ic-mops 2.12.3 → 2.13.1

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Next
 
+## 2.13.1
+- `mops lint` now honors `[canisters.<name>.migrations].check-limit`, skipping trimmed chain migrations so projects with large migration histories lint as fast as they type-check. Pass an explicit filter (`mops lint <name>`) to opt back in for a one-off lint of a trimmed file.
+
+## 2.13.0
+- Fix `mops update` and `mops outdated` jumping across major versions (or pre-1.0 minor versions) — they are now caret-bound by default, matching `cargo update`. For example, `core = "2.0.0"` now updates within `2.x.y` instead of jumping to a future `3.0.0`. Use `--major` to opt into cross-major updates.
+
 ## 2.12.3
 - Fix `mops install --lock update` silently no-op'ing on a corrupt lockfile (#515)
 - `mops publish` no longer rejects unknown `mops.toml` sections, `package.*` keys, or `requirements.*` entries — these typo guards were the only place in the CLI that complained about unknown keys, drifted from the docs/types, and blocked publish on harmless local-only config like `[moc]`, `[canisters]`, `[build]`, and `[lint]` (#512)

package/cli.ts

@@ -627,14 +627,26 @@ program
 program
   .command("outdated")
   .description("Print outdated dependencies specified in mops.toml")
-  .action(async () => {
-    await outdated();
+  .addOption(
+    new Option(
+      "--major",
+      "Allow updates that cross the caret bound (major versions, or for 0.x.y packages, minor versions)",
+    ),
+  )
+  .action(async (options) => {
+    await outdated(options);
   });
 
 // update
 program
   .command("update [pkg]")
   .description("Update dependencies specified in mops.toml")
+  .addOption(
+    new Option(
+      "--major",
+      "Allow updates that cross the caret bound (major versions, or for 0.x.y packages, minor versions)",
+    ),
+  )
   .addOption(
     new Option("--lock <action>", "Lockfile action").choices([
       "update",

package/commands/available-updates.ts

@@ -1,14 +1,18 @@
 import process from "node:process";
 import chalk from "chalk";
+import semver from "semver";
 import { mainActor } from "../api/actors.js";
 import { Config } from "../types.js";
 import { getDepName, getDepPinnedVersion } from "../helpers/get-dep-name.js";
 import { SemverPart } from "../declarations/main/main.did.js";
 
+export type UpdateBound = "caret" | "major";
+
 // [pkg, oldVersion, newVersion]
 export async function getAvailableUpdates(
   config: Config,
   pkg?: string,
+  bound: UpdateBound = "caret",
 ): Promise<Array<[string, string, string]>> {
   let deps = Object.values(config.dependencies || {});
   let devDeps = Object.values(config["dev-dependencies"] || {});
@@ -46,8 +50,12 @@ export async function getAvailableUpdates(
           pinnedVersion.split(".").length === 1
             ? { minor: null }
             : { patch: null };
+      } else if (bound === "caret") {
+        // Caret (cargo-style): ^0.x.y -> 0.x.* (patch only); ^1+ -> same major (minor+patch)
+        let major = semver.major(dep.version!);
+        semverPart = major === 0 ? { patch: null } : { minor: null };
       }
-      return [name, dep.version || "", semverPart];
+      return [name, dep.version!, semverPart];
     }),
   );
 

package/commands/lint.ts

@@ -15,6 +15,7 @@ import { toolchain } from "./toolchain/index.js";
 import { MOTOKO_GLOB_CONFIG } from "../constants.js";
 import { existsSync } from "node:fs";
 import { Config } from "../types.js";
+import { getTrimmedMigrationFiles } from "../helpers/migrations.js";
 
 async function resolveDepRules(
   config: Config,
@@ -128,6 +129,17 @@ function buildCommonArgs(
   return args;
 }
 
+function dropTrimmedMigrations(
+  files: string[],
+  rootDir: string,
+  excluded: Set<string>,
+): string[] {
+  if (excluded.size === 0) {
+    return files;
+  }
+  return files.filter((f) => !excluded.has(path.resolve(rootDir, f)));
+}
+
 async function runLintoko(
   lintokoBinPath: string,
   rootDir: string,
@@ -169,6 +181,11 @@ export async function lint(
     ? await toolchain.bin("lintoko")
     : "lintoko";
 
+  const isExplicit = !!filter || !!(options.files && options.files.length > 0);
+  const trimmedMigrations = isExplicit
+    ? new Set<string>()
+    : getTrimmedMigrationFiles(config);
+
   let filesToLint: string[];
   if (options.files && options.files.length > 0) {
     filesToLint = options.files;
@@ -185,6 +202,20 @@ export async function lint(
           : "No .mo files found in the project",
       );
     }
+    const before = filesToLint.length;
+    filesToLint = dropTrimmedMigrations(
+      filesToLint,
+      rootDir,
+      trimmedMigrations,
+    );
+    if (options.verbose && before !== filesToLint.length) {
+      console.log(
+        chalk.blue("lint"),
+        chalk.gray(
+          `Trimmed ${before - filesToLint.length} migration file(s) (check-limit)`,
+        ),
+      );
+    }
   }
 
   const commonArgs = buildCommonArgs(options, config);
@@ -198,13 +229,9 @@ export async function lint(
   rules.forEach((rule) => baseArgs.push("--rules", rule));
   baseArgs.push(...filesToLint);
 
-  let failed = !(await runLintoko(
-    lintokoBinPath,
-    rootDir,
-    baseArgs,
-    options,
-    "base",
-  ));
+  let failed =
+    filesToLint.length > 0 &&
+    !(await runLintoko(lintokoBinPath, rootDir, baseArgs, options, "base"));
 
   // --- extra runs ---
   const extraEntries = config.lint?.extra;
@@ -243,6 +270,12 @@ export async function lint(
         );
       }
 
+      matchedFiles = dropTrimmedMigrations(
+        matchedFiles,
+        rootDir,
+        trimmedMigrations,
+      );
+
       if (matchedFiles.length === 0) {
         console.warn(
           chalk.yellow(

package/commands/outdated.ts

@@ -3,13 +3,17 @@ import { checkConfigFile, readConfig } from "../mops.js";
 import { getAvailableUpdates } from "./available-updates.js";
 import { getDepName, getDepPinnedVersion } from "../helpers/get-dep-name.js";
 
-export async function outdated() {
+export async function outdated({ major }: { major?: boolean } = {}) {
   if (!checkConfigFile()) {
     return;
   }
   let config = readConfig();
 
-  let available = await getAvailableUpdates(config);
+  let available = await getAvailableUpdates(
+    config,
+    undefined,
+    major ? "major" : "caret",
+  );
 
   if (available.length === 0) {
     console.log(chalk.green("All dependencies are up to date!"));

package/commands/update.ts

@@ -14,9 +14,13 @@ type UpdateOptions = {
   verbose?: boolean;
   dev?: boolean;
   lock?: "update" | "ignore";
+  major?: boolean;
 };
 
-export async function update(pkg?: string, { lock }: UpdateOptions = {}) {
+export async function update(
+  pkg?: string,
+  { lock, major }: UpdateOptions = {},
+) {
   if (!checkConfigFile()) {
     return;
   }
@@ -59,7 +63,11 @@ export async function update(pkg?: string, { lock }: UpdateOptions = {}) {
   }
 
   // update mops packages
-  let available = await getAvailableUpdates(config, pkg);
+  let available = await getAvailableUpdates(
+    config,
+    pkg,
+    major ? "major" : "caret",
+  );
 
   if (available.length === 0) {
     if (pkg) {

package/dist/cli.js

@@ -492,13 +492,15 @@ program
 program
     .command("outdated")
     .description("Print outdated dependencies specified in mops.toml")
-    .action(async () => {
-    await outdated();
+    .addOption(new Option("--major", "Allow updates that cross the caret bound (major versions, or for 0.x.y packages, minor versions)"))
+    .action(async (options) => {
+    await outdated(options);
 });
 // update
 program
     .command("update [pkg]")
     .description("Update dependencies specified in mops.toml")
+    .addOption(new Option("--major", "Allow updates that cross the caret bound (major versions, or for 0.x.y packages, minor versions)"))
     .addOption(new Option("--lock <action>", "Lockfile action").choices([
     "update",
     "ignore",

package/dist/commands/available-updates.d.ts

@@ -1,2 +1,3 @@
 import { Config } from "../types.js";
-export declare function getAvailableUpdates(config: Config, pkg?: string): Promise<Array<[string, string, string]>>;
+export type UpdateBound = "caret" | "major";
+export declare function getAvailableUpdates(config: Config, pkg?: string, bound?: UpdateBound): Promise<Array<[string, string, string]>>;

package/dist/commands/available-updates.js

@@ -1,9 +1,10 @@
 import process from "node:process";
 import chalk from "chalk";
+import semver from "semver";
 import { mainActor } from "../api/actors.js";
 import { getDepName, getDepPinnedVersion } from "../helpers/get-dep-name.js";
 // [pkg, oldVersion, newVersion]
-export async function getAvailableUpdates(config, pkg) {
+export async function getAvailableUpdates(config, pkg, bound = "caret") {
     let deps = Object.values(config.dependencies || {});
     let devDeps = Object.values(config["dev-dependencies"] || {});
     let allDeps = [...deps, ...devDeps].filter((dep) => dep.version);
@@ -34,7 +35,12 @@ export async function getAvailableUpdates(config, pkg) {
                     ? { minor: null }
                     : { patch: null };
         }
-        return [name, dep.version || "", semverPart];
+        else if (bound === "caret") {
+            // Caret (cargo-style): ^0.x.y -> 0.x.* (patch only); ^1+ -> same major (minor+patch)
+            let major = semver.major(dep.version);
+            semverPart = major === 0 ? { patch: null } : { minor: null };
+        }
+        return [name, dep.version, semverPart];
     }));
     if ("err" in res) {
         console.log(chalk.red("Error:"), res.err);

package/dist/commands/lint.js

@@ -8,6 +8,7 @@ import { resolvePackages } from "../resolve-packages.js";
 import { toolchain } from "./toolchain/index.js";
 import { MOTOKO_GLOB_CONFIG } from "../constants.js";
 import { existsSync } from "node:fs";
+import { getTrimmedMigrationFiles } from "../helpers/migrations.js";
 async function resolveDepRules(config, rootDir) {
     const ext = config.lint?.extends;
     if (!ext) {
@@ -83,6 +84,12 @@ function buildCommonArgs(options, config) {
     }
     return args;
 }
+function dropTrimmedMigrations(files, rootDir, excluded) {
+    if (excluded.size === 0) {
+        return files;
+    }
+    return files.filter((f) => !excluded.has(path.resolve(rootDir, f)));
+}
 async function runLintoko(lintokoBinPath, rootDir, args, options, label) {
     try {
         if (options.verbose) {
@@ -107,6 +114,10 @@ export async function lint(filter, options) {
     let lintokoBinPath = config.toolchain?.lintoko
         ? await toolchain.bin("lintoko")
         : "lintoko";
+    const isExplicit = !!filter || !!(options.files && options.files.length > 0);
+    const trimmedMigrations = isExplicit
+        ? new Set()
+        : getTrimmedMigrationFiles(config);
     let filesToLint;
     if (options.files && options.files.length > 0) {
         filesToLint = options.files;
@@ -122,6 +133,11 @@ export async function lint(filter, options) {
                 ? `No files found for filter '${filter}'`
                 : "No .mo files found in the project");
         }
+        const before = filesToLint.length;
+        filesToLint = dropTrimmedMigrations(filesToLint, rootDir, trimmedMigrations);
+        if (options.verbose && before !== filesToLint.length) {
+            console.log(chalk.blue("lint"), chalk.gray(`Trimmed ${before - filesToLint.length} migration file(s) (check-limit)`));
+        }
     }
     const commonArgs = buildCommonArgs(options, config);
     // --- base run ---
@@ -131,7 +147,8 @@ export async function lint(filter, options) {
         : await collectLintRules(config, rootDir);
     rules.forEach((rule) => baseArgs.push("--rules", rule));
     baseArgs.push(...filesToLint);
-    let failed = !(await runLintoko(lintokoBinPath, rootDir, baseArgs, options, "base"));
+    let failed = filesToLint.length > 0 &&
+        !(await runLintoko(lintokoBinPath, rootDir, baseArgs, options, "base"));
     // --- extra runs ---
     const extraEntries = config.lint?.extra;
     if (extraEntries) {
@@ -156,6 +173,7 @@ export async function lint(filter, options) {
             if (baseFileSet) {
                 matchedFiles = matchedFiles.filter((f) => baseFileSet.has(path.resolve(rootDir, f)));
             }
+            matchedFiles = dropTrimmedMigrations(matchedFiles, rootDir, trimmedMigrations);
             if (matchedFiles.length === 0) {
                 console.warn(chalk.yellow(`[lint.extra] no files matched glob '${globPattern}', skipping`));
                 continue;

package/dist/commands/outdated.d.ts

@@ -1 +1,3 @@
-export declare function outdated(): Promise<void>;
+export declare function outdated({ major }?: {
+    major?: boolean;
+}): Promise<void>;

package/dist/commands/outdated.js

@@ -2,12 +2,12 @@ import chalk from "chalk";
 import { checkConfigFile, readConfig } from "../mops.js";
 import { getAvailableUpdates } from "./available-updates.js";
 import { getDepName, getDepPinnedVersion } from "../helpers/get-dep-name.js";
-export async function outdated() {
+export async function outdated({ major } = {}) {
     if (!checkConfigFile()) {
         return;
     }
     let config = readConfig();
-    let available = await getAvailableUpdates(config);
+    let available = await getAvailableUpdates(config, undefined, major ? "major" : "caret");
     if (available.length === 0) {
         console.log(chalk.green("All dependencies are up to date!"));
     }

package/dist/commands/update.d.ts

@@ -2,6 +2,7 @@ type UpdateOptions = {
     verbose?: boolean;
     dev?: boolean;
     lock?: "update" | "ignore";
+    major?: boolean;
 };
-export declare function update(pkg?: string, { lock }?: UpdateOptions): Promise<void>;
+export declare function update(pkg?: string, { lock, major }?: UpdateOptions): Promise<void>;
 export {};

package/dist/commands/update.js

@@ -4,7 +4,7 @@ import { add } from "./add.js";
 import { getAvailableUpdates } from "./available-updates.js";
 import { checkIntegrity } from "../integrity.js";
 import { getDepName, getDepPinnedVersion } from "../helpers/get-dep-name.js";
-export async function update(pkg, { lock } = {}) {
+export async function update(pkg, { lock, major } = {}) {
     if (!checkConfigFile()) {
         return;
     }
@@ -36,7 +36,7 @@ export async function update(pkg, { lock } = {}) {
         }
     }
     // update mops packages
-    let available = await getAvailableUpdates(config, pkg);
+    let available = await getAvailableUpdates(config, pkg, major ? "major" : "caret");
     if (available.length === 0) {
         if (pkg) {
             console.log(chalk.green(`Package "${pkg}" is up to date!`));

package/dist/helpers/migrations.d.ts

@@ -1,4 +1,4 @@
-import { MigrationsConfig } from "../types.js";
+import { Config, MigrationsConfig } from "../types.js";
 export interface MigrationArgsResult {
     migrationArgs: string[];
     cleanup: () => Promise<void>;
@@ -8,3 +8,10 @@ export declare function getNextMigrationFile(nextDir: string): string | null;
 export declare function validateNextMigrationOrder(chainDirOrFiles: string | string[], nextFile: string): void;
 export declare function validateMigrationsConfig(migrations: MigrationsConfig, canisterName: string): void;
 export declare function prepareMigrationArgs(migrations: MigrationsConfig | undefined, canisterName: string, mode: "check" | "build", verbose?: boolean): Promise<MigrationArgsResult>;
+/**
+ * Absolute paths of chain migration files that `mops lint` should skip,
+ * mirroring the `check-limit` trimming applied to `moc` during `mops check`.
+ * Validates the migrations config along the way, so misconfig surfaces here
+ * just as it does in `mops check` (consistent failure across commands).
+ */
+export declare function getTrimmedMigrationFiles(config: Config): Set<string>;

package/dist/helpers/migrations.js

@@ -4,6 +4,7 @@ import { rm } from "node:fs/promises";
 import chalk from "chalk";
 import { cliError } from "../error.js";
 import { getRootDir, resolveConfigPath } from "../mops.js";
+import { resolveCanisterConfigs } from "./resolve-canisters.js";
 function stagedMigrationsDir(chainDir, canisterName) {
     return join(dirname(chainDir), `.migrations-${canisterName}`);
 }
@@ -60,14 +61,14 @@ export function validateMigrationsConfig(migrations, canisterName) {
         }
     }
 }
-export async function prepareMigrationArgs(migrations, canisterName, mode, verbose) {
-    const noOp = {
-        migrationArgs: [],
-        cleanup: async () => { },
-    };
-    if (!migrations) {
-        return noOp;
-    }
+/**
+ * Resolve the active migration chain for a canister: validate config, discover
+ * files, and apply `check-limit` / `build-limit`. Single source of truth for
+ * the trim semantics shared by `prepareMigrationArgs` (which stages `included`
+ * for moc) and `getTrimmedMigrationFiles` (which feeds `excludedChainFiles`
+ * to lint).
+ */
+function resolveMigrationChain(migrations, canisterName, mode) {
     validateMigrationsConfig(migrations, canisterName);
     const chainDir = resolveConfigPath(migrations.chain);
     const nextDir = migrations.next
@@ -82,25 +83,39 @@ export async function prepareMigrationArgs(migrations, canisterName, mode, verbo
     if (nextFile) {
         validateNextMigrationOrder(chainFiles, nextFile);
     }
-    const allMigrations = chainFiles.map((f) => ({
+    // Treat chain + next as one virtual merged list; `next` is always last.
+    const all = chainFiles.map((f) => ({
         file: f,
         dir: chainDir,
     }));
     if (nextFile && nextDir) {
-        allMigrations.push({ file: nextFile, dir: nextDir });
+        all.push({ file: nextFile, dir: nextDir });
     }
     const limit = mode === "check" ? migrations["check-limit"] : migrations["build-limit"];
-    const isTrimming = limit !== undefined && limit < allMigrations.length;
-    const needsTempDir = nextFile !== null || isTrimming;
+    const isTrimming = limit !== undefined && limit < all.length;
+    const included = isTrimming ? all.slice(-limit) : all;
+    // Dropped entries are always a chain-only prefix (next sorts last).
+    const excludedChainFiles = all
+        .slice(0, all.length - included.length)
+        .map((e) => resolve(e.dir, e.file));
+    return { chainDir, nextDir, included, excludedChainFiles, isTrimming };
+}
+export async function prepareMigrationArgs(migrations, canisterName, mode, verbose) {
+    if (!migrations) {
+        return { migrationArgs: [], cleanup: async () => { } };
+    }
+    const { chainDir, nextDir, included, excludedChainFiles, isTrimming } = resolveMigrationChain(migrations, canisterName, mode);
+    const hasNext = included.some((e) => e.dir === nextDir);
+    const needsTempDir = hasNext || isTrimming;
     if (!needsTempDir) {
         return {
             migrationArgs: [`--enhanced-migration=${chainDir}`],
             cleanup: async () => { },
         };
     }
-    // Shortcut: when only the pending next migration is needed (empty chain or
-    // trimmed to 1), point moc at next-migration/ so diagnostics use the real path.
-    if (nextFile && nextDir && (chainFiles.length === 0 || limit === 1)) {
+    // Shortcut: only the pending next migration is included → point moc at
+    // next-migration/ so diagnostics use the real path instead of the temp dir.
+    if (nextDir && included.length === 1 && included[0].dir === nextDir) {
         const migrationArgs = [`--enhanced-migration=${nextDir}`];
         if (isTrimming) {
             migrationArgs.push("-A=M0254");
@@ -111,15 +126,13 @@ export async function prepareMigrationArgs(migrations, canisterName, mode, verbo
     await rm(tempDir, { recursive: true, force: true });
     mkdirSync(tempDir, { recursive: true });
     writeFileSync(join(tempDir, ".gitignore"), "*\n");
-    const filesToInclude = isTrimming
-        ? allMigrations.slice(-limit)
-        : allMigrations;
-    for (const { file, dir } of filesToInclude) {
+    for (const { file, dir } of included) {
         symlinkSync(resolve(dir, file), join(tempDir, file));
     }
     if (verbose) {
-        console.log(chalk.blue("migrations"), chalk.gray(`Prepared ${filesToInclude.length} migration(s) for ${canisterName}` +
-            (isTrimming ? ` (trimmed from ${allMigrations.length})` : "")));
+        const totalCount = included.length + excludedChainFiles.length;
+        console.log(chalk.blue("migrations"), chalk.gray(`Prepared ${included.length} migration(s) for ${canisterName}` +
+            (isTrimming ? ` (trimmed from ${totalCount})` : "")));
     }
     const migrationArgs = [`--enhanced-migration=${tempDir}`];
     if (isTrimming) {
@@ -132,3 +145,22 @@ export async function prepareMigrationArgs(migrations, canisterName, mode, verbo
         },
     };
 }
+/**
+ * Absolute paths of chain migration files that `mops lint` should skip,
+ * mirroring the `check-limit` trimming applied to `moc` during `mops check`.
+ * Validates the migrations config along the way, so misconfig surfaces here
+ * just as it does in `mops check` (consistent failure across commands).
+ */
+export function getTrimmedMigrationFiles(config) {
+    const excluded = new Set();
+    for (const [name, canister] of Object.entries(resolveCanisterConfigs(config))) {
+        if (!canister.migrations) {
+            continue;
+        }
+        const { excludedChainFiles } = resolveMigrationChain(canister.migrations, name, "check");
+        for (const f of excludedChainFiles) {
+            excluded.add(f);
+        }
+    }
+    return excluded;
+}

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ic-mops",
-  "version": "2.12.3",
+  "version": "2.13.1",
   "type": "module",
   "bin": {
     "mops": "bin/mops.js",

package/dist/tests/cli.test.js

@@ -1,7 +1,7 @@
 import { describe, expect, jest, test } from "@jest/globals";
 import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import path from "path";
-import { cli } from "./helpers";
+import { cli, normalizePaths } from "./helpers";
 describe("cli", () => {
     test("--version", async () => {
         expect((await cli(["--version"])).stdout).toMatch(/CLI \d+\.\d+\.\d+/);
@@ -117,3 +117,78 @@ describe("install", () => {
         }
     });
 });
+// `mops update` and `mops outdated` default to caret-bound resolution: stay
+// within `0.x.y` (or `1.x.y`) and never cross majors. Fixture pins:
+//   base = "0.14.5"  -> caret bumps within 0.14.x; --major jumps past it
+//   core = "1.0.0"   -> caret stays put (no 1.x.y > 1.0.0); --major jumps to 2.x
+describe("update / outdated bounds", () => {
+    jest.setTimeout(120_000);
+    const cwd = path.join(import.meta.dirname, "install/update-bound");
+    const tomlFile = path.join(cwd, "mops.toml");
+    const original = readFileSync(tomlFile, "utf8");
+    const cleanup = () => {
+        rmSync(path.join(cwd, "mops.lock"), { force: true });
+        rmSync(path.join(cwd, ".mops"), { recursive: true, force: true });
+        writeFileSync(tomlFile, original);
+    };
+    const baseVersion = (toml) => toml.match(/base = "(0\.\d+\.\d+)"/)?.[1];
+    const coreMajor = (toml) => parseInt(toml.match(/core = "(\d+)\./)?.[1] ?? "0");
+    test("mops update stays within the caret bound by default", async () => {
+        cleanup();
+        try {
+            await cli(["install"], { cwd, env: { CI: undefined } });
+            const result = await cli(["update"], { cwd, env: { CI: undefined } });
+            expect(result.exitCode).toBe(0);
+            const after = readFileSync(tomlFile, "utf8");
+            // base (pre-1.0): bumped within 0.14.x (patch bumps allowed)
+            expect(baseVersion(after)).toMatch(/^0\.14\./);
+            expect(baseVersion(after)).not.toBe("0.14.5");
+            // core (1.x): no 1.x.y > 1.0.0 published, so no bump across majors
+            expect(coreMajor(after)).toBe(1);
+        }
+        finally {
+            cleanup();
+        }
+    });
+    test("mops update --major crosses the caret bound", async () => {
+        cleanup();
+        try {
+            await cli(["install"], { cwd, env: { CI: undefined } });
+            const result = await cli(["update", "--major"], {
+                cwd,
+                env: { CI: undefined },
+            });
+            expect(result.exitCode).toBe(0);
+            const after = readFileSync(tomlFile, "utf8");
+            // base: jumps past 0.14.x (next minor or major)
+            const baseMinor = parseInt(after.match(/base = "0\.(\d+)\./)?.[1] ?? "0");
+            expect(baseMinor).toBeGreaterThanOrEqual(15);
+            // core: jumps to 2.x or later
+            expect(coreMajor(after)).toBeGreaterThanOrEqual(2);
+        }
+        finally {
+            cleanup();
+        }
+    });
+    test("mops outdated honors --major flag", async () => {
+        cleanup();
+        try {
+            await cli(["install"], { cwd, env: { CI: undefined } });
+            const caret = normalizePaths((await cli(["outdated"], { cwd, env: { CI: undefined } })).stdout);
+            const major = normalizePaths((await cli(["outdated", "--major"], { cwd, env: { CI: undefined } }))
+                .stdout);
+            // caret-bound: base bumps within 0.14.x; core (if reported) stays in 1.x
+            expect(caret).toMatch(/base 0\.14\.5 -> 0\.14\./);
+            const caretCore = caret.match(/core 1\.0\.0 -> (\d+)\./)?.[1];
+            if (caretCore) {
+                expect(parseInt(caretCore)).toBe(1);
+            }
+            // --major: both bump across their major bounds
+            expect(major).toMatch(/base 0\.14\.5 -> 0\.(1[5-9]|[2-9]\d)/);
+            expect(major).toMatch(/core 1\.0\.0 -> [2-9]/);
+        }
+        finally {
+            cleanup();
+        }
+    });
+});

package/dist/tests/lint.test.js

@@ -1,4 +1,6 @@
-import { describe, expect, test } from "@jest/globals";
+import { describe, expect, test, afterEach } from "@jest/globals";
+import { cp, mkdir, rm, writeFile } from "node:fs/promises";
+import { readFileSync } from "node:fs";
 import path from "path";
 import { cli, cliSnapshot } from "./helpers";
 describe("lint", () => {
@@ -71,4 +73,64 @@ describe("lint", () => {
             await cliSnapshot(["lint"], { cwd }, 1);
         });
     });
+    describe("migration trimming via check-limit", () => {
+        const migrateFixturesDir = path.join(import.meta.dirname, "migrate");
+        const tempDirs = [];
+        afterEach(async () => {
+            for (const dir of tempDirs) {
+                await rm(dir, { recursive: true, force: true });
+            }
+            tempDirs.length = 0;
+        });
+        async function makeWithNextLintFixture(checkLimit) {
+            const dest = path.join(migrateFixturesDir, `_tmp_lint_with-next_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`);
+            await cp(path.join(migrateFixturesDir, "with-next"), dest, {
+                recursive: true,
+            });
+            tempDirs.push(dest);
+            // Empty lints/ → collectLintRules picks it up so lintoko runs cleanly
+            // (no rules → no violations → exit 0), preventing assertions from
+            // passing by coincidence on an unrelated lintoko failure.
+            await mkdir(path.join(dest, "lints"), { recursive: true });
+            let toml = readFileSync(path.join(dest, "mops.toml"), "utf-8").replace('moc = "1.5.0"', 'moc = "1.5.0"\nlintoko = "0.7.0"');
+            if (checkLimit !== undefined) {
+                toml = toml.replace('next = "next-migration"', `next = "next-migration"\ncheck-limit = ${checkLimit}`);
+            }
+            await writeFile(path.join(dest, "mops.toml"), toml);
+            return dest;
+        }
+        test("check-limit=1 trims old chain migrations from lint", async () => {
+            // with-next has 3 chain files + 1 next file. check-limit=1 keeps only
+            // the next file → 3 chain files trimmed from lint.
+            const cwd = await makeWithNextLintFixture(1);
+            const result = await cli(["lint", "--verbose"], { cwd });
+            expect(result.exitCode).toBe(0);
+            expect(result.stdout).toMatch(/Trimmed 3 migration file\(s\) \(check-limit\)/);
+            expect(result.stdout).not.toMatch(/20250101_000000_Init\.mo/);
+            expect(result.stdout).not.toMatch(/20250201_000000_AddName\.mo/);
+            expect(result.stdout).not.toMatch(/20250301_000000_AddEmail\.mo/);
+            expect(result.stdout).toMatch(/20250401_000000_RenameId\.mo/);
+        });
+        test("no check-limit → all migration files are linted", async () => {
+            const cwd = await makeWithNextLintFixture();
+            const result = await cli(["lint", "--verbose"], { cwd });
+            expect(result.exitCode).toBe(0);
+            expect(result.stdout).not.toMatch(/Trimmed \d+ migration file/);
+            expect(result.stdout).toMatch(/20250101_000000_Init\.mo/);
+            expect(result.stdout).toMatch(/20250401_000000_RenameId\.mo/);
+        });
+        test("explicit filter bypasses trimming so user can target a chain file", async () => {
+            const cwd = await makeWithNextLintFixture(1);
+            const result = await cli(["lint", "Init", "--verbose"], { cwd });
+            expect(result.exitCode).toBe(0);
+            expect(result.stdout).not.toMatch(/Trimmed \d+ migration file/);
+            expect(result.stdout).toMatch(/20250101_000000_Init\.mo/);
+        });
+        test("invalid check-limit fails `mops lint` (consistent with `mops check`)", async () => {
+            const cwd = await makeWithNextLintFixture(0);
+            const result = await cli(["lint"], { cwd });
+            expect(result.exitCode).toBe(1);
+            expect(result.stderr).toMatch(/check-limit must be a positive integer/);
+        });
+    });
 });

package/helpers/migrations.ts

@@ -10,7 +10,8 @@ import { rm } from "node:fs/promises";
 import chalk from "chalk";
 import { cliError } from "../error.js";
 import { getRootDir, resolveConfigPath } from "../mops.js";
-import { MigrationsConfig } from "../types.js";
+import { resolveCanisterConfigs } from "./resolve-canisters.js";
+import { Config, MigrationsConfig } from "../types.js";
 
 function stagedMigrationsDir(chainDir: string, canisterName: string): string {
   return join(dirname(chainDir), `.migrations-${canisterName}`);
@@ -95,21 +96,29 @@ export function validateMigrationsConfig(
   }
 }
 
-export async function prepareMigrationArgs(
-  migrations: MigrationsConfig | undefined,
+interface MigrationChain {
+  chainDir: string;
+  nextDir?: string;
+  /** Entries to pass to moc, in order, after `*-limit` trimming. */
+  included: { file: string; dir: string }[];
+  /** Absolute paths of chain files dropped by trimming (next is never dropped). */
+  excludedChainFiles: string[];
+  /** True when `*-limit` excluded any entries. */
+  isTrimming: boolean;
+}
+
+/**
+ * Resolve the active migration chain for a canister: validate config, discover
+ * files, and apply `check-limit` / `build-limit`. Single source of truth for
+ * the trim semantics shared by `prepareMigrationArgs` (which stages `included`
+ * for moc) and `getTrimmedMigrationFiles` (which feeds `excludedChainFiles`
+ * to lint).
+ */
+function resolveMigrationChain(
+  migrations: MigrationsConfig,
   canisterName: string,
   mode: "check" | "build",
-  verbose?: boolean,
-): Promise<MigrationArgsResult> {
-  const noOp: MigrationArgsResult = {
-    migrationArgs: [],
-    cleanup: async () => {},
-  };
-
-  if (!migrations) {
-    return noOp;
-  }
-
+): MigrationChain {
   validateMigrationsConfig(migrations, canisterName);
 
   const chainDir = resolveConfigPath(migrations.chain);
@@ -126,25 +135,46 @@ export async function prepareMigrationArgs(
   }
 
   const chainFiles = getMigrationFiles(chainDir);
-
   if (nextFile) {
     validateNextMigrationOrder(chainFiles, nextFile);
   }
 
-  // Treat chain + next as one virtual merged list
-  type MigrationEntry = { file: string; dir: string };
-  const allMigrations: MigrationEntry[] = chainFiles.map((f) => ({
+  // Treat chain + next as one virtual merged list; `next` is always last.
+  const all: { file: string; dir: string }[] = chainFiles.map((f) => ({
     file: f,
     dir: chainDir,
   }));
   if (nextFile && nextDir) {
-    allMigrations.push({ file: nextFile, dir: nextDir });
+    all.push({ file: nextFile, dir: nextDir });
   }
 
   const limit =
     mode === "check" ? migrations["check-limit"] : migrations["build-limit"];
-  const isTrimming = limit !== undefined && limit < allMigrations.length;
-  const needsTempDir = nextFile !== null || isTrimming;
+  const isTrimming = limit !== undefined && limit < all.length;
+  const included = isTrimming ? all.slice(-limit!) : all;
+  // Dropped entries are always a chain-only prefix (next sorts last).
+  const excludedChainFiles = all
+    .slice(0, all.length - included.length)
+    .map((e) => resolve(e.dir, e.file));
+
+  return { chainDir, nextDir, included, excludedChainFiles, isTrimming };
+}
+
+export async function prepareMigrationArgs(
+  migrations: MigrationsConfig | undefined,
+  canisterName: string,
+  mode: "check" | "build",
+  verbose?: boolean,
+): Promise<MigrationArgsResult> {
+  if (!migrations) {
+    return { migrationArgs: [], cleanup: async () => {} };
+  }
+
+  const { chainDir, nextDir, included, excludedChainFiles, isTrimming } =
+    resolveMigrationChain(migrations, canisterName, mode);
+
+  const hasNext = included.some((e) => e.dir === nextDir);
+  const needsTempDir = hasNext || isTrimming;
 
   if (!needsTempDir) {
     return {
@@ -153,9 +183,9 @@ export async function prepareMigrationArgs(
     };
   }
 
-  // Shortcut: when only the pending next migration is needed (empty chain or
-  // trimmed to 1), point moc at next-migration/ so diagnostics use the real path.
-  if (nextFile && nextDir && (chainFiles.length === 0 || limit === 1)) {
+  // Shortcut: only the pending next migration is included → point moc at
+  // next-migration/ so diagnostics use the real path instead of the temp dir.
+  if (nextDir && included.length === 1 && included[0]!.dir === nextDir) {
     const migrationArgs = [`--enhanced-migration=${nextDir}`];
     if (isTrimming) {
       migrationArgs.push("-A=M0254");
@@ -168,20 +198,17 @@ export async function prepareMigrationArgs(
   mkdirSync(tempDir, { recursive: true });
   writeFileSync(join(tempDir, ".gitignore"), "*\n");
 
-  const filesToInclude = isTrimming
-    ? allMigrations.slice(-limit)
-    : allMigrations;
-
-  for (const { file, dir } of filesToInclude) {
+  for (const { file, dir } of included) {
     symlinkSync(resolve(dir, file), join(tempDir, file));
   }
 
   if (verbose) {
+    const totalCount = included.length + excludedChainFiles.length;
     console.log(
       chalk.blue("migrations"),
       chalk.gray(
-        `Prepared ${filesToInclude.length} migration(s) for ${canisterName}` +
-          (isTrimming ? ` (trimmed from ${allMigrations.length})` : ""),
+        `Prepared ${included.length} migration(s) for ${canisterName}` +
+          (isTrimming ? ` (trimmed from ${totalCount})` : ""),
       ),
     );
   }
@@ -198,3 +225,29 @@ export async function prepareMigrationArgs(
     },
   };
 }
+
+/**
+ * Absolute paths of chain migration files that `mops lint` should skip,
+ * mirroring the `check-limit` trimming applied to `moc` during `mops check`.
+ * Validates the migrations config along the way, so misconfig surfaces here
+ * just as it does in `mops check` (consistent failure across commands).
+ */
+export function getTrimmedMigrationFiles(config: Config): Set<string> {
+  const excluded = new Set<string>();
+  for (const [name, canister] of Object.entries(
+    resolveCanisterConfigs(config),
+  )) {
+    if (!canister.migrations) {
+      continue;
+    }
+    const { excludedChainFiles } = resolveMigrationChain(
+      canister.migrations,
+      name,
+      "check",
+    );
+    for (const f of excludedChainFiles) {
+      excluded.add(f);
+    }
+  }
+  return excluded;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ic-mops",
-  "version": "2.12.3",
+  "version": "2.13.1",
   "type": "module",
   "bin": {
     "mops": "dist/bin/mops.js",

package/tests/cli.test.ts

@@ -1,7 +1,7 @@
 import { describe, expect, jest, test } from "@jest/globals";
 import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import path from "path";
-import { cli } from "./helpers";
+import { cli, normalizePaths } from "./helpers";
 
 describe("cli", () => {
   test("--version", async () => {
@@ -129,3 +129,88 @@ describe("install", () => {
     }
   });
 });
+
+// `mops update` and `mops outdated` default to caret-bound resolution: stay
+// within `0.x.y` (or `1.x.y`) and never cross majors. Fixture pins:
+//   base = "0.14.5"  -> caret bumps within 0.14.x; --major jumps past it
+//   core = "1.0.0"   -> caret stays put (no 1.x.y > 1.0.0); --major jumps to 2.x
+describe("update / outdated bounds", () => {
+  jest.setTimeout(120_000);
+
+  const cwd = path.join(import.meta.dirname, "install/update-bound");
+  const tomlFile = path.join(cwd, "mops.toml");
+  const original = readFileSync(tomlFile, "utf8");
+
+  const cleanup = () => {
+    rmSync(path.join(cwd, "mops.lock"), { force: true });
+    rmSync(path.join(cwd, ".mops"), { recursive: true, force: true });
+    writeFileSync(tomlFile, original);
+  };
+
+  const baseVersion = (toml: string) =>
+    toml.match(/base = "(0\.\d+\.\d+)"/)?.[1];
+  const coreMajor = (toml: string) =>
+    parseInt(toml.match(/core = "(\d+)\./)?.[1] ?? "0");
+
+  test("mops update stays within the caret bound by default", async () => {
+    cleanup();
+    try {
+      await cli(["install"], { cwd, env: { CI: undefined } });
+      const result = await cli(["update"], { cwd, env: { CI: undefined } });
+      expect(result.exitCode).toBe(0);
+      const after = readFileSync(tomlFile, "utf8");
+      // base (pre-1.0): bumped within 0.14.x (patch bumps allowed)
+      expect(baseVersion(after)).toMatch(/^0\.14\./);
+      expect(baseVersion(after)).not.toBe("0.14.5");
+      // core (1.x): no 1.x.y > 1.0.0 published, so no bump across majors
+      expect(coreMajor(after)).toBe(1);
+    } finally {
+      cleanup();
+    }
+  });
+
+  test("mops update --major crosses the caret bound", async () => {
+    cleanup();
+    try {
+      await cli(["install"], { cwd, env: { CI: undefined } });
+      const result = await cli(["update", "--major"], {
+        cwd,
+        env: { CI: undefined },
+      });
+      expect(result.exitCode).toBe(0);
+      const after = readFileSync(tomlFile, "utf8");
+      // base: jumps past 0.14.x (next minor or major)
+      const baseMinor = parseInt(after.match(/base = "0\.(\d+)\./)?.[1] ?? "0");
+      expect(baseMinor).toBeGreaterThanOrEqual(15);
+      // core: jumps to 2.x or later
+      expect(coreMajor(after)).toBeGreaterThanOrEqual(2);
+    } finally {
+      cleanup();
+    }
+  });
+
+  test("mops outdated honors --major flag", async () => {
+    cleanup();
+    try {
+      await cli(["install"], { cwd, env: { CI: undefined } });
+      const caret = normalizePaths(
+        (await cli(["outdated"], { cwd, env: { CI: undefined } })).stdout,
+      );
+      const major = normalizePaths(
+        (await cli(["outdated", "--major"], { cwd, env: { CI: undefined } }))
+          .stdout,
+      );
+      // caret-bound: base bumps within 0.14.x; core (if reported) stays in 1.x
+      expect(caret).toMatch(/base 0\.14\.5 -> 0\.14\./);
+      const caretCore = caret.match(/core 1\.0\.0 -> (\d+)\./)?.[1];
+      if (caretCore) {
+        expect(parseInt(caretCore)).toBe(1);
+      }
+      // --major: both bump across their major bounds
+      expect(major).toMatch(/base 0\.14\.5 -> 0\.(1[5-9]|[2-9]\d)/);
+      expect(major).toMatch(/core 1\.0\.0 -> [2-9]/);
+    } finally {
+      cleanup();
+    }
+  });
+});

package/tests/install/update-bound/mops.toml

@@ -0,0 +1,3 @@
+[dependencies]
+base = "0.14.5"
+core = "1.0.0"

package/tests/lint.test.ts

@@ -1,4 +1,6 @@
-import { describe, expect, test } from "@jest/globals";
+import { describe, expect, test, afterEach } from "@jest/globals";
+import { cp, mkdir, rm, writeFile } from "node:fs/promises";
+import { readFileSync } from "node:fs";
 import path from "path";
 import { cli, cliSnapshot } from "./helpers";
 
@@ -86,4 +88,86 @@ describe("lint", () => {
       await cliSnapshot(["lint"], { cwd }, 1);
     });
   });
+
+  describe("migration trimming via check-limit", () => {
+    const migrateFixturesDir = path.join(import.meta.dirname, "migrate");
+    const tempDirs: string[] = [];
+
+    afterEach(async () => {
+      for (const dir of tempDirs) {
+        await rm(dir, { recursive: true, force: true });
+      }
+      tempDirs.length = 0;
+    });
+
+    async function makeWithNextLintFixture(
+      checkLimit?: number,
+    ): Promise<string> {
+      const dest = path.join(
+        migrateFixturesDir,
+        `_tmp_lint_with-next_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+      );
+      await cp(path.join(migrateFixturesDir, "with-next"), dest, {
+        recursive: true,
+      });
+      tempDirs.push(dest);
+
+      // Empty lints/ → collectLintRules picks it up so lintoko runs cleanly
+      // (no rules → no violations → exit 0), preventing assertions from
+      // passing by coincidence on an unrelated lintoko failure.
+      await mkdir(path.join(dest, "lints"), { recursive: true });
+
+      let toml = readFileSync(path.join(dest, "mops.toml"), "utf-8").replace(
+        'moc = "1.5.0"',
+        'moc = "1.5.0"\nlintoko = "0.7.0"',
+      );
+      if (checkLimit !== undefined) {
+        toml = toml.replace(
+          'next = "next-migration"',
+          `next = "next-migration"\ncheck-limit = ${checkLimit}`,
+        );
+      }
+      await writeFile(path.join(dest, "mops.toml"), toml);
+      return dest;
+    }
+
+    test("check-limit=1 trims old chain migrations from lint", async () => {
+      // with-next has 3 chain files + 1 next file. check-limit=1 keeps only
+      // the next file → 3 chain files trimmed from lint.
+      const cwd = await makeWithNextLintFixture(1);
+      const result = await cli(["lint", "--verbose"], { cwd });
+      expect(result.exitCode).toBe(0);
+      expect(result.stdout).toMatch(
+        /Trimmed 3 migration file\(s\) \(check-limit\)/,
+      );
+      expect(result.stdout).not.toMatch(/20250101_000000_Init\.mo/);
+      expect(result.stdout).not.toMatch(/20250201_000000_AddName\.mo/);
+      expect(result.stdout).not.toMatch(/20250301_000000_AddEmail\.mo/);
+      expect(result.stdout).toMatch(/20250401_000000_RenameId\.mo/);
+    });
+
+    test("no check-limit → all migration files are linted", async () => {
+      const cwd = await makeWithNextLintFixture();
+      const result = await cli(["lint", "--verbose"], { cwd });
+      expect(result.exitCode).toBe(0);
+      expect(result.stdout).not.toMatch(/Trimmed \d+ migration file/);
+      expect(result.stdout).toMatch(/20250101_000000_Init\.mo/);
+      expect(result.stdout).toMatch(/20250401_000000_RenameId\.mo/);
+    });
+
+    test("explicit filter bypasses trimming so user can target a chain file", async () => {
+      const cwd = await makeWithNextLintFixture(1);
+      const result = await cli(["lint", "Init", "--verbose"], { cwd });
+      expect(result.exitCode).toBe(0);
+      expect(result.stdout).not.toMatch(/Trimmed \d+ migration file/);
+      expect(result.stdout).toMatch(/20250101_000000_Init\.mo/);
+    });
+
+    test("invalid check-limit fails `mops lint` (consistent with `mops check`)", async () => {
+      const cwd = await makeWithNextLintFixture(0);
+      const result = await cli(["lint"], { cwd });
+      expect(result.exitCode).toBe(1);
+      expect(result.stderr).toMatch(/check-limit must be a positive integer/);
+    });
+  });
 });