lockdelta 0.1.1 → 0.1.3

package/README.md

@@ -72,7 +72,7 @@ No inputs are required on `pull_request` or `push` events. The action reads the
 
 ### Markdown summary
 
-When `markdown: 'true'` or `post-comment` is not `'false'`, lockdelta generates a three-section markdown summary. Direct production dependencies are **bold**, dev dependencies are *italic*, and transitive deps are plain. Package names link to their registry (PyPI, npmjs, jsr.io).
+When `markdown: 'true'` or `post-comment` is not `'false'`, lockdelta generates a three-section markdown summary. Direct production dependencies are **bold**, dev dependencies are *italic*, and transitive deps are plain. Package names link to their public registry (PyPI, npmjs, jsr.io). Packages sourced from a private registry are shown without a link; GitHub Packages scoped packages link to their GitHub repository page instead.
 
 ```yaml
 - name: Diff dependencies
@@ -234,14 +234,17 @@ console.log(report.summary);
 
 ```ts
 import { registerEcosystem } from 'lockdelta';
-import type { Ecosystem, DirectDeps } from 'lockdelta';
+import type { Ecosystem, DirectDeps, PackageEntry } from 'lockdelta';
 
 const rubyEcosystem: Ecosystem = {
   name: 'ruby',
   supportedLockfiles: [{ filename: 'Gemfile.lock', type: 'bundler' }],
   manifestName: 'Gemfile',
   getLockfileType: (filename) => filename === 'Gemfile.lock' ? 'bundler' : undefined,
-  parseLockfile: (content, _type) => { /* parse and return { name: version } */ return {}; },
+  parseLockfile: (content, _type): Record<string, PackageEntry> => {
+    // parse and return { packageName: { version, registryUrl? } }
+    return {};
+  },
   parseDirectDeps: (content): DirectDeps => ({ prod: new Set(), dev: new Set() }),
   normalizeName: (name) => name.toLowerCase(),
 };
@@ -259,8 +262,11 @@ interface PackageChange {
   change_type: 'added' | 'removed' | 'updated';
   old_version: string | null;
   new_version: string | null;
-  is_direct: boolean;  // declared in the project manifest
-  is_dev: boolean;     // declared in a dev/optional dependency section
+  is_direct: boolean;       // declared in the project manifest
+  is_dev: boolean;          // declared in a dev/optional dependency section
+  old_registry_url?: string; // registry origin of the old version (e.g. 'https://npm.pkg.github.com')
+  new_registry_url?: string; // registry origin of the new version
+  // Both fields present on 'updated' changes: a mismatch signals a potential registry switch
 }
 
 interface DiffReport {

package/action.yml

@@ -40,7 +40,8 @@ inputs:
     description: >
       YAML map of named package groups. Each group produces a boolean output named after
       the group, set to 'true' if any package in the group changed. Inspired by
-      dorny/paths-filter. Example:
+      dorny/paths-filter. May be combined with filters-from; inline definitions take
+      precedence over the file on key collision. Example:
         auth:
           - pyjwt
           - cryptography
@@ -48,6 +49,12 @@ inputs:
           - httpx
           - requests
     required: false
+  filters-from:
+    description: >
+      Path to a YAML file containing named package group filters (same format as the
+      filters input). Merged with any inline filters; the inline filters input takes
+      precedence on key collision. Inspired by dorny/paths-filter's filters-from.
+    required: false
   markdown:
     description: >
       Set to 'true' to generate a markdown summary of changes. The summary has three
@@ -80,6 +87,15 @@ outputs:
     description: >
       JSON diff report. Schema matches DiffReport in the TypeScript types.
       Contains schema_version, generated_at, base_ref, head_ref, summary, and lockfiles[].
+  has-changes:
+    description: >
+      'true' if at least one dependency changed, 'false' otherwise.
+      Useful for conditionally running downstream steps.
+  changed-groups:
+    description: >
+      JSON array of filter group names that had at least one changed package.
+      Only set when the filters or filters-from input is used.
+      Example: '["auth","http-client"]'
   markdown:
     description: >
       Markdown summary of dependency changes (Added/Changed/Removed sections).
@@ -87,4 +103,4 @@ outputs:
 
 runs:
   using: 'node24'
-  main: 'dist/action.js'
+  main: 'dist/action.cjs'