netlify-cli 19.1.3 → 19.1.5

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "netlify-cli",
   "description": "Netlify command line tool",
-  "version": "19.1.3",
+  "version": "19.1.5",
   "author": "Netlify Inc.",
   "type": "module",
   "engines": {
@@ -36,16 +36,13 @@
     "clean": "rm -rf dist/",
     "dev": "tsc --project tsconfig.build.json --watch",
     "docs": "npm run --prefix=site build",
-    "e2e": "vitest run --config vitest.e2e.config.ts",
-    "e2e:debug": "DEBUG='netlify-cli:test' npm run e2e",
     "format": "npm run _format -- --write",
     "format:check": "npm run _format -- --check",
+    "lint": "eslint --cache",
+    "lint:fix": "npm run lint -- --fix",
     "start": "node ./bin/run.js",
-    "test": "npm run test:dev",
-    "lint": "eslint --cache \"{src,scripts,tests,.github}/**/*.{mjs,cjs,js,md,html}\" \"*.{mjs,cjs,js,md,html}\"",
-    "lint:fix": "npm run lint --fix",
-    "test:dev": "run-s test:init:* test:dev:*",
-    "test:dev:vitest": "vitest run tests/unit/ && vitest run tests/integration",
+    "test": "run-s test:unit test:integration test:e2e",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
     "test:init": "run-s test:init:*",
     "test:init:cli-help": "npm run start -- --help",
     "test:init:cli-version": "npm run start -- --version",
@@ -53,12 +50,12 @@
     "test:init:hugo-deps": "npm ci --prefix tests/integration/__fixtures__/hugo-site --no-audit",
     "test:init:monorepo-deps": "cd tests/integration/__fixtures__/monorepo && pnpm install --frozen-lockfile",
     "test:init:next-deps": "npm ci --prefix tests/integration/__fixtures__/next-app-without-config --no-audit && npm ci --prefix tests/integration/__fixtures__/next-app --no-audit",
-    "test:ci:vitest:integration": "vitest run --coverage tests/integration/",
-    "test:ci:vitest:unit": "vitest run --coverage tests/unit/",
-    "prepublishOnly": "npm shrinkwrap",
+    "test:integration": "vitest run tests/integration/",
+    "test:unit": "vitest run tests/unit/",
+    "postinstall": "node ./scripts/postinstall.js",
+    "prepublishOnly": "node ./scripts/prepublishOnly.js",
     "typecheck": "tsc",
-    "typecheck:watch": "tsc --watch",
-    "watch": "c8 --reporter=lcov vitest --watch"
+    "typecheck:watch": "tsc --watch"
   },
   "dependencies": {
     "@fastify/static": "7.0.4",
@@ -108,7 +105,7 @@
     "folder-walker": "3.2.0",
     "from2-array": "0.0.4",
     "fuzzy": "0.1.3",
-    "get-port": "7.1.0",
+    "get-port": "5.1.1",
     "gh-release-fetch": "4.0.3",
     "git-repo-info": "2.1.1",
     "gitconfiglocal": "2.1.0",

package/scripts/prepublishOnly.js

@@ -0,0 +1,35 @@
+import * as cp from 'node:child_process'
+import * as fs from 'node:fs/promises'
+import * as path from 'node:path'
+
+const main = async () => {
+  // It's best practice to include a shrinkwrap when shipping a CLI. npm has a bug that makes it
+  // not ignore development dependencies in an installed package's shrinkwrap, though:
+  //
+  // https://github.com/npm/cli/issues/4323
+  //
+  // Leaving development dependencies makes the CLI installation significantly larger and increases
+  // the risk of platform-specific dependency installation issues.
+  // eslint-disable-next-line no-restricted-properties
+  const packageJSONPath = path.join(process.cwd(), 'package.json')
+  const rawPackageJSON = await fs.readFile(packageJSONPath, 'utf8')
+
+  try {
+    // Remove dev dependencies from the package.json...
+    const packageJSON = JSON.parse(rawPackageJSON)
+    Reflect.deleteProperty(packageJSON, 'devDependencies')
+    await fs.writeFile(packageJSONPath, JSON.stringify(packageJSON, null, 2))
+
+    // Prune out dev dependencies (this updates the `package-lock.json` lockfile)
+    cp.spawnSync('npm', ['prune'], { stdio: 'inherit' })
+
+    // Convert `package-lock.json` lockfile to `npm-shrinkwrap.json`
+    cp.spawnSync('npm', ['shrinkwrap'], { stdio: 'inherit' })
+  } finally {
+    // Restore the original `package.json`. (This makes no functional difference in a publishing
+    // environment, it's purely to minimize how destructive this script is.)
+    await fs.writeFile(packageJSONPath, rawPackageJSON)
+  }
+}
+
+await main()