inup 1.6.7 → 1.6.8

package/dist/shared/fs/scan.js

@@ -2,9 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.findAllPackageJsonFiles = findAllPackageJsonFiles;
 exports.findAllPackageJsonFilesAsync = findAllPackageJsonFilesAsync;
-const fs_1 = require("fs");
-const fs_2 = require("fs");
-const path_1 = require("path");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
 /**
  * Normalize a relative path to forward slashes before matching `.inuprc` exclude patterns.
  * On Windows `path.relative` yields backslash separators (e.g. `packages\skipme`), but users write
@@ -55,12 +54,12 @@ function classifyDirectory(name, skipSet) {
  * layout). Stays shallow (depth 1) so detecting a skip doesn't re-walk the subtree we just pruned.
  */
 function prunedDirHoldsPackage(dir) {
-    if ((0, fs_1.existsSync)((0, path_1.join)(dir, 'package.json'))) {
+    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(dir, 'package.json'))) {
         return true;
     }
     let entries;
     try {
-        entries = (0, fs_1.readdirSync)(dir);
+        entries = (0, node_fs_1.readdirSync)(dir);
     }
     catch {
         return false;
@@ -68,9 +67,9 @@ function prunedDirHoldsPackage(dir) {
     for (const entry of entries) {
         if (entry.startsWith('.'))
             continue;
-        const child = (0, path_1.join)(dir, entry);
+        const child = (0, node_path_1.join)(dir, entry);
         try {
-            if ((0, fs_1.statSync)(child).isDirectory() && (0, fs_1.existsSync)((0, path_1.join)(child, 'package.json'))) {
+            if ((0, node_fs_1.statSync)(child).isDirectory() && (0, node_fs_1.existsSync)((0, node_path_1.join)(child, 'package.json'))) {
                 return true;
             }
         }
@@ -117,7 +116,7 @@ function findAllPackageJsonFiles(rootDir = process.cwd(), excludePatterns = [],
             return;
         }
         lastProgressAt = now;
-        const relativePath = (0, path_1.relative)(rootDir, currentDir) || '.';
+        const relativePath = (0, node_path_1.relative)(rootDir, currentDir) || '.';
         onProgress(relativePath, packageJsonFiles.length);
     }
     function traverseDirectory(dir, depth = 0) {
@@ -126,7 +125,7 @@ function findAllPackageJsonFiles(rootDir = process.cwd(), excludePatterns = [],
         }
         try {
             // Prevent symlink cycles by tracking visited real paths
-            const realPath = (0, fs_1.realpathSync)(dir);
+            const realPath = (0, node_fs_1.realpathSync)(dir);
             if (visitedPaths.has(realPath)) {
                 return;
             }
@@ -136,17 +135,17 @@ function findAllPackageJsonFiles(rootDir = process.cwd(), excludePatterns = [],
             if (onProgress && (directoriesScanned % 10 === 0 || directoriesScanned === 1)) {
                 reportProgress(dir, true);
             }
-            const files = (0, fs_1.readdirSync)(dir);
+            const files = (0, node_fs_1.readdirSync)(dir);
             for (const file of files) {
                 reportProgress(dir);
-                const fullPath = (0, path_1.join)(dir, file);
-                const relativePath = (0, path_1.relative)(rootDir, fullPath);
+                const fullPath = (0, node_path_1.join)(dir, file);
+                const relativePath = (0, node_path_1.relative)(rootDir, fullPath);
                 if (shouldExcludePath(relativePath)) {
                     continue;
                 }
                 let stat;
                 try {
-                    stat = (0, fs_1.statSync)(fullPath);
+                    stat = (0, node_fs_1.statSync)(fullPath);
                 }
                 catch {
                     // Skip files/dirs we can't stat (broken symlinks, permission issues)
@@ -190,7 +189,7 @@ async function findAllPackageJsonFilesAsync(rootDir = process.cwd(), excludePatt
             return;
         }
         lastProgressAt = now;
-        const relativePath = (0, path_1.relative)(rootDir, currentDir) || '.';
+        const relativePath = (0, node_path_1.relative)(rootDir, currentDir) || '.';
         onProgress(relativePath, packageJsonFiles.length);
     }
     const pending = [];
@@ -217,7 +216,7 @@ async function findAllPackageJsonFilesAsync(rootDir = process.cwd(), excludePatt
         }
         let realPath;
         try {
-            realPath = await fs_2.promises.realpath(dir);
+            realPath = await node_fs_1.promises.realpath(dir);
         }
         catch {
             return;
@@ -232,21 +231,21 @@ async function findAllPackageJsonFilesAsync(rootDir = process.cwd(), excludePatt
         }
         let files;
         try {
-            files = await fs_2.promises.readdir(dir);
+            files = await node_fs_1.promises.readdir(dir);
         }
         catch {
             return;
         }
         for (const file of files) {
             reportProgress(dir);
-            const fullPath = (0, path_1.join)(dir, file);
-            const relativePath = (0, path_1.relative)(rootDir, fullPath);
+            const fullPath = (0, node_path_1.join)(dir, file);
+            const relativePath = (0, node_path_1.relative)(rootDir, fullPath);
             if (shouldExcludePath(relativePath)) {
                 continue;
             }
             let stat;
             try {
-                stat = await fs_2.promises.stat(fullPath);
+                stat = await node_fs_1.promises.stat(fullPath);
             }
             catch {
                 continue;
@@ -262,9 +261,10 @@ async function findAllPackageJsonFilesAsync(rootDir = process.cwd(), excludePatt
         }
     }
     function pump() {
-        while (activeTasks < concurrency && pending.length > 0 && !failedError) {
-            // Non-null: pending.length > 0 was just checked and nothing runs in between.
+        while (activeTasks < concurrency && !failedError) {
             const next = pending.shift();
+            if (!next)
+                break;
             activeTasks++;
             void processDirectory(next.dir, next.depth)
                 .catch((error) => {

package/dist/shared/git.js

@@ -1,14 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getGitWorkingTreeState = getGitWorkingTreeState;
-const child_process_1 = require("child_process");
+const node_child_process_1 = require("node:child_process");
 /**
  * Detect whether cwd is a git work tree and whether it has local changes.
  * Fail soft if git is unavailable or cwd is not a repository.
  */
 function getGitWorkingTreeState(cwd) {
     try {
-        const isInsideWorkTree = (0, child_process_1.execSync)('git rev-parse --is-inside-work-tree', {
+        const isInsideWorkTree = (0, node_child_process_1.execSync)('git rev-parse --is-inside-work-tree', {
             cwd,
             encoding: 'utf-8',
             stdio: ['ignore', 'pipe', 'ignore'],
@@ -16,7 +16,7 @@ function getGitWorkingTreeState(cwd) {
         if (isInsideWorkTree !== 'true') {
             return { isRepo: false, isDirty: false };
         }
-        const status = (0, child_process_1.execSync)('git status --porcelain', {
+        const status = (0, node_child_process_1.execSync)('git status --porcelain', {
             cwd,
             encoding: 'utf-8',
             stdio: ['ignore', 'pipe', 'ignore'],

package/dist/shared/http/resizable-semaphore.js

@@ -60,8 +60,10 @@ class ResizableSemaphore {
      * each as it is admitted so the count stays authoritative and synchronous.
      */
     drainWaiters() {
-        while (this.inFlight < this.limit && this.waiters.length > 0) {
+        while (this.inFlight < this.limit) {
             const next = this.waiters.shift();
+            if (!next)
+                break;
             this.inFlight++;
             next();
         }

package/dist/shared/local-env.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadInupLocalEnv = loadInupLocalEnv;
-const fs_1 = require("fs");
-const path_1 = require("path");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
 /**
  * Loads a gitignored `.env.local` from the inup repo itself (NOT the cwd), so
  * developer-only toggles can be "set once" and apply to every `inup` run in any
@@ -21,15 +21,15 @@ const ENV_FILE_NAME = '.env.local';
 /** Walk upward from this file's dir to find the .env.local; null if none. */
 function findEnvFile() {
     let dir = __dirname;
-    const root = (0, path_1.parse)(dir).root;
+    const root = (0, node_path_1.parse)(dir).root;
     // Cap the walk so a missing file can never loop unbounded.
     for (let i = 0; i < 12; i++) {
-        const candidate = (0, path_1.join)(dir, ENV_FILE_NAME);
-        if ((0, fs_1.existsSync)(candidate))
+        const candidate = (0, node_path_1.join)(dir, ENV_FILE_NAME);
+        if ((0, node_fs_1.existsSync)(candidate))
             return candidate;
         if (dir === root)
             break;
-        dir = (0, path_1.dirname)(dir);
+        dir = (0, node_path_1.dirname)(dir);
     }
     return null;
 }
@@ -65,7 +65,7 @@ function loadInupLocalEnv() {
         const file = findEnvFile();
         if (!file)
             return null;
-        const parsed = parseEnv((0, fs_1.readFileSync)(file, 'utf8'));
+        const parsed = parseEnv((0, node_fs_1.readFileSync)(file, 'utf8'));
         for (const [key, value] of Object.entries(parsed)) {
             if (process.env[key] === undefined) {
                 process.env[key] = value;

package/dist/shared/package-manager.js

@@ -4,8 +4,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PackageManagerDetector = void 0;
-const fs_1 = require("fs");
-const path_1 = require("path");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
 const chalk_1 = __importDefault(require("chalk"));
 const PACKAGE_MANAGERS = {
     npm: {
@@ -45,18 +45,19 @@ const PACKAGE_MANAGERS = {
         color: chalk_1.default.magenta,
     },
 };
+// biome-ignore lint/complexity/noStaticOnlyClass: intentional namespace-style API used throughout the codebase
 class PackageManagerDetector {
     /**
      * Detect package manager from packageManager field or lock files
      */
     static detect(cwd = process.cwd()) {
         // 1. Check packageManager field in package.json
-        const fromPackageJson = this.detectFromPackageJson(cwd);
+        const fromPackageJson = PackageManagerDetector.detectFromPackageJson(cwd);
         if (fromPackageJson) {
             return fromPackageJson;
         }
         // 2. Check for lock files
-        const fromLockFile = this.detectFromLockFiles(cwd);
+        const fromLockFile = PackageManagerDetector.detectFromLockFiles(cwd);
         if (fromLockFile) {
             return fromLockFile;
         }
@@ -68,12 +69,12 @@ class PackageManagerDetector {
      * Detect from package.json packageManager field
      */
     static detectFromPackageJson(cwd) {
-        const packageJsonPath = (0, path_1.join)(cwd, 'package.json');
-        if (!(0, fs_1.existsSync)(packageJsonPath)) {
+        const packageJsonPath = (0, node_path_1.join)(cwd, 'package.json');
+        if (!(0, node_fs_1.existsSync)(packageJsonPath)) {
             return null;
         }
         try {
-            const content = (0, fs_1.readFileSync)(packageJsonPath, 'utf-8');
+            const content = (0, node_fs_1.readFileSync)(packageJsonPath, 'utf-8');
             const packageJson = JSON.parse(content);
             if (packageJson.packageManager) {
                 // Parse format: "pnpm@10.28.1" or "npm@9.0.0+sha512.abc..."
@@ -84,7 +85,7 @@ class PackageManagerDetector {
                 }
             }
         }
-        catch (error) {
+        catch {
             // Invalid package.json, continue to lock file detection
         }
         return null;
@@ -94,19 +95,19 @@ class PackageManagerDetector {
      */
     static detectFromLockFiles(cwd) {
         const lockFileChecks = [
-            { pm: PACKAGE_MANAGERS.pnpm, path: (0, path_1.join)(cwd, 'pnpm-lock.yaml') },
-            { pm: PACKAGE_MANAGERS.bun, path: (0, path_1.join)(cwd, 'bun.lockb') },
+            { pm: PACKAGE_MANAGERS.pnpm, path: (0, node_path_1.join)(cwd, 'pnpm-lock.yaml') },
+            { pm: PACKAGE_MANAGERS.bun, path: (0, node_path_1.join)(cwd, 'bun.lockb') },
             // Bun >= 1.2 writes a text `bun.lock` instead of the binary `bun.lockb`.
-            { pm: PACKAGE_MANAGERS.bun, path: (0, path_1.join)(cwd, 'bun.lock') },
-            { pm: PACKAGE_MANAGERS.yarn, path: (0, path_1.join)(cwd, 'yarn.lock') },
-            { pm: PACKAGE_MANAGERS.npm, path: (0, path_1.join)(cwd, 'package-lock.json') },
+            { pm: PACKAGE_MANAGERS.bun, path: (0, node_path_1.join)(cwd, 'bun.lock') },
+            { pm: PACKAGE_MANAGERS.yarn, path: (0, node_path_1.join)(cwd, 'yarn.lock') },
+            { pm: PACKAGE_MANAGERS.npm, path: (0, node_path_1.join)(cwd, 'package-lock.json') },
         ];
         const existingLocks = lockFileChecks
-            .filter(({ path }) => (0, fs_1.existsSync)(path))
+            .filter(({ path }) => (0, node_fs_1.existsSync)(path))
             .map(({ pm, path }) => ({
             pm,
             path,
-            mtime: (0, fs_1.statSync)(path).mtime.getTime(),
+            mtime: (0, node_fs_1.statSync)(path).mtime.getTime(),
         }));
         if (existingLocks.length === 0) {
             return null;
@@ -131,20 +132,20 @@ class PackageManagerDetector {
     static findWorkspaceRoot(cwd = process.cwd(), packageManager) {
         const pmInfo = PACKAGE_MANAGERS[packageManager];
         let currentDir = cwd;
-        while (currentDir !== (0, path_1.join)(currentDir, '..')) {
+        while (currentDir !== (0, node_path_1.join)(currentDir, '..')) {
             // Check for package manager-specific workspace file
             if (pmInfo.workspaceFile) {
-                const workspaceFilePath = (0, path_1.join)(currentDir, pmInfo.workspaceFile);
-                if ((0, fs_1.existsSync)(workspaceFilePath)) {
+                const workspaceFilePath = (0, node_path_1.join)(currentDir, pmInfo.workspaceFile);
+                if ((0, node_fs_1.existsSync)(workspaceFilePath)) {
                     return currentDir;
                 }
             }
             else {
                 // Check for package.json with workspaces field
-                const packageJsonPath = (0, path_1.join)(currentDir, 'package.json');
-                if ((0, fs_1.existsSync)(packageJsonPath)) {
+                const packageJsonPath = (0, node_path_1.join)(currentDir, 'package.json');
+                if ((0, node_fs_1.existsSync)(packageJsonPath)) {
                     try {
-                        const content = (0, fs_1.readFileSync)(packageJsonPath, 'utf-8');
+                        const content = (0, node_fs_1.readFileSync)(packageJsonPath, 'utf-8');
                         const packageJson = JSON.parse(content);
                         // Check if workspaces field exists and is non-empty
                         if (packageJson.workspaces) {
@@ -159,12 +160,12 @@ class PackageManagerDetector {
                             }
                         }
                     }
-                    catch (error) {
+                    catch {
                         // Invalid package.json, continue searching
                     }
                 }
             }
-            currentDir = (0, path_1.join)(currentDir, '..');
+            currentDir = (0, node_path_1.join)(currentDir, '..');
         }
         return null;
     }
@@ -172,7 +173,7 @@ class PackageManagerDetector {
      * Check if directory is in a workspace
      */
     static isInWorkspace(cwd, packageManager) {
-        return this.findWorkspaceRoot(cwd, packageManager) !== null;
+        return PackageManagerDetector.findWorkspaceRoot(cwd, packageManager) !== null;
     }
 }
 exports.PackageManagerDetector = PackageManagerDetector;

package/dist/shared/registry/npm-registry.js

@@ -2,20 +2,20 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.fetchPackageVersions = fetchPackageVersions;
 exports.clearPackageCache = clearPackageCache;
-const undici_1 = require("undici");
-const node_zlib_1 = require("node:zlib");
 const node_util_1 = require("node:util");
+const node_zlib_1 = require("node:zlib");
+const undici_1 = require("undici");
 const gunzipAsync = (0, node_util_1.promisify)(node_zlib_1.gunzip);
 const inflateAsync = (0, node_util_1.promisify)(node_zlib_1.inflate);
 const brotliDecompressAsync = (0, node_util_1.promisify)(node_zlib_1.brotliDecompress);
 const config_1 = require("../config");
-const registry_config_1 = require("./registry-config");
-const versions_1 = require("../versions");
-const retry_1 = require("../http/retry");
-const inflight_1 = require("../http/inflight");
-const resizable_semaphore_1 = require("../http/resizable-semaphore");
 const adaptive_controller_1 = require("../http/adaptive-controller");
 const etag_store_1 = require("../http/etag-store");
+const inflight_1 = require("../http/inflight");
+const resizable_semaphore_1 = require("../http/resizable-semaphore");
+const retry_1 = require("../http/retry");
+const versions_1 = require("../versions");
+const registry_config_1 = require("./registry-config");
 const inFlightLookups = new inflight_1.InflightMap();
 // One pool per registry origin: scoped packages may resolve to different
 // registries (`@scope:registry` in .npmrc), and each origin keeps its own
@@ -79,7 +79,7 @@ async function attemptRegistryFetch(target, path) {
             'accept-encoding': 'gzip, deflate, br',
         };
         if (target.authHeader) {
-            requestHeaders['authorization'] = target.authHeader;
+            requestHeaders.authorization = target.authHeader;
         }
         if (cached) {
             requestHeaders['if-none-match'] = cached.etag;
@@ -130,7 +130,7 @@ async function attemptRegistryFetch(target, path) {
         }
         const data = (0, versions_1.parseVersions)(decoded.toString('utf8'));
         // Persist the ETag for next run's conditional request.
-        const etagHeader = headers['etag'];
+        const etagHeader = headers.etag;
         const etag = Array.isArray(etagHeader) ? etagHeader[0] : etagHeader;
         if (etag) {
             (0, etag_store_1.writeEtag)(cacheKey, etag.toString(), data);
@@ -232,8 +232,10 @@ async function fetchPackageVersions(packageNames, options = {}) {
     const pendingEmissions = new Map();
     let nextEmitIndex = 0;
     const flushPending = () => {
-        while (pendingEmissions.has(nextEmitIndex)) {
+        while (true) {
             const ready = pendingEmissions.get(nextEmitIndex);
+            if (!ready)
+                break;
             pendingEmissions.delete(nextEmitIndex);
             options.onBatchReady?.(ready);
             nextEmitIndex++;

package/dist/shared/registry/version-checker.js

@@ -74,7 +74,7 @@ async function checkForUpdate(packageName, currentVersion) {
             updateCommand,
         };
     }
-    catch (error) {
+    catch {
         // Silently fail - don't interrupt the user experience
         return null;
     }

package/dist/shared/terminal/cursor.js

@@ -82,7 +82,7 @@ exports.ConsoleUtils = {
     clearProgress() {
         if (!process.stderr.isTTY)
             return;
-        process.stderr.write('\r' + ' '.repeat(exports.ConsoleUtils.LINE_WIDTH) + '\r');
+        process.stderr.write(`\r${' '.repeat(exports.ConsoleUtils.LINE_WIDTH)}\r`);
     },
 };
 //# sourceMappingURL=cursor.js.map

package/dist/shared/terminal/index.js

@@ -1,9 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.shouldDisableColor = exports.applyColorSetting = exports.wrapPlainText = exports.truncatePlainText = exports.stripAnsi = exports.getVisualLength = exports.TerminalInput = exports.RAW_SHOW_CURSOR = exports.RAW_EXIT_ALT_SCREEN = exports.ConsoleUtils = exports.CursorUtils = void 0;
+exports.wrapPlainText = exports.truncatePlainText = exports.stripAnsi = exports.getVisualLength = exports.TerminalInput = exports.RAW_SHOW_CURSOR = exports.RAW_EXIT_ALT_SCREEN = exports.CursorUtils = exports.ConsoleUtils = exports.shouldDisableColor = exports.applyColorSetting = void 0;
+var color_1 = require("./color");
+Object.defineProperty(exports, "applyColorSetting", { enumerable: true, get: function () { return color_1.applyColorSetting; } });
+Object.defineProperty(exports, "shouldDisableColor", { enumerable: true, get: function () { return color_1.shouldDisableColor; } });
 var cursor_1 = require("./cursor");
-Object.defineProperty(exports, "CursorUtils", { enumerable: true, get: function () { return cursor_1.CursorUtils; } });
 Object.defineProperty(exports, "ConsoleUtils", { enumerable: true, get: function () { return cursor_1.ConsoleUtils; } });
+Object.defineProperty(exports, "CursorUtils", { enumerable: true, get: function () { return cursor_1.CursorUtils; } });
 Object.defineProperty(exports, "RAW_EXIT_ALT_SCREEN", { enumerable: true, get: function () { return cursor_1.RAW_EXIT_ALT_SCREEN; } });
 Object.defineProperty(exports, "RAW_SHOW_CURSOR", { enumerable: true, get: function () { return cursor_1.RAW_SHOW_CURSOR; } });
 var terminal_input_1 = require("./terminal-input");
@@ -13,7 +16,4 @@ Object.defineProperty(exports, "getVisualLength", { enumerable: true, get: funct
 Object.defineProperty(exports, "stripAnsi", { enumerable: true, get: function () { return text_1.stripAnsi; } });
 Object.defineProperty(exports, "truncatePlainText", { enumerable: true, get: function () { return text_1.truncatePlainText; } });
 Object.defineProperty(exports, "wrapPlainText", { enumerable: true, get: function () { return text_1.wrapPlainText; } });
-var color_1 = require("./color");
-Object.defineProperty(exports, "applyColorSetting", { enumerable: true, get: function () { return color_1.applyColorSetting; } });
-Object.defineProperty(exports, "shouldDisableColor", { enumerable: true, get: function () { return color_1.shouldDisableColor; } });
 //# sourceMappingURL=index.js.map

package/dist/shared/terminal/terminal-input.js

@@ -85,8 +85,12 @@ exports.TerminalInput = {
     promptForImmediateConfirmation(prompt, defaultValue = true) {
         return new Promise((resolve) => {
             process.stdout.write(prompt);
-            // Replaced synchronously below before any keypress can call finish().
-            let cleanup = /* v8 ignore next */ () => { };
+            // Replaced synchronously below before any keypress can call finish(),
+            // so the placeholder body is unreachable. (The `v8 ignore next` form
+            // is not honored by coverage-v8 here; the block form is.)
+            /* v8 ignore start */
+            let cleanup = () => { };
+            /* v8 ignore stop */
             const finish = (value) => {
                 cleanup();
                 process.stdout.write('\n');

package/dist/shared/terminal/text.js

@@ -7,10 +7,10 @@ exports.stripAnsi = stripAnsi;
 exports.getVisualLength = getVisualLength;
 exports.truncatePlainText = truncatePlainText;
 exports.wrapPlainText = wrapPlainText;
+const cli_truncate_1 = __importDefault(require("cli-truncate"));
 const string_width_1 = __importDefault(require("string-width"));
 const strip_ansi_1 = __importDefault(require("strip-ansi"));
 const wrap_ansi_1 = __importDefault(require("wrap-ansi"));
-const cli_truncate_1 = __importDefault(require("cli-truncate"));
 // Thin wrappers over the battle-tested terminal-string stack (string-width,
 // strip-ansi, wrap-ansi, cli-truncate). The previous hand-rolled versions
 // handled emoji but had no East Asian Width tables, so CJK text was counted at

package/dist/shared/types/index.js

@@ -15,6 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./domain"), exports);
-__exportStar(require("./ui"), exports);
 __exportStar(require("./streaming"), exports);
+__exportStar(require("./ui"), exports);
 //# sourceMappingURL=index.js.map

package/dist/shared/versions.js

@@ -40,6 +40,7 @@ exports.parseVersions = parseVersions;
 exports.isVersionOutdated = isVersionOutdated;
 exports.getOptimizedRangeVersion = getOptimizedRangeVersion;
 exports.findClosestMinorVersion = findClosestMinorVersion;
+exports.findHighestPatchVersion = findHighestPatchVersion;
 exports.applyVersionPrefix = applyVersionPrefix;
 const semver = __importStar(require("semver"));
 const manifest_1 = require("./manifest");
@@ -95,19 +96,9 @@ function isVersionOutdated(current, latest) {
  */
 function getOptimizedRangeVersion(_packageName, currentRange, allVersions, latestVersion) {
     try {
-        // Find the highest version that satisfies the current range
-        const satisfyingVersions = allVersions.filter((version) => {
-            try {
-                return semver.satisfies(version, currentRange);
-                // semver.satisfies swallows invalid input internally (returns false);
-                // safety net for future semver behavior changes only.
-                /* v8 ignore start */
-            }
-            catch {
-                return false;
-            }
-            /* v8 ignore stop */
-        });
+        // Find the highest version that satisfies the current range. satisfies()
+        // returns false (never throws) for invalid input, so no guard is needed.
+        const satisfyingVersions = allVersions.filter((version) => semver.satisfies(version, currentRange));
         if (satisfyingVersions.length === 0) {
             return latestVersion;
         }
@@ -130,7 +121,6 @@ function findClosestMinorVersion(installedVersion, allVersions) {
         }
         const installedMajor = semver.major(coercedInstalled);
         const installedMinor = semver.minor(coercedInstalled);
-        const installedPatch = semver.patch(coercedInstalled);
         let bestMinorVersion = null;
         let bestMinorValue = -1;
         // Single pass to find best minor version in same major
@@ -150,30 +140,44 @@ function findClosestMinorVersion(installedVersion, allVersions) {
         if (bestMinorVersion) {
             return bestMinorVersion;
         }
-        // Fallback: find highest patch version in same major.minor that's higher than installed
-        let bestPatchVersion = null;
-        for (const version of allVersions) {
-            try {
-                const major = semver.major(version);
-                const minor = semver.minor(version);
-                const patch = semver.patch(version);
-                // Same major and minor, but higher patch
-                if (major === installedMajor && minor === installedMinor && patch > installedPatch) {
-                    if (!bestPatchVersion || semver.gt(version, bestPatchVersion)) {
-                        bestPatchVersion = version;
-                    }
-                }
-            }
-            catch {
-                // Skip invalid versions
-            }
-        }
-        return bestPatchVersion;
+        // Fallback: highest patch version in the same major.minor that's higher than installed
+        return findHighestPatchVersion(installedVersion, allVersions);
     }
     catch {
         return null;
     }
 }
+/**
+ * Find the highest patch version in the installed version's own major.minor line.
+ * This is the `--target patch` policy: never crosses a minor (or major) boundary.
+ */
+function findHighestPatchVersion(installedVersion, allVersions) {
+    const coercedInstalled = semver.coerce(installedVersion);
+    if (!coercedInstalled) {
+        return null;
+    }
+    const installedMajor = semver.major(coercedInstalled);
+    const installedMinor = semver.minor(coercedInstalled);
+    const installedPatch = semver.patch(coercedInstalled);
+    let bestPatchVersion = null;
+    for (const version of allVersions) {
+        try {
+            const major = semver.major(version);
+            const minor = semver.minor(version);
+            const patch = semver.patch(version);
+            // Same major and minor, but higher patch
+            if (major === installedMajor && minor === installedMinor && patch > installedPatch) {
+                if (!bestPatchVersion || semver.gt(version, bestPatchVersion)) {
+                    bestPatchVersion = version;
+                }
+            }
+        }
+        catch {
+            // Skip invalid versions
+        }
+    }
+    return bestPatchVersion;
+}
 /** Re-apply the original specifier's range prefix (^, ~, >=, …) to a new version. */
 function applyVersionPrefix(originalSpecifier, targetVersion) {
     const prefixMatch = originalSpecifier.match(/^([^\d]+)/);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "inup",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "description": "Interactive dependency upgrader for npm, yarn, pnpm & bun. Zero-config, monorepo-ready. Upgrade-interactive for every package manager.",
   "main": "dist/index.js",
   "bin": {
@@ -30,7 +30,7 @@
     "ncu"
   ],
   "license": "MIT",
-  "homepage": "https://github.com/donfear/inup#readme",
+  "homepage": "https://donfear.github.io/inup/",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/donfear/inup.git"
@@ -43,11 +43,11 @@
     "README.md"
   ],
   "devDependencies": {
+    "@biomejs/biome": "^2.5.2",
     "@types/node": "^25.9.4",
     "@types/semver": "^7.7.1",
     "@vitest/coverage-v8": "^4.1.9",
     "dependency-cruiser": "^18.0.0",
-    "prettier": "^3.9.4",
     "typescript": "^6.0.3",
     "vitest": "^4.1.9"
   },
@@ -73,8 +73,9 @@
     "dev": "tsc --watch",
     "start": "node dist/cli.js",
     "link": "pnpm build && pnpm add -g .",
-    "format": "prettier --write \"src/**/*.ts\"",
-    "format:check": "prettier --check \"src/**/*.ts\"",
+    "check": "biome check --write .",
+    "check:ci": "biome ci .",
+    "typecheck": "tsc --noEmit",
     "demo:record": "bash docs/demo/record-demo.sh",
     "demo:setup": "cd docs/demo-project && pnpm install",
     "test": "vitest run",
@@ -82,6 +83,9 @@
     "test:coverage": "vitest run --coverage --reporter=default --reporter=json --outputFile.json=coverage/test-results.json",
     "lint:deps": "depcruise src --config .dependency-cruiser.cjs",
     "docs:keys": "UPDATE_README=1 vitest run keymap-readme",
-    "docs:badges": "pnpm test:coverage && UPDATE_README=1 vitest run badges-readme"
+    "docs:badges": "pnpm test:coverage && UPDATE_README=1 vitest run badges-readme",
+    "site:dev": "pnpm --filter @inup/website dev",
+    "site:build": "pnpm --filter @inup/website build",
+    "site:preview": "pnpm --filter @inup/website preview"
   }
 }