pnpm-catalog-updates 1.2.0 → 1.3.0

package/dist/index.js

@@ -28,6 +28,8 @@ var ConcurrentProgressTracker = class {
     this.reporter = reporter;
     this.total = total;
   }
+  reporter;
+  total;
   completed = 0;
   lock = new Mutex();
   /**
@@ -9067,6 +9069,8 @@ var RateLimiter = class {
     this.tokens = maxBurst;
     this.lastRefill = Date.now();
   }
+  tokensPerSecond;
+  maxBurst;
   tokens;
   lastRefill;
   /**
@@ -13371,6 +13375,8 @@ var CatalogCheckService = class {
     this.workspaceRepository = workspaceRepository;
     this.registryService = registryService;
   }
+  workspaceRepository;
+  registryService;
   /**
    * Check for outdated catalog dependencies
    */
@@ -14208,13 +14214,13 @@ var NpmRegistryService = class _NpmRegistryService {
     }
     try {
       const auditData = {
-        name: packageName,
-        version,
-        requires: {},
-        dependencies: {}
+        query: {
+          name: packageName,
+          version
+        }
       };
       const authConfig = this.getAuthConfig(registryUrl);
-      const response = await npmRegistryFetch("/-/npm/v1/security/audits", {
+      const response = await npmRegistryFetch("/v1/advisories/bulk", {
         method: "POST",
         body: JSON.stringify(auditData),
         headers: {
@@ -14227,17 +14233,20 @@ var NpmRegistryService = class _NpmRegistryService {
       const auditResult = await response.json();
       const vulnerabilities = [];
       if (auditResult.advisories) {
-        for (const advisory of Object.values(auditResult.advisories)) {
-          vulnerabilities.push({
-            id: advisory.id.toString(),
-            title: advisory.title,
-            severity: advisory.severity,
-            description: advisory.overview,
-            reference: advisory.url,
-            vulnerable_versions: advisory.vulnerable_versions,
-            patched_versions: advisory.patched_versions,
-            recommendation: advisory.recommendation
-          });
+        for (const [_pkgName, advisories] of Object.entries(auditResult.advisories)) {
+          const advisoryList = Array.isArray(advisories) ? advisories : [advisories];
+          for (const advisory of advisoryList) {
+            vulnerabilities.push({
+              id: advisory.id.toString(),
+              title: advisory.title,
+              severity: advisory.severity,
+              description: advisory.overview,
+              reference: advisory.url,
+              vulnerable_versions: advisory.vulnerable_versions,
+              patched_versions: advisory.patched_versions,
+              recommendation: advisory.recommendation
+            });
+          }
         }
       }
       const securityReport = {
@@ -14431,6 +14440,7 @@ var ImpactAnalysisService = class {
   constructor(registryService) {
     this.registryService = registryService;
   }
+  registryService;
   /**
    * Analyze security impact of version change
    */
@@ -14459,12 +14469,11 @@ var ImpactAnalysisService = class {
       };
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : String(error);
-      logger.warn(`Security impact analysis failed for ${packageName}`, {
-        packageName,
-        currentVersion,
-        newVersion,
-        error: errorMessage
-      });
+      const isTransient = errorMessage.includes("timeout") || errorMessage.includes("ECONNREFUSED") || errorMessage.includes("ETIMEDOUT") || errorMessage.toLowerCase().includes("network");
+      if (!isTransient) {
+        logger.error(`Non-transient security analysis error for ${packageName}: ${errorMessage}`);
+      }
+      logger.warn(`Security analysis error for ${packageName}: ${errorMessage}`);
       return {
         hasVulnerabilities: false,
         fixedVulnerabilities: 0,
@@ -14552,6 +14561,9 @@ var UpdateExecutorService = class {
     this.registryService = registryService;
     this.backupService = backupService;
   }
+  workspaceRepository;
+  registryService;
+  backupService;
   /**
    * Execute catalog dependency updates
    */
@@ -14727,6 +14739,9 @@ var UpdatePlanService = class {
     this.registryService = registryService;
     this.checkService = checkService;
   }
+  workspaceRepository;
+  registryService;
+  checkService;
   /**
    * Plan catalog dependency updates
    */
@@ -14957,6 +14972,7 @@ var CatalogUpdateService = class _CatalogUpdateService {
     this.executorService = deps.executorService ?? new UpdateExecutorService(workspaceRepository, registryService, backupService);
     this.impactAnalysisService = deps.impactAnalysisService ?? new ImpactAnalysisService(registryService);
   }
+  workspaceRepository;
   checkService;
   planService;
   executorService;
@@ -15150,6 +15166,7 @@ var WorkspaceService = class {
   constructor(workspaceRepository) {
     this.workspaceRepository = workspaceRepository;
   }
+  workspaceRepository;
   /**
    * DUP-001: Helper method to convert a Package entity to PackageInfo DTO.
    * Extracted from getPackages and getPackagesUsingCatalog to eliminate duplication.
@@ -15796,6 +15813,9 @@ var CatalogReference = class {
     this.packageName = packageName;
     this.dependencyType = dependencyType;
   }
+  catalogName;
+  packageName;
+  dependencyType;
   getCatalogName() {
     return this.catalogName;
   }
@@ -15815,6 +15835,9 @@ var CatalogDependency = class {
     this.catalogName = catalogName;
     this.dependencyType = dependencyType;
   }
+  packageName;
+  catalogName;
+  dependencyType;
   getPackageName() {
     return this.packageName;
   }
@@ -15872,6 +15895,11 @@ var Workspace = class _Workspace {
     this.catalogs = catalogs;
     this.packages = packages;
   }
+  id;
+  path;
+  config;
+  catalogs;
+  packages;
   /**
    * Create a new Workspace instance
    */
@@ -17749,6 +17777,7 @@ var FileWorkspaceRepository = class {
   constructor(fileSystemService) {
     this.fileSystemService = fileSystemService;
   }
+  fileSystemService;
   /**
    * Find a workspace by its path
    */
@@ -18471,6 +18500,7 @@ var CIFormatter = class {
   constructor(format) {
     this.format = format;
   }
+  format;
   /**
    * Format outdated dependencies report for CI
    */
@@ -19271,6 +19301,7 @@ var ColorUtils = class {
   constructor(useColor = true) {
     this.useColor = useColor;
   }
+  useColor;
   /**
    * Apply color if color is enabled
    */
@@ -19389,6 +19420,8 @@ var VersionFormatter = class {
     this.colorUtils = colorUtils;
     this.useColor = useColor;
   }
+  colorUtils;
+  useColor;
   /**
    * Parse a version string into its component parts
    */
@@ -19473,6 +19506,8 @@ var OutputFormatter = class {
     this.colorUtils = new ColorUtils(useColor);
     this.versionFormatter = new VersionFormatter(this.colorUtils, useColor);
   }
+  format;
+  useColor;
   ciFormatter = null;
   colorUtils;
   versionFormatter;
@@ -20779,6 +20814,10 @@ var AnalyzeCommand = class {
     this.registryService = registryService;
     this.aiService = aiService;
   }
+  catalogUpdateService;
+  workspaceService;
+  registryService;
+  aiService;
   /**
    * Execute the analyze command
    * QUAL-002/QUAL-003: Uses unified output helpers and reduced coupling
@@ -20924,6 +20963,7 @@ var CheckCommand = class {
   constructor(catalogUpdateService) {
     this.catalogUpdateService = catalogUpdateService;
   }
+  catalogUpdateService;
   /**
    * Execute the check command
    */
@@ -21066,6 +21106,7 @@ var GraphCommand = class {
   constructor(workspaceService) {
     this.workspaceService = workspaceService;
   }
+  workspaceService;
   /**
    * Execute the graph command
    */
@@ -22303,6 +22344,8 @@ var PercentageProgressBar = class _PercentageProgressBar {
     this.style = options.style || "gradient";
     this.useMultiLine = options.multiLine ?? true;
   }
+  width;
+  options;
   current = 0;
   total = 0;
   text = "";
@@ -22516,6 +22559,7 @@ var SecurityCommand = class {
   constructor(outputFormatter) {
     this.outputFormatter = outputFormatter;
   }
+  outputFormatter;
   /**
    * Execute the security command
    */
@@ -23942,6 +23986,7 @@ var WorkspaceCommand = class {
   constructor(workspaceService) {
     this.workspaceService = workspaceService;
   }
+  workspaceService;
   /**
    * Execute the workspace command
    */