_DEVKIT_LEFTHOOK_AUDIT
-  if (isDepOrVuln) {
-    gitEnv.FG_DEVKIT_LEFTHOOK_AUDIT = runLefthookAuditThisCommit ? '1' : '0'
-  }
-
   const r = spawnSync('git', ['commit', ...args, '-m', commitMessage], {
     stdio: 'inherit',
     cwd: process.cwd(),
-    env: gitEnv,
+    env: { ...process.env, ...extraEnv },
   })
   if (r.error) {
     console.error('[fg-devkit]', r.error.message)

package/scripts/sync-consumer-lefthook.mjs

@@ -6,8 +6,6 @@
  * - removes legacy lint-staged config block from package.json
  * - removes legacy prepare hook scripts for husky/lefthook bootstrap
  *
- * Lefthook `audit` skips only when `FG_DEVKIT_LEFTHOOK_AUDIT=0` for that commit (dep/vuln flow).
- *
  * Usage:
  *   node node_modules/fg-devkit/scripts/sync-consumer-lefthook.mjs
  *   pnpm exec fg-devkit setup-lefthook

package/scripts/lefthook-audit-if-enabled.mjs

@@ -1,23 +0,0 @@
-#!/usr/bin/env node
-/**
- * Lefthook pre-commit helper: runs `pnpm audit` unless this commit was started with
- * `FG_DEVKIT_LEFTHOOK_AUDIT=0` (set only for the current `git commit` by `fg-devkit commit`
- * when the user chooses "No" on dep/vuln). Unset or `1` runs audit.
- */
-import { spawnSync } from 'node:child_process'
-
-function shouldRunAudit() {
-  const v = process.env.FG_DEVKIT_LEFTHOOK_AUDIT
-  return v !== '0' && v !== 'false'
-}
-
-if (!shouldRunAudit()) {
-  console.log('[fg-devkit] Skipping pnpm audit (FG_DEVKIT_LEFTHOOK_AUDIT=0 for this commit).')
-  process.exit(0)
-}
-
-const r = spawnSync('pnpm', ['audit'], {
-  stdio: 'inherit',
-  cwd: process.cwd(),
-})
-process.exit(r.status ?? 1)