greenbump 0.2.0

package/dist/engine/ecosystems/maven.js

@@ -0,0 +1,77 @@
+import { join } from "node:path";
+import { readFile } from "node:fs/promises";
+import { pathExists } from "./types.js";
+const DEP_BLOCK = /<dependency>\s*<groupId>([^<]+)<\/groupId>\s*<artifactId>([^<]+)<\/artifactId>\s*<version>([^<]+)<\/version>/g;
+export function parsePomXml(raw) {
+    const deps = [];
+    for (const m of raw.matchAll(DEP_BLOCK)) {
+        deps.push({ name: `${m[1]}:${m[2]}`, version: m[3] });
+    }
+    return deps;
+}
+async function directDeps(cwd) {
+    try {
+        const raw = await readFile(join(cwd, "pom.xml"), "utf8");
+        return parsePomXml(raw);
+    }
+    catch {
+        return [];
+    }
+}
+async function latestOnMavenCentral(groupArtifact) {
+    const [g, a] = groupArtifact.split(":");
+    try {
+        const url = `https://search.maven.org/solrsearch/select?q=g:${encodeURIComponent(g)}+AND+a:${encodeURIComponent(a)}&core=gav&rows=1&sort=v+desc&wt=json`;
+        const res = await fetch(url);
+        if (!res.ok)
+            return null;
+        const data = (await res.json());
+        return data.response?.docs?.[0]?.v ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Maven has no per-dependency pin CLI — versions live inline in pom.xml. */
+export const mavenAdapter = {
+    id: "maven",
+    displayName: "Maven",
+    manifestFiles: ["pom.xml"],
+    lockFiles: [],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "pom.xml"));
+    },
+    async outdated(cwd) {
+        const deps = await directDeps(cwd);
+        const out = [];
+        for (const d of deps) {
+            const latest = await latestOnMavenCentral(d.name);
+            if (latest && latest !== d.version)
+                out.push({ name: d.name, current: d.version, wanted: "", latest });
+        }
+        return out;
+    },
+    async install(cwd, name, version) {
+        const { readFile: rf, writeFile } = await import("node:fs/promises");
+        const path = join(cwd, "pom.xml");
+        const [, artifactId] = name.split(":");
+        const raw = await rf(path, "utf8");
+        const re = new RegExp(`(<artifactId>${escapeRegExp(artifactId)}<\\/artifactId>\\s*<version>)([^<]+)(<\\/version>)`);
+        if (!re.test(raw)) {
+            return { code: 1, stdout: "", stderr: `could not find ${name} in pom.xml`, combined: `could not find ${name} in pom.xml` };
+        }
+        await writeFile(path, raw.replace(re, `$1${version}$3`), "utf8");
+        return { code: 0, stdout: `pinned ${name} to ${version} in pom.xml`, stderr: "", combined: "" };
+    },
+    async defaultCheckCommands() {
+        return {
+            build: { cmd: "mvn", args: ["-q", "compile"] },
+            test: { cmd: "mvn", args: ["-q", "test"] },
+        };
+    },
+};
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=maven.js.map

package/dist/engine/ecosystems/maven.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"maven.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/maven.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAwC,MAAM,YAAY,CAAC;AAE9E,MAAM,SAAS,GAAG,+GAA+G,CAAC;AAElI,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,IAAI,GAA6C,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,aAAqB;IACvD,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,kDAAkD,kBAAkB,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,CAAC,CAAC,sCAAsC,CAAC;QACzJ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoD,CAAC;QACnF,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,EAAE,EAAE,OAAO;IACX,WAAW,EAAE,OAAO;IACpB,aAAa,EAAE,CAAC,SAAS,CAAC;IAC1B,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,MAAM,IAAI,MAAM,KAAK,CAAC,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,gBAAgB,YAAY,CAAC,UAAU,CAAC,oDAAoD,CAC7F,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,IAAI,aAAa,EAAE,QAAQ,EAAE,kBAAkB,IAAI,aAAa,EAAE,CAAC;QAC7H,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,OAAO,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,IAAI,OAAO,OAAO,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE;YAC9C,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;SAC3C,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/engine/ecosystems/mix.js

@@ -0,0 +1,64 @@
+import { join } from "node:path";
+import { exec } from "../exec.js";
+import { pathExists } from "./types.js";
+// `mix hex.outdated` prints a fixed-width table: "Dependency  Only  Current  Latest  Status".
+// The "Only" cell is blank for deps with no `only:` restriction, so a plain
+// whitespace-split misreads columns (e.g. a "dev"-only dep shifts every
+// later field left by one). Slice by the header's column start offsets instead.
+const HEADER = /^Dependency\s+Only\s+Current\s+Latest\s+Status/;
+export function parseMixOutdated(stdout) {
+    const lines = stdout.split("\n");
+    const headerIdx = lines.findIndex((l) => HEADER.test(l));
+    if (headerIdx < 0)
+        return [];
+    const header = lines[headerIdx];
+    const idxOnly = header.indexOf("Only");
+    const idxCurrent = header.indexOf("Current");
+    const idxLatest = header.indexOf("Latest");
+    const idxStatus = header.indexOf("Status");
+    const out = [];
+    for (const line of lines.slice(headerIdx + 1)) {
+        if (!line.trim())
+            break; // blank line ends the table
+        const name = line.slice(0, idxOnly).trim();
+        const current = line.slice(idxCurrent, idxLatest).trim();
+        const latest = line.slice(idxLatest, idxStatus).trim();
+        if (name && current && latest && current !== latest)
+            out.push({ name, current, wanted: "", latest });
+    }
+    return out;
+}
+export const mixAdapter = {
+    id: "mix",
+    displayName: "Mix (Hex)",
+    manifestFiles: ["mix.exs"],
+    lockFiles: ["mix.lock"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "mix.exs"));
+    },
+    async outdated(cwd) {
+        const r = await exec("mix", ["hex.outdated"], { cwd, timeout: 120_000 });
+        return parseMixOutdated(r.stdout);
+    },
+    async install(cwd, name, version) {
+        // mix.exs deps are declared as Elixir code (`{:name, "~> 1.0"}`); no
+        // official CLI pins a single dep version, so we edit the source line.
+        const { readFile, writeFile } = await import("node:fs/promises");
+        const path = join(cwd, "mix.exs");
+        const raw = await readFile(path, "utf8");
+        const re = new RegExp(`(\\{:${name},\\s*)"[^"]+"`);
+        if (!re.test(raw)) {
+            return { code: 1, stdout: "", stderr: `could not find :${name} in mix.exs`, combined: `could not find :${name} in mix.exs` };
+        }
+        await writeFile(path, raw.replace(re, `$1"== ${version}"`), "utf8");
+        return { code: 0, stdout: `pinned ${name} to ${version} in mix.exs`, stderr: "", combined: "" };
+    },
+    async defaultCheckCommands() {
+        return {
+            build: { cmd: "mix", args: ["compile"] },
+            test: { cmd: "mix", args: ["test"] },
+        };
+    },
+};
+//# sourceMappingURL=mix.js.map

package/dist/engine/ecosystems/mix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mix.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/mix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAwC,MAAM,YAAY,CAAC;AAE9E,8FAA8F;AAC9F,4EAA4E;AAC5E,wEAAwE;AACxE,gFAAgF;AAChF,MAAM,MAAM,GAAG,gDAAgD,CAAC;AAEhE,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE3C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,4BAA4B;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,IAAI,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAqB;IAC1C,EAAE,EAAE,KAAK;IACT,WAAW,EAAE,WAAW;IACxB,aAAa,EAAE,CAAC,SAAS,CAAC;IAC1B,SAAS,EAAE,CAAC,UAAU,CAAC;IACvB,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,IAAI,aAAa,EAAE,QAAQ,EAAE,mBAAmB,IAAI,aAAa,EAAE,CAAC;QAC/H,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,OAAO,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,IAAI,OAAO,OAAO,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE;YACxC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;SACrC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/engine/ecosystems/npm.js

@@ -0,0 +1,47 @@
+import { join } from "node:path";
+import { exec } from "../exec.js";
+import { pathExists, safeJson } from "./types.js";
+async function readScripts(cwd) {
+    try {
+        const { readFile } = await import("node:fs/promises");
+        const raw = await readFile(join(cwd, "package.json"), "utf8");
+        const pkg = JSON.parse(raw);
+        return { build: pkg.scripts?.build, test: pkg.scripts?.test };
+    }
+    catch {
+        return {};
+    }
+}
+export function parseNpmOutdated(data) {
+    if (!data)
+        return [];
+    return Object.entries(data)
+        .map(([name, v]) => ({ name, current: v.current ?? "", wanted: "", latest: v.latest ?? "" }))
+        .filter((o) => o.latest && o.current !== o.latest);
+}
+export const npmAdapter = {
+    id: "npm",
+    displayName: "npm",
+    manifestFiles: ["package.json"],
+    lockFiles: ["package-lock.json"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "package.json"));
+    },
+    async outdated(cwd) {
+        const r = await exec("npm", ["outdated", "--json"], { cwd, timeout: 120_000 });
+        const data = safeJson(r.stdout);
+        return parseNpmOutdated(data);
+    },
+    async install(cwd, name, version) {
+        return exec("npm", ["install", `${name}@${version}`, "--save-exact"], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands(cwd) {
+        const scripts = await readScripts(cwd);
+        return {
+            build: scripts.build ? { cmd: "npm", args: ["run", "build"] } : undefined,
+            test: scripts.test ? { cmd: "npm", args: ["test"] } : undefined,
+        };
+    },
+};
+//# sourceMappingURL=npm.js.map

package/dist/engine/ecosystems/npm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/npm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAwC,MAAM,YAAY,CAAC;AAExF,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyC,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAkE;IACjG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;SAC5F,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAqB;IAC1C,EAAE,EAAE,KAAK;IACT,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,mBAAmB,CAAC;IAChC,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,QAAQ,CAAwD,CAAC,CAAC,MAAM,CAAC,CAAC;QACvF,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAG;QAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YACzE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SAChE,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/engine/ecosystems/nuget.js

@@ -0,0 +1,50 @@
+import { readdir } from "node:fs/promises";
+import { pathExists } from "./types.js";
+import { exec } from "../exec.js";
+// `dotnet list package --outdated` prints whitespace-aligned columns, no
+// arrow: "   > Newtonsoft.Json      13.0.1      13.0.1     13.0.3"
+// (Package  Requested  Resolved  Latest) — current version is "Resolved".
+const OUTDATED_LINE = /^\s*>\s*(\S+)\s+(\S+)\s+(\S+)\s+(\S+)/;
+export function parseNugetOutdated(stdout) {
+    const out = [];
+    for (const line of stdout.split("\n")) {
+        const m = OUTDATED_LINE.exec(line);
+        if (m)
+            out.push({ name: m[1], current: m[3], wanted: m[2], latest: m[4] });
+    }
+    return out;
+}
+async function hasCsproj(cwd) {
+    try {
+        const entries = await readdir(cwd);
+        return entries.some((e) => e.endsWith(".csproj") || e.endsWith(".sln"));
+    }
+    catch {
+        return false;
+    }
+}
+export const nugetAdapter = {
+    id: "nuget",
+    displayName: "NuGet (.NET)",
+    manifestFiles: ["*.csproj"],
+    lockFiles: ["packages.lock.json"],
+    verified: true,
+    async detect(cwd) {
+        return hasCsproj(cwd);
+    },
+    async outdated(cwd) {
+        const r = await exec("dotnet", ["list", "package", "--outdated"], { cwd, timeout: 180_000 });
+        return parseNugetOutdated(r.stdout);
+    },
+    async install(cwd, name, version) {
+        return exec("dotnet", ["add", "package", name, "--version", version], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands() {
+        return {
+            build: { cmd: "dotnet", args: ["build"] },
+            test: { cmd: "dotnet", args: ["test"] },
+        };
+    },
+};
+void pathExists;
+//# sourceMappingURL=nuget.js.map

package/dist/engine/ecosystems/nuget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nuget.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/nuget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAwC,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAElC,yEAAyE;AACzE,mEAAmE;AACnE,0EAA0E;AAC1E,MAAM,aAAa,GAAG,uCAAuC,CAAC;AAE9D,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,EAAE,EAAE,OAAO;IACX,WAAW,EAAE,cAAc;IAC3B,aAAa,EAAE,CAAC,UAAU,CAAC;IAC3B,SAAS,EAAE,CAAC,oBAAoB,CAAC;IACjC,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7F,OAAO,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE;YACzC,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;SACxC,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,KAAK,UAAU,CAAC"}

package/dist/engine/ecosystems/parsers.test.js

@@ -0,0 +1,255 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { parseYarnOutdated } from "./yarn.js";
+import { parseGoListOutdated } from "./go.js";
+import { parseComposerOutdated } from "./composer.js";
+import { parsePubOutdated } from "./pub.js";
+import { parseNugetOutdated } from "./nuget.js";
+import { parseCargoToml } from "./cargo.js";
+import { parsePomXml } from "./maven.js";
+import { parseGradleBuildFile } from "./gradle.js";
+import { parseBundlerOutdated } from "./bundler.js";
+import { parsePoetryOutdated } from "./poetry.js";
+import { parseCocoapodsOutdated } from "./cocoapods.js";
+import { parseMixOutdated } from "./mix.js";
+import { parseConanfileTxt } from "./conan.js";
+import { parseNpmOutdated } from "./npm.js";
+import { parsePnpmOutdated } from "./pnpm.js";
+import { parsePipOutdated } from "./pip.js";
+import { parseUvOutdated } from "./uv.js";
+import { parsePipenvOutdated } from "./pipenv.js";
+import { parseElmDirectDeps } from "./elm.js";
+import { parsePackageResolved, parsePackageSwiftDeps } from "./swiftpm.js";
+test("yarn: parses the ndjson table row, skips non-table lines", () => {
+    const stdout = [
+        JSON.stringify({ type: "info", data: "unrelated" }),
+        JSON.stringify({
+            type: "table",
+            data: {
+                head: ["Package", "Current", "Wanted", "Latest", "Package Type", "URL"],
+                body: [
+                    ["lodash", "4.17.20", "4.17.21", "4.17.21", "dependencies", ""],
+                    ["left-pad", "1.0.0", "1.0.0", "1.0.0", "dependencies", ""],
+                ],
+            },
+        }),
+    ].join("\n");
+    const result = parseYarnOutdated(stdout);
+    assert.deepEqual(result, [{ name: "lodash", current: "4.17.20", wanted: "", latest: "4.17.21" }]);
+});
+test("go: parses ndjson module stream, skips main/indirect/no-update", () => {
+    const stdout = [
+        JSON.stringify({ Path: "example.com/app", Main: true }),
+        JSON.stringify({ Path: "example.com/indirect", Version: "v1.0.0", Indirect: true, Update: { Version: "v1.1.0" } }),
+        JSON.stringify({ Path: "example.com/nodiff", Version: "v1.0.0", Update: { Version: "v1.0.0" } }),
+        JSON.stringify({ Path: "example.com/direct", Version: "v1.0.0", Update: { Version: "v1.2.0" } }),
+    ].join("\n");
+    const result = parseGoListOutdated(stdout);
+    assert.deepEqual(result, [{ name: "example.com/direct", current: "v1.0.0", wanted: "", latest: "v1.2.0" }]);
+});
+test("composer: parses `composer outdated --format json`", () => {
+    const stdout = JSON.stringify({
+        installed: [
+            { name: "monolog/monolog", version: "2.0.0", latest: "3.5.0" },
+            { name: "psr/log", version: "1.1.4", latest: "1.1.4" },
+        ],
+    });
+    const result = parseComposerOutdated(stdout);
+    assert.deepEqual(result, [{ name: "monolog/monolog", current: "2.0.0", wanted: "", latest: "3.5.0" }]);
+});
+test("pub: parses `dart pub outdated --json`", () => {
+    const stdout = JSON.stringify({
+        packages: [
+            { package: "http", current: { version: "0.13.0" }, latest: { version: "1.2.0" } },
+            { package: "path", current: { version: "1.8.0" }, latest: { version: "1.8.0" } },
+        ],
+    });
+    const result = parsePubOutdated(stdout);
+    assert.deepEqual(result, [{ name: "http", current: "0.13.0", wanted: "", latest: "1.2.0" }]);
+});
+test("nuget: parses `dotnet list package --outdated` table", () => {
+    const stdout = [
+        "Project 'App' has the following updates to its packages",
+        "   [net8.0]:",
+        "   Top-level Package      Requested   Resolved   Latest",
+        "   > Newtonsoft.Json      13.0.1      13.0.1     13.0.3",
+    ].join("\n");
+    const result = parseNugetOutdated(stdout);
+    assert.deepEqual(result, [{ name: "Newtonsoft.Json", current: "13.0.1", wanted: "13.0.1", latest: "13.0.3" }]);
+});
+test("cargo: parses [dependencies] section of Cargo.toml", () => {
+    const raw = [
+        "[package]",
+        'name = "app"',
+        "",
+        "[dependencies]",
+        'serde = "1.0"',
+        'tokio = "^1.28"',
+        "",
+        "[dev-dependencies]",
+        'criterion = "0.5"',
+    ].join("\n");
+    const result = parseCargoToml(raw);
+    assert.deepEqual([...result.entries()], [["serde", "1.0"], ["tokio", "1.28"]]);
+});
+test("maven: parses <dependency> blocks from pom.xml", () => {
+    const raw = `<project>
+  <dependencies>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-lang3</artifactId>
+      <version>3.12.0</version>
+    </dependency>
+  </dependencies>
+</project>`;
+    const result = parsePomXml(raw);
+    assert.deepEqual(result, [{ name: "org.apache.commons:commons-lang3", version: "3.12.0" }]);
+});
+test("gradle: parses implementation(...) dependency declarations", () => {
+    const raw = `dependencies {
+    implementation("com.google.guava:guava:31.1-jre")
+    testImplementation 'junit:junit:4.13.2'
+}`;
+    const result = parseGradleBuildFile(raw);
+    assert.deepEqual(result, [
+        { group: "com.google.guava", artifact: "guava", version: "31.1-jre" },
+        { group: "junit", artifact: "junit", version: "4.13.2" },
+    ]);
+});
+test("bundler: parses `bundle outdated` gem lines", () => {
+    const stdout = [
+        "Fetching gem metadata...",
+        "Gem   Current   Latest   Requested   Groups",
+        "* rails (newest 7.1.2, installed 7.0.4, requested ~> 7.0) in groups \"default\"",
+        "* rake (newest 13.1.0, installed 13.1.0)",
+    ].join("\n");
+    const result = parseBundlerOutdated(stdout);
+    assert.deepEqual(result, [{ name: "rails", current: "7.0.4", wanted: "", latest: "7.1.2" }]);
+});
+test("poetry: parses `poetry show -o` plain-text table", () => {
+    const stdout = ["requests   2.28.0   2.31.0   HTTP library", "click      8.1.3    8.1.3    CLI toolkit"].join("\n");
+    const result = parsePoetryOutdated(stdout);
+    assert.deepEqual(result, [{ name: "requests", current: "2.28.0", wanted: "", latest: "2.31.0" }]);
+});
+test("cocoapods: parses `pod outdated` list lines, using the (latest version) suffix", () => {
+    // The value after "->" is only what the Podfile's constraint resolves
+    // to (often == current for an exact pin, as with AFNetworking below) —
+    // the true latest is only in the "(latest version X)" suffix.
+    const stdout = [
+        "The following pod updates are available:",
+        "- AFNetworking 3.2.1 -> 3.2.1 (latest version 4.0.1)",
+        "- Alamofire 5.6.0 -> 5.6.0 (latest version 5.6.0)",
+    ].join("\n");
+    const result = parseCocoapodsOutdated(stdout);
+    assert.deepEqual(result, [{ name: "AFNetworking", current: "3.2.1", wanted: "", latest: "4.0.1" }]);
+});
+test("mix: parses `mix hex.outdated` table rows, including the Only column", () => {
+    // Real `mix hex.outdated` output always has the "Only" column; it's blank
+    // for deps with no `only:` restriction (e.g. jason below).
+    const stdout = [
+        "Dependency  Only  Current  Latest  Status               ",
+        "ex_doc      dev   0.29.0   0.40.3  Update not possible  ",
+        "jason             1.2.0    1.4.5   Update not possible  ",
+        "",
+        "Run `mix hex.outdated APP` to see requirements for a specific dependency.",
+    ].join("\n");
+    const result = parseMixOutdated(stdout);
+    assert.deepEqual(result, [
+        { name: "ex_doc", current: "0.29.0", wanted: "", latest: "0.40.3" },
+        { name: "jason", current: "1.2.0", wanted: "", latest: "1.4.5" },
+    ]);
+});
+test("conan: parses [requires] section of conanfile.txt", () => {
+    const raw = ["[requires]", "zlib/1.2.13", "boost/1.83.0", "", "[generators]", "CMakeDeps"].join("\n");
+    const result = parseConanfileTxt(raw);
+    assert.deepEqual(result, [
+        { name: "zlib", version: "1.2.13" },
+        { name: "boost", version: "1.83.0" },
+    ]);
+});
+test("npm: parses `npm outdated --json` output, dropping entries already at latest", () => {
+    const data = {
+        lodash: { current: "4.17.20", latest: "4.17.21" },
+        axios: { current: "1.3.0", latest: "1.3.0" },
+    };
+    const result = parseNpmOutdated(data);
+    assert.deepEqual(result, [{ name: "lodash", current: "4.17.20", wanted: "", latest: "4.17.21" }]);
+});
+test("npm: null data (non-JSON stdout) yields empty result", () => {
+    assert.deepEqual(parseNpmOutdated(null), []);
+});
+test("pnpm: parses `pnpm outdated --format json`, tolerating missing current/latest", () => {
+    const data = {
+        lodash: { current: "4.17.20", latest: "4.17.21" },
+        // pnpm can omit fields for workspace-linked packages; guard against undefined.
+        weird: {},
+    };
+    const result = parsePnpmOutdated(data);
+    assert.deepEqual(result, [{ name: "lodash", current: "4.17.20", wanted: "", latest: "4.17.21" }]);
+});
+test("pnpm: null data yields empty result", () => {
+    assert.deepEqual(parsePnpmOutdated(null), []);
+});
+test("pip: parses `pip list --outdated --format json`", () => {
+    const data = [
+        { name: "requests", version: "2.28.0", latest_version: "2.31.0" },
+        { name: "flask", version: "2.0.0", latest_version: "2.3.3" },
+    ];
+    const result = parsePipOutdated(data);
+    assert.deepEqual(result, [
+        { name: "requests", current: "2.28.0", wanted: "", latest: "2.31.0" },
+        { name: "flask", current: "2.0.0", wanted: "", latest: "2.3.3" },
+    ]);
+});
+test("pip: null data yields empty result", () => {
+    assert.deepEqual(parsePipOutdated(null), []);
+});
+test("uv: parses `uv pip list --outdated --format json` (same shape as pip)", () => {
+    const data = [{ name: "requests", version: "2.28.0", latest_version: "2.31.0" }];
+    const result = parseUvOutdated(data);
+    assert.deepEqual(result, [{ name: "requests", current: "2.28.0", wanted: "", latest: "2.31.0" }]);
+});
+test("uv: null data yields empty result", () => {
+    assert.deepEqual(parseUvOutdated(null), []);
+});
+test("pipenv: parses `pipenv run pip list --outdated --format json`", () => {
+    const data = [{ name: "django", version: "4.0.0", latest_version: "4.2.5" }];
+    const result = parsePipenvOutdated(data);
+    assert.deepEqual(result, [{ name: "django", current: "4.0.0", wanted: "", latest: "4.2.5" }]);
+});
+test("pipenv: null data yields empty result", () => {
+    assert.deepEqual(parsePipenvOutdated(null), []);
+});
+test("elm: extracts direct dependencies from elm.json, ignoring indirect deps", () => {
+    const json = {
+        dependencies: {
+            direct: { "elm/core": "1.0.5", "elm/json": "1.1.3" },
+            indirect: { "elm/bytes": "1.0.8" },
+        },
+    };
+    assert.deepEqual(parseElmDirectDeps(json), { "elm/core": "1.0.5", "elm/json": "1.1.3" });
+});
+test("elm: missing dependencies field yields empty object", () => {
+    assert.deepEqual(parseElmDirectDeps({}), {});
+});
+test("swiftpm: parses Package.resolved pins into a name-to-version map", () => {
+    const raw = JSON.stringify({
+        pins: [
+            { identity: "swift-log", state: { version: "1.5.3" } },
+            { identity: "no-version-pin", state: {} },
+        ],
+    });
+    assert.deepEqual(parsePackageResolved(raw), { "swift-log": "1.5.3" });
+});
+test("swiftpm: extracts .package(url:, from:) declarations and joins with resolved versions", () => {
+    const manifest = [
+        ".package(url: \"https://github.com/apple/swift-log.git\", from: \"1.4.0\")",
+        ".package(url: \"https://github.com/apple/swift-nio.git\", from: \"2.0.0\")",
+    ].join("\n");
+    const resolved = { "swift-log": "1.5.3" }; // swift-nio has no resolved pin (e.g. not yet fetched)
+    const result = parsePackageSwiftDeps(manifest, resolved);
+    assert.deepEqual(result, [
+        { name: "swift-log", current: "1.5.3", url: "https://github.com/apple/swift-log.git" },
+    ]);
+});
+//# sourceMappingURL=parsers.test.js.map

package/dist/engine/ecosystems/parsers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsers.test.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/parsers.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE3E,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,MAAM,MAAM,GAAG;QACb,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,OAAO;YACb,IAAI,EAAE;gBACJ,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC;gBACvE,IAAI,EAAE;oBACJ,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,CAAC;oBAC/D,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC;iBAC5D;aACF;SACF,CAAC;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,MAAM,GAAG;QACb,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;QAClH,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;QAChG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;KACjG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC9G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;SACvD;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,QAAQ,EAAE;YACR,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YACjF,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;SACjF;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,MAAM,GAAG;QACb,yDAAyD;QACzD,cAAc;QACd,yDAAyD;QACzD,yDAAyD;KAC1D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AACjH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,GAAG,GAAG;QACV,WAAW;QACX,cAAc;QACd,EAAE;QACF,gBAAgB;QAChB,eAAe;QACf,iBAAiB;QACjB,EAAE;QACF,oBAAoB;QACpB,mBAAmB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,GAAG,GAAG;;;;;;;;WAQH,CAAC;IACV,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,kCAAkC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,GAAG,GAAG;;;EAGZ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE;QACrE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;KACzD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,MAAM,GAAG;QACb,0BAA0B;QAC1B,6CAA6C;QAC7C,iFAAiF;QACjF,0CAA0C;KAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,MAAM,MAAM,GAAG,CAAC,2CAA2C,EAAE,0CAA0C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,sEAAsE;IACtE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,MAAM,GAAG;QACb,0CAA0C;QAC1C,sDAAsD;QACtD,mDAAmD;KACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACtG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,MAAM,GAAG;QACb,0DAA0D;QAC1D,0DAA0D;QAC1D,0DAA0D;QAC1D,EAAE;QACF,2EAA2E;KAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;QACnE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;KACjE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE;QACnC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;KACrC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QACjD,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;KAC7C,CAAC;IACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,GAAG,EAAE;IACzF,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QACjD,+EAA+E;QAC/E,KAAK,EAAE,EAAE;KACV,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qCAAqC,EAAE,GAAG,EAAE;IAC/C,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,MAAM,IAAI,GAAG;QACX,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE;QACjE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE;KAC7D,CAAC;IACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;QACrE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;KACjE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAC9C,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;IAC7C,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,MAAM,IAAI,GAAG;QACX,YAAY,EAAE;YACZ,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;YACpD,QAAQ,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE;SACnC;KACF,CAAC;IACF,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,IAAI,EAAE;YACJ,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YACtD,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE;SAC1C;KACF,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAE,GAAG,EAAE;IACjG,MAAM,QAAQ,GAAG;QACf,4EAA4E;QAC5E,4EAA4E;KAC7E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,QAAQ,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,uDAAuD;IAClG,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,wCAAwC,EAAE;KACvF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/ecosystems/pip.js

@@ -0,0 +1,61 @@
+import { join } from "node:path";
+import { readFile, writeFile } from "node:fs/promises";
+import { exec } from "../exec.js";
+import { pathExists, safeJson } from "./types.js";
+import { guessPythonTestCommand } from "./python-shared.js";
+const REQ_FILE = "requirements.txt";
+/**
+ * pip has no per-project isolation of its own — `pip list` reports whatever
+ * is installed in the active interpreter/venv. We assume the caller has
+ * already activated the right venv (same assumption `pip install` itself
+ * makes). This is a known limitation vs. lockfile-based ecosystems.
+ */
+export function parsePipOutdated(data) {
+    if (!data)
+        return [];
+    return data.map((d) => ({ name: d.name, current: d.version, wanted: "", latest: d.latest_version }));
+}
+export const pipAdapter = {
+    id: "pip",
+    displayName: "pip",
+    manifestFiles: [REQ_FILE],
+    lockFiles: [],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, REQ_FILE));
+    },
+    async outdated(cwd) {
+        const r = await exec("pip3", ["list", "--outdated", "--format", "json"], { cwd, timeout: 120_000 });
+        const data = safeJson(r.stdout);
+        return parsePipOutdated(data);
+    },
+    async install(cwd, name, version) {
+        const r = await exec("pip3", ["install", `${name}==${version}`], { cwd, timeout: 300_000 });
+        if (r.code !== 0)
+            return r;
+        await pinInRequirements(cwd, name, version);
+        return r;
+    },
+    async defaultCheckCommands(cwd) {
+        const test = await guessPythonTestCommand(cwd);
+        return { test };
+    },
+};
+/** `pip install` doesn't touch requirements.txt, so we pin the version ourselves. */
+async function pinInRequirements(cwd, name, version) {
+    const path = join(cwd, REQ_FILE);
+    try {
+        const raw = await readFile(path, "utf8");
+        const re = new RegExp(`^${escapeRegExp(name)}\\s*(==|>=|<=|~=|>|<)?.*$`, "im");
+        const line = `${name}==${version}`;
+        const next = re.test(raw) ? raw.replace(re, line) : raw.trimEnd() + `\n${line}\n`;
+        await writeFile(path, next, "utf8");
+    }
+    catch {
+        // no requirements.txt to update; the pip install itself already ran.
+    }
+}
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=pip.js.map

package/dist/engine/ecosystems/pip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pip.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/pip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAwC,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAA6E;IAE7E,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAqB;IAC1C,EAAE,EAAE,KAAK;IACT,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,CAAC,QAAQ,CAAC;IACzB,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACpG,MAAM,IAAI,GAAG,QAAQ,CAAmE,CAAC,CAAC,MAAM,CAAC,CAAC;QAClG,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC3B,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAG;QAC5B,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,qFAAqF;AACrF,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY,EAAE,OAAe;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC;QAClF,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}