renovate 40.0.0-next.4 → 40.0.0-next.41

package/dist/modules/manager/npm/post-update/npm.js.map

@@ -1 +1 @@
-{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/npm/post-update/npm.ts"],"names":[],"mappings":";;AA6DA,4CAuMC;AAED,gEA0EC;;AAhVD,uBAAuB;AACvB,kEAAkC;AAClC,4DAA4B;AAC5B,0DAA0B;AAC1B,sDAAyD;AACzD,yEAG8C;AAC9C,+CAA4C;AAC5C,gDAA6C;AAM7C,4CAK6B;AAC7B,0DAAuD;AACvD,oDAAiD;AACjD,8CAAmD;AAEnD,sCAAwC;AACxC,oCAA0D;AAC1D,iDAAuD;AAEvD,mCAAwE;AAExE,KAAK,UAAU,+BAA+B,CAC5C,WAAmB,EACnB,QAAgB;IAEhB,MAAM,mBAAmB,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,mBAAmB,GAAG,MAAM,IAAA,kBAAa,EAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,eAAM,CAAC,KAAK,CAClC,mBAAmB,EACnB,oBAAW,CACZ,CAAC,YAAY,EAAE,CAAC;IACjB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAM,CAAC,KAAK,CAAC,mBAAmB,mBAAmB,EAAE,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,eAAe,EAAE,GAAG,eAAe,CAAC;IAC5C,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC1B,eAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC1B,eAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,eAAM,CAAC,KAAK,CACV,gDAAgD,eAAe,EAAE,CAClE,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,GAAsB,EACtB,QAAgB,EAChB,SAAoC,EAAE,EACtC,WAAsB,EAAE;IAExB,gEAAgE;IAChE,MAAM,YAAY,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEvD,eAAM,CAAC,KAAK,CAAC,kCAAkC,WAAW,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IAEnD,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,2BAAmB,EAAC,WAAW,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAmB;YACxC,QAAQ,EAAE,KAAK;YACf,UAAU,EACR,MAAM,CAAC,WAAW,EAAE,GAAG;gBACvB,IAAA,gCAAwB,EAAC,KAAK,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC7D,CAAC,MAAM,+BAA+B,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC9D,IAAI;SACP,CAAC;QACF,MAAM,wBAAwB,GAC5B,CAAC,iBAAiB,CAAC,UAAU;YAC7B,gBAAM,CAAC,UAAU,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IACE,CAAC,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI;YAChD,CAAC,wBAAwB,CAAC;YAC5B,YAAY,KAAK,KAAK,EACtB,CAAC;YACD,eAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAChD,UAAU,IAAI,YAAY,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxC,UAAU,IAAI,gCAAgC,CAAC;QACjD,CAAC;QAED,IAAI,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,wBAAwB,EAAE,CAAC;YACzE,eAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,UAAU,IAAI,kBAAkB,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9D,UAAU,IAAI,mBAAmB,CAAC;QACpC,CAAC;QAED,MAAM,QAAQ,GAAa;YACzB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;SACvC,CAAC;QACF,MAAM,WAAW,GAAgB;YAC/B,OAAO,EAAE,YAAY;YACrB,iBAAiB,EAAE,MAAM,CAAC,GAAG;YAC7B,QAAQ;YACR,eAAe,EAAE;gBACf,MAAM,IAAA,oCAAqB,EAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;gBACvE,iBAAiB;aAClB;YACD,MAAM,EAAE,EAAE;SACX,CAAC;QACF,qBAAqB;QACrB,IAAI,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3D,2DAA2D;YAC3D,QAAQ,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,kCAAkC;QAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAE3E,wDAAwD;QACxD,MAAM,EAAE,eAAe,EAAE,qBAAqB,EAAE,UAAU,EAAE,QAAQ,EAAE,GACpE,0BAA0B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAEvD,IAAI,UAAU,CAAC,IAAI,IAAI,qBAAqB,CAAC,MAAM,EAAE,CAAC;YACpD,eAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC3D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,uBAAuB,GAAG,qBAAqB;qBAClD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;qBAClD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;qBAC/C,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;gBAErD,IAAI,uBAAuB,CAAC,MAAM,EAAE,CAAC;oBACnC,MAAM,SAAS,GAAG,eAAe,UAAU,gBAAgB,SAAS,IAAI,uBAAuB,CAAC,IAAI,CAClG,GAAG,CACJ,EAAE,CAAC;oBACJ,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;YAC3B,eAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAChD,MAAM,SAAS,GACb,eAAe,UAAU,GAAG;gBAC5B,eAAe;qBACZ,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;qBAC/C,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACtD,oDAAoD;YACpD,QAAQ,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,oBAAoB;QACpB,IACE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC;YAC/C,CAAC,wBAAwB,EACzB,CAAC;YACD,eAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC9D,eAAM,CAAC,KAAK,CACV,YAAY,YAAY,6CAA6C,CACtE,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAA,oBAAe,EAAC,YAAY,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBACxC,eAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,8DAA8D,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAA,WAAI,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAElC,qCAAqC;QACrC,IACE,QAAQ,KAAK,qBAAqB;YAClC,CAAC,MAAM,IAAA,oBAAe,EAAC,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrE,CAAC;YACD,MAAM,IAAA,oBAAe,EACnB,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAC5C,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAC/C,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,cAAc;QACd,QAAQ,GAAG,CAAC,MAAM,IAAA,kBAAa,EAC7B,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EACjC,MAAM,CACP,CAAE,CAAC;QAEJ,mEAAmE;QACnE,4FAA4F;QAC5F,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,IAAA,qBAAa,EAAC,QAAQ,CAAC,CAAC;YACnE,IACE,cAAc,EAAE,eAAe,KAAK,CAAC;gBACrC,cAAc,EAAE,eAAe,KAAK,CAAC,EACrC,CAAC;gBACD,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;oBACjC,MAAM,OAAO,GAAG,UAAU,CAAC,OAED,CAAC;oBAE3B,cAAc;oBACd,IACE,cAAc,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,WAAY,CAAC,EACnE,CAAC;wBACD,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,WAAY,CAAC;4BAC3D,UAAU,CAAC,QAAS,CAAC;oBACzB,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,QAAQ,GAAG,IAAA,uBAAe,EAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,KAAK,gCAAe,EAAE,CAAC;YACpC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,eAAM,CAAC,KAAK,CACV;YACE,GAAG;YACH,IAAI,EAAE,KAAK;SACZ,EACD,iBAAiB,CAClB,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,+CAA8B,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,SAAgB,0BAA0B,CACxC,WAAmB,EACnB,WAAsB;IAOtB,MAAM,eAAe,GAAc,EAAE,CAAC,CAAC,6DAA6D;IACpG,MAAM,qBAAqB,GAAc,EAAE,CAAC,CAAC,mEAAmE;IAChH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,yBAAyB;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,2FAA2F;IAE/H,wDAAwD;IACxD,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,OAAO,CAAC,WAAW,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,WAAW,CAAC,UAAU,GAAG,kBAAkB,CACjD,OAAO,CAAC,WAAY,EACpB,OAAO,CAAC,UAAW,CACpB,CAAC;QACF,IACE,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,MAAM;YAC9C,YAAE,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAC9B,CAAC;YACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,sCAAsC;YACxG,MAAM,cAAc,GAAG,IAAA,iBAAW,EAChC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAChD,CAAC;YAEF,8CAA8C;YAC9C,MAAM,YAAY,GAAG,IAAA,iBAAW,EAC9B,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC;gBACpC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC1C,CAAC,CAAC,cAAc,CACnB,CAAC;YAEF,IAAI,YAAE,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,IAAI,aAAiC,CAAC;gBACtC,6CAA6C;gBAC7C,yCAAyC;gBACzC,wDAAwD;gBACxD,KAAK,MAAM,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;oBACjD,MAAM,eAAe,GAAI,gBAA2B,CAAC,OAAO,CAC1D,OAAO,EACP,EAAE,CACH,CAAC;oBACF,IAAI,IAAA,qBAAS,EAAC,eAAe,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;wBACnD,aAAa,GAAG,YAAY,CAAC;wBAC7B,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,IACE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,uDAAuD;sBACrG,CAAC;wBACD,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBAC9B,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;wBAClC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACtC,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,eAAM,CAAC,IAAI,CACT,EAAE,iBAAiB,EAAE,YAAY,EAAE,EACnC,wBAAwB,CACzB,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;QACH,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,OAAe;IAC9D,OAAO,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC;AACrC,CAAC","sourcesContent":["// TODO: types (#22198)\nimport is from '@sindresorhus/is';\nimport semver from 'semver';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../../constants/error-messages';\nimport { logger } from '../../../../logger';\nimport { exec } from '../../../../util/exec';\nimport type {\n  ExecOptions,\n  ExtraEnv,\n  ToolConstraint,\n} from '../../../../util/exec/types';\nimport {\n  deleteLocalFile,\n  localPathExists,\n  readLocalFile,\n  renameLocalFile,\n} from '../../../../util/fs';\nimport { minimatch } from '../../../../util/minimatch';\nimport { Result } from '../../../../util/result';\nimport { trimSlashes } from '../../../../util/url';\nimport type { PostUpdateConfig, Upgrade } from '../../types';\nimport { PackageLock } from '../schema';\nimport { composeLockFile, parseLockFile } from '../utils';\nimport { getNodeToolConstraint } from './node-version';\nimport type { GenerateLockFileResult } from './types';\nimport { getPackageManagerVersion, lazyLoadPackageJson } from './utils';\n\nasync function getNpmConstraintFromPackageLock(\n  lockFileDir: string,\n  filename: string,\n): Promise<string | null> {\n  const packageLockFileName = upath.join(lockFileDir, filename);\n  const packageLockContents = await readLocalFile(packageLockFileName, 'utf8');\n  const packageLockJson = Result.parse(\n    packageLockContents,\n    PackageLock,\n  ).unwrapOrNull();\n  if (!packageLockJson) {\n    logger.debug(`Could not parse ${packageLockFileName}`);\n    return null;\n  }\n  const { lockfileVersion } = packageLockJson;\n  if (lockfileVersion === 1) {\n    logger.debug(`Using npm constraint <7 for lockfileVersion=1`);\n    return `<7`;\n  }\n  if (lockfileVersion === 2) {\n    logger.debug(`Using npm constraint <9 for lockfileVersion=2`);\n    return `<9`;\n  }\n  logger.debug(\n    `Using npm constraint >=9 for lockfileVersion=${lockfileVersion}`,\n  );\n  return `>=9`;\n}\n\nexport async function generateLockFile(\n  lockFileDir: string,\n  env: NodeJS.ProcessEnv,\n  filename: string,\n  config: Partial<PostUpdateConfig> = {},\n  upgrades: Upgrade[] = [],\n): Promise<GenerateLockFileResult> {\n  // TODO: don't assume package-lock.json is in the same directory\n  const lockFileName = upath.join(lockFileDir, filename);\n\n  logger.debug(`Spawning npm install to create ${lockFileDir}/${filename}`);\n  const { skipInstalls, postUpdateOptions } = config;\n\n  let lockFile: string | null = null;\n  try {\n    const lazyPkgJson = lazyLoadPackageJson(lockFileDir);\n    const npmToolConstraint: ToolConstraint = {\n      toolName: 'npm',\n      constraint:\n        config.constraints?.npm ??\n        getPackageManagerVersion('npm', await lazyPkgJson.getValue()) ??\n        (await getNpmConstraintFromPackageLock(lockFileDir, filename)) ??\n        null,\n    };\n    const supportsPreferDedupeFlag =\n      !npmToolConstraint.constraint ||\n      semver.intersects('>=7.0.0', npmToolConstraint.constraint);\n    const commands: string[] = [];\n    let cmdOptions = '';\n    if (\n      (postUpdateOptions?.includes('npmDedupe') === true &&\n        !supportsPreferDedupeFlag) ||\n      skipInstalls === false\n    ) {\n      logger.debug('Performing node_modules install');\n      cmdOptions += '--no-audit';\n    } else {\n      logger.debug('Updating lock file only');\n      cmdOptions += '--package-lock-only --no-audit';\n    }\n\n    if (postUpdateOptions?.includes('npmDedupe') && supportsPreferDedupeFlag) {\n      logger.debug('Deduplicate dependencies on installation');\n      cmdOptions += ' --prefer-dedupe';\n    }\n\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      cmdOptions += ' --ignore-scripts';\n    }\n\n    const extraEnv: ExtraEnv = {\n      NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,\n      npm_config_store: env.npm_config_store,\n    };\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      userConfiguredEnv: config.env,\n      extraEnv,\n      toolConstraints: [\n        await getNodeToolConstraint(config, upgrades, lockFileDir, lazyPkgJson),\n        npmToolConstraint,\n      ],\n      docker: {},\n    };\n    // istanbul ignore if\n    if (GlobalConfig.get('exposeAllEnv')) {\n      extraEnv.NPM_AUTH = env.NPM_AUTH;\n      extraEnv.NPM_EMAIL = env.NPM_EMAIL;\n    }\n\n    if (!upgrades.every((upgrade) => upgrade.isLockfileUpdate)) {\n      // This command updates the lock file based on package.json\n      commands.push(`npm install ${cmdOptions}`.trim());\n    }\n\n    // rangeStrategy = update-lockfile\n    const lockUpdates = upgrades.filter((upgrade) => upgrade.isLockfileUpdate);\n\n    // divide the deps in two categories: workspace and root\n    const { lockRootUpdates, lockWorkspacesUpdates, workspaces, rootDeps } =\n      divideWorkspaceAndRootDeps(lockFileDir, lockUpdates);\n\n    if (workspaces.size && lockWorkspacesUpdates.length) {\n      logger.debug('Performing lockfileUpdate (npm-workspaces)');\n      for (const workspace of workspaces) {\n        const currentWorkspaceUpdates = lockWorkspacesUpdates\n          .filter((update) => update.workspace === workspace)\n          .map((update) => update.managerData?.packageKey)\n          .filter((packageKey) => !rootDeps.has(packageKey));\n\n        if (currentWorkspaceUpdates.length) {\n          const updateCmd = `npm install ${cmdOptions} --workspace=${workspace} ${currentWorkspaceUpdates.join(\n            ' ',\n          )}`;\n          commands.push(updateCmd);\n        }\n      }\n    }\n\n    if (lockRootUpdates.length) {\n      logger.debug('Performing lockfileUpdate (npm)');\n      const updateCmd =\n        `npm install ${cmdOptions} ` +\n        lockRootUpdates\n          .map((update) => update.managerData?.packageKey)\n          .join(' ');\n      commands.push(updateCmd);\n    }\n\n    if (upgrades.some((upgrade) => upgrade.isRemediation)) {\n      // We need to run twice to get the correct lock file\n      commands.push(`npm install ${cmdOptions}`.trim());\n    }\n\n    // postUpdateOptions\n    if (\n      config.postUpdateOptions?.includes('npmDedupe') &&\n      !supportsPreferDedupeFlag\n    ) {\n      logger.debug('Performing npm dedupe after installation');\n      commands.push('npm dedupe');\n    }\n\n    if (upgrades.find((upgrade) => upgrade.isLockFileMaintenance)) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n      try {\n        await deleteLocalFile(lockFileName);\n      } catch (err) /* istanbul ignore next */ {\n        logger.debug(\n          { err, lockFileName },\n          'Error removing `package-lock.json` for lock file maintenance',\n        );\n      }\n    }\n\n    // Run the commands\n    await exec(commands, execOptions);\n\n    // massage to shrinkwrap if necessary\n    if (\n      filename === 'npm-shrinkwrap.json' &&\n      (await localPathExists(upath.join(lockFileDir, 'package-lock.json')))\n    ) {\n      await renameLocalFile(\n        upath.join(lockFileDir, 'package-lock.json'),\n        upath.join(lockFileDir, 'npm-shrinkwrap.json'),\n      );\n    }\n\n    // Read the result\n    // TODO #22198\n    lockFile = (await readLocalFile(\n      upath.join(lockFileDir, filename),\n      'utf8',\n    ))!;\n\n    // Massage lockfile counterparts of package.json that were modified\n    // because npm install was called with an explicit version for rangeStrategy=update-lockfile\n    if (lockUpdates.length) {\n      const { detectedIndent, lockFileParsed } = parseLockFile(lockFile);\n      if (\n        lockFileParsed?.lockfileVersion === 2 ||\n        lockFileParsed?.lockfileVersion === 3\n      ) {\n        lockUpdates.forEach((lockUpdate) => {\n          const depType = lockUpdate.depType as\n            | 'dependencies'\n            | 'optionalDependencies';\n\n          // TODO #22198\n          if (\n            lockFileParsed.packages?.['']?.[depType]?.[lockUpdate.packageName!]\n          ) {\n            lockFileParsed.packages[''][depType][lockUpdate.packageName!] =\n              lockUpdate.newValue!;\n          }\n        });\n        lockFile = composeLockFile(lockFileParsed, detectedIndent);\n      }\n    }\n  } catch (err) /* istanbul ignore next */ {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug(\n      {\n        err,\n        type: 'npm',\n      },\n      'lock file error',\n    );\n    if (err.stderr?.includes('ENOSPC: no space left on device')) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    }\n    return { error: true, stderr: err.stderr };\n  }\n  return { error: !lockFile, lockFile };\n}\n\nexport function divideWorkspaceAndRootDeps(\n  lockFileDir: string,\n  lockUpdates: Upgrade[],\n): {\n  lockRootUpdates: Upgrade[];\n  lockWorkspacesUpdates: Upgrade[];\n  workspaces: Set<string>;\n  rootDeps: Set<string>;\n} {\n  const lockRootUpdates: Upgrade[] = []; // stores all upgrades which are present in root package.json\n  const lockWorkspacesUpdates: Upgrade[] = []; // stores all upgrades which are present in workspaces package.json\n  const workspaces = new Set<string>(); // name of all workspaces\n  const rootDeps = new Set<string>(); // packageName of all upgrades in root package.json (makes it check duplicate deps in root)\n\n  // divide the deps in two categories: workspace and root\n  for (const upgrade of lockUpdates) {\n    upgrade.managerData ??= {};\n    upgrade.managerData.packageKey = generatePackageKey(\n      upgrade.packageName!,\n      upgrade.newVersion!,\n    );\n    if (\n      upgrade.managerData.workspacesPackages?.length &&\n      is.string(upgrade.packageFile)\n    ) {\n      const workspacePatterns = upgrade.managerData.workspacesPackages; // glob pattern or directory name/path\n      const packageFileDir = trimSlashes(\n        upgrade.packageFile.replace('package.json', ''),\n      );\n\n      // workspaceDir = packageFileDir - lockFileDir\n      const workspaceDir = trimSlashes(\n        packageFileDir.startsWith(lockFileDir)\n          ? packageFileDir.slice(lockFileDir.length)\n          : packageFileDir,\n      );\n\n      if (is.nonEmptyString(workspaceDir)) {\n        let workspaceName: string | undefined;\n        // compare workspaceDir to workspace patterns\n        // stop when the first match is found and\n        // add workspaceDir to workspaces set and upgrade object\n        for (const workspacePattern of workspacePatterns) {\n          const massagedPattern = (workspacePattern as string).replace(\n            /^\\.\\//,\n            '',\n          );\n          if (minimatch(massagedPattern).match(workspaceDir)) {\n            workspaceName = workspaceDir;\n            break;\n          }\n        }\n        if (workspaceName) {\n          if (\n            !rootDeps.has(upgrade.managerData.packageKey) // prevent same dep from existing in root and workspace\n          ) {\n            workspaces.add(workspaceName);\n            upgrade.workspace = workspaceName;\n            lockWorkspacesUpdates.push(upgrade);\n          }\n        } else {\n          logger.warn(\n            { workspacePatterns, workspaceDir },\n            'workspaceDir not found',\n          );\n        }\n        continue;\n      }\n    }\n    lockRootUpdates.push(upgrade);\n    rootDeps.add(upgrade.managerData.packageKey);\n  }\n\n  return { lockRootUpdates, lockWorkspacesUpdates, workspaces, rootDeps };\n}\n\nfunction generatePackageKey(packageName: string, version: string): string {\n  return `${packageName}@${version}`;\n}\n"]}
+{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/npm/post-update/npm.ts"],"names":[],"mappings":";;AA6DA,4CAsMC;AAED,gEA0EC;;AA/UD,uBAAuB;AACvB,kEAAkC;AAClC,4DAA4B;AAC5B,0DAA0B;AAC1B,sDAAyD;AACzD,yEAG8C;AAC9C,+CAA4C;AAC5C,gDAA6C;AAM7C,4CAK6B;AAC7B,0DAAuD;AACvD,oDAAiD;AACjD,8CAAmD;AAEnD,sCAAwC;AACxC,oCAA0D;AAC1D,iDAAuD;AAEvD,mCAAwE;AAExE,KAAK,UAAU,+BAA+B,CAC5C,WAAmB,EACnB,QAAgB;IAEhB,MAAM,mBAAmB,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,mBAAmB,GAAG,MAAM,IAAA,kBAAa,EAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,eAAM,CAAC,KAAK,CAClC,mBAAmB,EACnB,oBAAW,CACZ,CAAC,YAAY,EAAE,CAAC;IACjB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAM,CAAC,KAAK,CAAC,mBAAmB,mBAAmB,EAAE,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,eAAe,EAAE,GAAG,eAAe,CAAC;IAC5C,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC1B,eAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC1B,eAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,eAAM,CAAC,KAAK,CACV,gDAAgD,eAAe,EAAE,CAClE,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,GAAsB,EACtB,QAAgB,EAChB,SAAoC,EAAE,EACtC,WAAsB,EAAE;IAExB,gEAAgE;IAChE,MAAM,YAAY,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEvD,eAAM,CAAC,KAAK,CAAC,kCAAkC,WAAW,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IAEnD,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,2BAAmB,EAAC,WAAW,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAmB;YACxC,QAAQ,EAAE,KAAK;YACf,UAAU,EACR,MAAM,CAAC,WAAW,EAAE,GAAG;gBACvB,IAAA,gCAAwB,EAAC,KAAK,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC7D,CAAC,MAAM,+BAA+B,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC9D,IAAI;SACP,CAAC;QACF,MAAM,wBAAwB,GAC5B,CAAC,iBAAiB,CAAC,UAAU;YAC7B,gBAAM,CAAC,UAAU,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IACE,CAAC,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI;YAChD,CAAC,wBAAwB,CAAC;YAC5B,YAAY,KAAK,KAAK,EACtB,CAAC;YACD,eAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAChD,UAAU,IAAI,YAAY,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxC,UAAU,IAAI,gCAAgC,CAAC;QACjD,CAAC;QAED,IAAI,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,wBAAwB,EAAE,CAAC;YACzE,eAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,UAAU,IAAI,kBAAkB,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9D,UAAU,IAAI,mBAAmB,CAAC;QACpC,CAAC;QAED,MAAM,QAAQ,GAAa;YACzB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;SACvC,CAAC;QACF,MAAM,WAAW,GAAgB;YAC/B,OAAO,EAAE,YAAY;YACrB,QAAQ;YACR,eAAe,EAAE;gBACf,MAAM,IAAA,oCAAqB,EAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;gBACvE,iBAAiB;aAClB;YACD,MAAM,EAAE,EAAE;SACX,CAAC;QACF,qBAAqB;QACrB,IAAI,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3D,2DAA2D;YAC3D,QAAQ,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,kCAAkC;QAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAE3E,wDAAwD;QACxD,MAAM,EAAE,eAAe,EAAE,qBAAqB,EAAE,UAAU,EAAE,QAAQ,EAAE,GACpE,0BAA0B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAEvD,IAAI,UAAU,CAAC,IAAI,IAAI,qBAAqB,CAAC,MAAM,EAAE,CAAC;YACpD,eAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC3D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,uBAAuB,GAAG,qBAAqB;qBAClD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;qBAClD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;qBAC/C,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;gBAErD,IAAI,uBAAuB,CAAC,MAAM,EAAE,CAAC;oBACnC,MAAM,SAAS,GAAG,eAAe,UAAU,gBAAgB,SAAS,IAAI,uBAAuB,CAAC,IAAI,CAClG,GAAG,CACJ,EAAE,CAAC;oBACJ,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;YAC3B,eAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAChD,MAAM,SAAS,GACb,eAAe,UAAU,GAAG;gBAC5B,eAAe;qBACZ,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;qBAC/C,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACtD,oDAAoD;YACpD,QAAQ,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,oBAAoB;QACpB,IACE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC;YAC/C,CAAC,wBAAwB,EACzB,CAAC;YACD,eAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC9D,eAAM,CAAC,KAAK,CACV,YAAY,YAAY,6CAA6C,CACtE,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAA,oBAAe,EAAC,YAAY,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBACxC,eAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,8DAA8D,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAA,WAAI,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAElC,qCAAqC;QACrC,IACE,QAAQ,KAAK,qBAAqB;YAClC,CAAC,MAAM,IAAA,oBAAe,EAAC,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrE,CAAC;YACD,MAAM,IAAA,oBAAe,EACnB,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAC5C,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAC/C,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,cAAc;QACd,QAAQ,GAAG,CAAC,MAAM,IAAA,kBAAa,EAC7B,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EACjC,MAAM,CACP,CAAE,CAAC;QAEJ,mEAAmE;QACnE,4FAA4F;QAC5F,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,IAAA,qBAAa,EAAC,QAAQ,CAAC,CAAC;YACnE,IACE,cAAc,EAAE,eAAe,KAAK,CAAC;gBACrC,cAAc,EAAE,eAAe,KAAK,CAAC,EACrC,CAAC;gBACD,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;oBACjC,MAAM,OAAO,GAAG,UAAU,CAAC,OAED,CAAC;oBAE3B,cAAc;oBACd,IACE,cAAc,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,WAAY,CAAC,EACnE,CAAC;wBACD,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,WAAY,CAAC;4BAC3D,UAAU,CAAC,QAAS,CAAC;oBACzB,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,QAAQ,GAAG,IAAA,uBAAe,EAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,KAAK,gCAAe,EAAE,CAAC;YACpC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,eAAM,CAAC,KAAK,CACV;YACE,GAAG;YACH,IAAI,EAAE,KAAK;SACZ,EACD,iBAAiB,CAClB,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,+CAA8B,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,SAAgB,0BAA0B,CACxC,WAAmB,EACnB,WAAsB;IAOtB,MAAM,eAAe,GAAc,EAAE,CAAC,CAAC,6DAA6D;IACpG,MAAM,qBAAqB,GAAc,EAAE,CAAC,CAAC,mEAAmE;IAChH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,yBAAyB;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,2FAA2F;IAE/H,wDAAwD;IACxD,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,OAAO,CAAC,WAAW,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,WAAW,CAAC,UAAU,GAAG,kBAAkB,CACjD,OAAO,CAAC,WAAY,EACpB,OAAO,CAAC,UAAW,CACpB,CAAC;QACF,IACE,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,MAAM;YAC9C,YAAE,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAC9B,CAAC;YACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,sCAAsC;YACxG,MAAM,cAAc,GAAG,IAAA,iBAAW,EAChC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAChD,CAAC;YAEF,8CAA8C;YAC9C,MAAM,YAAY,GAAG,IAAA,iBAAW,EAC9B,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC;gBACpC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC1C,CAAC,CAAC,cAAc,CACnB,CAAC;YAEF,IAAI,YAAE,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,IAAI,aAAiC,CAAC;gBACtC,6CAA6C;gBAC7C,yCAAyC;gBACzC,wDAAwD;gBACxD,KAAK,MAAM,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;oBACjD,MAAM,eAAe,GAAI,gBAA2B,CAAC,OAAO,CAC1D,OAAO,EACP,EAAE,CACH,CAAC;oBACF,IAAI,IAAA,qBAAS,EAAC,eAAe,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;wBACnD,aAAa,GAAG,YAAY,CAAC;wBAC7B,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,IACE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,uDAAuD;sBACrG,CAAC;wBACD,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBAC9B,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;wBAClC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACtC,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,eAAM,CAAC,IAAI,CACT,EAAE,iBAAiB,EAAE,YAAY,EAAE,EACnC,wBAAwB,CACzB,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;QACH,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,OAAe;IAC9D,OAAO,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC;AACrC,CAAC","sourcesContent":["// TODO: types (#22198)\nimport is from '@sindresorhus/is';\nimport semver from 'semver';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../../constants/error-messages';\nimport { logger } from '../../../../logger';\nimport { exec } from '../../../../util/exec';\nimport type {\n  ExecOptions,\n  ExtraEnv,\n  ToolConstraint,\n} from '../../../../util/exec/types';\nimport {\n  deleteLocalFile,\n  localPathExists,\n  readLocalFile,\n  renameLocalFile,\n} from '../../../../util/fs';\nimport { minimatch } from '../../../../util/minimatch';\nimport { Result } from '../../../../util/result';\nimport { trimSlashes } from '../../../../util/url';\nimport type { PostUpdateConfig, Upgrade } from '../../types';\nimport { PackageLock } from '../schema';\nimport { composeLockFile, parseLockFile } from '../utils';\nimport { getNodeToolConstraint } from './node-version';\nimport type { GenerateLockFileResult } from './types';\nimport { getPackageManagerVersion, lazyLoadPackageJson } from './utils';\n\nasync function getNpmConstraintFromPackageLock(\n  lockFileDir: string,\n  filename: string,\n): Promise<string | null> {\n  const packageLockFileName = upath.join(lockFileDir, filename);\n  const packageLockContents = await readLocalFile(packageLockFileName, 'utf8');\n  const packageLockJson = Result.parse(\n    packageLockContents,\n    PackageLock,\n  ).unwrapOrNull();\n  if (!packageLockJson) {\n    logger.debug(`Could not parse ${packageLockFileName}`);\n    return null;\n  }\n  const { lockfileVersion } = packageLockJson;\n  if (lockfileVersion === 1) {\n    logger.debug(`Using npm constraint <7 for lockfileVersion=1`);\n    return `<7`;\n  }\n  if (lockfileVersion === 2) {\n    logger.debug(`Using npm constraint <9 for lockfileVersion=2`);\n    return `<9`;\n  }\n  logger.debug(\n    `Using npm constraint >=9 for lockfileVersion=${lockfileVersion}`,\n  );\n  return `>=9`;\n}\n\nexport async function generateLockFile(\n  lockFileDir: string,\n  env: NodeJS.ProcessEnv,\n  filename: string,\n  config: Partial<PostUpdateConfig> = {},\n  upgrades: Upgrade[] = [],\n): Promise<GenerateLockFileResult> {\n  // TODO: don't assume package-lock.json is in the same directory\n  const lockFileName = upath.join(lockFileDir, filename);\n\n  logger.debug(`Spawning npm install to create ${lockFileDir}/${filename}`);\n  const { skipInstalls, postUpdateOptions } = config;\n\n  let lockFile: string | null = null;\n  try {\n    const lazyPkgJson = lazyLoadPackageJson(lockFileDir);\n    const npmToolConstraint: ToolConstraint = {\n      toolName: 'npm',\n      constraint:\n        config.constraints?.npm ??\n        getPackageManagerVersion('npm', await lazyPkgJson.getValue()) ??\n        (await getNpmConstraintFromPackageLock(lockFileDir, filename)) ??\n        null,\n    };\n    const supportsPreferDedupeFlag =\n      !npmToolConstraint.constraint ||\n      semver.intersects('>=7.0.0', npmToolConstraint.constraint);\n    const commands: string[] = [];\n    let cmdOptions = '';\n    if (\n      (postUpdateOptions?.includes('npmDedupe') === true &&\n        !supportsPreferDedupeFlag) ||\n      skipInstalls === false\n    ) {\n      logger.debug('Performing node_modules install');\n      cmdOptions += '--no-audit';\n    } else {\n      logger.debug('Updating lock file only');\n      cmdOptions += '--package-lock-only --no-audit';\n    }\n\n    if (postUpdateOptions?.includes('npmDedupe') && supportsPreferDedupeFlag) {\n      logger.debug('Deduplicate dependencies on installation');\n      cmdOptions += ' --prefer-dedupe';\n    }\n\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      cmdOptions += ' --ignore-scripts';\n    }\n\n    const extraEnv: ExtraEnv = {\n      NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,\n      npm_config_store: env.npm_config_store,\n    };\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv,\n      toolConstraints: [\n        await getNodeToolConstraint(config, upgrades, lockFileDir, lazyPkgJson),\n        npmToolConstraint,\n      ],\n      docker: {},\n    };\n    // istanbul ignore if\n    if (GlobalConfig.get('exposeAllEnv')) {\n      extraEnv.NPM_AUTH = env.NPM_AUTH;\n      extraEnv.NPM_EMAIL = env.NPM_EMAIL;\n    }\n\n    if (!upgrades.every((upgrade) => upgrade.isLockfileUpdate)) {\n      // This command updates the lock file based on package.json\n      commands.push(`npm install ${cmdOptions}`.trim());\n    }\n\n    // rangeStrategy = update-lockfile\n    const lockUpdates = upgrades.filter((upgrade) => upgrade.isLockfileUpdate);\n\n    // divide the deps in two categories: workspace and root\n    const { lockRootUpdates, lockWorkspacesUpdates, workspaces, rootDeps } =\n      divideWorkspaceAndRootDeps(lockFileDir, lockUpdates);\n\n    if (workspaces.size && lockWorkspacesUpdates.length) {\n      logger.debug('Performing lockfileUpdate (npm-workspaces)');\n      for (const workspace of workspaces) {\n        const currentWorkspaceUpdates = lockWorkspacesUpdates\n          .filter((update) => update.workspace === workspace)\n          .map((update) => update.managerData?.packageKey)\n          .filter((packageKey) => !rootDeps.has(packageKey));\n\n        if (currentWorkspaceUpdates.length) {\n          const updateCmd = `npm install ${cmdOptions} --workspace=${workspace} ${currentWorkspaceUpdates.join(\n            ' ',\n          )}`;\n          commands.push(updateCmd);\n        }\n      }\n    }\n\n    if (lockRootUpdates.length) {\n      logger.debug('Performing lockfileUpdate (npm)');\n      const updateCmd =\n        `npm install ${cmdOptions} ` +\n        lockRootUpdates\n          .map((update) => update.managerData?.packageKey)\n          .join(' ');\n      commands.push(updateCmd);\n    }\n\n    if (upgrades.some((upgrade) => upgrade.isRemediation)) {\n      // We need to run twice to get the correct lock file\n      commands.push(`npm install ${cmdOptions}`.trim());\n    }\n\n    // postUpdateOptions\n    if (\n      config.postUpdateOptions?.includes('npmDedupe') &&\n      !supportsPreferDedupeFlag\n    ) {\n      logger.debug('Performing npm dedupe after installation');\n      commands.push('npm dedupe');\n    }\n\n    if (upgrades.find((upgrade) => upgrade.isLockFileMaintenance)) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n      try {\n        await deleteLocalFile(lockFileName);\n      } catch (err) /* istanbul ignore next */ {\n        logger.debug(\n          { err, lockFileName },\n          'Error removing `package-lock.json` for lock file maintenance',\n        );\n      }\n    }\n\n    // Run the commands\n    await exec(commands, execOptions);\n\n    // massage to shrinkwrap if necessary\n    if (\n      filename === 'npm-shrinkwrap.json' &&\n      (await localPathExists(upath.join(lockFileDir, 'package-lock.json')))\n    ) {\n      await renameLocalFile(\n        upath.join(lockFileDir, 'package-lock.json'),\n        upath.join(lockFileDir, 'npm-shrinkwrap.json'),\n      );\n    }\n\n    // Read the result\n    // TODO #22198\n    lockFile = (await readLocalFile(\n      upath.join(lockFileDir, filename),\n      'utf8',\n    ))!;\n\n    // Massage lockfile counterparts of package.json that were modified\n    // because npm install was called with an explicit version for rangeStrategy=update-lockfile\n    if (lockUpdates.length) {\n      const { detectedIndent, lockFileParsed } = parseLockFile(lockFile);\n      if (\n        lockFileParsed?.lockfileVersion === 2 ||\n        lockFileParsed?.lockfileVersion === 3\n      ) {\n        lockUpdates.forEach((lockUpdate) => {\n          const depType = lockUpdate.depType as\n            | 'dependencies'\n            | 'optionalDependencies';\n\n          // TODO #22198\n          if (\n            lockFileParsed.packages?.['']?.[depType]?.[lockUpdate.packageName!]\n          ) {\n            lockFileParsed.packages[''][depType][lockUpdate.packageName!] =\n              lockUpdate.newValue!;\n          }\n        });\n        lockFile = composeLockFile(lockFileParsed, detectedIndent);\n      }\n    }\n  } catch (err) /* istanbul ignore next */ {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug(\n      {\n        err,\n        type: 'npm',\n      },\n      'lock file error',\n    );\n    if (err.stderr?.includes('ENOSPC: no space left on device')) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    }\n    return { error: true, stderr: err.stderr };\n  }\n  return { error: !lockFile, lockFile };\n}\n\nexport function divideWorkspaceAndRootDeps(\n  lockFileDir: string,\n  lockUpdates: Upgrade[],\n): {\n  lockRootUpdates: Upgrade[];\n  lockWorkspacesUpdates: Upgrade[];\n  workspaces: Set<string>;\n  rootDeps: Set<string>;\n} {\n  const lockRootUpdates: Upgrade[] = []; // stores all upgrades which are present in root package.json\n  const lockWorkspacesUpdates: Upgrade[] = []; // stores all upgrades which are present in workspaces package.json\n  const workspaces = new Set<string>(); // name of all workspaces\n  const rootDeps = new Set<string>(); // packageName of all upgrades in root package.json (makes it check duplicate deps in root)\n\n  // divide the deps in two categories: workspace and root\n  for (const upgrade of lockUpdates) {\n    upgrade.managerData ??= {};\n    upgrade.managerData.packageKey = generatePackageKey(\n      upgrade.packageName!,\n      upgrade.newVersion!,\n    );\n    if (\n      upgrade.managerData.workspacesPackages?.length &&\n      is.string(upgrade.packageFile)\n    ) {\n      const workspacePatterns = upgrade.managerData.workspacesPackages; // glob pattern or directory name/path\n      const packageFileDir = trimSlashes(\n        upgrade.packageFile.replace('package.json', ''),\n      );\n\n      // workspaceDir = packageFileDir - lockFileDir\n      const workspaceDir = trimSlashes(\n        packageFileDir.startsWith(lockFileDir)\n          ? packageFileDir.slice(lockFileDir.length)\n          : packageFileDir,\n      );\n\n      if (is.nonEmptyString(workspaceDir)) {\n        let workspaceName: string | undefined;\n        // compare workspaceDir to workspace patterns\n        // stop when the first match is found and\n        // add workspaceDir to workspaces set and upgrade object\n        for (const workspacePattern of workspacePatterns) {\n          const massagedPattern = (workspacePattern as string).replace(\n            /^\\.\\//,\n            '',\n          );\n          if (minimatch(massagedPattern).match(workspaceDir)) {\n            workspaceName = workspaceDir;\n            break;\n          }\n        }\n        if (workspaceName) {\n          if (\n            !rootDeps.has(upgrade.managerData.packageKey) // prevent same dep from existing in root and workspace\n          ) {\n            workspaces.add(workspaceName);\n            upgrade.workspace = workspaceName;\n            lockWorkspacesUpdates.push(upgrade);\n          }\n        } else {\n          logger.warn(\n            { workspacePatterns, workspaceDir },\n            'workspaceDir not found',\n          );\n        }\n        continue;\n      }\n    }\n    lockRootUpdates.push(upgrade);\n    rootDeps.add(upgrade.managerData.packageKey);\n  }\n\n  return { lockRootUpdates, lockWorkspacesUpdates, workspaces, rootDeps };\n}\n\nfunction generatePackageKey(packageName: string, version: string): string {\n  return `${packageName}@${version}`;\n}\n"]}

package/dist/modules/manager/npm/post-update/pnpm.js

@@ -4,6 +4,7 @@ exports.generateLockFile = generateLockFile;
 exports.getConstraintFromLockFile = getConstraintFromLockFile;
 const tslib_1 = require("tslib");
 const is_1 = tslib_1.__importDefault(require("@sindresorhus/is"));
+const semver_1 = tslib_1.__importDefault(require("semver"));
 const shlex_1 = require("shlex");
 const upath_1 = tslib_1.__importDefault(require("upath"));
 const global_1 = require("../../../../config/global");
@@ -44,7 +45,6 @@ async function generateLockFile(lockFileDir, env, config, upgrades = []) {
             npm_config_store: env.npm_config_store,
         };
         const execOptions = {
-            userConfiguredEnv: config.env,
             cwdFile: lockFileName,
             extraEnv,
             docker: {},
@@ -58,7 +58,18 @@ async function generateLockFile(lockFileDir, env, config, upgrades = []) {
             extraEnv.NPM_AUTH = env.NPM_AUTH;
             extraEnv.NPM_EMAIL = env.NPM_EMAIL;
         }
-        let args = '--recursive --lockfile-only';
+        const pnpmWorkspaceFilePath = (0, fs_1.getSiblingFileName)(lockFileName, 'pnpm-workspace.yaml');
+        let args = '--lockfile-only';
+        // pnpm v9+ is doing recursive automatically when it detects workspaces.
+        //
+        // If it's not a workspaces project/monorepo, but single project with unrelated other npm project in source tree (for example, a git submodule),
+        // `--recursive` will install un-wanted project.
+        // we should avoid this.
+        if (pnpmToolConstraint.constraint &&
+            !semver_1.default.intersects(pnpmToolConstraint.constraint, '>=9') &&
+            (await (0, fs_1.localPathExists)(pnpmWorkspaceFilePath))) {
+            args += ' --recursive';
+        }
         if (!global_1.GlobalConfig.get('allowScripts') || config.ignoreScripts) {
             args += ' --ignore-scripts';
             args += ' --ignore-pnpmfile';

package/dist/modules/manager/npm/post-update/pnpm.js.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/npm/post-update/pnpm.ts"],"names":[],"mappings":";;AA6BA,4CA4GC;AAED,8DAqCC;;AAhLD,kEAAkC;AAClC,iCAA8B;AAC9B,0DAA0B;AAC1B,sDAAyD;AACzD,yEAAuE;AACvE,+CAA4C;AAC5C,gDAA6C;AAM7C,4CAAqE;AACrE,oDAAwD;AACxD,gDAAwD;AAExD,iDAAuD;AAEvD,mCAAwE;AAExE,SAAS,6BAA6B,CAAC,QAAmB;IACxD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACrD,OAAO,OAAO,CAAC,UAAU,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,GAAsB,EACtB,MAAwB,EACxB,WAAsB,EAAE;IAExB,MAAM,YAAY,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC/D,eAAM,CAAC,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,2BAAmB,EAAC,WAAW,CAAC,CAAC;QACrD,MAAM,kBAAkB,GAAmB;YACzC,QAAQ,EAAE,MAAM;YAChB,UAAU,EACR,6BAA6B,CAAC,QAAQ,CAAC,IAAI,4CAA4C;gBACvF,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,iCAAiC;gBAC7D,IAAA,gCAAwB,EAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,IAAI,mDAAmD;gBACrH,CAAC,MAAM,yBAAyB,CAAC,YAAY,CAAC,CAAC,EAAE,iDAAiD;SACrG,CAAC;QAEF,MAAM,QAAQ,GAAa;YACzB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;SACvC,CAAC;QACF,MAAM,WAAW,GAAgB;YAC/B,iBAAiB,EAAE,MAAM,CAAC,GAAG;YAC7B,OAAO,EAAE,YAAY;YACrB,QAAQ;YACR,MAAM,EAAE,EAAE;YACV,eAAe,EAAE;gBACf,MAAM,IAAA,oCAAqB,EAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;gBACvE,kBAAkB;aACnB;SACF,CAAC;QACF,qBAAqB;QACrB,IAAI,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,IAAI,IAAI,GAAG,6BAA6B,CAAC;QACzC,IAAI,CAAC,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9D,IAAI,IAAI,mBAAmB,CAAC;YAC5B,IAAI,IAAI,oBAAoB,CAAC;QAC/B,CAAC;QACD,eAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAE/C,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAE3E,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3C,2DAA2D;YAC3D,QAAQ,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAED,kCAAkC;QAClC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,eAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CACX,yBAAyB,WAAW;gBAClC,uBAAuB;iBACtB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,WAAY,IAAI,MAAM,CAAC,UAAW,EAAE,CAAC;iBAC/D,MAAM,CAAC,sBAAa,CAAC;iBACrB,GAAG,CAAC,aAAK,CAAC;iBACV,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CACvB,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,IAAI,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC9D,eAAM,CAAC,KAAK,CACV,YAAY,YAAY,6CAA6C,CACtE,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAA,oBAAe,EAAC,YAAY,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBACxC,eAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,2DAA2D,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAA,WAAI,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClC,QAAQ,GAAG,MAAM,IAAA,kBAAa,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,KAAK,gCAAe,EAAE,CAAC;YACpC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,eAAM,CAAC,KAAK,CACV;YACE,QAAQ;YACR,GAAG;YACH,MAAM;YACN,MAAM;YACN,IAAI,EAAE,MAAM;SACb,EACD,iBAAiB,CAClB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,YAAoB;IAEpB,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,IAAA,kBAAa,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAM,CAAC,KAAK,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAA,sBAAe,EAAe,eAAe,CAAC,CAAC;QAChE,IACE,CAAC,YAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;YACrC,CAAC,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,EAC5C,CAAC;YACD,eAAM,CAAC,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,wDAAwD;QACxD,0CAA0C;QAC1C,wFAAwF;QACxF,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,wBAAwB,CAAC,IAAI,CACxE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe,CACtD,IAAI;YACH,eAAe,EAAE,GAAG;YACpB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,QAAQ;SAC1B,CAAC;QACF,UAAU,GAAG,eAAe,CAAC;QAC7B,IAAI,eAAe,EAAE,CAAC;YACpB,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,+CAA+C,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,wBAAwB,GAA+B;IAC3D,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;IAClD;QACE,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,UAAU;QAC3B,eAAe,EAAE,IAAI;KACtB;IACD;QACE,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,IAAI;KACtB;IACD;QACE,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,IAAI;KACtB;IACD;QACE,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,UAAU;QAC3B,eAAe,EAAE,IAAI;KACtB;IACD;QACE,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,SAAS;QAC1B,eAAe,EAAE,QAAQ;KAC1B;CACF,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global';\nimport { TEMPORARY_ERROR } from '../../../../constants/error-messages';\nimport { logger } from '../../../../logger';\nimport { exec } from '../../../../util/exec';\nimport type {\n  ExecOptions,\n  ExtraEnv,\n  ToolConstraint,\n} from '../../../../util/exec/types';\nimport { deleteLocalFile, readLocalFile } from '../../../../util/fs';\nimport { uniqueStrings } from '../../../../util/string';\nimport { parseSingleYaml } from '../../../../util/yaml';\nimport type { PostUpdateConfig, Upgrade } from '../../types';\nimport { getNodeToolConstraint } from './node-version';\nimport type { GenerateLockFileResult, PnpmLockFile } from './types';\nimport { getPackageManagerVersion, lazyLoadPackageJson } from './utils';\n\nfunction getPnpmConstraintFromUpgrades(upgrades: Upgrade[]): string | null {\n  for (const upgrade of upgrades) {\n    if (upgrade.depName === 'pnpm' && upgrade.newVersion) {\n      return upgrade.newVersion;\n    }\n  }\n  return null;\n}\n\nexport async function generateLockFile(\n  lockFileDir: string,\n  env: NodeJS.ProcessEnv,\n  config: PostUpdateConfig,\n  upgrades: Upgrade[] = [],\n): Promise<GenerateLockFileResult> {\n  const lockFileName = upath.join(lockFileDir, 'pnpm-lock.yaml');\n  logger.debug(`Spawning pnpm install to create ${lockFileName}`);\n  let lockFile: string | null = null;\n  let stdout: string | undefined;\n  let stderr: string | undefined;\n  const commands: string[] = [];\n  try {\n    const lazyPgkJson = lazyLoadPackageJson(lockFileDir);\n    const pnpmToolConstraint: ToolConstraint = {\n      toolName: 'pnpm',\n      constraint:\n        getPnpmConstraintFromUpgrades(upgrades) ?? // if pnpm is being upgraded, it comes first\n        config.constraints?.pnpm ?? // from user config or extraction\n        getPackageManagerVersion('pnpm', await lazyPgkJson.getValue()) ?? // look in package.json > packageManager or engines\n        (await getConstraintFromLockFile(lockFileName)), // use lockfileVersion to find pnpm version range\n    };\n\n    const extraEnv: ExtraEnv = {\n      NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,\n      npm_config_store: env.npm_config_store,\n    };\n    const execOptions: ExecOptions = {\n      userConfiguredEnv: config.env,\n      cwdFile: lockFileName,\n      extraEnv,\n      docker: {},\n      toolConstraints: [\n        await getNodeToolConstraint(config, upgrades, lockFileDir, lazyPgkJson),\n        pnpmToolConstraint,\n      ],\n    };\n    // istanbul ignore if\n    if (GlobalConfig.get('exposeAllEnv')) {\n      extraEnv.NPM_AUTH = env.NPM_AUTH;\n      extraEnv.NPM_EMAIL = env.NPM_EMAIL;\n    }\n\n    let args = '--recursive --lockfile-only';\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      args += ' --ignore-scripts';\n      args += ' --ignore-pnpmfile';\n    }\n    logger.trace({ args }, 'pnpm command options');\n\n    const lockUpdates = upgrades.filter((upgrade) => upgrade.isLockfileUpdate);\n\n    if (lockUpdates.length !== upgrades.length) {\n      // This command updates the lock file based on package.json\n      commands.push(`pnpm install ${args}`);\n    }\n\n    // rangeStrategy = update-lockfile\n    if (lockUpdates.length) {\n      logger.debug('Performing lockfileUpdate (pnpm)');\n      commands.push(\n        `pnpm update --no-save ${lockUpdates\n          // TODO: types (#22198)\n          .map((update) => `${update.packageName!}@${update.newVersion!}`)\n          .filter(uniqueStrings)\n          .map(quote)\n          .join(' ')} ${args}`,\n      );\n    }\n\n    // postUpdateOptions\n    if (config.postUpdateOptions?.includes('pnpmDedupe')) {\n      commands.push('pnpm dedupe --config.ignore-scripts=true');\n    }\n\n    if (upgrades.find((upgrade) => upgrade.isLockFileMaintenance)) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n      try {\n        await deleteLocalFile(lockFileName);\n      } catch (err) /* istanbul ignore next */ {\n        logger.debug(\n          { err, lockFileName },\n          'Error removing `pnpm-lock.yaml` for lock file maintenance',\n        );\n      }\n    }\n\n    await exec(commands, execOptions);\n    lockFile = await readLocalFile(lockFileName, 'utf8');\n  } catch (err) /* istanbul ignore next */ {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug(\n      {\n        commands,\n        err,\n        stdout,\n        stderr,\n        type: 'pnpm',\n      },\n      'lock file error',\n    );\n    return { error: true, stderr: err.stderr, stdout: err.stdout };\n  }\n  return { lockFile };\n}\n\nexport async function getConstraintFromLockFile(\n  lockFileName: string,\n): Promise<string | null> {\n  let constraint: string | null = null;\n  try {\n    const lockfileContent = await readLocalFile(lockFileName, 'utf8');\n    if (!lockfileContent) {\n      logger.trace(`Empty pnpm lock file: ${lockFileName}`);\n      return null;\n    }\n    // TODO: use schema (#9610)\n    const pnpmLock = parseSingleYaml<PnpmLockFile>(lockfileContent);\n    if (\n      !is.number(pnpmLock?.lockfileVersion) &&\n      !is.numericString(pnpmLock?.lockfileVersion)\n    ) {\n      logger.trace(`Invalid pnpm lockfile version: ${lockFileName}`);\n      return null;\n    }\n    // find matching lockfileVersion and use its constraints\n    // if no match found use lockfileVersion 5\n    // lockfileVersion 5 is the minimum version required to generate the pnpm-lock.yaml file\n    const { lowerConstraint, upperConstraint } = lockToPnpmVersionMapping.find(\n      (m) => m.lockfileVersion === pnpmLock.lockfileVersion,\n    ) ?? {\n      lockfileVersion: 5.0,\n      lowerConstraint: '>=3',\n      upperConstraint: '<3.5.0',\n    };\n    constraint = lowerConstraint;\n    if (upperConstraint) {\n      constraint += ` ${upperConstraint}`;\n    }\n  } catch (err) {\n    logger.warn({ err }, 'Error getting pnpm constraints from lock file');\n  }\n  return constraint;\n}\n\n/**\n * pnpm lockfiles have corresponding version numbers called \"lockfileVersion\"\n * each lockfileVersion can only be generated by a certain pnpm version range\n * eg. lockfileVersion: 5.4 can only be generated by pnpm version >=7 && <8\n * official list can be found here : https://github.com/pnpm/spec/tree/master/lockfile\n * we use the mapping present below to find the compatible pnpm version range for a given lockfileVersion\n *\n * the various terms used in the mapping are explained below:\n * lowerConstraint : lowest pnpm version that can generate the lockfileVersion\n * upperConstraint : highest pnpm version that can generate the lockfileVersion\n * lowerBound      : highest pnpm version that is less than the lowerConstraint\n * upperBound      : lowest pnpm version that is greater than the upperConstraint\n *\n * To handle future lockfileVersions, we need to:\n * 1. add a upperBound and upperConstraint to the current latest lockfileVersion\n * 2. add an object for the new lockfileVersion with lowerBound and lowerConstraint\n *\n * lockfileVersion from v6 on are strings\n */\nconst lockToPnpmVersionMapping: LockToPnpmVersionMapping[] = [\n  { lockfileVersion: '9.0', lowerConstraint: '>=9' },\n  {\n    lockfileVersion: '6.0',\n    lowerConstraint: '>=7.24.2',\n    upperConstraint: '<9',\n  },\n  {\n    lockfileVersion: 5.4,\n    lowerConstraint: '>=7',\n    upperConstraint: '<8',\n  },\n  {\n    lockfileVersion: 5.3,\n    lowerConstraint: '>=6',\n    upperConstraint: '<7',\n  },\n  {\n    lockfileVersion: 5.2,\n    lowerConstraint: '>=5.10.0',\n    upperConstraint: '<6',\n  },\n  {\n    lockfileVersion: 5.1,\n    lowerConstraint: '>=3.5.0',\n    upperConstraint: '<5.9.3',\n  },\n];\n\ninterface LockToPnpmVersionMapping {\n  lockfileVersion: string | number;\n  lowerConstraint: string;\n  upperConstraint?: string;\n}\n"]}
+{"version":3,"file":"pnpm.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/npm/post-update/pnpm.ts"],"names":[],"mappings":";;AAmCA,4CA6HC;AAED,8DAqCC;;AAvMD,kEAAkC;AAClC,4DAA4B;AAC5B,iCAA8B;AAC9B,0DAA0B;AAC1B,sDAAyD;AACzD,yEAAuE;AACvE,+CAA4C;AAC5C,gDAA6C;AAM7C,4CAK6B;AAC7B,oDAAwD;AACxD,gDAAwD;AAExD,iDAAuD;AAEvD,mCAAwE;AAExE,SAAS,6BAA6B,CAAC,QAAmB;IACxD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACrD,OAAO,OAAO,CAAC,UAAU,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,GAAsB,EACtB,MAAwB,EACxB,WAAsB,EAAE;IAExB,MAAM,YAAY,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC/D,eAAM,CAAC,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,2BAAmB,EAAC,WAAW,CAAC,CAAC;QACrD,MAAM,kBAAkB,GAAmB;YACzC,QAAQ,EAAE,MAAM;YAChB,UAAU,EACR,6BAA6B,CAAC,QAAQ,CAAC,IAAI,4CAA4C;gBACvF,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,iCAAiC;gBAC7D,IAAA,gCAAwB,EAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,IAAI,mDAAmD;gBACrH,CAAC,MAAM,yBAAyB,CAAC,YAAY,CAAC,CAAC,EAAE,iDAAiD;SACrG,CAAC;QAEF,MAAM,QAAQ,GAAa;YACzB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;SACvC,CAAC;QACF,MAAM,WAAW,GAAgB;YAC/B,OAAO,EAAE,YAAY;YACrB,QAAQ;YACR,MAAM,EAAE,EAAE;YACV,eAAe,EAAE;gBACf,MAAM,IAAA,oCAAqB,EAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;gBACvE,kBAAkB;aACnB;SACF,CAAC;QACF,qBAAqB;QACrB,IAAI,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,MAAM,qBAAqB,GAAG,IAAA,uBAAkB,EAC9C,YAAY,EACZ,qBAAqB,CACtB,CAAC;QAEF,IAAI,IAAI,GAAG,iBAAiB,CAAC;QAE7B,wEAAwE;QACxE,EAAE;QACF,gJAAgJ;QAChJ,gDAAgD;QAChD,wBAAwB;QACxB,IACE,kBAAkB,CAAC,UAAU;YAC7B,CAAC,gBAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC;YACxD,CAAC,MAAM,IAAA,oBAAe,EAAC,qBAAqB,CAAC,CAAC,EAC9C,CAAC;YACD,IAAI,IAAI,cAAc,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9D,IAAI,IAAI,mBAAmB,CAAC;YAC5B,IAAI,IAAI,oBAAoB,CAAC;QAC/B,CAAC;QACD,eAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAE/C,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAE3E,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3C,2DAA2D;YAC3D,QAAQ,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAED,kCAAkC;QAClC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,eAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CACX,yBAAyB,WAAW;gBAClC,uBAAuB;iBACtB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,WAAY,IAAI,MAAM,CAAC,UAAW,EAAE,CAAC;iBAC/D,MAAM,CAAC,sBAAa,CAAC;iBACrB,GAAG,CAAC,aAAK,CAAC;iBACV,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CACvB,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,IAAI,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC9D,eAAM,CAAC,KAAK,CACV,YAAY,YAAY,6CAA6C,CACtE,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAA,oBAAe,EAAC,YAAY,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBACxC,eAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,2DAA2D,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAA,WAAI,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClC,QAAQ,GAAG,MAAM,IAAA,kBAAa,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,KAAK,gCAAe,EAAE,CAAC;YACpC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,eAAM,CAAC,KAAK,CACV;YACE,QAAQ;YACR,GAAG;YACH,MAAM;YACN,MAAM;YACN,IAAI,EAAE,MAAM;SACb,EACD,iBAAiB,CAClB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,YAAoB;IAEpB,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,IAAA,kBAAa,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAM,CAAC,KAAK,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAA,sBAAe,EAAe,eAAe,CAAC,CAAC;QAChE,IACE,CAAC,YAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;YACrC,CAAC,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,EAC5C,CAAC;YACD,eAAM,CAAC,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,wDAAwD;QACxD,0CAA0C;QAC1C,wFAAwF;QACxF,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,wBAAwB,CAAC,IAAI,CACxE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe,CACtD,IAAI;YACH,eAAe,EAAE,GAAG;YACpB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,QAAQ;SAC1B,CAAC;QACF,UAAU,GAAG,eAAe,CAAC;QAC7B,IAAI,eAAe,EAAE,CAAC;YACpB,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,+CAA+C,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,wBAAwB,GAA+B;IAC3D,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;IAClD;QACE,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,UAAU;QAC3B,eAAe,EAAE,IAAI;KACtB;IACD;QACE,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,IAAI;KACtB;IACD;QACE,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,IAAI;KACtB;IACD;QACE,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,UAAU;QAC3B,eAAe,EAAE,IAAI;KACtB;IACD;QACE,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,SAAS;QAC1B,eAAe,EAAE,QAAQ;KAC1B;CACF,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport semver from 'semver';\nimport { quote } from 'shlex';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global';\nimport { TEMPORARY_ERROR } from '../../../../constants/error-messages';\nimport { logger } from '../../../../logger';\nimport { exec } from '../../../../util/exec';\nimport type {\n  ExecOptions,\n  ExtraEnv,\n  ToolConstraint,\n} from '../../../../util/exec/types';\nimport {\n  deleteLocalFile,\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n} from '../../../../util/fs';\nimport { uniqueStrings } from '../../../../util/string';\nimport { parseSingleYaml } from '../../../../util/yaml';\nimport type { PostUpdateConfig, Upgrade } from '../../types';\nimport { getNodeToolConstraint } from './node-version';\nimport type { GenerateLockFileResult, PnpmLockFile } from './types';\nimport { getPackageManagerVersion, lazyLoadPackageJson } from './utils';\n\nfunction getPnpmConstraintFromUpgrades(upgrades: Upgrade[]): string | null {\n  for (const upgrade of upgrades) {\n    if (upgrade.depName === 'pnpm' && upgrade.newVersion) {\n      return upgrade.newVersion;\n    }\n  }\n  return null;\n}\n\nexport async function generateLockFile(\n  lockFileDir: string,\n  env: NodeJS.ProcessEnv,\n  config: PostUpdateConfig,\n  upgrades: Upgrade[] = [],\n): Promise<GenerateLockFileResult> {\n  const lockFileName = upath.join(lockFileDir, 'pnpm-lock.yaml');\n  logger.debug(`Spawning pnpm install to create ${lockFileName}`);\n  let lockFile: string | null = null;\n  let stdout: string | undefined;\n  let stderr: string | undefined;\n  const commands: string[] = [];\n  try {\n    const lazyPgkJson = lazyLoadPackageJson(lockFileDir);\n    const pnpmToolConstraint: ToolConstraint = {\n      toolName: 'pnpm',\n      constraint:\n        getPnpmConstraintFromUpgrades(upgrades) ?? // if pnpm is being upgraded, it comes first\n        config.constraints?.pnpm ?? // from user config or extraction\n        getPackageManagerVersion('pnpm', await lazyPgkJson.getValue()) ?? // look in package.json > packageManager or engines\n        (await getConstraintFromLockFile(lockFileName)), // use lockfileVersion to find pnpm version range\n    };\n\n    const extraEnv: ExtraEnv = {\n      NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,\n      npm_config_store: env.npm_config_store,\n    };\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv,\n      docker: {},\n      toolConstraints: [\n        await getNodeToolConstraint(config, upgrades, lockFileDir, lazyPgkJson),\n        pnpmToolConstraint,\n      ],\n    };\n    // istanbul ignore if\n    if (GlobalConfig.get('exposeAllEnv')) {\n      extraEnv.NPM_AUTH = env.NPM_AUTH;\n      extraEnv.NPM_EMAIL = env.NPM_EMAIL;\n    }\n\n    const pnpmWorkspaceFilePath = getSiblingFileName(\n      lockFileName,\n      'pnpm-workspace.yaml',\n    );\n\n    let args = '--lockfile-only';\n\n    // pnpm v9+ is doing recursive automatically when it detects workspaces.\n    //\n    // If it's not a workspaces project/monorepo, but single project with unrelated other npm project in source tree (for example, a git submodule),\n    // `--recursive` will install un-wanted project.\n    // we should avoid this.\n    if (\n      pnpmToolConstraint.constraint &&\n      !semver.intersects(pnpmToolConstraint.constraint, '>=9') &&\n      (await localPathExists(pnpmWorkspaceFilePath))\n    ) {\n      args += ' --recursive';\n    }\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      args += ' --ignore-scripts';\n      args += ' --ignore-pnpmfile';\n    }\n    logger.trace({ args }, 'pnpm command options');\n\n    const lockUpdates = upgrades.filter((upgrade) => upgrade.isLockfileUpdate);\n\n    if (lockUpdates.length !== upgrades.length) {\n      // This command updates the lock file based on package.json\n      commands.push(`pnpm install ${args}`);\n    }\n\n    // rangeStrategy = update-lockfile\n    if (lockUpdates.length) {\n      logger.debug('Performing lockfileUpdate (pnpm)');\n      commands.push(\n        `pnpm update --no-save ${lockUpdates\n          // TODO: types (#22198)\n          .map((update) => `${update.packageName!}@${update.newVersion!}`)\n          .filter(uniqueStrings)\n          .map(quote)\n          .join(' ')} ${args}`,\n      );\n    }\n\n    // postUpdateOptions\n    if (config.postUpdateOptions?.includes('pnpmDedupe')) {\n      commands.push('pnpm dedupe --config.ignore-scripts=true');\n    }\n\n    if (upgrades.find((upgrade) => upgrade.isLockFileMaintenance)) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n      try {\n        await deleteLocalFile(lockFileName);\n      } catch (err) /* istanbul ignore next */ {\n        logger.debug(\n          { err, lockFileName },\n          'Error removing `pnpm-lock.yaml` for lock file maintenance',\n        );\n      }\n    }\n\n    await exec(commands, execOptions);\n    lockFile = await readLocalFile(lockFileName, 'utf8');\n  } catch (err) /* istanbul ignore next */ {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug(\n      {\n        commands,\n        err,\n        stdout,\n        stderr,\n        type: 'pnpm',\n      },\n      'lock file error',\n    );\n    return { error: true, stderr: err.stderr, stdout: err.stdout };\n  }\n  return { lockFile };\n}\n\nexport async function getConstraintFromLockFile(\n  lockFileName: string,\n): Promise<string | null> {\n  let constraint: string | null = null;\n  try {\n    const lockfileContent = await readLocalFile(lockFileName, 'utf8');\n    if (!lockfileContent) {\n      logger.trace(`Empty pnpm lock file: ${lockFileName}`);\n      return null;\n    }\n    // TODO: use schema (#9610)\n    const pnpmLock = parseSingleYaml<PnpmLockFile>(lockfileContent);\n    if (\n      !is.number(pnpmLock?.lockfileVersion) &&\n      !is.numericString(pnpmLock?.lockfileVersion)\n    ) {\n      logger.trace(`Invalid pnpm lockfile version: ${lockFileName}`);\n      return null;\n    }\n    // find matching lockfileVersion and use its constraints\n    // if no match found use lockfileVersion 5\n    // lockfileVersion 5 is the minimum version required to generate the pnpm-lock.yaml file\n    const { lowerConstraint, upperConstraint } = lockToPnpmVersionMapping.find(\n      (m) => m.lockfileVersion === pnpmLock.lockfileVersion,\n    ) ?? {\n      lockfileVersion: 5.0,\n      lowerConstraint: '>=3',\n      upperConstraint: '<3.5.0',\n    };\n    constraint = lowerConstraint;\n    if (upperConstraint) {\n      constraint += ` ${upperConstraint}`;\n    }\n  } catch (err) {\n    logger.warn({ err }, 'Error getting pnpm constraints from lock file');\n  }\n  return constraint;\n}\n\n/**\n * pnpm lockfiles have corresponding version numbers called \"lockfileVersion\"\n * each lockfileVersion can only be generated by a certain pnpm version range\n * eg. lockfileVersion: 5.4 can only be generated by pnpm version >=7 && <8\n * official list can be found here : https://github.com/pnpm/spec/tree/master/lockfile\n * we use the mapping present below to find the compatible pnpm version range for a given lockfileVersion\n *\n * the various terms used in the mapping are explained below:\n * lowerConstraint : lowest pnpm version that can generate the lockfileVersion\n * upperConstraint : highest pnpm version that can generate the lockfileVersion\n * lowerBound      : highest pnpm version that is less than the lowerConstraint\n * upperBound      : lowest pnpm version that is greater than the upperConstraint\n *\n * To handle future lockfileVersions, we need to:\n * 1. add a upperBound and upperConstraint to the current latest lockfileVersion\n * 2. add an object for the new lockfileVersion with lowerBound and lowerConstraint\n *\n * lockfileVersion from v6 on are strings\n */\nconst lockToPnpmVersionMapping: LockToPnpmVersionMapping[] = [\n  { lockfileVersion: '9.0', lowerConstraint: '>=9' },\n  {\n    lockfileVersion: '6.0',\n    lowerConstraint: '>=7.24.2',\n    upperConstraint: '<9',\n  },\n  {\n    lockfileVersion: 5.4,\n    lowerConstraint: '>=7',\n    upperConstraint: '<8',\n  },\n  {\n    lockfileVersion: 5.3,\n    lowerConstraint: '>=6',\n    upperConstraint: '<7',\n  },\n  {\n    lockfileVersion: 5.2,\n    lowerConstraint: '>=5.10.0',\n    upperConstraint: '<6',\n  },\n  {\n    lockfileVersion: 5.1,\n    lowerConstraint: '>=3.5.0',\n    upperConstraint: '<5.9.3',\n  },\n];\n\ninterface LockToPnpmVersionMapping {\n  lockfileVersion: string | number;\n  lowerConstraint: string;\n  upperConstraint?: string;\n}\n"]}

package/dist/modules/manager/npm/post-update/rules.js

@@ -16,7 +16,17 @@ function processHostRules() {
         hostType: 'npm',
     });
     logger_1.logger.debug(`Found ${npmHostRules.length} npm host rule(s)`);
-    for (const hostRule of npmHostRules) {
+    // Include host rules without specific type to mimic the behavior used when determining dependencies with updates.
+    const noTypeHostRules = hostRules
+        .getAll()
+        .filter((rule) => rule.hostType === null || rule.hostType === undefined);
+    logger_1.logger.debug(`Found ${noTypeHostRules.length} host rule(s) without host type`);
+    // Drop duplicates for the same matchHost while prefering the more specific rules with hostType npm.
+    const noTypeHostRulesWithoutDuplicates = noTypeHostRules.filter((rule) => !npmHostRules.some((elem) => elem.matchHost === rule.matchHost));
+    logger_1.logger.debug(`Found ${noTypeHostRulesWithoutDuplicates.length} host rule(s) without host type after dropping duplicates`);
+    const effectiveHostRules = npmHostRules.concat(noTypeHostRulesWithoutDuplicates);
+    logger_1.logger.trace(`Found ${effectiveHostRules.length} effective npm host rule(s) after deduplication`);
+    for (const hostRule of effectiveHostRules) {
         if (!hostRule.resolvedHost) {
             logger_1.logger.debug('Skipping host rule without resolved host');
             continue;

package/dist/modules/manager/npm/post-update/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/npm/post-update/rules.ts"],"names":[],"mappings":";;AAaA,4CA+EC;;AA5FD,kEAAkC;AAClC,+CAA4C;AAC5C,+EAAyD;AACzD,kDAA+C;AAC/C,oDAAmD;AACnD,8CAAiD;AAQjD,SAAgB,gBAAgB;IAC9B,MAAM,mBAAmB,GAAkB,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAEjE,oEAAoE;IACpE,MAAM,sBAAsB,GAAG,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC;QACrC,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,eAAM,CAAC,KAAK,CAAC,SAAS,YAAY,CAAC,MAAM,mBAAmB,CAAC,CAAC;IAC9D,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,eAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC;QACvC,sFAAsF;QACtF,uBAAuB;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,eAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,WAAW,GAAG,CAAC;QAChC,IAAI,UAAU,GAAG,GAAG,CAAC;QACrB,IAAI,IAAA,eAAS,EAAC,WAAW,CAAC,EAAE,CAAC;YAC3B,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,IAAA,aAAK,EAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YACnE,eAAM,CAAC,KAAK,CAAC,0BAA0B,UAAU,aAAa,GAAG,EAAE,CAAC,CAAC;YACrE,sBAAsB,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAEtE,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,QAAQ,GAAG;oBACf,YAAY,EAAE,QAAQ,CAAC,KAAK;iBAC7B,CAAC;gBACF,mBAAmB,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;gBACzD,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBAElD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG;gBACf,YAAY,EAAE,QAAQ,CAAC,KAAK;aAC7B,CAAC;YACF,mBAAmB,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;YACzD,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YAElD,SAAS;QACX,CAAC;QAED,IAAI,YAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,eAAM,CAAC,KAAK,CACV,0BAA0B,UAAU,yBAAyB,CAC9D,CAAC;YACF,MAAM,QAAQ,GAAG,IAAA,iBAAQ,EAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7C,sBAAsB,CAAC,IAAI,CACzB,GAAG,UAAU,aAAa,QAAQ,CAAC,QAAQ,EAAE,CAC9C,CAAC;YACF,sBAAsB,CAAC,IAAI,CAAC,GAAG,UAAU,cAAc,QAAQ,EAAE,CAAC,CAAC;YAEnE,MAAM,UAAU,GAAG;gBACjB,YAAY,EAAE,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE;aAC1D,CAAC;YACF,mBAAmB,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;YAC3D,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,sBAAsB,GAC1B,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5D,OAAO;QACL,sBAAsB;QACtB,mBAAmB,EAAE,sBAAsB;YACzC,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { logger } from '../../../../logger';\nimport * as hostRules from '../../../../util/host-rules';\nimport { regEx } from '../../../../util/regex';\nimport { toBase64 } from '../../../../util/string';\nimport { isHttpUrl } from '../../../../util/url';\nimport type { YarnRcYmlFile } from './types';\n\nexport interface HostRulesResult {\n  additionalNpmrcContent: string[];\n  additionalYarnRcYml?: any;\n}\n\nexport function processHostRules(): HostRulesResult {\n  const additionalYarnRcYml: YarnRcYmlFile = { npmRegistries: {} };\n\n  // Determine the additional npmrc content to add based on host rules\n  const additionalNpmrcContent = [];\n  const npmHostRules = hostRules.findAll({\n    hostType: 'npm',\n  });\n  logger.debug(`Found ${npmHostRules.length} npm host rule(s)`);\n  for (const hostRule of npmHostRules) {\n    if (!hostRule.resolvedHost) {\n      logger.debug('Skipping host rule without resolved host');\n      continue;\n    }\n\n    const matchedHost = hostRule.matchHost;\n    // Should never be necessary as if we have a resolvedHost, there has to be a matchHost\n    // istanbul ignore next\n    if (!matchedHost) {\n      logger.debug('Skipping host rule without matchHost');\n      continue;\n    }\n\n    const uri = `//${matchedHost}/`;\n    let cleanedUri = uri;\n    if (isHttpUrl(matchedHost)) {\n      cleanedUri = matchedHost.replace(regEx(/^https?:/), '');\n    }\n\n    if (hostRule.token) {\n      const key = hostRule.authType === 'Basic' ? '_auth' : '_authToken';\n      logger.debug(`Adding npmrc entry for ${cleanedUri} with key ${key}`);\n      additionalNpmrcContent.push(`${cleanedUri}:${key}=${hostRule.token}`);\n\n      if (hostRule.authType === 'Basic') {\n        const registry = {\n          npmAuthIdent: hostRule.token,\n        };\n        additionalYarnRcYml.npmRegistries[cleanedUri] = registry;\n        additionalYarnRcYml.npmRegistries[uri] = registry;\n\n        continue;\n      }\n\n      const registry = {\n        npmAuthToken: hostRule.token,\n      };\n      additionalYarnRcYml.npmRegistries[cleanedUri] = registry;\n      additionalYarnRcYml.npmRegistries[uri] = registry;\n\n      continue;\n    }\n\n    if (is.string(hostRule.username) && is.string(hostRule.password)) {\n      logger.debug(\n        `Adding npmrc entry for ${cleanedUri} with username/password`,\n      );\n      const password = toBase64(hostRule.password);\n      additionalNpmrcContent.push(\n        `${cleanedUri}:username=${hostRule.username}`,\n      );\n      additionalNpmrcContent.push(`${cleanedUri}:_password=${password}`);\n\n      const registries = {\n        npmAuthIdent: `${hostRule.username}:${hostRule.password}`,\n      };\n      additionalYarnRcYml.npmRegistries[cleanedUri] = registries;\n      additionalYarnRcYml.npmRegistries[uri] = registries;\n    }\n  }\n\n  const hasYarnRcNpmRegistries =\n    Object.keys(additionalYarnRcYml.npmRegistries).length > 0;\n  return {\n    additionalNpmrcContent,\n    additionalYarnRcYml: hasYarnRcNpmRegistries\n      ? additionalYarnRcYml\n      : undefined,\n  };\n}\n"]}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/npm/post-update/rules.ts"],"names":[],"mappings":";;AAaA,4CAmGC;;AAhHD,kEAAkC;AAClC,+CAA4C;AAC5C,+EAAyD;AACzD,kDAA+C;AAC/C,oDAAmD;AACnD,8CAAiD;AAQjD,SAAgB,gBAAgB;IAC9B,MAAM,mBAAmB,GAAkB,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAEjE,oEAAoE;IACpE,MAAM,sBAAsB,GAAG,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC;QACrC,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,eAAM,CAAC,KAAK,CAAC,SAAS,YAAY,CAAC,MAAM,mBAAmB,CAAC,CAAC;IAC9D,kHAAkH;IAClH,MAAM,eAAe,GAAG,SAAS;SAC9B,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAC3E,eAAM,CAAC,KAAK,CACV,SAAS,eAAe,CAAC,MAAM,iCAAiC,CACjE,CAAC;IACF,oGAAoG;IACpG,MAAM,gCAAgC,GAAG,eAAe,CAAC,MAAM,CAC7D,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,CAC1E,CAAC;IACF,eAAM,CAAC,KAAK,CACV,SAAS,gCAAgC,CAAC,MAAM,2DAA2D,CAC5G,CAAC;IACF,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAC5C,gCAAgC,CACjC,CAAC;IACF,eAAM,CAAC,KAAK,CACV,SAAS,kBAAkB,CAAC,MAAM,iDAAiD,CACpF,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,eAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC;QACvC,sFAAsF;QACtF,uBAAuB;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,eAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,WAAW,GAAG,CAAC;QAChC,IAAI,UAAU,GAAG,GAAG,CAAC;QACrB,IAAI,IAAA,eAAS,EAAC,WAAW,CAAC,EAAE,CAAC;YAC3B,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,IAAA,aAAK,EAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YACnE,eAAM,CAAC,KAAK,CAAC,0BAA0B,UAAU,aAAa,GAAG,EAAE,CAAC,CAAC;YACrE,sBAAsB,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAEtE,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,QAAQ,GAAG;oBACf,YAAY,EAAE,QAAQ,CAAC,KAAK;iBAC7B,CAAC;gBACF,mBAAmB,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;gBACzD,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBAElD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG;gBACf,YAAY,EAAE,QAAQ,CAAC,KAAK;aAC7B,CAAC;YACF,mBAAmB,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;YACzD,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YAElD,SAAS;QACX,CAAC;QAED,IAAI,YAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,eAAM,CAAC,KAAK,CACV,0BAA0B,UAAU,yBAAyB,CAC9D,CAAC;YACF,MAAM,QAAQ,GAAG,IAAA,iBAAQ,EAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7C,sBAAsB,CAAC,IAAI,CACzB,GAAG,UAAU,aAAa,QAAQ,CAAC,QAAQ,EAAE,CAC9C,CAAC;YACF,sBAAsB,CAAC,IAAI,CAAC,GAAG,UAAU,cAAc,QAAQ,EAAE,CAAC,CAAC;YAEnE,MAAM,UAAU,GAAG;gBACjB,YAAY,EAAE,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE;aAC1D,CAAC;YACF,mBAAmB,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;YAC3D,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,sBAAsB,GAC1B,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5D,OAAO;QACL,sBAAsB;QACtB,mBAAmB,EAAE,sBAAsB;YACzC,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { logger } from '../../../../logger';\nimport * as hostRules from '../../../../util/host-rules';\nimport { regEx } from '../../../../util/regex';\nimport { toBase64 } from '../../../../util/string';\nimport { isHttpUrl } from '../../../../util/url';\nimport type { YarnRcYmlFile } from './types';\n\nexport interface HostRulesResult {\n  additionalNpmrcContent: string[];\n  additionalYarnRcYml?: any;\n}\n\nexport function processHostRules(): HostRulesResult {\n  const additionalYarnRcYml: YarnRcYmlFile = { npmRegistries: {} };\n\n  // Determine the additional npmrc content to add based on host rules\n  const additionalNpmrcContent = [];\n  const npmHostRules = hostRules.findAll({\n    hostType: 'npm',\n  });\n  logger.debug(`Found ${npmHostRules.length} npm host rule(s)`);\n  // Include host rules without specific type to mimic the behavior used when determining dependencies with updates.\n  const noTypeHostRules = hostRules\n    .getAll()\n    .filter((rule) => rule.hostType === null || rule.hostType === undefined);\n  logger.debug(\n    `Found ${noTypeHostRules.length} host rule(s) without host type`,\n  );\n  // Drop duplicates for the same matchHost while prefering the more specific rules with hostType npm.\n  const noTypeHostRulesWithoutDuplicates = noTypeHostRules.filter(\n    (rule) => !npmHostRules.some((elem) => elem.matchHost === rule.matchHost),\n  );\n  logger.debug(\n    `Found ${noTypeHostRulesWithoutDuplicates.length} host rule(s) without host type after dropping duplicates`,\n  );\n  const effectiveHostRules = npmHostRules.concat(\n    noTypeHostRulesWithoutDuplicates,\n  );\n  logger.trace(\n    `Found ${effectiveHostRules.length} effective npm host rule(s) after deduplication`,\n  );\n  for (const hostRule of effectiveHostRules) {\n    if (!hostRule.resolvedHost) {\n      logger.debug('Skipping host rule without resolved host');\n      continue;\n    }\n\n    const matchedHost = hostRule.matchHost;\n    // Should never be necessary as if we have a resolvedHost, there has to be a matchHost\n    // istanbul ignore next\n    if (!matchedHost) {\n      logger.debug('Skipping host rule without matchHost');\n      continue;\n    }\n\n    const uri = `//${matchedHost}/`;\n    let cleanedUri = uri;\n    if (isHttpUrl(matchedHost)) {\n      cleanedUri = matchedHost.replace(regEx(/^https?:/), '');\n    }\n\n    if (hostRule.token) {\n      const key = hostRule.authType === 'Basic' ? '_auth' : '_authToken';\n      logger.debug(`Adding npmrc entry for ${cleanedUri} with key ${key}`);\n      additionalNpmrcContent.push(`${cleanedUri}:${key}=${hostRule.token}`);\n\n      if (hostRule.authType === 'Basic') {\n        const registry = {\n          npmAuthIdent: hostRule.token,\n        };\n        additionalYarnRcYml.npmRegistries[cleanedUri] = registry;\n        additionalYarnRcYml.npmRegistries[uri] = registry;\n\n        continue;\n      }\n\n      const registry = {\n        npmAuthToken: hostRule.token,\n      };\n      additionalYarnRcYml.npmRegistries[cleanedUri] = registry;\n      additionalYarnRcYml.npmRegistries[uri] = registry;\n\n      continue;\n    }\n\n    if (is.string(hostRule.username) && is.string(hostRule.password)) {\n      logger.debug(\n        `Adding npmrc entry for ${cleanedUri} with username/password`,\n      );\n      const password = toBase64(hostRule.password);\n      additionalNpmrcContent.push(\n        `${cleanedUri}:username=${hostRule.username}`,\n      );\n      additionalNpmrcContent.push(`${cleanedUri}:_password=${password}`);\n\n      const registries = {\n        npmAuthIdent: `${hostRule.username}:${hostRule.password}`,\n      };\n      additionalYarnRcYml.npmRegistries[cleanedUri] = registries;\n      additionalYarnRcYml.npmRegistries[uri] = registries;\n    }\n  }\n\n  const hasYarnRcNpmRegistries =\n    Object.keys(additionalYarnRcYml.npmRegistries).length > 0;\n  return {\n    additionalNpmrcContent,\n    additionalYarnRcYml: hasYarnRcNpmRegistries\n      ? additionalYarnRcYml\n      : undefined,\n  };\n}\n"]}

package/dist/modules/manager/npm/post-update/yarn.js

@@ -159,7 +159,6 @@ async function generateLockFile(lockFileDir, env, config = {}, upgrades = []) {
             }
         }
         const execOptions = {
-            userConfiguredEnv: config.env,
             cwdFile: lockFileName,
             extraEnv,
             docker: {},

package/dist/modules/manager/npm/post-update/yarn.js.map

@@ -1 +1 @@
-{"version":3,"file":"yarn.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/npm/post-update/yarn.ts"],"names":[],"mappings":";;AAgCA,kCAkDC;AAED,gDAEC;AAED,oCAEC;AAED,4CAgPC;AAED,sEAmBC;;AAjWD,kEAAkC;AAClC,4DAA4B;AAC5B,iCAA8B;AAC9B,0DAA0B;AAC1B,sDAAyD;AACzD,yEAG8C;AAC9C,+CAA4C;AAC5C,sFAAiF;AACjF,gDAA6C;AAM7C,4CAI6B;AAC7B,kDAA6D;AAC7D,oDAAwD;AACxD,iDAAwD;AAExD,0CAAsE;AAEtE,iDAAuD;AAEvD,mCAAwE;AAEjE,KAAK,UAAU,WAAW,CAC/B,WAAmB;IAEnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,kBAAa,EAChC,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAClC,MAAM,CACP,CAAC;QACF,IAAI,YAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,MAAM;iBACtB,KAAK,CAAC,oBAAY,CAAC;iBACnB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC3D,aAAa,GAAG,CAAC,CAAC,UAAU,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM;iBACpB,KAAK,CAAC,oBAAY,CAAC;iBACnB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;YACjD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAA,aAAK,EAAC,yBAAyB,CAAC,EAAE,IAAI,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,sCAAsC;gBACtC,QAAQ,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,gBAAgB,GAAG,QAAQ;gBAC/B,CAAC,CAAC,MAAM,IAAA,oBAAe,EAAC,QAAQ,CAAC;gBACjC,CAAC,CAAC,KAAK,CAAC;YACV,IAAI,cAAc,GAAG,MAAM;iBACxB,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;iBAC3C,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,cAAc,GAAG,cAAc,CAAC,OAAO,CACrC,IAAA,aAAK,EAAC,yBAAyB,CAAC,EAChC,EAAE,CACH,CAAC;gBACF,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YACD,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC9B,eAAM,CAAC,KAAK,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;gBAC3D,MAAM,IAAA,mBAAc,EAClB,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAClC,cAAc,CACf,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,0BAA0B,CAAC,CAAC;QAClC,YAAY;IACd,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,SAAgB,kBAAkB,CAAC,QAAgB;IACjD,OAAO,0CAA0C,IAAA,aAAK,EAAC,QAAQ,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAgB,YAAY,CAAC,OAAgB;IAC3C,OAAO,OAAO,CAAC,OAAO,KAAK,gBAAgB,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC;AAC5E,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,GAAsB,EACtB,SAAoD,EAAE,EACtD,WAAsB,EAAE;IAExB,MAAM,YAAY,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1D,eAAM,CAAC,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,2BAAmB,EAAC,WAAW,CAAC,CAAC;QACrD,MAAM,eAAe,GAAqB;YACxC,MAAM,IAAA,oCAAqB,EAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;SACxE,CAAC;QACF,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GACrB,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;YAC7D,IAAA,gCAAwB,EAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC9D,IAAA,6BAAsB,EAAC,MAAM,IAAA,kBAAW,EAAC,YAAY,CAAC,CAAC,CAAC;QAC1D,MAAM,cAAc,GAClB,gBAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC;YACpC,gBAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,cAAc,IAAI,cAAc,CAAC,KAAK,KAAK,CAAC,CAAC;QAC9D,MAAM,qBAAqB,GACzB,cAAc,IAAI,gBAAM,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,mBAAmB,GACvB,cAAc,IAAI,gBAAM,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAmB;YAC/B,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,UAAU,EAAE,wDAAwD;SACjF,CAAC;QAEF,kCAAkC;QAClC,MAAM,iBAAiB,GACrB,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB;YACvC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC;QAEhD,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;YAClC,eAAe,CAAC,IAAI,CAAC;gBACnB,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ;aACzC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;gBAC9B,QAAQ,CAAC,UAAU,GAAG,iBAAiB,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAa;YACzB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,EAAE,EAAE,MAAM;SACX,CAAC;QAEF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,UAAU,GAAG,EAAE,CAAC,CAAC,8BAA8B;QACnD,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;gBACnE,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,eAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;oBAChE,2HAA2H;oBAC3H,QAAQ,CAAC,QAAQ,GAAG,WAAW,CAAC;oBAChC,IAAI,QAAQ,EAAE,CAAC;wBACb,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC;oBAC3D,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,mBAAmB,EAAE,CAAC;gBAC/B,yFAAyF;gBACzF,UAAU,IAAI,yBAAyB,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU;gBACR,8DAA8D,CAAC;YACjE,QAAQ,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,8BAA8B,GAAG,OAAO,CAAC;YAClD,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,CAAC;YACtC,QAAQ,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC;gBACzC,eAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBACtE,QAAQ,CAAC,wBAAwB,GAAG,GAAG,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9D,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,IAAI,mBAAmB,CAAC;YACpC,CAAC;iBAAM,IAAI,mBAAmB,EAAE,CAAC;gBAC/B,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;oBAClC,8BAA8B;oBAC9B,UAAU,IAAI,oBAAoB,CAAC;gBACrC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,mBAAmB,GAAG,GAAG,CAAC;YACrC,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAgB;YAC/B,iBAAiB,EAAE,MAAM,CAAC,GAAG;YAC7B,OAAO,EAAE,YAAY;YACrB,QAAQ;YACR,MAAM,EAAE,EAAE;YACV,eAAe;SAChB,CAAC;QACF,qBAAqB;QACrB,IAAI,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,IAAI,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,eAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrC,uBAAuB;YACvB,QAAQ,CAAC,IAAI,CAAC,oBAAoB,IAAA,aAAK,EAAC,UAAU,CAAC,QAAS,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvC,QAAQ,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;gBACpD,QAAQ,CAAC,IAAI,CACX,oCAAoC,IAAA,aAAK,EAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACpE,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBACrD,QAAQ,CAAC,IAAI,CACX,qCAAqC,IAAA,aAAK,EAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,QAAQ,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QAE3C,kCAAkC;QAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3E,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,eAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACjD,IAAI,OAAO,EAAE,CAAC;gBACZ,kFAAkF;gBAClF,kFAAkF;gBAClF,QAAQ,CAAC,IAAI,CACX,gBAAgB,WAAW;qBACxB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;qBAC/B,MAAM,CAAC,YAAE,CAAC,MAAM,CAAC;qBACjB,MAAM,CAAC,sBAAa,CAAC;qBACrB,GAAG,CAAC,aAAK,CAAC;qBACV,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAC5B,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,2DAA2D;gBAC3D,QAAQ,CAAC,IAAI,CACX,cAAc,WAAW;oBACvB,uBAAuB;qBACtB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,OAAQ,EAAE,CAAC;qBACrC,MAAM,CAAC,sBAAa,CAAC;qBACrB,GAAG,CAAC,aAAK,CAAC;qBACV,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACjC,IACE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAChC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CACtD,EACD,CAAC;gBACD,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;gBAC5C,IAAI,OAAO,EAAE,CAAC;oBACZ,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;oBACtD,mDAAmD;oBACnD,QAAQ,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;gBAC7C,CAAC;qBAAM,IAAI,qBAAqB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBACpD,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC;gBAC5D,CAAC;qBAAM,CAAC;oBACN,eAAM,CAAC,KAAK,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC9D,eAAM,CAAC,KAAK,CACV,YAAY,YAAY,6CAA6C,CACtE,CAAC;YAEF,uEAAuE;YACvE,gFAAgF;YAChF,6EAA6E;YAC7E,gFAAgF;YAChF,+EAA+E;YAC/E,gIAAgI;YAChI,IAAI,CAAC;gBACH,MAAM,IAAA,mBAAc,EAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBACxC,eAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,sDAAsD,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAA,WAAI,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAElC,kBAAkB;QAClB,QAAQ,GAAG,MAAM,IAAA,kBAAa,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,KAAK,gCAAe,EAAE,CAAC;YACpC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,eAAM,CAAC,KAAK,CACV;YACE,GAAG;YACH,IAAI,EAAE,MAAM;SACb,EACD,iBAAiB,CAClB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1D,IACE,SAAS,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YACrD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+CAA8B,CAAC,CAAC;QAClD,CAAC;QACD,IACE,SAAS,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YAC/C,SAAS,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YAChE,SAAS,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EAC9D,CAAC;YACD,MAAM,IAAI,uCAAiB,CAAC,GAAG,EAAE,mBAAa,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,SAAgB,6BAA6B,CAE3C,mBAAsB,EAAE,kBAAqB;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7D,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QAC5C,CAAC;KACF,CAAC,CACH,CAAC;IAEF,OAAO;QACL,GAAG,mBAAmB;QACtB,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,aAAa,IAAI,EAAE,CAAC;aACnE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport semver from 'semver';\nimport { quote } from 'shlex';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../../constants/error-messages';\nimport { logger } from '../../../../logger';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error';\nimport { exec } from '../../../../util/exec';\nimport type {\n  ExecOptions,\n  ExtraEnv,\n  ToolConstraint,\n} from '../../../../util/exec/types';\nimport {\n  localPathIsFile,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../../util/fs';\nimport { newlineRegex, regEx } from '../../../../util/regex';\nimport { uniqueStrings } from '../../../../util/string';\nimport { NpmDatasource } from '../../../datasource/npm';\nimport type { PostUpdateConfig, Upgrade } from '../../types';\nimport { getYarnLock, getYarnVersionFromLock } from '../extract/yarn';\nimport type { NpmManagerData } from '../types';\nimport { getNodeToolConstraint } from './node-version';\nimport type { GenerateLockFileResult } from './types';\nimport { getPackageManagerVersion, lazyLoadPackageJson } from './utils';\n\nexport async function checkYarnrc(\n  lockFileDir: string,\n): Promise<{ offlineMirror: boolean; yarnPath: string | null }> {\n  let offlineMirror = false;\n  let yarnPath: string | null = null;\n  try {\n    const yarnrc = await readLocalFile(\n      upath.join(lockFileDir, '.yarnrc'),\n      'utf8',\n    );\n    if (is.string(yarnrc)) {\n      const mirrorLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-offline-mirror '));\n      offlineMirror = !!mirrorLine;\n      const pathLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-path '));\n      if (pathLine) {\n        yarnPath = pathLine.replace(regEx(/^yarn-path\\s+\"?(.+?)\"?$/), '$1');\n      }\n      if (yarnPath) {\n        // resolve binary relative to `yarnrc`\n        yarnPath = upath.join(lockFileDir, yarnPath);\n      }\n      const yarnBinaryExists = yarnPath\n        ? await localPathIsFile(yarnPath)\n        : false;\n      let scrubbedYarnrc = yarnrc\n        .replace('--install.pure-lockfile true', '')\n        .replace('--install.frozen-lockfile true', '');\n      if (!yarnBinaryExists) {\n        scrubbedYarnrc = scrubbedYarnrc.replace(\n          regEx(/^yarn-path\\s+\"?.+?\"?$/gm),\n          '',\n        );\n        yarnPath = null;\n      }\n      if (yarnrc !== scrubbedYarnrc) {\n        logger.debug(`Writing scrubbed .yarnrc to ${lockFileDir}`);\n        await writeLocalFile(\n          upath.join(lockFileDir, '.yarnrc'),\n          scrubbedYarnrc,\n        );\n      }\n    }\n  } catch /* istanbul ignore next */ {\n    // not found\n  }\n  return { offlineMirror, yarnPath };\n}\n\nexport function getOptimizeCommand(fileName: string): string {\n  return `sed -i 's/ steps,/ steps.slice(0,1),/' ${quote(fileName)}`;\n}\n\nexport function isYarnUpdate(upgrade: Upgrade): boolean {\n  return upgrade.depType === 'packageManager' && upgrade.depName === 'yarn';\n}\n\nexport async function generateLockFile(\n  lockFileDir: string,\n  env: NodeJS.ProcessEnv,\n  config: Partial<PostUpdateConfig<NpmManagerData>> = {},\n  upgrades: Upgrade[] = [],\n): Promise<GenerateLockFileResult> {\n  const lockFileName = upath.join(lockFileDir, 'yarn.lock');\n  logger.debug(`Spawning yarn install to create ${lockFileName}`);\n  let lockFile: string | null = null;\n  try {\n    const lazyPgkJson = lazyLoadPackageJson(lockFileDir);\n    const toolConstraints: ToolConstraint[] = [\n      await getNodeToolConstraint(config, upgrades, lockFileDir, lazyPgkJson),\n    ];\n    const yarnUpdate = upgrades.find(isYarnUpdate);\n    const yarnCompatibility =\n      (yarnUpdate ? yarnUpdate.newValue : config.constraints?.yarn) ??\n      getPackageManagerVersion('yarn', await lazyPgkJson.getValue()) ??\n      getYarnVersionFromLock(await getYarnLock(lockFileName));\n    const minYarnVersion =\n      semver.validRange(yarnCompatibility) &&\n      semver.minVersion(yarnCompatibility);\n    const isYarn1 = !minYarnVersion || minYarnVersion.major === 1;\n    const isYarnDedupeAvailable =\n      minYarnVersion && semver.gte(minYarnVersion, '2.2.0');\n    const isYarnModeAvailable =\n      minYarnVersion && semver.gte(minYarnVersion, '3.0.0');\n\n    const yarnTool: ToolConstraint = {\n      toolName: 'yarn',\n      constraint: '^1.22.18', // needs to be a v1 yarn, otherwise v2 will be installed\n    };\n\n    // check first upgrade, see #17786\n    const hasPackageManager =\n      !!config.managerData?.hasPackageManager ||\n      !!upgrades[0]?.managerData?.hasPackageManager;\n\n    if (!isYarn1 && hasPackageManager) {\n      toolConstraints.push({\n        toolName: 'corepack',\n        constraint: config.constraints?.corepack,\n      });\n    } else {\n      toolConstraints.push(yarnTool);\n      if (isYarn1 && minYarnVersion) {\n        yarnTool.constraint = yarnCompatibility;\n      }\n    }\n\n    const extraEnv: ExtraEnv = {\n      NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,\n      npm_config_store: env.npm_config_store,\n      CI: 'true',\n    };\n\n    const commands: string[] = [];\n    let cmdOptions = ''; // should have a leading space\n    if (config.skipInstalls !== false) {\n      if (isYarn1) {\n        const { offlineMirror, yarnPath } = await checkYarnrc(lockFileDir);\n        if (!offlineMirror) {\n          logger.debug('Updating yarn.lock only - skipping node_modules');\n          // The following change causes Yarn 1.x to exit gracefully after updating the lock file but without installing node_modules\n          yarnTool.toolName = 'yarn-slim';\n          if (yarnPath) {\n            commands.push(getOptimizeCommand(yarnPath) + ' || true');\n          }\n        }\n      } else if (isYarnModeAvailable) {\n        // Don't run the link step and only fetch what's necessary to compute an updated lockfile\n        cmdOptions += ' --mode=update-lockfile';\n      }\n    }\n\n    if (isYarn1) {\n      cmdOptions +=\n        ' --ignore-engines --ignore-platform --network-timeout 100000';\n      extraEnv.YARN_CACHE_FOLDER = env.YARN_CACHE_FOLDER;\n    } else {\n      extraEnv.YARN_ENABLE_IMMUTABLE_INSTALLS = 'false';\n      extraEnv.YARN_HTTP_TIMEOUT = '100000';\n      extraEnv.YARN_GLOBAL_FOLDER = env.YARN_GLOBAL_FOLDER;\n      if (!config.managerData?.yarnZeroInstall) {\n        logger.debug('Enabling global cache as zero-install is not detected');\n        extraEnv.YARN_ENABLE_GLOBAL_CACHE = '1';\n      }\n    }\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      if (isYarn1) {\n        cmdOptions += ' --ignore-scripts';\n      } else if (isYarnModeAvailable) {\n        if (config.skipInstalls === false) {\n          // Don't run the build scripts\n          cmdOptions += ' --mode=skip-build';\n        }\n      } else {\n        extraEnv.YARN_ENABLE_SCRIPTS = '0';\n      }\n    }\n\n    const execOptions: ExecOptions = {\n      userConfiguredEnv: config.env,\n      cwdFile: lockFileName,\n      extraEnv,\n      docker: {},\n      toolConstraints,\n    };\n    // istanbul ignore if\n    if (GlobalConfig.get('exposeAllEnv')) {\n      extraEnv.NPM_AUTH = env.NPM_AUTH;\n      extraEnv.NPM_EMAIL = env.NPM_EMAIL;\n    }\n\n    if (yarnUpdate && !isYarn1) {\n      logger.debug('Updating Yarn binary');\n      // TODO: types (#22198)\n      commands.push(`yarn set version ${quote(yarnUpdate.newValue!)}`);\n    }\n\n    if (process.env.RENOVATE_X_YARN_PROXY) {\n      if (process.env.HTTP_PROXY && !isYarn1) {\n        commands.push('yarn config unset --home httpProxy');\n        commands.push(\n          `yarn config set --home httpProxy ${quote(process.env.HTTP_PROXY)}`,\n        );\n      }\n      if (process.env.HTTPS_PROXY && !isYarn1) {\n        commands.push('yarn config unset --home httpsProxy');\n        commands.push(\n          `yarn config set --home httpsProxy ${quote(process.env.HTTPS_PROXY)}`,\n        );\n      }\n    }\n\n    // This command updates the lock file based on package.json\n    commands.push(`yarn install${cmdOptions}`);\n\n    // rangeStrategy = update-lockfile\n    const lockUpdates = upgrades.filter((upgrade) => upgrade.isLockfileUpdate);\n    if (lockUpdates.length) {\n      logger.debug('Performing lockfileUpdate (yarn)');\n      if (isYarn1) {\n        // `yarn upgrade` updates based on the version range specified in the package file\n        // note - this can hit a yarn bug, see https://github.com/yarnpkg/yarn/issues/8236\n        commands.push(\n          `yarn upgrade ${lockUpdates\n            .map((update) => update.depName)\n            .filter(is.string)\n            .filter(uniqueStrings)\n            .map(quote)\n            .join(' ')}${cmdOptions}`,\n        );\n      } else {\n        // `yarn up -R` updates to the latest release in each range\n        commands.push(\n          `yarn up -R ${lockUpdates\n            // TODO: types (#22198)\n            .map((update) => `${update.depName!}`)\n            .filter(uniqueStrings)\n            .map(quote)\n            .join(' ')}${cmdOptions}`,\n        );\n      }\n    }\n\n    // postUpdateOptions\n    ['fewer', 'highest'].forEach((s) => {\n      if (\n        config.postUpdateOptions?.includes(\n          `yarnDedupe${s.charAt(0).toUpperCase()}${s.slice(1)}`,\n        )\n      ) {\n        logger.debug(`Performing yarn dedupe ${s}`);\n        if (isYarn1) {\n          commands.push(`npx yarn-deduplicate --strategy ${s}`);\n          // Run yarn again in case any changes are necessary\n          commands.push(`yarn install${cmdOptions}`);\n        } else if (isYarnDedupeAvailable && s === 'highest') {\n          commands.push(`yarn dedupe --strategy ${s}${cmdOptions}`);\n        } else {\n          logger.debug(`yarn dedupe ${s} not available`);\n        }\n      }\n    });\n\n    if (upgrades.find((upgrade) => upgrade.isLockFileMaintenance)) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n\n      // Note: Instead of just deleting the `yarn.lock` file, we just wipe it\n      // and keep an empty lock file. Deleting the lock file could result in different\n      // Yarn semantics. e.g. Yarn 2+ will error when `yarn install` is executed in\n      // a subdirectory which is not part of a Yarn workspace. Yarn suggests to create\n      // an empty lock file if a subdirectory should be treated as its own workspace.\n      // https://github.com/yarnpkg/berry/blob/20612e82d26ead5928cc27bf482bb8d62dde87d3/packages/yarnpkg-core/sources/Project.ts#L284.\n      try {\n        await writeLocalFile(lockFileName, '');\n      } catch (err) /* istanbul ignore next */ {\n        logger.debug(\n          { err, lockFileName },\n          'Error clearing `yarn.lock` for lock file maintenance',\n        );\n      }\n    }\n\n    // Run the commands\n    await exec(commands, execOptions);\n\n    // Read the result\n    lockFile = await readLocalFile(lockFileName, 'utf8');\n  } catch (err) /* istanbul ignore next */ {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug(\n      {\n        err,\n        type: 'yarn',\n      },\n      'lock file error',\n    );\n    const stdouterr = String(err.stdout) + String(err.stderr);\n    if (\n      stdouterr.includes('ENOSPC: no space left on device') ||\n      stdouterr.includes('Out of diskspace')\n    ) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    }\n    if (\n      stdouterr.includes('The registry may be down.') ||\n      stdouterr.includes('getaddrinfo ENOTFOUND registry.yarnpkg.com') ||\n      stdouterr.includes('getaddrinfo ENOTFOUND registry.npmjs.org')\n    ) {\n      throw new ExternalHostError(err, NpmDatasource.id);\n    }\n    return { error: true, stderr: err.stderr, stdout: err.stdout };\n  }\n  return { lockFile };\n}\n\nexport function fuzzyMatchAdditionalYarnrcYml<\n  T extends { npmRegistries?: Record<string, unknown> },\n>(additionalYarnRcYml: T, existingYarnrRcYml: T): T {\n  const keys = new Map(\n    Object.keys(existingYarnrRcYml.npmRegistries ?? {}).map((x) => [\n      x.replace(/\\/$/, '').replace(/^https?:/, ''),\n      x,\n    ]),\n  );\n\n  return {\n    ...additionalYarnRcYml,\n    npmRegistries: Object.entries(additionalYarnRcYml.npmRegistries ?? {})\n      .map(([k, v]) => {\n        const key = keys.get(k.replace(/\\/$/, '')) ?? k;\n        return { [key]: v };\n      })\n      .reduce((acc, cur) => ({ ...acc, ...cur }), {}),\n  };\n}\n"]}
+{"version":3,"file":"yarn.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/npm/post-update/yarn.ts"],"names":[],"mappings":";;AAgCA,kCAkDC;AAED,gDAEC;AAED,oCAEC;AAED,4CA+OC;AAED,sEAmBC;;AAhWD,kEAAkC;AAClC,4DAA4B;AAC5B,iCAA8B;AAC9B,0DAA0B;AAC1B,sDAAyD;AACzD,yEAG8C;AAC9C,+CAA4C;AAC5C,sFAAiF;AACjF,gDAA6C;AAM7C,4CAI6B;AAC7B,kDAA6D;AAC7D,oDAAwD;AACxD,iDAAwD;AAExD,0CAAsE;AAEtE,iDAAuD;AAEvD,mCAAwE;AAEjE,KAAK,UAAU,WAAW,CAC/B,WAAmB;IAEnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,kBAAa,EAChC,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAClC,MAAM,CACP,CAAC;QACF,IAAI,YAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,MAAM;iBACtB,KAAK,CAAC,oBAAY,CAAC;iBACnB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC3D,aAAa,GAAG,CAAC,CAAC,UAAU,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM;iBACpB,KAAK,CAAC,oBAAY,CAAC;iBACnB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;YACjD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAA,aAAK,EAAC,yBAAyB,CAAC,EAAE,IAAI,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,sCAAsC;gBACtC,QAAQ,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,gBAAgB,GAAG,QAAQ;gBAC/B,CAAC,CAAC,MAAM,IAAA,oBAAe,EAAC,QAAQ,CAAC;gBACjC,CAAC,CAAC,KAAK,CAAC;YACV,IAAI,cAAc,GAAG,MAAM;iBACxB,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;iBAC3C,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,cAAc,GAAG,cAAc,CAAC,OAAO,CACrC,IAAA,aAAK,EAAC,yBAAyB,CAAC,EAChC,EAAE,CACH,CAAC;gBACF,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YACD,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC9B,eAAM,CAAC,KAAK,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;gBAC3D,MAAM,IAAA,mBAAc,EAClB,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAClC,cAAc,CACf,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,0BAA0B,CAAC,CAAC;QAClC,YAAY;IACd,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,SAAgB,kBAAkB,CAAC,QAAgB;IACjD,OAAO,0CAA0C,IAAA,aAAK,EAAC,QAAQ,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAgB,YAAY,CAAC,OAAgB;IAC3C,OAAO,OAAO,CAAC,OAAO,KAAK,gBAAgB,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC;AAC5E,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,GAAsB,EACtB,SAAoD,EAAE,EACtD,WAAsB,EAAE;IAExB,MAAM,YAAY,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1D,eAAM,CAAC,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,2BAAmB,EAAC,WAAW,CAAC,CAAC;QACrD,MAAM,eAAe,GAAqB;YACxC,MAAM,IAAA,oCAAqB,EAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;SACxE,CAAC;QACF,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GACrB,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;YAC7D,IAAA,gCAAwB,EAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC9D,IAAA,6BAAsB,EAAC,MAAM,IAAA,kBAAW,EAAC,YAAY,CAAC,CAAC,CAAC;QAC1D,MAAM,cAAc,GAClB,gBAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC;YACpC,gBAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,cAAc,IAAI,cAAc,CAAC,KAAK,KAAK,CAAC,CAAC;QAC9D,MAAM,qBAAqB,GACzB,cAAc,IAAI,gBAAM,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,mBAAmB,GACvB,cAAc,IAAI,gBAAM,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAmB;YAC/B,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,UAAU,EAAE,wDAAwD;SACjF,CAAC;QAEF,kCAAkC;QAClC,MAAM,iBAAiB,GACrB,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB;YACvC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC;QAEhD,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;YAClC,eAAe,CAAC,IAAI,CAAC;gBACnB,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ;aACzC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;gBAC9B,QAAQ,CAAC,UAAU,GAAG,iBAAiB,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAa;YACzB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,EAAE,EAAE,MAAM;SACX,CAAC;QAEF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,UAAU,GAAG,EAAE,CAAC,CAAC,8BAA8B;QACnD,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;gBACnE,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,eAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;oBAChE,2HAA2H;oBAC3H,QAAQ,CAAC,QAAQ,GAAG,WAAW,CAAC;oBAChC,IAAI,QAAQ,EAAE,CAAC;wBACb,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC;oBAC3D,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,mBAAmB,EAAE,CAAC;gBAC/B,yFAAyF;gBACzF,UAAU,IAAI,yBAAyB,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU;gBACR,8DAA8D,CAAC;YACjE,QAAQ,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,8BAA8B,GAAG,OAAO,CAAC;YAClD,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,CAAC;YACtC,QAAQ,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC;gBACzC,eAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBACtE,QAAQ,CAAC,wBAAwB,GAAG,GAAG,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9D,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,IAAI,mBAAmB,CAAC;YACpC,CAAC;iBAAM,IAAI,mBAAmB,EAAE,CAAC;gBAC/B,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;oBAClC,8BAA8B;oBAC9B,UAAU,IAAI,oBAAoB,CAAC;gBACrC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,mBAAmB,GAAG,GAAG,CAAC;YACrC,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAgB;YAC/B,OAAO,EAAE,YAAY;YACrB,QAAQ;YACR,MAAM,EAAE,EAAE;YACV,eAAe;SAChB,CAAC;QACF,qBAAqB;QACrB,IAAI,qBAAY,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,IAAI,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,eAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrC,uBAAuB;YACvB,QAAQ,CAAC,IAAI,CAAC,oBAAoB,IAAA,aAAK,EAAC,UAAU,CAAC,QAAS,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvC,QAAQ,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;gBACpD,QAAQ,CAAC,IAAI,CACX,oCAAoC,IAAA,aAAK,EAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACpE,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBACrD,QAAQ,CAAC,IAAI,CACX,qCAAqC,IAAA,aAAK,EAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,QAAQ,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QAE3C,kCAAkC;QAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3E,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,eAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACjD,IAAI,OAAO,EAAE,CAAC;gBACZ,kFAAkF;gBAClF,kFAAkF;gBAClF,QAAQ,CAAC,IAAI,CACX,gBAAgB,WAAW;qBACxB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;qBAC/B,MAAM,CAAC,YAAE,CAAC,MAAM,CAAC;qBACjB,MAAM,CAAC,sBAAa,CAAC;qBACrB,GAAG,CAAC,aAAK,CAAC;qBACV,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAC5B,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,2DAA2D;gBAC3D,QAAQ,CAAC,IAAI,CACX,cAAc,WAAW;oBACvB,uBAAuB;qBACtB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,OAAQ,EAAE,CAAC;qBACrC,MAAM,CAAC,sBAAa,CAAC;qBACrB,GAAG,CAAC,aAAK,CAAC;qBACV,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACjC,IACE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAChC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CACtD,EACD,CAAC;gBACD,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;gBAC5C,IAAI,OAAO,EAAE,CAAC;oBACZ,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;oBACtD,mDAAmD;oBACnD,QAAQ,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;gBAC7C,CAAC;qBAAM,IAAI,qBAAqB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBACpD,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC;gBAC5D,CAAC;qBAAM,CAAC;oBACN,eAAM,CAAC,KAAK,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC9D,eAAM,CAAC,KAAK,CACV,YAAY,YAAY,6CAA6C,CACtE,CAAC;YAEF,uEAAuE;YACvE,gFAAgF;YAChF,6EAA6E;YAC7E,gFAAgF;YAChF,+EAA+E;YAC/E,gIAAgI;YAChI,IAAI,CAAC;gBACH,MAAM,IAAA,mBAAc,EAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBACxC,eAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,sDAAsD,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAA,WAAI,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAElC,kBAAkB;QAClB,QAAQ,GAAG,MAAM,IAAA,kBAAa,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,KAAK,gCAAe,EAAE,CAAC;YACpC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,eAAM,CAAC,KAAK,CACV;YACE,GAAG;YACH,IAAI,EAAE,MAAM;SACb,EACD,iBAAiB,CAClB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1D,IACE,SAAS,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YACrD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+CAA8B,CAAC,CAAC;QAClD,CAAC;QACD,IACE,SAAS,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YAC/C,SAAS,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YAChE,SAAS,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EAC9D,CAAC;YACD,MAAM,IAAI,uCAAiB,CAAC,GAAG,EAAE,mBAAa,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,SAAgB,6BAA6B,CAE3C,mBAAsB,EAAE,kBAAqB;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7D,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QAC5C,CAAC;KACF,CAAC,CACH,CAAC;IAEF,OAAO;QACL,GAAG,mBAAmB;QACtB,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,aAAa,IAAI,EAAE,CAAC;aACnE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport semver from 'semver';\nimport { quote } from 'shlex';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../../constants/error-messages';\nimport { logger } from '../../../../logger';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error';\nimport { exec } from '../../../../util/exec';\nimport type {\n  ExecOptions,\n  ExtraEnv,\n  ToolConstraint,\n} from '../../../../util/exec/types';\nimport {\n  localPathIsFile,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../../util/fs';\nimport { newlineRegex, regEx } from '../../../../util/regex';\nimport { uniqueStrings } from '../../../../util/string';\nimport { NpmDatasource } from '../../../datasource/npm';\nimport type { PostUpdateConfig, Upgrade } from '../../types';\nimport { getYarnLock, getYarnVersionFromLock } from '../extract/yarn';\nimport type { NpmManagerData } from '../types';\nimport { getNodeToolConstraint } from './node-version';\nimport type { GenerateLockFileResult } from './types';\nimport { getPackageManagerVersion, lazyLoadPackageJson } from './utils';\n\nexport async function checkYarnrc(\n  lockFileDir: string,\n): Promise<{ offlineMirror: boolean; yarnPath: string | null }> {\n  let offlineMirror = false;\n  let yarnPath: string | null = null;\n  try {\n    const yarnrc = await readLocalFile(\n      upath.join(lockFileDir, '.yarnrc'),\n      'utf8',\n    );\n    if (is.string(yarnrc)) {\n      const mirrorLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-offline-mirror '));\n      offlineMirror = !!mirrorLine;\n      const pathLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-path '));\n      if (pathLine) {\n        yarnPath = pathLine.replace(regEx(/^yarn-path\\s+\"?(.+?)\"?$/), '$1');\n      }\n      if (yarnPath) {\n        // resolve binary relative to `yarnrc`\n        yarnPath = upath.join(lockFileDir, yarnPath);\n      }\n      const yarnBinaryExists = yarnPath\n        ? await localPathIsFile(yarnPath)\n        : false;\n      let scrubbedYarnrc = yarnrc\n        .replace('--install.pure-lockfile true', '')\n        .replace('--install.frozen-lockfile true', '');\n      if (!yarnBinaryExists) {\n        scrubbedYarnrc = scrubbedYarnrc.replace(\n          regEx(/^yarn-path\\s+\"?.+?\"?$/gm),\n          '',\n        );\n        yarnPath = null;\n      }\n      if (yarnrc !== scrubbedYarnrc) {\n        logger.debug(`Writing scrubbed .yarnrc to ${lockFileDir}`);\n        await writeLocalFile(\n          upath.join(lockFileDir, '.yarnrc'),\n          scrubbedYarnrc,\n        );\n      }\n    }\n  } catch /* istanbul ignore next */ {\n    // not found\n  }\n  return { offlineMirror, yarnPath };\n}\n\nexport function getOptimizeCommand(fileName: string): string {\n  return `sed -i 's/ steps,/ steps.slice(0,1),/' ${quote(fileName)}`;\n}\n\nexport function isYarnUpdate(upgrade: Upgrade): boolean {\n  return upgrade.depType === 'packageManager' && upgrade.depName === 'yarn';\n}\n\nexport async function generateLockFile(\n  lockFileDir: string,\n  env: NodeJS.ProcessEnv,\n  config: Partial<PostUpdateConfig<NpmManagerData>> = {},\n  upgrades: Upgrade[] = [],\n): Promise<GenerateLockFileResult> {\n  const lockFileName = upath.join(lockFileDir, 'yarn.lock');\n  logger.debug(`Spawning yarn install to create ${lockFileName}`);\n  let lockFile: string | null = null;\n  try {\n    const lazyPgkJson = lazyLoadPackageJson(lockFileDir);\n    const toolConstraints: ToolConstraint[] = [\n      await getNodeToolConstraint(config, upgrades, lockFileDir, lazyPgkJson),\n    ];\n    const yarnUpdate = upgrades.find(isYarnUpdate);\n    const yarnCompatibility =\n      (yarnUpdate ? yarnUpdate.newValue : config.constraints?.yarn) ??\n      getPackageManagerVersion('yarn', await lazyPgkJson.getValue()) ??\n      getYarnVersionFromLock(await getYarnLock(lockFileName));\n    const minYarnVersion =\n      semver.validRange(yarnCompatibility) &&\n      semver.minVersion(yarnCompatibility);\n    const isYarn1 = !minYarnVersion || minYarnVersion.major === 1;\n    const isYarnDedupeAvailable =\n      minYarnVersion && semver.gte(minYarnVersion, '2.2.0');\n    const isYarnModeAvailable =\n      minYarnVersion && semver.gte(minYarnVersion, '3.0.0');\n\n    const yarnTool: ToolConstraint = {\n      toolName: 'yarn',\n      constraint: '^1.22.18', // needs to be a v1 yarn, otherwise v2 will be installed\n    };\n\n    // check first upgrade, see #17786\n    const hasPackageManager =\n      !!config.managerData?.hasPackageManager ||\n      !!upgrades[0]?.managerData?.hasPackageManager;\n\n    if (!isYarn1 && hasPackageManager) {\n      toolConstraints.push({\n        toolName: 'corepack',\n        constraint: config.constraints?.corepack,\n      });\n    } else {\n      toolConstraints.push(yarnTool);\n      if (isYarn1 && minYarnVersion) {\n        yarnTool.constraint = yarnCompatibility;\n      }\n    }\n\n    const extraEnv: ExtraEnv = {\n      NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,\n      npm_config_store: env.npm_config_store,\n      CI: 'true',\n    };\n\n    const commands: string[] = [];\n    let cmdOptions = ''; // should have a leading space\n    if (config.skipInstalls !== false) {\n      if (isYarn1) {\n        const { offlineMirror, yarnPath } = await checkYarnrc(lockFileDir);\n        if (!offlineMirror) {\n          logger.debug('Updating yarn.lock only - skipping node_modules');\n          // The following change causes Yarn 1.x to exit gracefully after updating the lock file but without installing node_modules\n          yarnTool.toolName = 'yarn-slim';\n          if (yarnPath) {\n            commands.push(getOptimizeCommand(yarnPath) + ' || true');\n          }\n        }\n      } else if (isYarnModeAvailable) {\n        // Don't run the link step and only fetch what's necessary to compute an updated lockfile\n        cmdOptions += ' --mode=update-lockfile';\n      }\n    }\n\n    if (isYarn1) {\n      cmdOptions +=\n        ' --ignore-engines --ignore-platform --network-timeout 100000';\n      extraEnv.YARN_CACHE_FOLDER = env.YARN_CACHE_FOLDER;\n    } else {\n      extraEnv.YARN_ENABLE_IMMUTABLE_INSTALLS = 'false';\n      extraEnv.YARN_HTTP_TIMEOUT = '100000';\n      extraEnv.YARN_GLOBAL_FOLDER = env.YARN_GLOBAL_FOLDER;\n      if (!config.managerData?.yarnZeroInstall) {\n        logger.debug('Enabling global cache as zero-install is not detected');\n        extraEnv.YARN_ENABLE_GLOBAL_CACHE = '1';\n      }\n    }\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      if (isYarn1) {\n        cmdOptions += ' --ignore-scripts';\n      } else if (isYarnModeAvailable) {\n        if (config.skipInstalls === false) {\n          // Don't run the build scripts\n          cmdOptions += ' --mode=skip-build';\n        }\n      } else {\n        extraEnv.YARN_ENABLE_SCRIPTS = '0';\n      }\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv,\n      docker: {},\n      toolConstraints,\n    };\n    // istanbul ignore if\n    if (GlobalConfig.get('exposeAllEnv')) {\n      extraEnv.NPM_AUTH = env.NPM_AUTH;\n      extraEnv.NPM_EMAIL = env.NPM_EMAIL;\n    }\n\n    if (yarnUpdate && !isYarn1) {\n      logger.debug('Updating Yarn binary');\n      // TODO: types (#22198)\n      commands.push(`yarn set version ${quote(yarnUpdate.newValue!)}`);\n    }\n\n    if (process.env.RENOVATE_X_YARN_PROXY) {\n      if (process.env.HTTP_PROXY && !isYarn1) {\n        commands.push('yarn config unset --home httpProxy');\n        commands.push(\n          `yarn config set --home httpProxy ${quote(process.env.HTTP_PROXY)}`,\n        );\n      }\n      if (process.env.HTTPS_PROXY && !isYarn1) {\n        commands.push('yarn config unset --home httpsProxy');\n        commands.push(\n          `yarn config set --home httpsProxy ${quote(process.env.HTTPS_PROXY)}`,\n        );\n      }\n    }\n\n    // This command updates the lock file based on package.json\n    commands.push(`yarn install${cmdOptions}`);\n\n    // rangeStrategy = update-lockfile\n    const lockUpdates = upgrades.filter((upgrade) => upgrade.isLockfileUpdate);\n    if (lockUpdates.length) {\n      logger.debug('Performing lockfileUpdate (yarn)');\n      if (isYarn1) {\n        // `yarn upgrade` updates based on the version range specified in the package file\n        // note - this can hit a yarn bug, see https://github.com/yarnpkg/yarn/issues/8236\n        commands.push(\n          `yarn upgrade ${lockUpdates\n            .map((update) => update.depName)\n            .filter(is.string)\n            .filter(uniqueStrings)\n            .map(quote)\n            .join(' ')}${cmdOptions}`,\n        );\n      } else {\n        // `yarn up -R` updates to the latest release in each range\n        commands.push(\n          `yarn up -R ${lockUpdates\n            // TODO: types (#22198)\n            .map((update) => `${update.depName!}`)\n            .filter(uniqueStrings)\n            .map(quote)\n            .join(' ')}${cmdOptions}`,\n        );\n      }\n    }\n\n    // postUpdateOptions\n    ['fewer', 'highest'].forEach((s) => {\n      if (\n        config.postUpdateOptions?.includes(\n          `yarnDedupe${s.charAt(0).toUpperCase()}${s.slice(1)}`,\n        )\n      ) {\n        logger.debug(`Performing yarn dedupe ${s}`);\n        if (isYarn1) {\n          commands.push(`npx yarn-deduplicate --strategy ${s}`);\n          // Run yarn again in case any changes are necessary\n          commands.push(`yarn install${cmdOptions}`);\n        } else if (isYarnDedupeAvailable && s === 'highest') {\n          commands.push(`yarn dedupe --strategy ${s}${cmdOptions}`);\n        } else {\n          logger.debug(`yarn dedupe ${s} not available`);\n        }\n      }\n    });\n\n    if (upgrades.find((upgrade) => upgrade.isLockFileMaintenance)) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n\n      // Note: Instead of just deleting the `yarn.lock` file, we just wipe it\n      // and keep an empty lock file. Deleting the lock file could result in different\n      // Yarn semantics. e.g. Yarn 2+ will error when `yarn install` is executed in\n      // a subdirectory which is not part of a Yarn workspace. Yarn suggests to create\n      // an empty lock file if a subdirectory should be treated as its own workspace.\n      // https://github.com/yarnpkg/berry/blob/20612e82d26ead5928cc27bf482bb8d62dde87d3/packages/yarnpkg-core/sources/Project.ts#L284.\n      try {\n        await writeLocalFile(lockFileName, '');\n      } catch (err) /* istanbul ignore next */ {\n        logger.debug(\n          { err, lockFileName },\n          'Error clearing `yarn.lock` for lock file maintenance',\n        );\n      }\n    }\n\n    // Run the commands\n    await exec(commands, execOptions);\n\n    // Read the result\n    lockFile = await readLocalFile(lockFileName, 'utf8');\n  } catch (err) /* istanbul ignore next */ {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug(\n      {\n        err,\n        type: 'yarn',\n      },\n      'lock file error',\n    );\n    const stdouterr = String(err.stdout) + String(err.stderr);\n    if (\n      stdouterr.includes('ENOSPC: no space left on device') ||\n      stdouterr.includes('Out of diskspace')\n    ) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    }\n    if (\n      stdouterr.includes('The registry may be down.') ||\n      stdouterr.includes('getaddrinfo ENOTFOUND registry.yarnpkg.com') ||\n      stdouterr.includes('getaddrinfo ENOTFOUND registry.npmjs.org')\n    ) {\n      throw new ExternalHostError(err, NpmDatasource.id);\n    }\n    return { error: true, stderr: err.stderr, stdout: err.stdout };\n  }\n  return { lockFile };\n}\n\nexport function fuzzyMatchAdditionalYarnrcYml<\n  T extends { npmRegistries?: Record<string, unknown> },\n>(additionalYarnRcYml: T, existingYarnrRcYml: T): T {\n  const keys = new Map(\n    Object.keys(existingYarnrRcYml.npmRegistries ?? {}).map((x) => [\n      x.replace(/\\/$/, '').replace(/^https?:/, ''),\n      x,\n    ]),\n  );\n\n  return {\n    ...additionalYarnRcYml,\n    npmRegistries: Object.entries(additionalYarnRcYml.npmRegistries ?? {})\n      .map(([k, v]) => {\n        const key = keys.get(k.replace(/\\/$/, '')) ?? k;\n        return { [key]: v };\n      })\n      .reduce((acc, cur) => ({ ...acc, ...cur }), {}),\n  };\n}\n"]}

package/dist/modules/manager/npm/schema.d.ts

@@ -40,18 +40,18 @@ export declare const PackageJsonSchema: z.ZodObject<{
     }, string>>;
 }, "strip", z.ZodTypeAny, {
     dependencies?: Record<string, string> | undefined;
-    engines?: Record<string, string> | undefined;
     devDependencies?: Record<string, string> | undefined;
     peerDependencies?: Record<string, string> | undefined;
+    engines?: Record<string, string> | undefined;
     packageManager?: {
         name: string;
         version: string;
     } | undefined;
 }, {
     dependencies?: Record<string, any> | undefined;
-    engines?: Record<string, any> | undefined;
     devDependencies?: Record<string, any> | undefined;
     peerDependencies?: Record<string, any> | undefined;
+    engines?: Record<string, any> | undefined;
     packageManager?: string | undefined;
 }>;
 export type PackageJsonSchema = z.infer<typeof PackageJsonSchema>;
@@ -66,18 +66,18 @@ export declare const PackageJson: z.ZodPipeline<z.ZodEffects<z.ZodString, string
     }, string>>;
 }, "strip", z.ZodTypeAny, {
     dependencies?: Record<string, string> | undefined;
-    engines?: Record<string, string> | undefined;
     devDependencies?: Record<string, string> | undefined;
     peerDependencies?: Record<string, string> | undefined;
+    engines?: Record<string, string> | undefined;
     packageManager?: {
         name: string;
         version: string;
     } | undefined;
 }, {
     dependencies?: Record<string, any> | undefined;
-    engines?: Record<string, any> | undefined;
     devDependencies?: Record<string, any> | undefined;
     peerDependencies?: Record<string, any> | undefined;
+    engines?: Record<string, any> | undefined;
     packageManager?: string | undefined;
 }>>;
 export declare const PackageLockV3Schema: z.ZodObject<{
@@ -103,18 +103,18 @@ export declare const PackageLockPreV3Schema: z.ZodEffects<z.ZodObject<{
     dependencies: Record<string, {
         version: string;
     }>;
-    lockfileVersion: 2 | 1;
+    lockfileVersion: 1 | 2;
 }, {
     dependencies: Record<string, any>;
-    lockfileVersion: 2 | 1;
+    lockfileVersion: 1 | 2;
 }>, {
-    lockfileVersion: 2 | 1;
+    lockfileVersion: 1 | 2;
     packages: Record<string, {
         version: string;
     }>;
 }, {
     dependencies: Record<string, any>;
-    lockfileVersion: 2 | 1;
+    lockfileVersion: 1 | 2;
 }>;
 export declare const PackageLock: z.ZodEffects<z.ZodPipeline<z.ZodEffects<z.ZodString, string | number | boolean | import("type-fest").JsonObject | import("type-fest").JsonValue[] | readonly import("type-fest").JsonValue[] | null, string>, z.ZodUnion<[z.ZodObject<{
     lockfileVersion: z.ZodLiteral<3>;
@@ -138,19 +138,19 @@ export declare const PackageLock: z.ZodEffects<z.ZodPipeline<z.ZodEffects<z.ZodS
     dependencies: Record<string, {
         version: string;
     }>;
-    lockfileVersion: 2 | 1;
+    lockfileVersion: 1 | 2;
 }, {
     dependencies: Record<string, any>;
-    lockfileVersion: 2 | 1;
+    lockfileVersion: 1 | 2;
 }>, {
-    lockfileVersion: 2 | 1;
+    lockfileVersion: 1 | 2;
     packages: Record<string, {
         version: string;
     }>;
 }, {
     dependencies: Record<string, any>;
-    lockfileVersion: 2 | 1;
+    lockfileVersion: 1 | 2;
 }>]>>, {
     lockedVersions: Record<string, string>;
-    lockfileVersion: 2 | 1 | 3;
+    lockfileVersion: 1 | 2 | 3;
 }, string>;

package/dist/modules/manager/npm/update/dependency/index.js

@@ -87,7 +87,7 @@ function updateDependency({ fileContent, upgrade, }) {
         return (0, pnpm_1.updatePnpmCatalogDependency)({ fileContent, upgrade });
     }
     const { depType, managerData } = upgrade;
-    const depName = managerData?.key || upgrade.depName;
+    const depName = managerData?.key ?? upgrade.depName;
     let { newValue } = upgrade;
     newValue = (0, common_1.getNewGitValue)(upgrade) ?? newValue;
     newValue = (0, common_1.getNewNpmAliasValue)(newValue, upgrade) ?? newValue;

package/dist/modules/manager/npm/update/dependency/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../lib/modules/manager/npm/update/dependency/index.ts"],"names":[],"mappings":";;AAmHA,4CA2JC;;AA9QD,kEAAkC;AAClC,mCAAgC;AAChC,kDAA+C;AAC/C,qDAAgE;AAChE,uDAAgE;AAShE,qCAA+D;AAC/D,iCAAqD;AAErD,SAAS,YAAY,CACnB,MAAwB,EACxB,MAAc,EACd,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAsB,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CACtB,cAA0B,EAC1B,WAAmB,EACnB,OAIoB,EACpB,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,OAAkB;IAElB,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,cAAc,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IACrC,CAAC;SAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACxC,cAAc,CAAC,IAAK,CAAC,SAAU,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IACtD,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,qDAAqD;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAE,EAAE;YAC7C,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,OAAO,CAAE,CAAC,QAAQ,CAAC;SAC/C,CAAC,CAAC,QAAQ,CAAC,CAAC;IACf,CAAC;SAAM,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,cAAc,CAAC,gBAAgB,GAAG,YAAY;YAC5C,cAAc;YACd,cAAc,CAAC,gBAAiB,EAChC,QAAQ,EACR,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC9C,mDAAmD;QACnD,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,GAAG,mBAAmB,CACjE,cAAc,CAAC,OAAO,CAAE,EACxB,OAAO,EACP,OAAO,CACR,CAAC;QACF,IAAI,kBAAkB,EAAE,CAAC;YACvB,kBAAkB,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC;QACjD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iDAAiD;QACjD,cAAc,CAAC,OAAO,CAAE,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IAC/C,CAAC;IACD,kCAAkC;IAClC,MAAM,YAAY,GAAG,IAAI,QAAQ,GAAG,CAAC;IACrC,IAAI,SAAS,GAAG,IAAI,QAAQ,GAAG,CAAC;IAEhC,MAAM,cAAc,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAA,aAAK,EAAC,WAAW,cAAc,cAAc,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,KAAK,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;QACpE,cAAc,CAAC,OAAO,CAAE,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QAC1C,SAAS,GAAG,IAAI,KAAK,GAAG,CAAC;IAC3B,CAAC;IAED,gCAAgC;IAChC,IAAI,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACvE,eAAM,CAAC,KAAK,CAAC,4BAA4B,WAAW,EAAE,CAAC,CAAC;IACxD,uCAAuC;IACvC,OAAO,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,EAAE,CAAC;QAC1D,mDAAmD;QACnD,IAAI,IAAA,gBAAO,EAAC,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;YACpD,eAAM,CAAC,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;YACpD,iCAAiC;YACjC,MAAM,WAAW,GAAG,IAAA,kBAAS,EAC3B,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,CACV,CAAC;YACF,mDAAmD;YACnD,IAAI,IAAA,eAAM,EAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACpD,OAAO,WAAW,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IACD,uBAAuB;IACvB,MAAM,IAAI,KAAK,EAAE,CAAC;AACpB,CAAC;AAED,SAAgB,gBAAgB,CAAC,EAC/B,WAAW,EACX,OAAO,GACgB;IACvB,IAAI,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,OAAO,IAAA,kCAA2B,EAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,OAAO,GAAW,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;IAC5D,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE3B,QAAQ,GAAG,IAAA,uBAAc,EAAC,OAAO,CAAC,IAAI,QAAQ,CAAC;IAC/C,QAAQ,GAAG,IAAA,4BAAmB,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC;IAE9D,eAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,IAAI,OAAO,MAAM,QAAQ,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,cAAc,GAAe,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,kBAAkB,GAAyB,SAAS,CAAC;QACzD,uBAAuB;QACvB,IAAI,UAA8B,CAAC;QACnC,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACrC,QAAQ,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,kBAAkB,GAAG,WAAW,EAAE,OAAO,CAAC;YAC1C,IAAI,kBAAkB,EAAE,CAAC;gBACvB,oEAAoE;gBACpE,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,GAAG,mBAAmB,CACjE,cAAc,CAAC,SAAU,EACzB,kBAAkB,EAClB,OAAO,CACR,CAAC;gBACF,IAAI,kBAAkB,EAAE,CAAC;oBACvB,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAE,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACxC,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,cAAc,CAAC,OAAqB,CAAE,CAAC,OAAO,CAAW,CAAC;QACzE,CAAC;QACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5B,eAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC3C,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,cAAc;QACd,IAAI,cAAsB,CAAC;QAC3B,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,mBAAmB,KAAK,OAAO,EAAE,CAAC;YAC/D,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,WAAW,EACX,OAAqB,EACrB,OAAO,EACP,UAAW,EACX,OAAO,OAAO,CAAC,OAAO,IAAI,QAAQ,EAAE,EACpC,kBAAkB,CACnB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,WAAW,EACX,OAAqB,EACrB,OAAO,EACP,UAAW,EACX,QAAS,EACT,kBAAkB,CACnB,CAAC;YACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,cAAc,EACd,OAAqB,EACrB,OAAO,EACP,OAAO,EACP,OAAO,CAAC,OAAO,EACf,kBAAkB,CACnB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,qBAAqB;QACrB,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,eAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAC3D,iCAAiC,CAClC,CAAC;YACF,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,cAAc,EAAE,WAAW,EAAE,CAAC;YAChC,IAAI,MAA0B,CAAC;YAC/B,IAAI,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;iBAAM,IAAI,cAAc,CAAC,WAAW,CAAC,MAAM,OAAO,EAAE,CAAC,EAAE,CAAC;gBACvD,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC3B,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,qBAAqB;gBACrB,IAAI,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;oBACtD,eAAM,CAAC,KAAK,CACV;wBACE,OAAO;wBACP,MAAM;wBACN,UAAU;wBACV,kBAAkB,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC;qBACvD,EACD,yEAAyE,CAC1E,CAAC;gBACJ,CAAC;gBACD,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,cAAc,EACd,aAAa,EACb,MAAM;gBACN,cAAc;gBACd,cAAc,CAAC,WAAW,CAAC,MAAM,CAAE;gBACnC,cAAc;gBACd,QAAS,CACV,CAAC;gBACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,IAAI,MAAM,KAAK,MAAM,OAAO,EAAE,EAAE,CAAC;wBAC/B,0DAA0D;wBAC1D,OAAO,CAAC,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;oBAC5C,CAAC;oBACD,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,cAAc,EACd,aAAa,EACb,MAAM,EACN,MAAM,EACN,OAAO,CAAC,OAAO,CAChB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,cAAc,EAAE,gBAAgB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACvE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;oBACrC,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,MAAM;oBACN,uBAAuB;oBACvB,GAAG,OAAO,IAAI,QAAQ,EAAE,CACzB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,aAAiC,EACjC,OAAiB,EACjB,OAAe;IAKf,yDAAyD;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,IAAI,WAAW,GAAuB,aAAa,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,GAAG,WAAW,CAAC,MAAM,CAAsC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,MAAM,kBAAkB,GAAG,WAAqC,CAAC;IACjE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgC;IACxD,OAAO,CACL,YAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,YAAE,CAAC,8BAA8B,CAAC;QACzE,OAAO,CAAC,OAAO,KAAK,WAAW,CAChC,CAAC;AACJ,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { logger } from '../../../../../logger';\nimport { escapeRegExp, regEx } from '../../../../../util/regex';\nimport { matchAt, replaceAt } from '../../../../../util/string';\nimport type { UpdateDependencyConfig, Upgrade } from '../../../types';\nimport type {\n  DependenciesMeta,\n  NpmPackage,\n  OverrideDependency,\n  RecursiveOverride,\n} from '../../extract/types';\nimport type { NpmDepType, NpmManagerData } from '../../types';\nimport { getNewGitValue, getNewNpmAliasValue } from './common';\nimport { updatePnpmCatalogDependency } from './pnpm';\n\nfunction renameObjKey(\n  oldObj: DependenciesMeta,\n  oldKey: string,\n  newKey: string,\n): DependenciesMeta {\n  const keys = Object.keys(oldObj);\n  return keys.reduce((acc, key) => {\n    if (key === oldKey) {\n      acc[newKey] = oldObj[oldKey];\n    } else {\n      acc[key] = oldObj[key];\n    }\n    return acc;\n  }, {} as DependenciesMeta);\n}\n\nfunction replaceAsString(\n  parsedContents: NpmPackage,\n  fileContent: string,\n  depType:\n    | NpmDepType\n    | 'dependenciesMeta'\n    | 'packageManager'\n    | 'pnpm.overrides',\n  depName: string,\n  oldValue: string,\n  newValue: string,\n  parents?: string[],\n): string {\n  if (depType === 'packageManager') {\n    parsedContents[depType] = newValue;\n  } else if (depType === 'pnpm.overrides') {\n    parsedContents.pnpm!.overrides![depName] = newValue;\n  } else if (depName === oldValue) {\n    // The old value is the name of the dependency itself\n    delete Object.assign(parsedContents[depType]!, {\n      [newValue]: parsedContents[depType]![oldValue],\n    })[oldValue];\n  } else if (depType === 'dependenciesMeta') {\n    if (oldValue !== newValue) {\n      parsedContents.dependenciesMeta = renameObjKey(\n        // TODO #22198\n        parsedContents.dependenciesMeta!,\n        oldValue,\n        newValue,\n      );\n    }\n  } else if (parents && depType === 'overrides') {\n    // there is an object as a value in overrides block\n    const { depObjectReference, overrideDepName } = overrideDepPosition(\n      parsedContents[depType]!,\n      parents,\n      depName,\n    );\n    if (depObjectReference) {\n      depObjectReference[overrideDepName] = newValue;\n    }\n  } else {\n    // The old value is the version of the dependency\n    parsedContents[depType]![depName] = newValue;\n  }\n  // Look for the old version number\n  const searchString = `\"${oldValue}\"`;\n  let newString = `\"${newValue}\"`;\n\n  const escapedDepName = escapeRegExp(depName);\n  const patchRe = regEx(`^(patch:${escapedDepName}@(npm:)?).*#`);\n  const match = patchRe.exec(oldValue);\n  if (match && depType === 'resolutions') {\n    const patch = oldValue.replace(match[0], `${match[1]}${newValue}#`);\n    parsedContents[depType]![depName] = patch;\n    newString = `\"${patch}\"`;\n  }\n\n  // Skip ahead to depType section\n  let searchIndex = fileContent.indexOf(`\"${depType}\"`) + depType.length;\n  logger.trace(`Starting search at index ${searchIndex}`);\n  // Iterate through the rest of the file\n  for (; searchIndex < fileContent.length; searchIndex += 1) {\n    // First check if we have a hit for the old version\n    if (matchAt(fileContent, searchIndex, searchString)) {\n      logger.trace(`Found match at index ${searchIndex}`);\n      // Now test if the result matches\n      const testContent = replaceAt(\n        fileContent,\n        searchIndex,\n        searchString,\n        newString,\n      );\n      // Compare the parsed JSON structure of old and new\n      if (dequal(parsedContents, JSON.parse(testContent))) {\n        return testContent;\n      }\n    }\n  }\n  // istanbul ignore next\n  throw new Error();\n}\n\nexport function updateDependency({\n  fileContent,\n  upgrade,\n}: UpdateDependencyConfig): string | null {\n  if (upgrade.depType?.startsWith('pnpm.catalog')) {\n    return updatePnpmCatalogDependency({ fileContent, upgrade });\n  }\n\n  const { depType, managerData } = upgrade;\n  const depName: string = managerData?.key || upgrade.depName;\n  let { newValue } = upgrade;\n\n  newValue = getNewGitValue(upgrade) ?? newValue;\n  newValue = getNewNpmAliasValue(newValue, upgrade) ?? newValue;\n\n  logger.debug(`npm.updateDependency(): ${depType}.${depName} = ${newValue}`);\n  try {\n    const parsedContents: NpmPackage = JSON.parse(fileContent);\n    let overrideDepParents: string[] | undefined = undefined;\n    // Save the old version\n    let oldVersion: string | undefined;\n    if (depType === 'packageManager') {\n      oldVersion = parsedContents[depType];\n      newValue = `${depName}@${newValue}`;\n    } else if (isOverrideObject(upgrade)) {\n      overrideDepParents = managerData?.parents;\n      if (overrideDepParents) {\n        // old version when there is an object as a value in overrides block\n        const { depObjectReference, overrideDepName } = overrideDepPosition(\n          parsedContents.overrides!,\n          overrideDepParents,\n          depName,\n        );\n        if (depObjectReference) {\n          oldVersion = depObjectReference[overrideDepName]!;\n        }\n      }\n    } else if (depType === 'pnpm.overrides') {\n      oldVersion = parsedContents.pnpm?.overrides?.[depName];\n    } else {\n      oldVersion = parsedContents[depType as NpmDepType]![depName] as string;\n    }\n    if (oldVersion === newValue) {\n      logger.trace('Version is already updated');\n      return fileContent;\n    }\n\n    // TODO #22198\n    let newFileContent: string;\n    if (upgrade.newName && upgrade.replacementApproach === 'alias') {\n      newFileContent = replaceAsString(\n        parsedContents,\n        fileContent,\n        depType as NpmDepType,\n        depName,\n        oldVersion!,\n        `npm:${upgrade.newName}@${newValue}`,\n        overrideDepParents,\n      );\n    } else {\n      newFileContent = replaceAsString(\n        parsedContents,\n        fileContent,\n        depType as NpmDepType,\n        depName,\n        oldVersion!,\n        newValue!,\n        overrideDepParents,\n      );\n      if (upgrade.newName) {\n        newFileContent = replaceAsString(\n          parsedContents,\n          newFileContent,\n          depType as NpmDepType,\n          depName,\n          depName,\n          upgrade.newName,\n          overrideDepParents,\n        );\n      }\n    }\n    // istanbul ignore if\n    if (!newFileContent) {\n      logger.debug(\n        { fileContent, parsedContents, depType, depName, newValue },\n        'Warning: updateDependency error',\n      );\n      return fileContent;\n    }\n    if (parsedContents?.resolutions) {\n      let depKey: string | undefined;\n      if (parsedContents.resolutions[depName]) {\n        depKey = depName;\n      } else if (parsedContents.resolutions[`**/${depName}`]) {\n        depKey = `**/${depName}`;\n      }\n      if (depKey) {\n        // istanbul ignore if\n        if (parsedContents.resolutions[depKey] !== oldVersion) {\n          logger.debug(\n            {\n              depName,\n              depKey,\n              oldVersion,\n              resolutionsVersion: parsedContents.resolutions[depKey],\n            },\n            'Upgraded dependency exists in yarn resolutions but is different version',\n          );\n        }\n        newFileContent = replaceAsString(\n          parsedContents,\n          newFileContent,\n          'resolutions',\n          depKey,\n          // TODO #22198\n          parsedContents.resolutions[depKey]!,\n          // TODO #22198\n          newValue!,\n        );\n        if (upgrade.newName) {\n          if (depKey === `**/${depName}`) {\n            // handles the case where a replacement is in a resolution\n            upgrade.newName = `**/${upgrade.newName}`;\n          }\n          newFileContent = replaceAsString(\n            parsedContents,\n            newFileContent,\n            'resolutions',\n            depKey,\n            depKey,\n            upgrade.newName,\n          );\n        }\n      }\n    }\n    if (parsedContents?.dependenciesMeta) {\n      for (const [depKey] of Object.entries(parsedContents.dependenciesMeta)) {\n        if (depKey.startsWith(depName + '@')) {\n          newFileContent = replaceAsString(\n            parsedContents,\n            newFileContent,\n            'dependenciesMeta',\n            depName,\n            depKey,\n            // TODO: types (#22198)\n            `${depName}@${newValue}`,\n          );\n        }\n      }\n    }\n    return newFileContent;\n  } catch (err) {\n    logger.debug({ err }, 'updateDependency error');\n    return null;\n  }\n}\n\nfunction overrideDepPosition(\n  overrideBlock: OverrideDependency,\n  parents: string[],\n  depName: string,\n): {\n  depObjectReference: Record<string, string>;\n  overrideDepName: string;\n} {\n  // get override dep position when its nested in an object\n  const lastParent = parents[parents.length - 1];\n  let overrideDep: OverrideDependency = overrideBlock;\n  for (const parent of parents) {\n    if (overrideDep) {\n      overrideDep = overrideDep[parent] as Record<string, RecursiveOverride>;\n    }\n  }\n  const overrideDepName = depName === lastParent ? '.' : depName;\n  const depObjectReference = overrideDep as Record<string, string>;\n  return { depObjectReference, overrideDepName };\n}\n\nfunction isOverrideObject(upgrade: Upgrade<NpmManagerData>): boolean {\n  return (\n    is.array(upgrade.managerData?.parents, is.nonEmptyStringAndNotWhitespace) &&\n    upgrade.depType === 'overrides'\n  );\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../lib/modules/manager/npm/update/dependency/index.ts"],"names":[],"mappings":";;AAmHA,4CA2JC;;AA9QD,kEAAkC;AAClC,mCAAgC;AAChC,kDAA+C;AAC/C,qDAAgE;AAChE,uDAAgE;AAShE,qCAA+D;AAC/D,iCAAqD;AAErD,SAAS,YAAY,CACnB,MAAwB,EACxB,MAAc,EACd,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAsB,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CACtB,cAA0B,EAC1B,WAAmB,EACnB,OAIoB,EACpB,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,OAAkB;IAElB,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,cAAc,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IACrC,CAAC;SAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACxC,cAAc,CAAC,IAAK,CAAC,SAAU,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IACtD,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,qDAAqD;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAE,EAAE;YAC7C,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,OAAO,CAAE,CAAC,QAAQ,CAAC;SAC/C,CAAC,CAAC,QAAQ,CAAC,CAAC;IACf,CAAC;SAAM,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,cAAc,CAAC,gBAAgB,GAAG,YAAY;YAC5C,cAAc;YACd,cAAc,CAAC,gBAAiB,EAChC,QAAQ,EACR,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC9C,mDAAmD;QACnD,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,GAAG,mBAAmB,CACjE,cAAc,CAAC,OAAO,CAAE,EACxB,OAAO,EACP,OAAO,CACR,CAAC;QACF,IAAI,kBAAkB,EAAE,CAAC;YACvB,kBAAkB,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC;QACjD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iDAAiD;QACjD,cAAc,CAAC,OAAO,CAAE,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IAC/C,CAAC;IACD,kCAAkC;IAClC,MAAM,YAAY,GAAG,IAAI,QAAQ,GAAG,CAAC;IACrC,IAAI,SAAS,GAAG,IAAI,QAAQ,GAAG,CAAC;IAEhC,MAAM,cAAc,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAA,aAAK,EAAC,WAAW,cAAc,cAAc,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,KAAK,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;QACpE,cAAc,CAAC,OAAO,CAAE,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QAC1C,SAAS,GAAG,IAAI,KAAK,GAAG,CAAC;IAC3B,CAAC;IAED,gCAAgC;IAChC,IAAI,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACvE,eAAM,CAAC,KAAK,CAAC,4BAA4B,WAAW,EAAE,CAAC,CAAC;IACxD,uCAAuC;IACvC,OAAO,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,EAAE,CAAC;QAC1D,mDAAmD;QACnD,IAAI,IAAA,gBAAO,EAAC,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;YACpD,eAAM,CAAC,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;YACpD,iCAAiC;YACjC,MAAM,WAAW,GAAG,IAAA,kBAAS,EAC3B,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,CACV,CAAC;YACF,mDAAmD;YACnD,IAAI,IAAA,eAAM,EAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACpD,OAAO,WAAW,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IACD,uBAAuB;IACvB,MAAM,IAAI,KAAK,EAAE,CAAC;AACpB,CAAC;AAED,SAAgB,gBAAgB,CAAC,EAC/B,WAAW,EACX,OAAO,GACgB;IACvB,IAAI,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,OAAO,IAAA,kCAA2B,EAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,OAAO,GAAW,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;IAC5D,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE3B,QAAQ,GAAG,IAAA,uBAAc,EAAC,OAAO,CAAC,IAAI,QAAQ,CAAC;IAC/C,QAAQ,GAAG,IAAA,4BAAmB,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC;IAE9D,eAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,IAAI,OAAO,MAAM,QAAQ,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,cAAc,GAAe,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,kBAAkB,GAAyB,SAAS,CAAC;QACzD,uBAAuB;QACvB,IAAI,UAA8B,CAAC;QACnC,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACrC,QAAQ,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,kBAAkB,GAAG,WAAW,EAAE,OAAO,CAAC;YAC1C,IAAI,kBAAkB,EAAE,CAAC;gBACvB,oEAAoE;gBACpE,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,GAAG,mBAAmB,CACjE,cAAc,CAAC,SAAU,EACzB,kBAAkB,EAClB,OAAO,CACR,CAAC;gBACF,IAAI,kBAAkB,EAAE,CAAC;oBACvB,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAE,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACxC,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,cAAc,CAAC,OAAqB,CAAE,CAAC,OAAO,CAAW,CAAC;QACzE,CAAC;QACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5B,eAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC3C,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,cAAc;QACd,IAAI,cAAsB,CAAC;QAC3B,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,mBAAmB,KAAK,OAAO,EAAE,CAAC;YAC/D,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,WAAW,EACX,OAAqB,EACrB,OAAO,EACP,UAAW,EACX,OAAO,OAAO,CAAC,OAAO,IAAI,QAAQ,EAAE,EACpC,kBAAkB,CACnB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,WAAW,EACX,OAAqB,EACrB,OAAO,EACP,UAAW,EACX,QAAS,EACT,kBAAkB,CACnB,CAAC;YACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,cAAc,EACd,OAAqB,EACrB,OAAO,EACP,OAAO,EACP,OAAO,CAAC,OAAO,EACf,kBAAkB,CACnB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,qBAAqB;QACrB,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,eAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAC3D,iCAAiC,CAClC,CAAC;YACF,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,cAAc,EAAE,WAAW,EAAE,CAAC;YAChC,IAAI,MAA0B,CAAC;YAC/B,IAAI,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;iBAAM,IAAI,cAAc,CAAC,WAAW,CAAC,MAAM,OAAO,EAAE,CAAC,EAAE,CAAC;gBACvD,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC3B,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,qBAAqB;gBACrB,IAAI,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;oBACtD,eAAM,CAAC,KAAK,CACV;wBACE,OAAO;wBACP,MAAM;wBACN,UAAU;wBACV,kBAAkB,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC;qBACvD,EACD,yEAAyE,CAC1E,CAAC;gBACJ,CAAC;gBACD,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,cAAc,EACd,aAAa,EACb,MAAM;gBACN,cAAc;gBACd,cAAc,CAAC,WAAW,CAAC,MAAM,CAAE;gBACnC,cAAc;gBACd,QAAS,CACV,CAAC;gBACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,IAAI,MAAM,KAAK,MAAM,OAAO,EAAE,EAAE,CAAC;wBAC/B,0DAA0D;wBAC1D,OAAO,CAAC,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;oBAC5C,CAAC;oBACD,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,cAAc,EACd,aAAa,EACb,MAAM,EACN,MAAM,EACN,OAAO,CAAC,OAAO,CAChB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,cAAc,EAAE,gBAAgB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACvE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;oBACrC,cAAc,GAAG,eAAe,CAC9B,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,MAAM;oBACN,uBAAuB;oBACvB,GAAG,OAAO,IAAI,QAAQ,EAAE,CACzB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,aAAiC,EACjC,OAAiB,EACjB,OAAe;IAKf,yDAAyD;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,IAAI,WAAW,GAAuB,aAAa,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,GAAG,WAAW,CAAC,MAAM,CAAsC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,MAAM,kBAAkB,GAAG,WAAqC,CAAC;IACjE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgC;IACxD,OAAO,CACL,YAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,YAAE,CAAC,8BAA8B,CAAC;QACzE,OAAO,CAAC,OAAO,KAAK,WAAW,CAChC,CAAC;AACJ,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { logger } from '../../../../../logger';\nimport { escapeRegExp, regEx } from '../../../../../util/regex';\nimport { matchAt, replaceAt } from '../../../../../util/string';\nimport type { UpdateDependencyConfig, Upgrade } from '../../../types';\nimport type {\n  DependenciesMeta,\n  NpmPackage,\n  OverrideDependency,\n  RecursiveOverride,\n} from '../../extract/types';\nimport type { NpmDepType, NpmManagerData } from '../../types';\nimport { getNewGitValue, getNewNpmAliasValue } from './common';\nimport { updatePnpmCatalogDependency } from './pnpm';\n\nfunction renameObjKey(\n  oldObj: DependenciesMeta,\n  oldKey: string,\n  newKey: string,\n): DependenciesMeta {\n  const keys = Object.keys(oldObj);\n  return keys.reduce((acc, key) => {\n    if (key === oldKey) {\n      acc[newKey] = oldObj[oldKey];\n    } else {\n      acc[key] = oldObj[key];\n    }\n    return acc;\n  }, {} as DependenciesMeta);\n}\n\nfunction replaceAsString(\n  parsedContents: NpmPackage,\n  fileContent: string,\n  depType:\n    | NpmDepType\n    | 'dependenciesMeta'\n    | 'packageManager'\n    | 'pnpm.overrides',\n  depName: string,\n  oldValue: string,\n  newValue: string,\n  parents?: string[],\n): string {\n  if (depType === 'packageManager') {\n    parsedContents[depType] = newValue;\n  } else if (depType === 'pnpm.overrides') {\n    parsedContents.pnpm!.overrides![depName] = newValue;\n  } else if (depName === oldValue) {\n    // The old value is the name of the dependency itself\n    delete Object.assign(parsedContents[depType]!, {\n      [newValue]: parsedContents[depType]![oldValue],\n    })[oldValue];\n  } else if (depType === 'dependenciesMeta') {\n    if (oldValue !== newValue) {\n      parsedContents.dependenciesMeta = renameObjKey(\n        // TODO #22198\n        parsedContents.dependenciesMeta!,\n        oldValue,\n        newValue,\n      );\n    }\n  } else if (parents && depType === 'overrides') {\n    // there is an object as a value in overrides block\n    const { depObjectReference, overrideDepName } = overrideDepPosition(\n      parsedContents[depType]!,\n      parents,\n      depName,\n    );\n    if (depObjectReference) {\n      depObjectReference[overrideDepName] = newValue;\n    }\n  } else {\n    // The old value is the version of the dependency\n    parsedContents[depType]![depName] = newValue;\n  }\n  // Look for the old version number\n  const searchString = `\"${oldValue}\"`;\n  let newString = `\"${newValue}\"`;\n\n  const escapedDepName = escapeRegExp(depName);\n  const patchRe = regEx(`^(patch:${escapedDepName}@(npm:)?).*#`);\n  const match = patchRe.exec(oldValue);\n  if (match && depType === 'resolutions') {\n    const patch = oldValue.replace(match[0], `${match[1]}${newValue}#`);\n    parsedContents[depType]![depName] = patch;\n    newString = `\"${patch}\"`;\n  }\n\n  // Skip ahead to depType section\n  let searchIndex = fileContent.indexOf(`\"${depType}\"`) + depType.length;\n  logger.trace(`Starting search at index ${searchIndex}`);\n  // Iterate through the rest of the file\n  for (; searchIndex < fileContent.length; searchIndex += 1) {\n    // First check if we have a hit for the old version\n    if (matchAt(fileContent, searchIndex, searchString)) {\n      logger.trace(`Found match at index ${searchIndex}`);\n      // Now test if the result matches\n      const testContent = replaceAt(\n        fileContent,\n        searchIndex,\n        searchString,\n        newString,\n      );\n      // Compare the parsed JSON structure of old and new\n      if (dequal(parsedContents, JSON.parse(testContent))) {\n        return testContent;\n      }\n    }\n  }\n  // istanbul ignore next\n  throw new Error();\n}\n\nexport function updateDependency({\n  fileContent,\n  upgrade,\n}: UpdateDependencyConfig): string | null {\n  if (upgrade.depType?.startsWith('pnpm.catalog')) {\n    return updatePnpmCatalogDependency({ fileContent, upgrade });\n  }\n\n  const { depType, managerData } = upgrade;\n  const depName: string = managerData?.key ?? upgrade.depName;\n  let { newValue } = upgrade;\n\n  newValue = getNewGitValue(upgrade) ?? newValue;\n  newValue = getNewNpmAliasValue(newValue, upgrade) ?? newValue;\n\n  logger.debug(`npm.updateDependency(): ${depType}.${depName} = ${newValue}`);\n  try {\n    const parsedContents: NpmPackage = JSON.parse(fileContent);\n    let overrideDepParents: string[] | undefined = undefined;\n    // Save the old version\n    let oldVersion: string | undefined;\n    if (depType === 'packageManager') {\n      oldVersion = parsedContents[depType];\n      newValue = `${depName}@${newValue}`;\n    } else if (isOverrideObject(upgrade)) {\n      overrideDepParents = managerData?.parents;\n      if (overrideDepParents) {\n        // old version when there is an object as a value in overrides block\n        const { depObjectReference, overrideDepName } = overrideDepPosition(\n          parsedContents.overrides!,\n          overrideDepParents,\n          depName,\n        );\n        if (depObjectReference) {\n          oldVersion = depObjectReference[overrideDepName]!;\n        }\n      }\n    } else if (depType === 'pnpm.overrides') {\n      oldVersion = parsedContents.pnpm?.overrides?.[depName];\n    } else {\n      oldVersion = parsedContents[depType as NpmDepType]![depName] as string;\n    }\n    if (oldVersion === newValue) {\n      logger.trace('Version is already updated');\n      return fileContent;\n    }\n\n    // TODO #22198\n    let newFileContent: string;\n    if (upgrade.newName && upgrade.replacementApproach === 'alias') {\n      newFileContent = replaceAsString(\n        parsedContents,\n        fileContent,\n        depType as NpmDepType,\n        depName,\n        oldVersion!,\n        `npm:${upgrade.newName}@${newValue}`,\n        overrideDepParents,\n      );\n    } else {\n      newFileContent = replaceAsString(\n        parsedContents,\n        fileContent,\n        depType as NpmDepType,\n        depName,\n        oldVersion!,\n        newValue!,\n        overrideDepParents,\n      );\n      if (upgrade.newName) {\n        newFileContent = replaceAsString(\n          parsedContents,\n          newFileContent,\n          depType as NpmDepType,\n          depName,\n          depName,\n          upgrade.newName,\n          overrideDepParents,\n        );\n      }\n    }\n    // istanbul ignore if\n    if (!newFileContent) {\n      logger.debug(\n        { fileContent, parsedContents, depType, depName, newValue },\n        'Warning: updateDependency error',\n      );\n      return fileContent;\n    }\n    if (parsedContents?.resolutions) {\n      let depKey: string | undefined;\n      if (parsedContents.resolutions[depName]) {\n        depKey = depName;\n      } else if (parsedContents.resolutions[`**/${depName}`]) {\n        depKey = `**/${depName}`;\n      }\n      if (depKey) {\n        // istanbul ignore if\n        if (parsedContents.resolutions[depKey] !== oldVersion) {\n          logger.debug(\n            {\n              depName,\n              depKey,\n              oldVersion,\n              resolutionsVersion: parsedContents.resolutions[depKey],\n            },\n            'Upgraded dependency exists in yarn resolutions but is different version',\n          );\n        }\n        newFileContent = replaceAsString(\n          parsedContents,\n          newFileContent,\n          'resolutions',\n          depKey,\n          // TODO #22198\n          parsedContents.resolutions[depKey]!,\n          // TODO #22198\n          newValue!,\n        );\n        if (upgrade.newName) {\n          if (depKey === `**/${depName}`) {\n            // handles the case where a replacement is in a resolution\n            upgrade.newName = `**/${upgrade.newName}`;\n          }\n          newFileContent = replaceAsString(\n            parsedContents,\n            newFileContent,\n            'resolutions',\n            depKey,\n            depKey,\n            upgrade.newName,\n          );\n        }\n      }\n    }\n    if (parsedContents?.dependenciesMeta) {\n      for (const [depKey] of Object.entries(parsedContents.dependenciesMeta)) {\n        if (depKey.startsWith(depName + '@')) {\n          newFileContent = replaceAsString(\n            parsedContents,\n            newFileContent,\n            'dependenciesMeta',\n            depName,\n            depKey,\n            // TODO: types (#22198)\n            `${depName}@${newValue}`,\n          );\n        }\n      }\n    }\n    return newFileContent;\n  } catch (err) {\n    logger.debug({ err }, 'updateDependency error');\n    return null;\n  }\n}\n\nfunction overrideDepPosition(\n  overrideBlock: OverrideDependency,\n  parents: string[],\n  depName: string,\n): {\n  depObjectReference: Record<string, string>;\n  overrideDepName: string;\n} {\n  // get override dep position when its nested in an object\n  const lastParent = parents[parents.length - 1];\n  let overrideDep: OverrideDependency = overrideBlock;\n  for (const parent of parents) {\n    if (overrideDep) {\n      overrideDep = overrideDep[parent] as Record<string, RecursiveOverride>;\n    }\n  }\n  const overrideDepName = depName === lastParent ? '.' : depName;\n  const depObjectReference = overrideDep as Record<string, string>;\n  return { depObjectReference, overrideDepName };\n}\n\nfunction isOverrideObject(upgrade: Upgrade<NpmManagerData>): boolean {\n  return (\n    is.array(upgrade.managerData?.parents, is.nonEmptyStringAndNotWhitespace) &&\n    upgrade.depType === 'overrides'\n  );\n}\n"]}

package/dist/modules/manager/nuget/artifacts.js

@@ -27,7 +27,6 @@ async function runDotnetRestore(packageFileName, dependentPackageFileNames, conf
         (await (0, util_1.findGlobalJson)(packageFileName))?.sdk?.version;
     const execOptions = {
         docker: {},
-        userConfiguredEnv: config.env,
         extraEnv: {
             NUGET_PACKAGES: (0, upath_1.join)(nugetCacheDir, 'packages'),
             MSBUILDDISABLENODEREUSE: '1',
@@ -104,7 +103,7 @@ async function updateArtifacts({ packageFileName, newPackageFileContent, config,
                 artifactError: {
                     lockFile: lockFileNames.join(', '),
                     // error is written to stdout
-                    stderr: err.stdout || err.message,
+                    stderr: err.stdout ?? err.message,
                 },
             },
         ];