pob 30.0.0 → 31.0.1

package/CHANGELOG.md

@@ -3,6 +3,41 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [31.0.1](https://github.com/christophehurpeau/pob/compare/pob@31.0.0...pob@31.0.1) (2025-12-06)
+
+### Bug Fixes
+
+* update all workflows
+* update workflow-release ejs
+
+Version bump for dependency: @pob/root
+
+
+## [31.0.0](https://github.com/christophehurpeau/pob/compare/pob@30.0.0...pob@31.0.0) (2025-12-06)
+
+### ⚠ BREAKING CHANGES
+
+* migrate pob-version to @pob/version and add initial bun support
+
+### Features
+
+* add bunfig.toml with minimumReleaseAge
+* add npmMinimalAgeGate in yarn config
+* add npmMinimumReleaseAgeExclude option to CoreYarnGenerator
+* add quoteArg utility function and update script paths in generators
+* migrate pob-version to @pob/version and add initial bun support
+* try to implement publish with bun
+* update npmPreapprovedPackages in CoreYarnGenerator
+
+### Bug Fixes
+
+* simplify script path handling in CommonLintGenerator and CommonTestingGenerator
+
+Version bump for dependency: @pob/sort-object
+Version bump for dependency: @pob/sort-pkg
+Version bump for dependency: @pob/root
+
+
 ## [30.0.0](https://github.com/christophehurpeau/pob/compare/pob@29.9.0...pob@30.0.0) (2025-11-24)
 
 ### ⚠ BREAKING CHANGES

package/lib/generators/common/format-lint/CommonLintGenerator.js

@@ -1,5 +1,6 @@
 import path from "node:path";
 import Generator from "yeoman-generator";
+import { quoteArg } from "../../../utils/execUtils.js";
 import inMonorepo from "../../../utils/inMonorepo.js";
 import * as packageUtils from "../../../utils/package.js";
 import { copyAndFormatTpl } from "../../../utils/writeAndFormat.js";
@@ -522,9 +523,7 @@ export default class CommonFormatLintGenerator extends Generator {
 
       packageUtils.addScripts(pkg, {
         "lint:eslint": globalEslint
-          ? `yarn ../.. run eslint ${args} ${path
-              .relative("../..", ".")
-              .replace("\\", "/")}`
+          ? `yarn ../.. run eslint ${args} ${quoteArg(path.relative("../..", "."))}`
           : `eslint ${args} .`,
         lint: `${
           useTypescript && !composite ? "tsc && " : ""

package/lib/generators/common/release/CommonReleaseGenerator.js

@@ -69,16 +69,11 @@ export default class CommonReleaseGenerator extends Generator {
     const pkg = this.fs.readJSON(this.destinationPath("package.json"));
 
     if (this.options.enable && this.options.ci) {
-      const useLegacyName = this.fs.exists(
-        this.destinationPath(".github/workflows/publish.yml"),
-      );
-
-      const name = useLegacyName ? "publish.yml" : "release.yml";
+      this.fs.delete(this.destinationPath(".github/workflows/publish.yml"));
 
-      // TODO rename release (release = version + publish)
       this.fs.copyTpl(
         this.templatePath("workflow-release.yml.ejs"),
-        this.destinationPath(`.github/workflows/${name}`),
+        this.destinationPath(".github/workflows/release.yml"),
         {
           packageManager: this.options.packageManager,
           enablePublish: this.options.enablePublish,

package/lib/generators/common/release/templates/workflow-release.yml.ejs

@@ -24,13 +24,17 @@ on:
         default: "major"
 <% } -%>
 
+permissions:
+  id-token: write # Required for OIDC
+  contents: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
         with:
-          token: ${{ secrets.GH_TOKEN }}
+          ssh-key: ${{ secrets.PUSH_DEPLOY_KEY }}
           fetch-depth: 0
           fetch-tags: true
 <% if (packageManager === 'yarn') { -%>
@@ -73,7 +77,7 @@ jobs:
 
       - name: New version (dry run)
         if: github.ref == 'refs/heads/main' && inputs.dry-run
-        run: yarn yarn-version version --dry-run<% if (isMonorepo && isMonorepoIndependent) { %> --bump-dependents-highest-as=${{ inputs.bump-dependents-highest-as }}<% } %>
+        run: <%= packageManager %> run pob-version --dry-run<% if (isMonorepo && isMonorepoIndependent) { %> --bump-dependents-highest-as=${{ inputs.bump-dependents-highest-as }}<% } %>
 
       - name: Configure Git user
         if: github.ref == 'refs/heads/main' && !inputs.dry-run
@@ -84,27 +88,27 @@ jobs:
       - name: New version
         if: github.ref == 'refs/heads/main' && !inputs.dry-run
         run: |
-          yarn yarn-version version --create-release=github <% if (isMonorepo && isMonorepoIndependent) { %> --bump-dependents-highest-as=${{ inputs.bump-dependents-highest-as }}<% } %> -m 'chore: release <%- isMonorepoIndependent ? '' : '%v ' %>[skip ci]<%- isMonorepoIndependent ? '\\n\\n%t' : '' %>'
+          <%= packageManager %> run pob-version <% if (enablePublish && packageManager === "bun") { %>--publish <% } %>--create-release=github <% if (isMonorepo && isMonorepoIndependent) { %> --bump-dependents-highest-as=${{ inputs.bump-dependents-highest-as }}<% } %> -m 'chore: release <%- isMonorepoIndependent ? '' : '%v ' %>[skip ci]<%- isMonorepoIndependent ? '\\n\\n%t' : '' %>'
         env:
           HUSKY: 0
-          GH_TOKEN: ${{ secrets.GH_TOKEN }}
           YARN_ENABLE_IMMUTABLE_INSTALLS: false
-<% if (enablePublish) { -%>
+          GH_TOKEN: {{ secrets.GITHUB_TOKEN }}
+<% if (enablePublish && packageManager === "yarn") { -%>
 
       - name: Publish to npm
+        if: github.ref == 'refs/heads/main' && !inputs.dry-run
         run: |
-          if [ -z "$NODE_AUTH_TOKEN" ]; then
-            echo "Missing env variable NODE_AUTH_TOKEN"
+          if [ -z "$NPM_AUTH_TOKEN" ]; then
+            echo "Missing env variable NPM_AUTH_TOKEN"
             exit 1
           fi
           echo >> ./.yarnrc.yml
-          echo "npmAuthToken: $NODE_AUTH_TOKEN" >> ./.yarnrc.yml
+          echo "npmAuthToken: $NPM_AUTH_TOKEN" >> ./.yarnrc.yml
 <% if (isMonorepo) { -%>
           yarn workspaces foreach --all --parallel --no-private npm publish --tolerate-republish
 <% } else { -%>
           yarn npm publish
 <% } -%>
-        if: github.ref == 'refs/heads/main' && !inputs.dry-run
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 <% } -%>

package/lib/generators/common/testing/CommonTestingGenerator.js

@@ -1,6 +1,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import Generator from "yeoman-generator";
+import { quoteArg } from "../../../utils/execUtils.js";
 import inMonorepo from "../../../utils/inMonorepo.js";
 import * as packageUtils from "../../../utils/package.js";
 import {
@@ -446,9 +447,7 @@ export default class CommonTestingGenerator extends Generator {
               delete pkg.scripts["test:coverage"];
             }
             packageUtils.addScripts(pkg, {
-              test: `yarn ../../ run test -- ${path
-                .relative("../..", ".")
-                .replace("\\", "/")}`,
+              test: `yarn ../../ run test -- ${quoteArg(path.relative("../..", "."))}`,
             });
           } else {
             const withTypescript =

package/lib/generators/core/bun/CoreBunGenerator.js

@@ -27,8 +27,14 @@ export default class CoreBunGenerator extends Generator {
     const pkg = this.fs.readJSON(this.destinationPath("package.json"));
 
     if (this.options.enable) {
+      this.fs.copyTpl(
+        this.templatePath("bunfig.toml.ejs"),
+        this.destinationPath("bunfig.toml"),
+        {},
+      );
     } else {
       this.fs.delete("bun.lock");
+      this.fs.delete("bunfig.toml");
     }
 
     this.fs.writeJSON(this.destinationPath("package.json"), pkg);

package/lib/generators/core/bun/templates/bunfig.toml.ejs

@@ -0,0 +1,3 @@
+[install]
+# Only install package versions published at least 3 days ago
+minimumReleaseAge = 259200 # seconds - in #23162 it'll allow "3d" too

package/lib/generators/core/yarn/CoreYarnGenerator.js

@@ -159,7 +159,7 @@ export default class CoreYarnGenerator extends Generator {
         // leave default compressionLevel instead of this next line
         delete config.compressionLevel;
         // config.compressionLevel = "mixed"; // optimized for size
-        config.enableGlobalCache = "true";
+        config.enableGlobalCache = true;
         delete config.supportedArchitectures;
       } else {
         config.compressionLevel = 0; // optimized for github config
@@ -175,6 +175,14 @@ export default class CoreYarnGenerator extends Generator {
       config.defaultSemverRangePrefix = this.options.type === "app" ? "" : "^";
       delete config.enableMessageNames; // was a config for yarn < 4
       config.nodeLinker = this.options.yarnNodeLinker;
+      config.npmMinimalAgeGate = 1440 * 3; // 3 days
+      config.npmPreapprovedPackages = [
+        "@pob/*",
+        "alouette",
+        "alouette-icons",
+        "nightingale",
+        "nightingale-logger",
+      ];
 
       if (config.yarnPath) {
         this.fs.delete(config.yarnPath);

package/lib/utils/execUtils.js

@@ -0,0 +1,3 @@
+export const quoteArg = (s) => {
+  return `'${s.replace(/'/g, "'\"'")}'`;
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pob",
-  "version": "30.0.0",
+  "version": "31.0.1",
   "description": "Pile of bones, library generator with git/babel/typescript/typedoc/readme/jest",
   "keywords": [
     "skeleton"
@@ -36,7 +36,7 @@
     "build:definitions": "tsc -p tsconfig.json",
     "format": "prettier --write",
     "lint": "yarn run lint:eslint",
-    "lint:eslint": "yarn ../.. run eslint --quiet packages/pob"
+    "lint:eslint": "yarn ../.. run eslint --quiet 'packages/pob'"
   },
   "pob": {
     "typescript": "check-only"
@@ -46,8 +46,8 @@
     "@pob/eslint-config": "62.0.0",
     "@pob/eslint-config-typescript": "62.0.0",
     "@pob/eslint-config-typescript-react": "62.0.0",
-    "@pob/sort-object": "10.1.0",
-    "@pob/sort-pkg": "12.1.0",
+    "@pob/sort-object": "10.1.1",
+    "@pob/sort-pkg": "12.1.1",
     "@prettier/sync": "0.6.1",
     "@types/inquirer": "9.0.9",
     "@yeoman/adapter": "3.1.0",
@@ -64,7 +64,7 @@
     "mem-fs-editor": "11.1.4",
     "minimist": "1.2.8",
     "parse-author": "2.0.0",
-    "pob-dependencies": "21.0.0",
+    "pob-dependencies": "21.0.1",
     "prettier": "3.6.2",
     "semver": "7.7.3",
     "typescript": "5.9.3",
@@ -73,7 +73,7 @@
     "yeoman-generator": "7.5.1"
   },
   "devDependencies": {
-    "@pob/root": "20.0.0",
+    "@pob/root": "20.0.2",
     "@types/node": "22.19.1"
   }
 }