renovate 44.237.2 → 44.238.0

package/dist/modules/manager/npm/minimum-release-age.js

@@ -0,0 +1,93 @@
+import { logger } from "../../../logger/index.js";
+import { calculateMinimumReleaseAgeMs, calculatePackageManagerMinimumReleaseAgeMs } from "../../../util/minimum-release-age.js";
+import { coerceObject } from "../../../util/object.js";
+import { intersectsWith, isSubsetOf } from "../../versioning/common.js";
+import { api } from "../../versioning/npm/index.js";
+import { resolveToolConstraint } from "../util.js";
+import { MINUTE_MS } from "./constants.js";
+import { isNpmrcOfLockFile, parseNpmrcCooldown } from "./extract/npmrc.js";
+import { getPnpmMinimumReleaseAgeMinutes } from "./extract/pnpm-minimum-release-age.js";
+import { getYarnMinimalAgeGateMinutes, getYarnScopeMinimalAgeGateMinutes, yarnScopeMinimalAgeGateRange } from "./extract/yarn-minimum-release-age.js";
+import { isTruthy } from "@sindresorhus/is";
+import upath from "upath";
+// lib/modules/manager/npm/minimum-release-age.ts
+const minReleaseAgeNpmRange = ">=11.10.0";
+const minimumReleaseAgePnpmRange = ">=10.16.0";
+const minimumReleaseAgeEnforcedPnpmRange = ">=10.17.0 <11.0.0 || >=11.0.4 <12.0.0 || >=12.3.0";
+const minimumReleaseAgeYarnRange = ">=4.10.0";
+/**
+* The minimum release age which Renovate passes to npm or pnpm for the update in `config`.
+*/
+function getPassedMinimumReleaseAgeMs(config, lockFile) {
+	return calculatePackageManagerMinimumReleaseAgeMs({
+		config,
+		manager: "npm",
+		packageFile: upath.join(upath.dirname(lockFile), "package.json"),
+		upgrades: [config]
+	}) ?? 0;
+}
+async function npmEnforcesMinimumReleaseAge(config, npmLock) {
+	const npmrcCooldown = isNpmrcOfLockFile(config) ? parseNpmrcCooldown(config.npmrc) : null;
+	const minimumReleaseAgeMs = getPassedMinimumReleaseAgeMs(config, npmLock);
+	if (npmrcCooldown?.source !== "min-release-age") return npmrcCooldown?.source === "before" || minimumReleaseAgeMs > 0;
+	if (minimumReleaseAgeMs > npmrcCooldown.days * 864e5) {
+		logger.debug(`${npmLock}: min-release-age in .npmrc is shorter than minimumReleaseAge`);
+		return false;
+	}
+	const constraint = await resolveToolConstraint(config, "npm");
+	return isSubsetOf(api, constraint, minReleaseAgeNpmRange);
+}
+async function pnpmEnforcesMinimumReleaseAge(config, pnpmLockFile) {
+	const settings = coerceObject(config.managerData?.pnpmMinimumReleaseAge);
+	const constraint = await resolveToolConstraint(config, "pnpm", () => settings.pnpmConstraint);
+	if (!isSubsetOf(api, constraint, ">=10.17.0 <11.0.0 || >=11.0.4 <12.0.0 || >=12.3.0")) return false;
+	if (settings.minimumReleaseAgeStrict === false) {
+		logger.debug(`${pnpmLockFile}: minimumReleaseAgeStrict=false lets pnpm install versions which are too new`);
+		return false;
+	}
+	if (settings.hasMinimumReleaseAgeExclude) {
+		logger.debug(`${pnpmLockFile}: minimumReleaseAgeExclude lets pnpm install versions which are too new`);
+		return false;
+	}
+	const pnpmMinutes = getPnpmMinimumReleaseAgeMinutes(settings, settings.npmrcMinimumReleaseAge, constraint) ?? 0;
+	return Math.max(getPassedMinimumReleaseAgeMs(config, pnpmLockFile), pnpmMinutes * MINUTE_MS) > 0;
+}
+async function yarnEnforcesMinimumReleaseAge(config, yarnLock) {
+	const settings = coerceObject(config.managerData?.yarnMinimalAgeGate);
+	const constraint = await resolveToolConstraint(config, "yarn", () => settings.yarnConstraint);
+	if (!isSubsetOf(api, constraint, ">=4.10.0")) return false;
+	if (settings.hasNpmPreapprovedPackages) {
+		logger.debug(`${yarnLock}: npmPreapprovedPackages lets Yarn install versions which are too new`);
+		return false;
+	}
+	const lockFileMaintenanceAgeMs = calculateMinimumReleaseAgeMs({ minimumReleaseAge: config.minimumReleaseAge });
+	const scopeMinutes = getYarnScopeMinimalAgeGateMinutes(settings, intersectsWith(api, constraint, yarnScopeMinimalAgeGateRange));
+	for (const [scope, minutes] of Object.entries(scopeMinutes)) if (!minutes || minutes * 6e4 < lockFileMaintenanceAgeMs) {
+		logger.debug(`${yarnLock}: the npmMinimalAgeGate of scope ${scope} is 0 or smaller than the minimumReleaseAge of lock file maintenance, and takes precedence over the age which Renovate passes`);
+		return false;
+	}
+	const yarnMinutes = getYarnMinimalAgeGateMinutes(settings, isSubsetOf(api, constraint, ">=4.15.0")) ?? 0;
+	return Math.max(getPassedMinimumReleaseAgeMs(config, yarnLock), yarnMinutes * MINUTE_MS) > 0;
+}
+/**
+* Whether npm, pnpm or Yarn enforces the minimum release age when it regenerates the lock file of the package file in `config`, or the package file has no lock file which lock file maintenance could update.
+*/
+async function enforcesMinimumReleaseAge(config) {
+	const { npmLock, pnpmLockFile, yarnLock } = coerceObject(config.managerData);
+	const lockFiles = [
+		npmLock,
+		pnpmLockFile,
+		yarnLock
+	].filter(isTruthy);
+	if (!lockFiles.length) {
+		logger.debug(`${config.packageFile}: no lock file, so lock file maintenance changes nothing`);
+		return true;
+	}
+	if (lockFiles.length > 1) return false;
+	if (yarnLock) return await yarnEnforcesMinimumReleaseAge(config, yarnLock);
+	if (npmLock) return await npmEnforcesMinimumReleaseAge(config, npmLock);
+	return await pnpmEnforcesMinimumReleaseAge(config, pnpmLockFile);
+}
+export { enforcesMinimumReleaseAge, minReleaseAgeNpmRange, minimumReleaseAgeEnforcedPnpmRange, minimumReleaseAgePnpmRange, minimumReleaseAgeYarnRange };
+
+//# sourceMappingURL=minimum-release-age.js.map

package/dist/modules/manager/npm/minimum-release-age.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"minimum-release-age.js","names":["npmVersioning"],"sources":["../../../../lib/modules/manager/npm/minimum-release-age.ts"],"sourcesContent":["import { isTruthy } from '@sindresorhus/is';\nimport upath from 'upath';\nimport { logger } from '../../../logger/index.ts';\nimport {\n  calculateMinimumReleaseAgeMs,\n  calculatePackageManagerMinimumReleaseAgeMs,\n} from '../../../util/minimum-release-age.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { intersectsWith, isSubsetOf } from '../../versioning/common.ts';\nimport { api as npmVersioning } from '../../versioning/npm/index.ts';\nimport type { UpdateArtifactsConfig } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\nimport { DAY_MS, MINUTE_MS } from './constants.ts';\nimport { isNpmrcOfLockFile, parseNpmrcCooldown } from './extract/npmrc.ts';\nimport { getPnpmMinimumReleaseAgeMinutes } from './extract/pnpm-minimum-release-age.ts';\nimport {\n  getYarnMinimalAgeGateMinutes,\n  getYarnScopeMinimalAgeGateMinutes,\n  yarnDefaultMinimalAgeGateRange,\n  yarnScopeMinimalAgeGateRange,\n} from './extract/yarn-minimum-release-age.ts';\nimport type { NpmManagerData } from './types.ts';\n\n// npm supports `min-release-age` since v11.10.0\n// https://github.com/npm/cli/releases/tag/v11.10.0\nexport const minReleaseAgeNpmRange = '>=11.10.0';\n\n// pnpm supports `minimumReleaseAge` since v10.16.0\n// https://github.com/pnpm/pnpm/releases/tag/v10.16.0\nexport const minimumReleaseAgePnpmRange = '>=10.16.0';\n\n// pnpm v10.16.0 skips the check for an exact version from the metadata cache,\n// fixed in v10.17.0: https://github.com/pnpm/pnpm/releases/tag/v10.17.0\n// pnpm v11.0.0 to v11.0.3 fall back to a version which is too new, unless\n// `minimumReleaseAgeStrict` is set. Since v11.0.4, an explicit\n// `minimumReleaseAge` turns on `minimumReleaseAgeStrict`.\n// https://github.com/pnpm/pnpm/releases/tag/v11.0.4\n// pnpm v12.0.0 to v12.2.x treat an explicit `minimumReleaseAge` as not strict\n// again, fixed in v12.3.0.\nexport const minimumReleaseAgeEnforcedPnpmRange =\n  '>=10.17.0 <11.0.0 || >=11.0.4 <12.0.0 || >=12.3.0';\n\n// Yarn supports `npmMinimalAgeGate` and `npmPreapprovedPackages` since v4.10.0\n// https://github.com/yarnpkg/berry/releases/tag/%40yarnpkg%2Fcli%2F4.10.0\nexport const minimumReleaseAgeYarnRange = '>=4.10.0';\n\ninterface NpmEnforcesMinimumReleaseAgeConfig extends UpdateArtifactsConfig {\n  managerData?: NpmManagerData;\n  npmrc?: string;\n  packageFile?: string;\n}\n\n/**\n * The minimum release age which Renovate passes to npm or pnpm for the update in `config`.\n */\nfunction getPassedMinimumReleaseAgeMs(\n  config: NpmEnforcesMinimumReleaseAgeConfig,\n  lockFile: string,\n): number {\n  return (\n    calculatePackageManagerMinimumReleaseAgeMs({\n      config,\n      manager: 'npm',\n      packageFile: upath.join(upath.dirname(lockFile), 'package.json'),\n      upgrades: [config],\n    }) ?? 0\n  );\n}\n\nasync function npmEnforcesMinimumReleaseAge(\n  config: NpmEnforcesMinimumReleaseAgeConfig,\n  npmLock: string,\n): Promise<boolean> {\n  // the lock file generation ignores an `.npmrc` of a parent directory\n  const npmrcCooldown = isNpmrcOfLockFile(config)\n    ? parseNpmrcCooldown(config.npmrc)\n    : null;\n  // the value which Renovate passes as `--before` to npm\n  const minimumReleaseAgeMs = getPassedMinimumReleaseAgeMs(config, npmLock);\n\n  if (npmrcCooldown?.source !== 'min-release-age') {\n    // npm applies a `before` from the `.npmrc` itself, and Renovate passes\n    // `--before` for `minimumReleaseAge`, which every npm version supports\n    return npmrcCooldown?.source === 'before' || minimumReleaseAgeMs > 0;\n  }\n\n  // Renovate does not pass `--before` next to a `min-release-age`, so npm\n  // only enforces the `min-release-age`\n  if (minimumReleaseAgeMs > npmrcCooldown.days * DAY_MS) {\n    logger.debug(\n      `${npmLock}: min-release-age in .npmrc is shorter than minimumReleaseAge`,\n    );\n    return false;\n  }\n\n  // the status checks run before the base branch is checked out, so the\n  // constraint is not derived from the package.json in the working tree\n  const constraint = await resolveToolConstraint(config, 'npm');\n  return isSubsetOf(npmVersioning, constraint, minReleaseAgeNpmRange);\n}\n\nasync function pnpmEnforcesMinimumReleaseAge(\n  config: NpmEnforcesMinimumReleaseAgeConfig,\n  pnpmLockFile: string,\n): Promise<boolean> {\n  // the status checks run before the base branch is checked out, so the pnpm\n  // constraint and settings of the lock file come from the extraction, which\n  // copies them to every package file of the lock file\n  const settings = coerceObject(config.managerData?.pnpmMinimumReleaseAge);\n  const constraint = await resolveToolConstraint(\n    config,\n    'pnpm',\n    () => settings.pnpmConstraint,\n  );\n  if (\n    !isSubsetOf(npmVersioning, constraint, minimumReleaseAgeEnforcedPnpmRange)\n  ) {\n    return false;\n  }\n\n  if (settings.minimumReleaseAgeStrict === false) {\n    logger.debug(\n      `${pnpmLockFile}: minimumReleaseAgeStrict=false lets pnpm install versions which are too new`,\n    );\n    return false;\n  }\n  if (settings.hasMinimumReleaseAgeExclude) {\n    logger.debug(\n      `${pnpmLockFile}: minimumReleaseAgeExclude lets pnpm install versions which are too new`,\n    );\n    return false;\n  }\n\n  // Renovate passes the larger of its own value and the pnpm value,\n  // otherwise pnpm applies its own value. The pnpm v11 default does not\n  // count, as pnpm does not apply it strictly.\n  const pnpmMinutes =\n    getPnpmMinimumReleaseAgeMinutes(\n      settings,\n      settings.npmrcMinimumReleaseAge,\n      constraint,\n    ) ?? 0;\n  return (\n    Math.max(\n      getPassedMinimumReleaseAgeMs(config, pnpmLockFile),\n      pnpmMinutes * MINUTE_MS,\n    ) > 0\n  );\n}\n\nasync function yarnEnforcesMinimumReleaseAge(\n  config: NpmEnforcesMinimumReleaseAgeConfig,\n  yarnLock: string,\n): Promise<boolean> {\n  // the status checks run before the base branch is checked out, so the Yarn\n  // constraint and settings of the lock file come from the extraction, which\n  // copies them to every package file of the lock file\n  const settings = coerceObject(config.managerData?.yarnMinimalAgeGate);\n  const constraint = await resolveToolConstraint(\n    config,\n    'yarn',\n    () => settings.yarnConstraint,\n  );\n  if (!isSubsetOf(npmVersioning, constraint, minimumReleaseAgeYarnRange)) {\n    return false;\n  }\n\n  // lock file maintenance keeps the `npmPreapprovedPackages` of the\n  // .yarnrc.yml, which Yarn installs without a minimum release age\n  if (settings.hasNpmPreapprovedPackages) {\n    logger.debug(\n      `${yarnLock}: npmPreapprovedPackages lets Yarn install versions which are too new`,\n    );\n    return false;\n  }\n  // the age which Renovate would wait for, `minimumReleaseAgePackageManager`\n  // only raises what it passes\n  const lockFileMaintenanceAgeMs = calculateMinimumReleaseAgeMs({\n    minimumReleaseAge: config.minimumReleaseAge,\n  });\n  // a scope without its own age may get the Yarn default\n  const scopeMinutes = getYarnScopeMinimalAgeGateMinutes(\n    settings,\n    intersectsWith(npmVersioning, constraint, yarnScopeMinimalAgeGateRange),\n  );\n  for (const [scope, minutes] of Object.entries(scopeMinutes)) {\n    if (!minutes || minutes * MINUTE_MS < lockFileMaintenanceAgeMs) {\n      logger.debug(\n        `${yarnLock}: the npmMinimalAgeGate of scope ${scope} is 0 or smaller than the minimumReleaseAge of lock file maintenance, and takes precedence over the age which Renovate passes`,\n      );\n      return false;\n    }\n  }\n\n  // Renovate passes the larger of its own value and the Yarn value, otherwise\n  // Yarn applies its own value. The Yarn default counts only if every allowed\n  // Yarn version has it.\n  const yarnMinutes =\n    getYarnMinimalAgeGateMinutes(\n      settings,\n      isSubsetOf(npmVersioning, constraint, yarnDefaultMinimalAgeGateRange),\n    ) ?? 0;\n  return (\n    Math.max(\n      getPassedMinimumReleaseAgeMs(config, yarnLock),\n      yarnMinutes * MINUTE_MS,\n    ) > 0\n  );\n}\n\n/**\n * Whether npm, pnpm or Yarn enforces the minimum release age when it regenerates the lock file of the package file in `config`, or the package file has no lock file which lock file maintenance could update.\n */\nexport async function enforcesMinimumReleaseAge(\n  config: NpmEnforcesMinimumReleaseAgeConfig,\n): Promise<boolean> {\n  const { npmLock, pnpmLockFile, yarnLock } = coerceObject(config.managerData);\n  const lockFiles = [npmLock, pnpmLockFile, yarnLock].filter(isTruthy);\n  if (!lockFiles.length) {\n    logger.debug(\n      `${config.packageFile}: no lock file, so lock file maintenance changes nothing`,\n    );\n    return true;\n  }\n  if (lockFiles.length > 1) {\n    return false;\n  }\n  if (yarnLock) {\n    return await yarnEnforcesMinimumReleaseAge(config, yarnLock);\n  }\n  if (npmLock) {\n    return await npmEnforcesMinimumReleaseAge(config, npmLock);\n  }\n  return await pnpmEnforcesMinimumReleaseAge(config, pnpmLockFile!);\n}\n"],"mappings":";;;;;;;;;;;;;AAyBA,MAAa,wBAAwB;AAIrC,MAAa,6BAA6B;AAU1C,MAAa,qCACX;AAIF,MAAa,6BAA6B;;;;AAW1C,SAAS,6BACP,QACA,UACQ;CACR,OACE,2CAA2C;EACzC;EACA,SAAS;EACT,aAAa,MAAM,KAAK,MAAM,QAAQ,QAAQ,GAAG,cAAc;EAC/D,UAAU,CAAC,MAAM;CACnB,CAAC,KAAK;AAEV;AAEA,eAAe,6BACb,QACA,SACkB;CAElB,MAAM,gBAAgB,kBAAkB,MAAM,IAC1C,mBAAmB,OAAO,KAAK,IAC/B;CAEJ,MAAM,sBAAsB,6BAA6B,QAAQ,OAAO;CAExE,IAAI,eAAe,WAAW,mBAG5B,OAAO,eAAe,WAAW,YAAY,sBAAsB;CAKrE,IAAI,sBAAsB,cAAc,OAAA,OAAe;EACrD,OAAO,MACL,GAAG,QAAQ,8DACb;EACA,OAAO;CACT;CAIA,MAAM,aAAa,MAAM,sBAAsB,QAAQ,KAAK;CAC5D,OAAO,WAAWA,KAAe,YAAY,qBAAqB;AACpE;AAEA,eAAe,8BACb,QACA,cACkB;CAIlB,MAAM,WAAW,aAAa,OAAO,aAAa,qBAAqB;CACvE,MAAM,aAAa,MAAM,sBACvB,QACA,cACM,SAAS,cACjB;CACA,IACE,CAAC,WAAWA,KAAe,YAAA,mDAA8C,GAEzE,OAAO;CAGT,IAAI,SAAS,4BAA4B,OAAO;EAC9C,OAAO,MACL,GAAG,aAAa,6EAClB;EACA,OAAO;CACT;CACA,IAAI,SAAS,6BAA6B;EACxC,OAAO,MACL,GAAG,aAAa,wEAClB;EACA,OAAO;CACT;CAKA,MAAM,cACJ,gCACE,UACA,SAAS,wBACT,UACF,KAAK;CACP,OACE,KAAK,IACH,6BAA6B,QAAQ,YAAY,GACjD,cAAc,SAChB,IAAI;AAER;AAEA,eAAe,8BACb,QACA,UACkB;CAIlB,MAAM,WAAW,aAAa,OAAO,aAAa,kBAAkB;CACpE,MAAM,aAAa,MAAM,sBACvB,QACA,cACM,SAAS,cACjB;CACA,IAAI,CAAC,WAAWA,KAAe,YAAA,UAAsC,GACnE,OAAO;CAKT,IAAI,SAAS,2BAA2B;EACtC,OAAO,MACL,GAAG,SAAS,sEACd;EACA,OAAO;CACT;CAGA,MAAM,2BAA2B,6BAA6B,EAC5D,mBAAmB,OAAO,kBAC5B,CAAC;CAED,MAAM,eAAe,kCACnB,UACA,eAAeA,KAAe,YAAY,4BAA4B,CACxE;CACA,KAAK,MAAM,CAAC,OAAO,YAAY,OAAO,QAAQ,YAAY,GACxD,IAAI,CAAC,WAAW,UAAA,MAAsB,0BAA0B;EAC9D,OAAO,MACL,GAAG,SAAS,mCAAmC,MAAM,8HACvD;EACA,OAAO;CACT;CAMF,MAAM,cACJ,6BACE,UACA,WAAWA,KAAe,YAAA,UAA0C,CACtE,KAAK;CACP,OACE,KAAK,IACH,6BAA6B,QAAQ,QAAQ,GAC7C,cAAc,SAChB,IAAI;AAER;;;;AAKA,eAAsB,0BACpB,QACkB;CAClB,MAAM,EAAE,SAAS,cAAc,aAAa,aAAa,OAAO,WAAW;CAC3E,MAAM,YAAY;EAAC;EAAS;EAAc;CAAQ,CAAC,CAAC,OAAO,QAAQ;CACnE,IAAI,CAAC,UAAU,QAAQ;EACrB,OAAO,MACL,GAAG,OAAO,YAAY,yDACxB;EACA,OAAO;CACT;CACA,IAAI,UAAU,SAAS,GACrB,OAAO;CAET,IAAI,UACF,OAAO,MAAM,8BAA8B,QAAQ,QAAQ;CAE7D,IAAI,SACF,OAAO,MAAM,6BAA6B,QAAQ,OAAO;CAE3D,OAAO,MAAM,8BAA8B,QAAQ,YAAa;AAClE"}

package/dist/modules/manager/npm/post-update/index.js

@@ -333,6 +333,10 @@ async function getAdditionalFilesInner(config, packageFiles, originalNpmrcFiles)
 					stderr: res.stderr
 				});
 			} else if (res.lockFile) {
+				if (res.minimumReleaseAgeNotice) artifactNotices.push({
+					file: npmLock,
+					message: res.minimumReleaseAgeNotice
+				});
 				if (res.beforeFallback) {
 					const message = "npm `--before` could not be enforced because existing locked packages were published after the `minimumReleaseAge` cutoff. This will resolve after the next lock file maintenance run.";
 					logger.warn({ npmLock }, message);
@@ -412,10 +416,14 @@ async function getAdditionalFilesInner(config, packageFiles, originalNpmrcFiles)
 	}
 	for (const pnpmLockFile of dirs.pnpmLockFileDirs) {
 		const lockFileDir = upath.dirname(pnpmLockFile);
-		await withNpmrcHostRules(lockFileDir, additionalNpmrcContent, async () => {
+		await withNpmrcHostRules(lockFileDir, additionalNpmrcContent, async (npmrcContent) => {
 			logger.debug(`Generating pnpm-lock.yaml for ${lockFileDir}`);
 			const upgrades = config.upgrades.filter((upgrade) => upgrade.managerData?.pnpmLockFile === pnpmLockFile);
-			const res = await generateLockFile$1(lockFileDir, env, config, upgrades);
+			const res = await generateLockFile$1(lockFileDir, env, config, upgrades, npmrcContent);
+			if (res.minimumReleaseAgeNotice && !res.error) artifactNotices.push({
+				file: pnpmLockFile,
+				message: res.minimumReleaseAgeNotice
+			});
 			if (res.error) {
 				/* v8 ignore next -- needs test */
 				if (res.stdout?.includes(`No compatible version found:`)) {
@@ -427,9 +435,10 @@ async function getAdditionalFilesInner(config, packageFiles, originalNpmrcFiles)
 						throw new ExternalHostError(Error("lock file failed for the dependency being updated - skipping branch creation"), NpmDatasource.id);
 					}
 				}
+				const stderr = artifactErrorMessageFromExecError(res, "");
 				artifactErrors.push({
 					fileName: pnpmLockFile,
-					stderr: artifactErrorMessageFromExecError(res, "")
+					stderr: res.minimumReleaseAgeNotice ? `${res.minimumReleaseAgeNotice}\n\n${stderr}` : stderr
 				});
 			} else {
 				const existingContent = await getFile(pnpmLockFile, config.reuseExistingBranch ? config.branchName : config.baseBranch);

package/dist/modules/manager/npm/post-update/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["hostRules.find","npm.generateLockFile","deepmerge","yarn.fuzzyMatchAdditionalYarnrcYml","yarn.generateLockFile","yarn.isYarnUpdate","pnpm.generateLockFile"],"sources":["../../../../../lib/modules/manager/npm/post-update/index.ts"],"sourcesContent":["// TODO: types (#22198)\nimport {\n  isNonEmptyStringAndNotWhitespace,\n  isNullOrUndefined,\n  isString,\n} from '@sindresorhus/is';\nimport deepmerge from 'deepmerge';\nimport upath from 'upath';\nimport { logger } from '../../../../logger/index.ts';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error.ts';\nimport { getEnv } from '../../../../util/env.ts';\nimport {\n  ensureCacheDir,\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { getFile, getRepoStatus } from '../../../../util/git/index.ts';\nimport type { FileChange } from '../../../../util/git/types.ts';\nimport * as hostRules from '../../../../util/host-rules.ts';\nimport { newlineRegex, regEx } from '../../../../util/regex.ts';\nimport { ensureTrailingSlash } from '../../../../util/url.ts';\nimport { dump, parseSingleYaml } from '../../../../util/yaml.ts';\nimport { NpmDatasource } from '../../../datasource/npm/index.ts';\nimport { scm } from '../../../platform/scm.ts';\nimport type {\n  ArtifactError,\n  ArtifactNotice,\n  NpmrcPackageFile,\n  PostUpdateConfig,\n  Upgrade,\n} from '../../types.ts';\nimport { artifactErrorMessageFromExecError } from '../../util.ts';\nimport {\n  NPM_CACHE_DIR,\n  PNPM_CACHE_BASE_DIR,\n  YARN_CACHE_DIR,\n  YARN_GLOBAL_DIR,\n} from '../constants.ts';\nimport { getZeroInstallPaths } from '../extract/yarn.ts';\nimport type { NpmManagerData } from '../types.ts';\nimport {\n  composeLockFile,\n  parseLockFile,\n  withNpmrcHostRules,\n} from '../utils.ts';\nimport * as npm from './npm.ts';\nimport * as pnpm from './pnpm.ts';\nimport { processHostRules } from './rules.ts';\nimport type {\n  AdditionalPackageFiles,\n  DetermineLockFileDirsResult,\n  WriteExistingFilesResult,\n  YarnRcYmlFile,\n} from './types.ts';\nimport * as yarn from './yarn.ts';\n\n// Strips empty values, deduplicates, and returns the directories from filenames\nfunction getDirs(arr: (string | null | undefined)[]): string[] {\n  return Array.from(new Set(arr.filter(isString)));\n}\n\nexport function determineLockFileDirs(\n  config: PostUpdateConfig<NpmManagerData>,\n  packageFiles: AdditionalPackageFiles,\n): DetermineLockFileDirsResult {\n  const npmLockDirs: (string | undefined)[] = [];\n  const yarnLockDirs: (string | undefined)[] = [];\n  const pnpmLockFileDirs: (string | undefined)[] = [];\n\n  for (const upgrade of config.upgrades) {\n    // v8 ignore else -- TODO: add test #40625\n    if (\n      upgrade.updateType === 'lockFileMaintenance' ||\n      upgrade.isRemediation === true ||\n      upgrade.isLockfileUpdate === true\n    ) {\n      yarnLockDirs.push(upgrade.managerData?.yarnLock);\n      npmLockDirs.push(upgrade.managerData?.npmLock);\n      pnpmLockFileDirs.push(upgrade.managerData?.pnpmLockFile);\n    }\n  }\n\n  if (\n    config.upgrades.every(\n      (upgrade: Upgrade) =>\n        upgrade.updateType === 'lockFileMaintenance' ||\n        upgrade.isLockfileUpdate,\n    )\n  ) {\n    return {\n      yarnLockDirs: getDirs(yarnLockDirs),\n      npmLockDirs: getDirs(npmLockDirs),\n      pnpmLockFileDirs: getDirs(pnpmLockFileDirs),\n    };\n  }\n\n  function getPackageFile(\n    fileName: string,\n  ): Partial<NpmrcPackageFile<NpmManagerData>> {\n    logger.trace(`Looking for packageFile: ${fileName}`);\n\n    for (const packageFile of packageFiles.npm!) {\n      if (packageFile.packageFile === fileName) {\n        logger.trace({ packageFile }, 'Found packageFile');\n        return packageFile;\n      }\n      logger.trace('No match');\n    }\n    return {};\n  }\n\n  // TODO #22198\n  for (const p of config.updatedPackageFiles!) {\n    logger.trace(`Checking ${String(p.path)} for lock files`);\n    const packageFile = getPackageFile(p.path);\n    /* v8 ignore next -- needs test */\n    if (!packageFile.managerData) {\n      continue;\n    }\n    // push full lock file names and convert them later\n    yarnLockDirs.push(packageFile.managerData.yarnLock);\n    npmLockDirs.push(packageFile.managerData.npmLock);\n    pnpmLockFileDirs.push(packageFile.managerData.pnpmLockFile);\n  }\n\n  return {\n    yarnLockDirs: getDirs(yarnLockDirs),\n    npmLockDirs: getDirs(npmLockDirs),\n    pnpmLockFileDirs: getDirs(pnpmLockFileDirs),\n  };\n}\n\nexport async function writeExistingFiles(\n  config: PostUpdateConfig<NpmManagerData>,\n  packageFiles: AdditionalPackageFiles,\n  originalNpmrcFiles = new Map<string, string>(),\n): Promise<void> {\n  if (!packageFiles.npm) {\n    return;\n  }\n  const npmFiles = packageFiles.npm;\n  logger.debug(\n    { packageFiles: npmFiles.map((n) => n.packageFile) },\n    'Writing package.json files',\n  );\n  for (const packageFile of npmFiles) {\n    /* v8 ignore if -- TODO: add test #40625 */\n    if (!packageFile.managerData) {\n      continue;\n    }\n    // TODO #22198\n    const basedir = upath.dirname(packageFile.packageFile!);\n    const npmrc = packageFile.npmrc;\n    const npmrcFilename = upath.join(basedir, '.npmrc');\n    // Write out the file unless the npmrc came from the workspace\n    // npmrcFilename will be set whenever the file was read from disk during extract\n    const isNpmrcOwnFile =\n      npmrcFilename === packageFile.managerData.npmrcFileName ||\n      !packageFile.managerData.npmrcFileName;\n    if (isString(npmrc) && isNpmrcOwnFile) {\n      try {\n        if (!originalNpmrcFiles.has(npmrcFilename)) {\n          const originalNpmrc = await readLocalFile(npmrcFilename, 'utf8');\n          if (isString(originalNpmrc)) {\n            originalNpmrcFiles.set(npmrcFilename, originalNpmrc);\n          }\n        }\n        await writeLocalFile(npmrcFilename, npmrc.replace(regEx(/\\n?$/), '\\n'));\n      } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n        logger.warn({ npmrcFilename, err }, 'Error writing .npmrc');\n      }\n    }\n    const npmLock = packageFile.managerData.npmLock;\n    if (npmLock) {\n      const npmLockPath = npmLock;\n      logger.debug(`Writing ${npmLock}`);\n      let existingNpmLock: string;\n      try {\n        existingNpmLock = (await getFile(npmLock)) ?? '';\n      } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n        logger.warn({ err }, 'Error reading npm lock file');\n        existingNpmLock = '';\n      }\n      const { detectedIndent, lockFileParsed: npmLockParsed } =\n        parseLockFile(existingNpmLock);\n      if (npmLockParsed) {\n        const packageNames =\n          'packages' in npmLockParsed\n            ? Object.keys(npmLockParsed.packages)\n            : [];\n        const widens: string[] = [];\n        let lockFileChanged = false;\n        for (const upgrade of config.upgrades) {\n          if (upgrade.lockFiles && !upgrade.lockFiles.includes(npmLock)) {\n            continue;\n          }\n          if (!upgrade.managerData) {\n            continue;\n          }\n          if (\n            upgrade.rangeStrategy === 'widen' &&\n            upgrade.managerData.npmLock === npmLock\n          ) {\n            // TODO #22198\n            widens.push(upgrade.depName!);\n          }\n          const { depName } = upgrade;\n          const oldVersion = upgrade.lockedVersion ?? upgrade.currentVersion;\n          if ('packages' in npmLockParsed) {\n            for (const packageName of packageNames) {\n              if (\n                packageName === `node_modules/${depName}` ||\n                packageName.startsWith(`node_modules/${depName}/`)\n              ) {\n                logger.trace({ packageName }, 'Massaging out package name');\n                lockFileChanged = true;\n                delete npmLockParsed.packages[packageName];\n                continue;\n              }\n              if (\n                !depName ||\n                !oldVersion ||\n                // Workspace entries (e.g. `packages/app`) and the root entry\n                // are link targets: `node_modules/<name>` points at them with\n                // `link: true`, so deleting one breaks npm with EMISSINGTARGET.\n                !packageName.startsWith('node_modules/')\n              ) {\n                continue;\n              }\n              // Lockstep monorepo siblings (e.g. vue -> @vue/server-renderer)\n              // pin the updated dep to its exact old version. Left in the lock\n              // they cannot resolve against the new version and npm fails with\n              // ERESOLVE, so massage them out too and let npm re-resolve them.\n              const entry = npmLockParsed.packages[packageName];\n              const pinned =\n                entry?.peerDependencies?.[depName] === oldVersion ||\n                entry?.dependencies?.[depName] === oldVersion ||\n                entry?.optionalDependencies?.[depName] === oldVersion;\n              if (pinned) {\n                logger.trace(\n                  { packageName, depName, oldVersion },\n                  'Massaging out lockstep sibling',\n                );\n                lockFileChanged = true;\n                delete npmLockParsed.packages[packageName];\n              }\n            }\n          }\n        }\n        // v8 ignore else -- TODO: add test #40625\n        if (widens.length) {\n          logger.debug(\n            `Removing ${String(widens)} from ${npmLock} to force an update`,\n          );\n          lockFileChanged = true;\n          try {\n            if ('dependencies' in npmLockParsed && npmLockParsed.dependencies) {\n              widens.forEach((depName) => {\n                // TODO #22198\n                delete npmLockParsed.dependencies![depName];\n              });\n            }\n          } catch /* v8 ignore next -- TODO: add test #40625 */ {\n            logger.warn(\n              { npmLock },\n              'Error massaging package-lock.json for widen',\n            );\n          }\n        }\n        // v8 ignore else -- TODO: add test #40625\n        if (lockFileChanged) {\n          logger.debug('Massaging npm lock file before writing to disk');\n          existingNpmLock = composeLockFile(npmLockParsed, detectedIndent);\n        }\n        await writeLocalFile(npmLockPath, existingNpmLock);\n      }\n    }\n  }\n}\n\nasync function restoreNpmrcFiles(\n  originalNpmrcFiles: Map<string, string>,\n): Promise<void> {\n  for (const [npmrcFilename, originalNpmrc] of originalNpmrcFiles) {\n    try {\n      await writeLocalFile(npmrcFilename, originalNpmrc);\n    } catch (err) {\n      logger.warn({ npmrcFilename, err }, 'Error restoring .npmrc');\n    }\n  }\n}\n\nexport async function writeUpdatedPackageFiles(\n  config: PostUpdateConfig,\n): Promise<void> {\n  logger.trace({ config }, 'writeUpdatedPackageFiles');\n  logger.debug('Writing any updated package files');\n  if (!config.updatedPackageFiles) {\n    logger.debug('No files found');\n    return;\n  }\n  // prefer artifact content when it updates the same file (e.g. pnpm-workspace.yaml)\n  const artifactContents = new Map<string, string>();\n  if (config.updatedArtifacts) {\n    for (const artifact of config.updatedArtifacts) {\n      if (artifact.type === 'addition' && artifact.contents) {\n        artifactContents.set(artifact.path, artifact.contents.toString());\n      }\n    }\n  }\n  const supportedLockFiles = ['package-lock.json', 'yarn.lock'];\n  for (const packageFile of config.updatedPackageFiles) {\n    if (packageFile.type !== 'addition') {\n      continue;\n    }\n    if (\n      supportedLockFiles.some((fileName) => packageFile.path.endsWith(fileName))\n    ) {\n      logger.debug(`Writing lock file: ${packageFile.path}`);\n      // TODO #22198\n\n      await writeLocalFile(packageFile.path, packageFile.contents!);\n      continue;\n    }\n    if (!(\n      packageFile.path.endsWith('package.json') ||\n      packageFile.path.endsWith('pnpm-workspace.yaml') ||\n      packageFile.path.endsWith('.yarnrc.yml')\n    )) {\n      continue;\n    }\n    const contents =\n      artifactContents.get(packageFile.path) ?? packageFile.contents!;\n    logger.debug(`Writing ${packageFile.path}`);\n    await writeLocalFile(packageFile.path, contents);\n  }\n}\n\n/* v8 ignore next -- needs test */\nasync function updateYarnOffline(\n  lockFileDir: string,\n  updatedArtifacts: FileChange[],\n): Promise<void> {\n  try {\n    const resolvedPaths: string[] = [];\n    const yarnrcYml = await getFile(upath.join(lockFileDir, '.yarnrc.yml'));\n    const yarnrc = await getFile(upath.join(lockFileDir, '.yarnrc'));\n\n    // As .yarnrc.yml overrides .yarnrc in Yarn 1 (https://git.io/JUcco)\n    // both files may exist, so check for .yarnrc.yml first\n    if (yarnrcYml) {\n      // Yarn 2 (offline cache and zero-installs)\n      const paths = getZeroInstallPaths(yarnrcYml);\n      resolvedPaths.push(...paths.map((p) => upath.join(lockFileDir, p)));\n    } else if (yarnrc) {\n      // Yarn 1 (offline mirror)\n      const mirrorLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-offline-mirror '));\n      if (mirrorLine) {\n        const mirrorPath = ensureTrailingSlash(\n          mirrorLine.split(' ')[1].replace(regEx(/\"/g), ''),\n        );\n        resolvedPaths.push(upath.join(lockFileDir, mirrorPath));\n      }\n    }\n    logger.debug({ resolvedPaths }, 'updateYarnOffline resolvedPaths');\n\n    if (resolvedPaths.length) {\n      const status = await getRepoStatus();\n      for (const f of status.modified.concat(status.not_added)) {\n        if (resolvedPaths.some((p) => f.startsWith(p))) {\n          updatedArtifacts.push({\n            type: 'addition',\n            path: f,\n            contents: await readLocalFile(f),\n          });\n        }\n      }\n      for (const f of status.deleted || []) {\n        if (resolvedPaths.some((p) => f.startsWith(p))) {\n          updatedArtifacts.push({ type: 'deletion', path: f });\n        }\n      }\n    }\n  } catch (err) {\n    logger.error({ err }, 'Error updating yarn offline packages');\n  }\n}\n\n// TODO: move to ./yarn.ts\n// exported for testing\nexport async function updateYarnBinary(\n  lockFileDir: string,\n  updatedArtifacts: FileChange[],\n  existingYarnrcYmlContent: string | undefined | null,\n): Promise<string | undefined | null> {\n  let yarnrcYml = existingYarnrcYmlContent;\n  try {\n    const yarnrcYmlFilename = upath.join(lockFileDir, '.yarnrc.yml');\n    if (isNullOrUndefined(yarnrcYml)) {\n      yarnrcYml = (await getFile(yarnrcYmlFilename)) ?? undefined;\n    }\n    const newYarnrcYml = await readLocalFile(yarnrcYmlFilename, 'utf8');\n    if (!isString(yarnrcYml) || !isString(newYarnrcYml)) {\n      return existingYarnrcYmlContent;\n    }\n\n    // TODO: use schema (#9610)\n    const oldYarnPath = parseSingleYaml<YarnRcYmlFile>(yarnrcYml)?.yarnPath;\n    const newYarnPath = parseSingleYaml<YarnRcYmlFile>(newYarnrcYml)?.yarnPath;\n    if (\n      !isNonEmptyStringAndNotWhitespace(oldYarnPath) ||\n      !isNonEmptyStringAndNotWhitespace(newYarnPath)\n    ) {\n      return existingYarnrcYmlContent;\n    }\n\n    const oldYarnFullPath = upath.join(lockFileDir, oldYarnPath);\n    const newYarnFullPath = upath.join(lockFileDir, newYarnPath);\n    logger.debug({ oldYarnPath, newYarnPath }, 'Found updated Yarn binary');\n\n    yarnrcYml = yarnrcYml.replace(oldYarnPath, newYarnPath);\n    updatedArtifacts.push(\n      {\n        type: 'addition',\n        path: yarnrcYmlFilename,\n        contents: yarnrcYml,\n      },\n      {\n        type: 'deletion',\n        path: oldYarnFullPath,\n      },\n      {\n        type: 'addition',\n        path: newYarnFullPath,\n        contents: await readLocalFile(newYarnFullPath, 'utf8'),\n        isExecutable: true,\n      },\n    );\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.error({ err }, 'Error updating Yarn binary');\n  }\n  return existingYarnrcYmlContent && yarnrcYml;\n}\n\nasync function getAdditionalFilesInner(\n  config: PostUpdateConfig<NpmManagerData>,\n  packageFiles: AdditionalPackageFiles,\n  originalNpmrcFiles: Map<string, string>,\n): Promise<WriteExistingFilesResult> {\n  logger.trace({ config }, 'getAdditionalFiles');\n  const artifactErrors: ArtifactError[] = [];\n  const artifactNotices: ArtifactNotice[] = [];\n  const updatedArtifacts: FileChange[] = [];\n  if (!packageFiles.npm?.length) {\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  if (config.skipArtifactsUpdate) {\n    logger.debug('Skipping lock file generation');\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  logger.debug('Getting updated lock files');\n  if (config.isLockFileMaintenance && config.reuseExistingBranch) {\n    const branchExists = await scm.branchExists(config.branchName);\n    if (branchExists) {\n      logger.debug('Skipping lockFileMaintenance update');\n      return { artifactErrors, artifactNotices, updatedArtifacts };\n    }\n  }\n  const dirs = determineLockFileDirs(config, packageFiles);\n  logger.trace({ dirs }, 'lock file dirs');\n  await writeExistingFiles(config, packageFiles, originalNpmrcFiles);\n  await writeUpdatedPackageFiles(config);\n\n  const { additionalNpmrcContent, additionalYarnRcYml } = processHostRules();\n\n  // This isn't passed directly to the child process, so no need to filter.\n  // But pass custom env and user vars.\n  const env = {\n    ...getEnv(),\n    NPM_CONFIG_CACHE: await ensureCacheDir(NPM_CACHE_DIR),\n    YARN_CACHE_FOLDER: await ensureCacheDir(YARN_CACHE_DIR),\n    YARN_GLOBAL_FOLDER: await ensureCacheDir(YARN_GLOBAL_DIR),\n    npm_config_store: await ensureCacheDir(PNPM_CACHE_BASE_DIR),\n    NODE_ENV: 'dev',\n  };\n\n  let token: string | undefined;\n  try {\n    ({ token } = hostRules.find({\n      hostType: 'github',\n      url: 'https://api.github.com/',\n    }));\n    // v8 ignore next -- TODO: add test #40625\n    token = token ? `${token}@` : token;\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.warn({ err }, 'Error getting token for packageFile');\n  }\n  const tokenRe = regEx(`${token ?? ''}`, 'g', false);\n  for (const npmLock of dirs.npmLockDirs) {\n    const lockFileDir = upath.dirname(npmLock);\n    await withNpmrcHostRules(\n      lockFileDir,\n      additionalNpmrcContent,\n      async (npmrcContent) => {\n        const fileName = upath.basename(npmLock);\n        logger.debug(`Generating ${fileName} for ${lockFileDir}`);\n        const upgrades = config.upgrades.filter(\n          (upgrade) => upgrade.managerData?.npmLock === npmLock,\n        );\n        const res = await npm.generateLockFile(\n          lockFileDir,\n          env,\n          fileName,\n          config,\n          upgrades,\n          npmrcContent,\n        );\n        if (res.error) {\n          /* v8 ignore next -- needs test */\n          if (res.stderr?.includes('No matching version found for')) {\n            for (const upgrade of config.upgrades) {\n              if (\n                res.stderr.includes(\n                  `No matching version found for ${upgrade.depName}`,\n                )\n              ) {\n                logger.debug(\n                  { dependency: upgrade.depName, type: 'npm' },\n                  'lock file failed for the dependency being updated - skipping branch creation',\n                );\n                const err = new Error(\n                  'lock file failed for the dependency being updated - skipping branch creation',\n                );\n                throw new ExternalHostError(err, NpmDatasource.id);\n              }\n            }\n          }\n\n          artifactErrors.push({\n            fileName: npmLock,\n            stderr: res.stderr,\n          });\n        } else if (res.lockFile) {\n          if (res.beforeFallback) {\n            const message =\n              'npm `--before` could not be enforced because existing locked packages were published after the `minimumReleaseAge` cutoff. This will resolve after the next lock file maintenance run.';\n            logger.warn({ npmLock }, message);\n            artifactNotices.push({ file: npmLock, message });\n          }\n          const existingContent = await getFile(\n            npmLock,\n            config.reuseExistingBranch ? config.branchName : config.baseBranch,\n          );\n          if (res.lockFile === existingContent) {\n            logger.debug(`${npmLock} hasn't changed`);\n          } else {\n            logger.debug(`${npmLock} needs updating`);\n            updatedArtifacts.push({\n              type: 'addition',\n              path: npmLock,\n              // TODO: can this be undefined? (#22198)\n\n              contents: res.lockFile.replace(tokenRe, ''),\n            });\n          }\n        }\n      },\n    );\n  }\n\n  for (const yarnLock of dirs.yarnLockDirs) {\n    const lockFileDir = upath.dirname(yarnLock);\n    let yarnRcYmlFilename: string | undefined;\n    let existingYarnrcYmlContent: string | undefined | null;\n    await withNpmrcHostRules(lockFileDir, additionalNpmrcContent, async () => {\n      if (additionalYarnRcYml) {\n        yarnRcYmlFilename = getSiblingFileName(yarnLock, '.yarnrc.yml');\n        existingYarnrcYmlContent = await readLocalFile(\n          yarnRcYmlFilename,\n          'utf8',\n        );\n        // v8 ignore else -- TODO: add test #40625\n        if (existingYarnrcYmlContent) {\n          try {\n            // TODO: use schema (#9610)\n            const existingYarnrRcYml = parseSingleYaml<Record<string, unknown>>(\n              existingYarnrcYmlContent,\n            );\n\n            const updatedYarnYrcYml = deepmerge(\n              existingYarnrRcYml,\n              yarn.fuzzyMatchAdditionalYarnrcYml(\n                additionalYarnRcYml,\n                existingYarnrRcYml,\n              ),\n            );\n\n            await writeLocalFile(yarnRcYmlFilename, dump(updatedYarnYrcYml));\n            logger.debug('Added authentication to .yarnrc.yml');\n          } catch (err) {\n            logger.warn({ err }, 'Error appending .yarnrc.yml content');\n          }\n        }\n      }\n      logger.debug(`Generating yarn.lock for ${lockFileDir}`);\n      const lockFileName = upath.join(lockFileDir, 'yarn.lock');\n      const upgrades = config.upgrades.filter(\n        (upgrade) => upgrade.managerData?.yarnLock === yarnLock,\n      );\n      const res = await yarn.generateLockFile(\n        lockFileDir,\n        env,\n        config,\n        upgrades,\n      );\n      if (res.error) {\n        /* v8 ignore next -- needs test */\n        if (res.stderr?.includes(`Couldn't find any versions for`)) {\n          for (const upgrade of config.upgrades) {\n            if (\n              res.stderr.includes(\n                `Couldn't find any versions for \\\\\"${upgrade.depName}\\\\\"`,\n              )\n            ) {\n              logger.debug(\n                { dependency: upgrade.depName, type: 'yarn' },\n                'lock file failed for the dependency being updated - skipping branch creation',\n              );\n              throw new ExternalHostError(\n                new Error(\n                  'lock file failed for the dependency being updated - skipping branch creation',\n                ),\n                NpmDatasource.id,\n              );\n            }\n          }\n        }\n\n        artifactErrors.push({\n          fileName: yarnLock,\n          stderr: artifactErrorMessageFromExecError(res, ''),\n        });\n      } else {\n        const existingContent = await getFile(\n          lockFileName,\n          config.reuseExistingBranch ? config.branchName : config.baseBranch,\n        );\n        if (res.lockFile === existingContent) {\n          logger.debug(\"yarn.lock hasn't changed\");\n        } else {\n          logger.debug('yarn.lock needs updating');\n          updatedArtifacts.push({\n            type: 'addition',\n            path: lockFileName,\n            // TODO #22198\n            contents: res.lockFile!,\n          });\n          await updateYarnOffline(lockFileDir, updatedArtifacts);\n        }\n\n        /* v8 ignore next -- needs test */\n        if (upgrades.some(yarn.isYarnUpdate)) {\n          existingYarnrcYmlContent = await updateYarnBinary(\n            lockFileDir,\n            updatedArtifacts,\n            existingYarnrcYmlContent,\n          );\n        }\n      }\n    });\n    /* v8 ignore next -- needs test */\n    if (existingYarnrcYmlContent) {\n      // TODO #22198\n      await writeLocalFile(yarnRcYmlFilename!, existingYarnrcYmlContent);\n    }\n  }\n\n  for (const pnpmLockFile of dirs.pnpmLockFileDirs) {\n    const lockFileDir = upath.dirname(pnpmLockFile);\n    await withNpmrcHostRules(lockFileDir, additionalNpmrcContent, async () => {\n      logger.debug(`Generating pnpm-lock.yaml for ${lockFileDir}`);\n      const upgrades = config.upgrades.filter(\n        (upgrade) => upgrade.managerData?.pnpmLockFile === pnpmLockFile,\n      );\n      const res = await pnpm.generateLockFile(\n        lockFileDir,\n        env,\n        config,\n        upgrades,\n      );\n      if (res.error) {\n        /* v8 ignore next -- needs test */\n        if (res.stdout?.includes(`No compatible version found:`)) {\n          for (const upgrade of config.upgrades) {\n            if (\n              res.stdout.includes(\n                `No compatible version found: ${upgrade.depName}`,\n              )\n            ) {\n              logger.debug(\n                { dependency: upgrade.depName, type: 'pnpm' },\n                'lock file failed for the dependency being updated - skipping branch creation',\n              );\n              throw new ExternalHostError(\n                Error(\n                  'lock file failed for the dependency being updated - skipping branch creation',\n                ),\n                NpmDatasource.id,\n              );\n            }\n          }\n        }\n\n        artifactErrors.push({\n          fileName: pnpmLockFile,\n          stderr: artifactErrorMessageFromExecError(res, ''),\n        });\n      } else {\n        const existingContent = await getFile(\n          pnpmLockFile,\n          config.reuseExistingBranch ? config.branchName : config.baseBranch,\n        );\n        if (res.lockFile === existingContent) {\n          logger.debug(\"pnpm-lock.yaml hasn't changed\");\n        } else {\n          logger.debug('pnpm-lock.yaml needs updating');\n          updatedArtifacts.push({\n            type: 'addition',\n            path: pnpmLockFile,\n            // TODO: can be undefined? (#22198)\n            contents: res.lockFile!,\n          });\n        }\n      }\n    });\n  }\n\n  return { artifactErrors, artifactNotices, updatedArtifacts };\n}\n\nexport async function getAdditionalFiles(\n  config: PostUpdateConfig,\n  packageFiles: AdditionalPackageFiles,\n): Promise<WriteExistingFilesResult> {\n  const originalNpmrcFiles = new Map<string, string>();\n  try {\n    return await getAdditionalFilesInner(\n      // The branch config carries the manager data of every upgrade untyped; the npm post-update only reads the optional npm fields of it.\n      config as PostUpdateConfig<NpmManagerData>,\n      packageFiles,\n      originalNpmrcFiles,\n    );\n  } finally {\n    await restoreNpmrcFiles(originalNpmrcFiles);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA0DA,SAAS,QAAQ,KAA8C;CAC7D,OAAO,MAAM,KAAK,IAAI,IAAI,IAAI,OAAO,QAAQ,CAAC,CAAC;AACjD;AAEA,SAAgB,sBACd,QACA,cAC6B;CAC7B,MAAM,cAAsC,CAAC;CAC7C,MAAM,eAAuC,CAAC;CAC9C,MAAM,mBAA2C,CAAC;CAElD,KAAK,MAAM,WAAW,OAAO;;CAE3B,IACE,QAAQ,eAAe,yBACvB,QAAQ,kBAAkB,QAC1B,QAAQ,qBAAqB,MAC7B;EACA,aAAa,KAAK,QAAQ,aAAa,QAAQ;EAC/C,YAAY,KAAK,QAAQ,aAAa,OAAO;EAC7C,iBAAiB,KAAK,QAAQ,aAAa,YAAY;CACzD;CAGF,IACE,OAAO,SAAS,OACb,YACC,QAAQ,eAAe,yBACvB,QAAQ,gBACZ,GAEA,OAAO;EACL,cAAc,QAAQ,YAAY;EAClC,aAAa,QAAQ,WAAW;EAChC,kBAAkB,QAAQ,gBAAgB;CAC5C;CAGF,SAAS,eACP,UAC2C;EAC3C,OAAO,MAAM,4BAA4B,UAAU;EAEnD,KAAK,MAAM,eAAe,aAAa,KAAM;GAC3C,IAAI,YAAY,gBAAgB,UAAU;IACxC,OAAO,MAAM,EAAE,YAAY,GAAG,mBAAmB;IACjD,OAAO;GACT;GACA,OAAO,MAAM,UAAU;EACzB;EACA,OAAO,CAAC;CACV;CAGA,KAAK,MAAM,KAAK,OAAO,qBAAsB;EAC3C,OAAO,MAAM,YAAY,OAAO,EAAE,IAAI,EAAE,gBAAgB;EACxD,MAAM,cAAc,eAAe,EAAE,IAAI;;EAEzC,IAAI,CAAC,YAAY,aACf;EAGF,aAAa,KAAK,YAAY,YAAY,QAAQ;EAClD,YAAY,KAAK,YAAY,YAAY,OAAO;EAChD,iBAAiB,KAAK,YAAY,YAAY,YAAY;CAC5D;CAEA,OAAO;EACL,cAAc,QAAQ,YAAY;EAClC,aAAa,QAAQ,WAAW;EAChC,kBAAkB,QAAQ,gBAAgB;CAC5C;AACF;AAEA,eAAsB,mBACpB,QACA,cACA,qCAAqB,IAAI,IAAoB,GAC9B;CACf,IAAI,CAAC,aAAa,KAChB;CAEF,MAAM,WAAW,aAAa;CAC9B,OAAO,MACL,EAAE,cAAc,SAAS,KAAK,MAAM,EAAE,WAAW,EAAE,GACnD,4BACF;CACA,KAAK,MAAM,eAAe,UAAU;;EAElC,IAAI,CAAC,YAAY,aACf;EAGF,MAAM,UAAU,MAAM,QAAQ,YAAY,WAAY;EACtD,MAAM,QAAQ,YAAY;EAC1B,MAAM,gBAAgB,MAAM,KAAK,SAAS,QAAQ;EAGlD,MAAM,iBACJ,kBAAkB,YAAY,YAAY,iBAC1C,CAAC,YAAY,YAAY;EAC3B,IAAI,SAAS,KAAK,KAAK,gBACrB,IAAI;GACF,IAAI,CAAC,mBAAmB,IAAI,aAAa,GAAG;IAC1C,MAAM,gBAAgB,MAAM,cAAc,eAAe,MAAM;IAC/D,IAAI,SAAS,aAAa,GACxB,mBAAmB,IAAI,eAAe,aAAa;GAEvD;GACA,MAAM,eAAe,eAAe,MAAM,QAAQ,MAAM,MAAM,GAAG,IAAI,CAAC;EACxE,SAAS,mDAAmD;GAC1D,OAAO,KAAK;IAAE;IAAe;GAAI,GAAG,sBAAsB;EAC5D;EAEF,MAAM,UAAU,YAAY,YAAY;EACxC,IAAI,SAAS;GACX,MAAM,cAAc;GACpB,OAAO,MAAM,WAAW,SAAS;GACjC,IAAI;GACJ,IAAI;IACF,kBAAmB,MAAM,QAAQ,OAAO,KAAM;GAChD,SAAS,mDAAmD;IAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,6BAA6B;IAClD,kBAAkB;GACpB;GACA,MAAM,EAAE,gBAAgB,gBAAgB,kBACtC,cAAc,eAAe;GAC/B,IAAI,eAAe;IACjB,MAAM,eACJ,cAAc,gBACV,OAAO,KAAK,cAAc,QAAQ,IAClC,CAAC;IACP,MAAM,SAAmB,CAAC;IAC1B,IAAI,kBAAkB;IACtB,KAAK,MAAM,WAAW,OAAO,UAAU;KACrC,IAAI,QAAQ,aAAa,CAAC,QAAQ,UAAU,SAAS,OAAO,GAC1D;KAEF,IAAI,CAAC,QAAQ,aACX;KAEF,IACE,QAAQ,kBAAkB,WAC1B,QAAQ,YAAY,YAAY,SAGhC,OAAO,KAAK,QAAQ,OAAQ;KAE9B,MAAM,EAAE,YAAY;KACpB,MAAM,aAAa,QAAQ,iBAAiB,QAAQ;KACpD,IAAI,cAAc,eAChB,KAAK,MAAM,eAAe,cAAc;MACtC,IACE,gBAAgB,gBAAgB,aAChC,YAAY,WAAW,gBAAgB,QAAQ,EAAE,GACjD;OACA,OAAO,MAAM,EAAE,YAAY,GAAG,4BAA4B;OAC1D,kBAAkB;OAClB,OAAO,cAAc,SAAS;OAC9B;MACF;MACA,IACE,CAAC,WACD,CAAC,cAID,CAAC,YAAY,WAAW,eAAe,GAEvC;MAMF,MAAM,QAAQ,cAAc,SAAS;MAKrC,IAHE,OAAO,mBAAmB,aAAa,cACvC,OAAO,eAAe,aAAa,cACnC,OAAO,uBAAuB,aAAa,YACjC;OACV,OAAO,MACL;QAAE;QAAa;QAAS;OAAW,GACnC,gCACF;OACA,kBAAkB;OAClB,OAAO,cAAc,SAAS;MAChC;KACF;IAEJ;;IAEA,IAAI,OAAO,QAAQ;KACjB,OAAO,MACL,YAAY,OAAO,MAAM,EAAE,QAAQ,QAAQ,oBAC7C;KACA,kBAAkB;KAClB,IAAI;MACF,IAAI,kBAAkB,iBAAiB,cAAc,cACnD,OAAO,SAAS,YAAY;OAE1B,OAAO,cAAc,aAAc;MACrC,CAAC;KAEL,sDAAsD;MACpD,OAAO,KACL,EAAE,QAAQ,GACV,6CACF;KACF;IACF;;IAEA,IAAI,iBAAiB;KACnB,OAAO,MAAM,gDAAgD;KAC7D,kBAAkB,gBAAgB,eAAe,cAAc;IACjE;IACA,MAAM,eAAe,aAAa,eAAe;GACnD;EACF;CACF;AACF;AAEA,eAAe,kBACb,oBACe;CACf,KAAK,MAAM,CAAC,eAAe,kBAAkB,oBAC3C,IAAI;EACF,MAAM,eAAe,eAAe,aAAa;CACnD,SAAS,KAAK;EACZ,OAAO,KAAK;GAAE;GAAe;EAAI,GAAG,wBAAwB;CAC9D;AAEJ;AAEA,eAAsB,yBACpB,QACe;CACf,OAAO,MAAM,EAAE,OAAO,GAAG,0BAA0B;CACnD,OAAO,MAAM,mCAAmC;CAChD,IAAI,CAAC,OAAO,qBAAqB;EAC/B,OAAO,MAAM,gBAAgB;EAC7B;CACF;CAEA,MAAM,mCAAmB,IAAI,IAAoB;CACjD,IAAI,OAAO,kBACJ;OAAA,MAAM,YAAY,OAAO,kBAC5B,IAAI,SAAS,SAAS,cAAc,SAAS,UAC3C,iBAAiB,IAAI,SAAS,MAAM,SAAS,SAAS,SAAS,CAAC;CAAA;CAItE,MAAM,qBAAqB,CAAC,qBAAqB,WAAW;CAC5D,KAAK,MAAM,eAAe,OAAO,qBAAqB;EACpD,IAAI,YAAY,SAAS,YACvB;EAEF,IACE,mBAAmB,MAAM,aAAa,YAAY,KAAK,SAAS,QAAQ,CAAC,GACzE;GACA,OAAO,MAAM,sBAAsB,YAAY,MAAM;GAGrD,MAAM,eAAe,YAAY,MAAM,YAAY,QAAS;GAC5D;EACF;EACA,IAAI,EACF,YAAY,KAAK,SAAS,cAAc,KACxC,YAAY,KAAK,SAAS,qBAAqB,KAC/C,YAAY,KAAK,SAAS,aAAa,IAEvC;EAEF,MAAM,WACJ,iBAAiB,IAAI,YAAY,IAAI,KAAK,YAAY;EACxD,OAAO,MAAM,WAAW,YAAY,MAAM;EAC1C,MAAM,eAAe,YAAY,MAAM,QAAQ;CACjD;AACF;;AAGA,eAAe,kBACb,aACA,kBACe;CACf,IAAI;EACF,MAAM,gBAA0B,CAAC;EACjC,MAAM,YAAY,MAAM,QAAQ,MAAM,KAAK,aAAa,aAAa,CAAC;EACtE,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,aAAa,SAAS,CAAC;EAI/D,IAAI,WAAW;GAEb,MAAM,QAAQ,oBAAoB,SAAS;GAC3C,cAAc,KAAK,GAAG,MAAM,KAAK,MAAM,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC;EACpE,OAAO,IAAI,QAAQ;GAEjB,MAAM,aAAa,OAChB,MAAM,YAAY,CAAC,CACnB,MAAM,SAAS,KAAK,WAAW,sBAAsB,CAAC;GACzD,IAAI,YAAY;IACd,MAAM,aAAa,oBACjB,WAAW,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,MAAM,IAAI,GAAG,EAAE,CAClD;IACA,cAAc,KAAK,MAAM,KAAK,aAAa,UAAU,CAAC;GACxD;EACF;EACA,OAAO,MAAM,EAAE,cAAc,GAAG,iCAAiC;EAEjE,IAAI,cAAc,QAAQ;GACxB,MAAM,SAAS,MAAM,cAAc;GACnC,KAAK,MAAM,KAAK,OAAO,SAAS,OAAO,OAAO,SAAS,GACrD,IAAI,cAAc,MAAM,MAAM,EAAE,WAAW,CAAC,CAAC,GAC3C,iBAAiB,KAAK;IACpB,MAAM;IACN,MAAM;IACN,UAAU,MAAM,cAAc,CAAC;GACjC,CAAC;GAGL,KAAK,MAAM,KAAK,OAAO,WAAW,CAAC,GACjC,IAAI,cAAc,MAAM,MAAM,EAAE,WAAW,CAAC,CAAC,GAC3C,iBAAiB,KAAK;IAAE,MAAM;IAAY,MAAM;GAAE,CAAC;EAGzD;CACF,SAAS,KAAK;EACZ,OAAO,MAAM,EAAE,IAAI,GAAG,sCAAsC;CAC9D;AACF;AAIA,eAAsB,iBACpB,aACA,kBACA,0BACoC;CACpC,IAAI,YAAY;CAChB,IAAI;EACF,MAAM,oBAAoB,MAAM,KAAK,aAAa,aAAa;EAC/D,IAAI,kBAAkB,SAAS,GAC7B,YAAa,MAAM,QAAQ,iBAAiB,KAAM,KAAA;EAEpD,MAAM,eAAe,MAAM,cAAc,mBAAmB,MAAM;EAClE,IAAI,CAAC,SAAS,SAAS,KAAK,CAAC,SAAS,YAAY,GAChD,OAAO;EAIT,MAAM,cAAc,gBAA+B,SAAS,CAAC,EAAE;EAC/D,MAAM,cAAc,gBAA+B,YAAY,CAAC,EAAE;EAClE,IACE,CAAC,iCAAiC,WAAW,KAC7C,CAAC,iCAAiC,WAAW,GAE7C,OAAO;EAGT,MAAM,kBAAkB,MAAM,KAAK,aAAa,WAAW;EAC3D,MAAM,kBAAkB,MAAM,KAAK,aAAa,WAAW;EAC3D,OAAO,MAAM;GAAE;GAAa;EAAY,GAAG,2BAA2B;EAEtE,YAAY,UAAU,QAAQ,aAAa,WAAW;EACtD,iBAAiB,KACf;GACE,MAAM;GACN,MAAM;GACN,UAAU;EACZ,GACA;GACE,MAAM;GACN,MAAM;EACR,GACA;GACE,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,iBAAiB,MAAM;GACrD,cAAc;EAChB,CACF;CACF,SAAS,mDAAmD;EAC1D,OAAO,MAAM,EAAE,IAAI,GAAG,4BAA4B;CACpD;CACA,OAAO,4BAA4B;AACrC;AAEA,eAAe,wBACb,QACA,cACA,oBACmC;CACnC,OAAO,MAAM,EAAE,OAAO,GAAG,oBAAoB;CAC7C,MAAM,iBAAkC,CAAC;CACzC,MAAM,kBAAoC,CAAC;CAC3C,MAAM,mBAAiC,CAAC;CACxC,IAAI,CAAC,aAAa,KAAK,QACrB,OAAO;EAAE;EAAgB;EAAiB;CAAiB;CAE7D,IAAI,OAAO,qBAAqB;EAC9B,OAAO,MAAM,+BAA+B;EAC5C,OAAO;GAAE;GAAgB;GAAiB;EAAiB;CAC7D;CACA,OAAO,MAAM,4BAA4B;CACzC,IAAI,OAAO,yBAAyB,OAAO,qBAErC;MAAA,MADuB,IAAI,aAAa,OAAO,UAAU,GAC3C;GAChB,OAAO,MAAM,qCAAqC;GAClD,OAAO;IAAE;IAAgB;IAAiB;GAAiB;EAC7D;;CAEF,MAAM,OAAO,sBAAsB,QAAQ,YAAY;CACvD,OAAO,MAAM,EAAE,KAAK,GAAG,gBAAgB;CACvC,MAAM,mBAAmB,QAAQ,cAAc,kBAAkB;CACjE,MAAM,yBAAyB,MAAM;CAErC,MAAM,EAAE,wBAAwB,wBAAwB,iBAAiB;CAIzE,MAAM,MAAM;EACV,GAAG,OAAO;EACV,kBAAkB,MAAM,eAAA,KAA4B;EACpD,mBAAmB,MAAM,eAAe,cAAc;EACtD,oBAAoB,MAAM,eAAe,eAAe;EACxD,kBAAkB,MAAM,eAAe,mBAAmB;EAC1D,UAAU;CACZ;CAEA,IAAI;CACJ,IAAI;EACF,CAAC,CAAE,SAAUA,KAAe;GAC1B,UAAU;GACV,KAAK;EACP,CAAC;;EAED,QAAQ,QAAQ,GAAG,MAAM,KAAK;CAChC,SAAS,mDAAmD;EAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,qCAAqC;CAC5D;CACA,MAAM,UAAU,MAAM,GAAG,SAAS,MAAM,KAAK,KAAK;CAClD,KAAK,MAAM,WAAW,KAAK,aAAa;EACtC,MAAM,cAAc,MAAM,QAAQ,OAAO;EACzC,MAAM,mBACJ,aACA,wBACA,OAAO,iBAAiB;GACtB,MAAM,WAAW,MAAM,SAAS,OAAO;GACvC,OAAO,MAAM,cAAc,SAAS,OAAO,aAAa;GACxD,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,YAAY,OAChD;GACA,MAAM,MAAM,MAAMC,iBAChB,aACA,KACA,UACA,QACA,UACA,YACF;GACA,IAAI,IAAI,OAAO;;IAEb,IAAI,IAAI,QAAQ,SAAS,+BAA+B,GACjD;UAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,iCAAiC,QAAQ,SAC3C,GACA;MACA,OAAO,MACL;OAAE,YAAY,QAAQ;OAAS,MAAM;MAAM,GAC3C,8EACF;MAIA,MAAM,IAAI,kCAAkB,IAHZ,MACd,8EAE4B,GAAG,cAAc,EAAE;KACnD;;IAIJ,eAAe,KAAK;KAClB,UAAU;KACV,QAAQ,IAAI;IACd,CAAC;GACH,OAAO,IAAI,IAAI,UAAU;IACvB,IAAI,IAAI,gBAAgB;KACtB,MAAM,UACJ;KACF,OAAO,KAAK,EAAE,QAAQ,GAAG,OAAO;KAChC,gBAAgB,KAAK;MAAE,MAAM;MAAS;KAAQ,CAAC;IACjD;IACA,MAAM,kBAAkB,MAAM,QAC5B,SACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;IACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,GAAG,QAAQ,gBAAgB;SACnC;KACL,OAAO,MAAM,GAAG,QAAQ,gBAAgB;KACxC,iBAAiB,KAAK;MACpB,MAAM;MACN,MAAM;MAGN,UAAU,IAAI,SAAS,QAAQ,SAAS,EAAE;KAC5C,CAAC;IACH;GACF;EACF,CACF;CACF;CAEA,KAAK,MAAM,YAAY,KAAK,cAAc;EACxC,MAAM,cAAc,MAAM,QAAQ,QAAQ;EAC1C,IAAI;EACJ,IAAI;EACJ,MAAM,mBAAmB,aAAa,wBAAwB,YAAY;GACxE,IAAI,qBAAqB;IACvB,oBAAoB,mBAAmB,UAAU,aAAa;IAC9D,2BAA2B,MAAM,cAC/B,mBACA,MACF;;IAEA,IAAI,0BACF,IAAI;KAEF,MAAM,qBAAqB,gBACzB,wBACF;KAEA,MAAM,oBAAoBC,MACxB,oBACAC,8BACE,qBACA,kBACF,CACF;KAEA,MAAM,eAAe,mBAAmB,KAAK,iBAAiB,CAAC;KAC/D,OAAO,MAAM,qCAAqC;IACpD,SAAS,KAAK;KACZ,OAAO,KAAK,EAAE,IAAI,GAAG,qCAAqC;IAC5D;GAEJ;GACA,OAAO,MAAM,4BAA4B,aAAa;GACtD,MAAM,eAAe,MAAM,KAAK,aAAa,WAAW;GACxD,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,aAAa,QACjD;GACA,MAAM,MAAM,MAAMC,mBAChB,aACA,KACA,QACA,QACF;GACA,IAAI,IAAI,OAAO;;IAEb,IAAI,IAAI,QAAQ,SAAS,gCAAgC,GAClD;UAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,qCAAqC,QAAQ,QAAQ,IACvD,GACA;MACA,OAAO,MACL;OAAE,YAAY,QAAQ;OAAS,MAAM;MAAO,GAC5C,8EACF;MACA,MAAM,IAAI,kCACR,IAAI,MACF,8EACF,GACA,cAAc,EAChB;KACF;;IAIJ,eAAe,KAAK;KAClB,UAAU;KACV,QAAQ,kCAAkC,KAAK,EAAE;IACnD,CAAC;GACH,OAAO;IACL,MAAM,kBAAkB,MAAM,QAC5B,cACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;IACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,0BAA0B;SAClC;KACL,OAAO,MAAM,0BAA0B;KACvC,iBAAiB,KAAK;MACpB,MAAM;MACN,MAAM;MAEN,UAAU,IAAI;KAChB,CAAC;KACD,MAAM,kBAAkB,aAAa,gBAAgB;IACvD;;IAGA,IAAI,SAAS,KAAKC,YAAiB,GACjC,2BAA2B,MAAM,iBAC/B,aACA,kBACA,wBACF;GAEJ;EACF,CAAC;;EAED,IAAI,0BAEF,MAAM,eAAe,mBAAoB,wBAAwB;CAErE;CAEA,KAAK,MAAM,gBAAgB,KAAK,kBAAkB;EAChD,MAAM,cAAc,MAAM,QAAQ,YAAY;EAC9C,MAAM,mBAAmB,aAAa,wBAAwB,YAAY;GACxE,OAAO,MAAM,iCAAiC,aAAa;GAC3D,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,iBAAiB,YACrD;GACA,MAAM,MAAM,MAAMC,mBAChB,aACA,KACA,QACA,QACF;GACA,IAAI,IAAI,OAAO;;IAEb,IAAI,IAAI,QAAQ,SAAS,8BAA8B,GAChD;UAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,gCAAgC,QAAQ,SAC1C,GACA;MACA,OAAO,MACL;OAAE,YAAY,QAAQ;OAAS,MAAM;MAAO,GAC5C,8EACF;MACA,MAAM,IAAI,kBACR,MACE,8EACF,GACA,cAAc,EAChB;KACF;;IAIJ,eAAe,KAAK;KAClB,UAAU;KACV,QAAQ,kCAAkC,KAAK,EAAE;IACnD,CAAC;GACH,OAAO;IACL,MAAM,kBAAkB,MAAM,QAC5B,cACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;IACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,+BAA+B;SACvC;KACL,OAAO,MAAM,+BAA+B;KAC5C,iBAAiB,KAAK;MACpB,MAAM;MACN,MAAM;MAEN,UAAU,IAAI;KAChB,CAAC;IACH;GACF;EACF,CAAC;CACH;CAEA,OAAO;EAAE;EAAgB;EAAiB;CAAiB;AAC7D;AAEA,eAAsB,mBACpB,QACA,cACmC;CACnC,MAAM,qCAAqB,IAAI,IAAoB;CACnD,IAAI;EACF,OAAO,MAAM,wBAEX,QACA,cACA,kBACF;CACF,UAAU;EACR,MAAM,kBAAkB,kBAAkB;CAC5C;AACF"}
+{"version":3,"file":"index.js","names":["hostRules.find","npm.generateLockFile","deepmerge","yarn.fuzzyMatchAdditionalYarnrcYml","yarn.generateLockFile","yarn.isYarnUpdate","pnpm.generateLockFile"],"sources":["../../../../../lib/modules/manager/npm/post-update/index.ts"],"sourcesContent":["// TODO: types (#22198)\nimport {\n  isNonEmptyStringAndNotWhitespace,\n  isNullOrUndefined,\n  isString,\n} from '@sindresorhus/is';\nimport deepmerge from 'deepmerge';\nimport upath from 'upath';\nimport { logger } from '../../../../logger/index.ts';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error.ts';\nimport { getEnv } from '../../../../util/env.ts';\nimport {\n  ensureCacheDir,\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { getFile, getRepoStatus } from '../../../../util/git/index.ts';\nimport type { FileChange } from '../../../../util/git/types.ts';\nimport * as hostRules from '../../../../util/host-rules.ts';\nimport { newlineRegex, regEx } from '../../../../util/regex.ts';\nimport { ensureTrailingSlash } from '../../../../util/url.ts';\nimport { dump, parseSingleYaml } from '../../../../util/yaml.ts';\nimport { NpmDatasource } from '../../../datasource/npm/index.ts';\nimport { scm } from '../../../platform/scm.ts';\nimport type {\n  ArtifactError,\n  ArtifactNotice,\n  NpmrcPackageFile,\n  PostUpdateConfig,\n  Upgrade,\n} from '../../types.ts';\nimport { artifactErrorMessageFromExecError } from '../../util.ts';\nimport {\n  NPM_CACHE_DIR,\n  PNPM_CACHE_BASE_DIR,\n  YARN_CACHE_DIR,\n  YARN_GLOBAL_DIR,\n} from '../constants.ts';\nimport { getZeroInstallPaths } from '../extract/yarn.ts';\nimport type { NpmManagerData } from '../types.ts';\nimport {\n  composeLockFile,\n  parseLockFile,\n  withNpmrcHostRules,\n} from '../utils.ts';\nimport * as npm from './npm.ts';\nimport * as pnpm from './pnpm.ts';\nimport { processHostRules } from './rules.ts';\nimport type {\n  AdditionalPackageFiles,\n  DetermineLockFileDirsResult,\n  WriteExistingFilesResult,\n  YarnRcYmlFile,\n} from './types.ts';\nimport * as yarn from './yarn.ts';\n\n// Strips empty values, deduplicates, and returns the directories from filenames\nfunction getDirs(arr: (string | null | undefined)[]): string[] {\n  return Array.from(new Set(arr.filter(isString)));\n}\n\nexport function determineLockFileDirs(\n  config: PostUpdateConfig<NpmManagerData>,\n  packageFiles: AdditionalPackageFiles,\n): DetermineLockFileDirsResult {\n  const npmLockDirs: (string | undefined)[] = [];\n  const yarnLockDirs: (string | undefined)[] = [];\n  const pnpmLockFileDirs: (string | undefined)[] = [];\n\n  for (const upgrade of config.upgrades) {\n    // v8 ignore else -- TODO: add test #40625\n    if (\n      upgrade.updateType === 'lockFileMaintenance' ||\n      upgrade.isRemediation === true ||\n      upgrade.isLockfileUpdate === true\n    ) {\n      yarnLockDirs.push(upgrade.managerData?.yarnLock);\n      npmLockDirs.push(upgrade.managerData?.npmLock);\n      pnpmLockFileDirs.push(upgrade.managerData?.pnpmLockFile);\n    }\n  }\n\n  if (\n    config.upgrades.every(\n      (upgrade: Upgrade) =>\n        upgrade.updateType === 'lockFileMaintenance' ||\n        upgrade.isLockfileUpdate,\n    )\n  ) {\n    return {\n      yarnLockDirs: getDirs(yarnLockDirs),\n      npmLockDirs: getDirs(npmLockDirs),\n      pnpmLockFileDirs: getDirs(pnpmLockFileDirs),\n    };\n  }\n\n  function getPackageFile(\n    fileName: string,\n  ): Partial<NpmrcPackageFile<NpmManagerData>> {\n    logger.trace(`Looking for packageFile: ${fileName}`);\n\n    for (const packageFile of packageFiles.npm!) {\n      if (packageFile.packageFile === fileName) {\n        logger.trace({ packageFile }, 'Found packageFile');\n        return packageFile;\n      }\n      logger.trace('No match');\n    }\n    return {};\n  }\n\n  // TODO #22198\n  for (const p of config.updatedPackageFiles!) {\n    logger.trace(`Checking ${String(p.path)} for lock files`);\n    const packageFile = getPackageFile(p.path);\n    /* v8 ignore next -- needs test */\n    if (!packageFile.managerData) {\n      continue;\n    }\n    // push full lock file names and convert them later\n    yarnLockDirs.push(packageFile.managerData.yarnLock);\n    npmLockDirs.push(packageFile.managerData.npmLock);\n    pnpmLockFileDirs.push(packageFile.managerData.pnpmLockFile);\n  }\n\n  return {\n    yarnLockDirs: getDirs(yarnLockDirs),\n    npmLockDirs: getDirs(npmLockDirs),\n    pnpmLockFileDirs: getDirs(pnpmLockFileDirs),\n  };\n}\n\nexport async function writeExistingFiles(\n  config: PostUpdateConfig<NpmManagerData>,\n  packageFiles: AdditionalPackageFiles,\n  originalNpmrcFiles = new Map<string, string>(),\n): Promise<void> {\n  if (!packageFiles.npm) {\n    return;\n  }\n  const npmFiles = packageFiles.npm;\n  logger.debug(\n    { packageFiles: npmFiles.map((n) => n.packageFile) },\n    'Writing package.json files',\n  );\n  for (const packageFile of npmFiles) {\n    /* v8 ignore if -- TODO: add test #40625 */\n    if (!packageFile.managerData) {\n      continue;\n    }\n    // TODO #22198\n    const basedir = upath.dirname(packageFile.packageFile!);\n    const npmrc = packageFile.npmrc;\n    const npmrcFilename = upath.join(basedir, '.npmrc');\n    // Write out the file unless the npmrc came from the workspace\n    // npmrcFilename will be set whenever the file was read from disk during extract\n    const isNpmrcOwnFile =\n      npmrcFilename === packageFile.managerData.npmrcFileName ||\n      !packageFile.managerData.npmrcFileName;\n    if (isString(npmrc) && isNpmrcOwnFile) {\n      try {\n        if (!originalNpmrcFiles.has(npmrcFilename)) {\n          const originalNpmrc = await readLocalFile(npmrcFilename, 'utf8');\n          if (isString(originalNpmrc)) {\n            originalNpmrcFiles.set(npmrcFilename, originalNpmrc);\n          }\n        }\n        await writeLocalFile(npmrcFilename, npmrc.replace(regEx(/\\n?$/), '\\n'));\n      } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n        logger.warn({ npmrcFilename, err }, 'Error writing .npmrc');\n      }\n    }\n    const npmLock = packageFile.managerData.npmLock;\n    if (npmLock) {\n      const npmLockPath = npmLock;\n      logger.debug(`Writing ${npmLock}`);\n      let existingNpmLock: string;\n      try {\n        existingNpmLock = (await getFile(npmLock)) ?? '';\n      } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n        logger.warn({ err }, 'Error reading npm lock file');\n        existingNpmLock = '';\n      }\n      const { detectedIndent, lockFileParsed: npmLockParsed } =\n        parseLockFile(existingNpmLock);\n      if (npmLockParsed) {\n        const packageNames =\n          'packages' in npmLockParsed\n            ? Object.keys(npmLockParsed.packages)\n            : [];\n        const widens: string[] = [];\n        let lockFileChanged = false;\n        for (const upgrade of config.upgrades) {\n          if (upgrade.lockFiles && !upgrade.lockFiles.includes(npmLock)) {\n            continue;\n          }\n          if (!upgrade.managerData) {\n            continue;\n          }\n          if (\n            upgrade.rangeStrategy === 'widen' &&\n            upgrade.managerData.npmLock === npmLock\n          ) {\n            // TODO #22198\n            widens.push(upgrade.depName!);\n          }\n          const { depName } = upgrade;\n          const oldVersion = upgrade.lockedVersion ?? upgrade.currentVersion;\n          if ('packages' in npmLockParsed) {\n            for (const packageName of packageNames) {\n              if (\n                packageName === `node_modules/${depName}` ||\n                packageName.startsWith(`node_modules/${depName}/`)\n              ) {\n                logger.trace({ packageName }, 'Massaging out package name');\n                lockFileChanged = true;\n                delete npmLockParsed.packages[packageName];\n                continue;\n              }\n              if (\n                !depName ||\n                !oldVersion ||\n                // Workspace entries (e.g. `packages/app`) and the root entry\n                // are link targets: `node_modules/<name>` points at them with\n                // `link: true`, so deleting one breaks npm with EMISSINGTARGET.\n                !packageName.startsWith('node_modules/')\n              ) {\n                continue;\n              }\n              // Lockstep monorepo siblings (e.g. vue -> @vue/server-renderer)\n              // pin the updated dep to its exact old version. Left in the lock\n              // they cannot resolve against the new version and npm fails with\n              // ERESOLVE, so massage them out too and let npm re-resolve them.\n              const entry = npmLockParsed.packages[packageName];\n              const pinned =\n                entry?.peerDependencies?.[depName] === oldVersion ||\n                entry?.dependencies?.[depName] === oldVersion ||\n                entry?.optionalDependencies?.[depName] === oldVersion;\n              if (pinned) {\n                logger.trace(\n                  { packageName, depName, oldVersion },\n                  'Massaging out lockstep sibling',\n                );\n                lockFileChanged = true;\n                delete npmLockParsed.packages[packageName];\n              }\n            }\n          }\n        }\n        // v8 ignore else -- TODO: add test #40625\n        if (widens.length) {\n          logger.debug(\n            `Removing ${String(widens)} from ${npmLock} to force an update`,\n          );\n          lockFileChanged = true;\n          try {\n            if ('dependencies' in npmLockParsed && npmLockParsed.dependencies) {\n              widens.forEach((depName) => {\n                // TODO #22198\n                delete npmLockParsed.dependencies![depName];\n              });\n            }\n          } catch /* v8 ignore next -- TODO: add test #40625 */ {\n            logger.warn(\n              { npmLock },\n              'Error massaging package-lock.json for widen',\n            );\n          }\n        }\n        // v8 ignore else -- TODO: add test #40625\n        if (lockFileChanged) {\n          logger.debug('Massaging npm lock file before writing to disk');\n          existingNpmLock = composeLockFile(npmLockParsed, detectedIndent);\n        }\n        await writeLocalFile(npmLockPath, existingNpmLock);\n      }\n    }\n  }\n}\n\nasync function restoreNpmrcFiles(\n  originalNpmrcFiles: Map<string, string>,\n): Promise<void> {\n  for (const [npmrcFilename, originalNpmrc] of originalNpmrcFiles) {\n    try {\n      await writeLocalFile(npmrcFilename, originalNpmrc);\n    } catch (err) {\n      logger.warn({ npmrcFilename, err }, 'Error restoring .npmrc');\n    }\n  }\n}\n\nexport async function writeUpdatedPackageFiles(\n  config: PostUpdateConfig,\n): Promise<void> {\n  logger.trace({ config }, 'writeUpdatedPackageFiles');\n  logger.debug('Writing any updated package files');\n  if (!config.updatedPackageFiles) {\n    logger.debug('No files found');\n    return;\n  }\n  // prefer artifact content when it updates the same file (e.g. pnpm-workspace.yaml)\n  const artifactContents = new Map<string, string>();\n  if (config.updatedArtifacts) {\n    for (const artifact of config.updatedArtifacts) {\n      if (artifact.type === 'addition' && artifact.contents) {\n        artifactContents.set(artifact.path, artifact.contents.toString());\n      }\n    }\n  }\n  const supportedLockFiles = ['package-lock.json', 'yarn.lock'];\n  for (const packageFile of config.updatedPackageFiles) {\n    if (packageFile.type !== 'addition') {\n      continue;\n    }\n    if (\n      supportedLockFiles.some((fileName) => packageFile.path.endsWith(fileName))\n    ) {\n      logger.debug(`Writing lock file: ${packageFile.path}`);\n      // TODO #22198\n\n      await writeLocalFile(packageFile.path, packageFile.contents!);\n      continue;\n    }\n    if (!(\n      packageFile.path.endsWith('package.json') ||\n      packageFile.path.endsWith('pnpm-workspace.yaml') ||\n      packageFile.path.endsWith('.yarnrc.yml')\n    )) {\n      continue;\n    }\n    const contents =\n      artifactContents.get(packageFile.path) ?? packageFile.contents!;\n    logger.debug(`Writing ${packageFile.path}`);\n    await writeLocalFile(packageFile.path, contents);\n  }\n}\n\n/* v8 ignore next -- needs test */\nasync function updateYarnOffline(\n  lockFileDir: string,\n  updatedArtifacts: FileChange[],\n): Promise<void> {\n  try {\n    const resolvedPaths: string[] = [];\n    const yarnrcYml = await getFile(upath.join(lockFileDir, '.yarnrc.yml'));\n    const yarnrc = await getFile(upath.join(lockFileDir, '.yarnrc'));\n\n    // As .yarnrc.yml overrides .yarnrc in Yarn 1 (https://git.io/JUcco)\n    // both files may exist, so check for .yarnrc.yml first\n    if (yarnrcYml) {\n      // Yarn 2 (offline cache and zero-installs)\n      const paths = getZeroInstallPaths(yarnrcYml);\n      resolvedPaths.push(...paths.map((p) => upath.join(lockFileDir, p)));\n    } else if (yarnrc) {\n      // Yarn 1 (offline mirror)\n      const mirrorLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-offline-mirror '));\n      if (mirrorLine) {\n        const mirrorPath = ensureTrailingSlash(\n          mirrorLine.split(' ')[1].replace(regEx(/\"/g), ''),\n        );\n        resolvedPaths.push(upath.join(lockFileDir, mirrorPath));\n      }\n    }\n    logger.debug({ resolvedPaths }, 'updateYarnOffline resolvedPaths');\n\n    if (resolvedPaths.length) {\n      const status = await getRepoStatus();\n      for (const f of status.modified.concat(status.not_added)) {\n        if (resolvedPaths.some((p) => f.startsWith(p))) {\n          updatedArtifacts.push({\n            type: 'addition',\n            path: f,\n            contents: await readLocalFile(f),\n          });\n        }\n      }\n      for (const f of status.deleted || []) {\n        if (resolvedPaths.some((p) => f.startsWith(p))) {\n          updatedArtifacts.push({ type: 'deletion', path: f });\n        }\n      }\n    }\n  } catch (err) {\n    logger.error({ err }, 'Error updating yarn offline packages');\n  }\n}\n\n// TODO: move to ./yarn.ts\n// exported for testing\nexport async function updateYarnBinary(\n  lockFileDir: string,\n  updatedArtifacts: FileChange[],\n  existingYarnrcYmlContent: string | undefined | null,\n): Promise<string | undefined | null> {\n  let yarnrcYml = existingYarnrcYmlContent;\n  try {\n    const yarnrcYmlFilename = upath.join(lockFileDir, '.yarnrc.yml');\n    if (isNullOrUndefined(yarnrcYml)) {\n      yarnrcYml = (await getFile(yarnrcYmlFilename)) ?? undefined;\n    }\n    const newYarnrcYml = await readLocalFile(yarnrcYmlFilename, 'utf8');\n    if (!isString(yarnrcYml) || !isString(newYarnrcYml)) {\n      return existingYarnrcYmlContent;\n    }\n\n    // TODO: use schema (#9610)\n    const oldYarnPath = parseSingleYaml<YarnRcYmlFile>(yarnrcYml)?.yarnPath;\n    const newYarnPath = parseSingleYaml<YarnRcYmlFile>(newYarnrcYml)?.yarnPath;\n    if (\n      !isNonEmptyStringAndNotWhitespace(oldYarnPath) ||\n      !isNonEmptyStringAndNotWhitespace(newYarnPath)\n    ) {\n      return existingYarnrcYmlContent;\n    }\n\n    const oldYarnFullPath = upath.join(lockFileDir, oldYarnPath);\n    const newYarnFullPath = upath.join(lockFileDir, newYarnPath);\n    logger.debug({ oldYarnPath, newYarnPath }, 'Found updated Yarn binary');\n\n    yarnrcYml = yarnrcYml.replace(oldYarnPath, newYarnPath);\n    updatedArtifacts.push(\n      {\n        type: 'addition',\n        path: yarnrcYmlFilename,\n        contents: yarnrcYml,\n      },\n      {\n        type: 'deletion',\n        path: oldYarnFullPath,\n      },\n      {\n        type: 'addition',\n        path: newYarnFullPath,\n        contents: await readLocalFile(newYarnFullPath, 'utf8'),\n        isExecutable: true,\n      },\n    );\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.error({ err }, 'Error updating Yarn binary');\n  }\n  return existingYarnrcYmlContent && yarnrcYml;\n}\n\nasync function getAdditionalFilesInner(\n  config: PostUpdateConfig<NpmManagerData>,\n  packageFiles: AdditionalPackageFiles,\n  originalNpmrcFiles: Map<string, string>,\n): Promise<WriteExistingFilesResult> {\n  logger.trace({ config }, 'getAdditionalFiles');\n  const artifactErrors: ArtifactError[] = [];\n  const artifactNotices: ArtifactNotice[] = [];\n  const updatedArtifacts: FileChange[] = [];\n  if (!packageFiles.npm?.length) {\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  if (config.skipArtifactsUpdate) {\n    logger.debug('Skipping lock file generation');\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  logger.debug('Getting updated lock files');\n  if (config.isLockFileMaintenance && config.reuseExistingBranch) {\n    const branchExists = await scm.branchExists(config.branchName);\n    if (branchExists) {\n      logger.debug('Skipping lockFileMaintenance update');\n      return { artifactErrors, artifactNotices, updatedArtifacts };\n    }\n  }\n  const dirs = determineLockFileDirs(config, packageFiles);\n  logger.trace({ dirs }, 'lock file dirs');\n  await writeExistingFiles(config, packageFiles, originalNpmrcFiles);\n  await writeUpdatedPackageFiles(config);\n\n  const { additionalNpmrcContent, additionalYarnRcYml } = processHostRules();\n\n  // This isn't passed directly to the child process, so no need to filter.\n  // But pass custom env and user vars.\n  const env = {\n    ...getEnv(),\n    NPM_CONFIG_CACHE: await ensureCacheDir(NPM_CACHE_DIR),\n    YARN_CACHE_FOLDER: await ensureCacheDir(YARN_CACHE_DIR),\n    YARN_GLOBAL_FOLDER: await ensureCacheDir(YARN_GLOBAL_DIR),\n    npm_config_store: await ensureCacheDir(PNPM_CACHE_BASE_DIR),\n    NODE_ENV: 'dev',\n  };\n\n  let token: string | undefined;\n  try {\n    ({ token } = hostRules.find({\n      hostType: 'github',\n      url: 'https://api.github.com/',\n    }));\n    // v8 ignore next -- TODO: add test #40625\n    token = token ? `${token}@` : token;\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.warn({ err }, 'Error getting token for packageFile');\n  }\n  const tokenRe = regEx(`${token ?? ''}`, 'g', false);\n  for (const npmLock of dirs.npmLockDirs) {\n    const lockFileDir = upath.dirname(npmLock);\n    await withNpmrcHostRules(\n      lockFileDir,\n      additionalNpmrcContent,\n      async (npmrcContent) => {\n        const fileName = upath.basename(npmLock);\n        logger.debug(`Generating ${fileName} for ${lockFileDir}`);\n        const upgrades = config.upgrades.filter(\n          (upgrade) => upgrade.managerData?.npmLock === npmLock,\n        );\n        const res = await npm.generateLockFile(\n          lockFileDir,\n          env,\n          fileName,\n          config,\n          upgrades,\n          npmrcContent,\n        );\n        if (res.error) {\n          /* v8 ignore next -- needs test */\n          if (res.stderr?.includes('No matching version found for')) {\n            for (const upgrade of config.upgrades) {\n              if (\n                res.stderr.includes(\n                  `No matching version found for ${upgrade.depName}`,\n                )\n              ) {\n                logger.debug(\n                  { dependency: upgrade.depName, type: 'npm' },\n                  'lock file failed for the dependency being updated - skipping branch creation',\n                );\n                const err = new Error(\n                  'lock file failed for the dependency being updated - skipping branch creation',\n                );\n                throw new ExternalHostError(err, NpmDatasource.id);\n              }\n            }\n          }\n\n          artifactErrors.push({\n            fileName: npmLock,\n            stderr: res.stderr,\n          });\n        } else if (res.lockFile) {\n          if (res.minimumReleaseAgeNotice) {\n            artifactNotices.push({\n              file: npmLock,\n              message: res.minimumReleaseAgeNotice,\n            });\n          }\n          if (res.beforeFallback) {\n            const message =\n              'npm `--before` could not be enforced because existing locked packages were published after the `minimumReleaseAge` cutoff. This will resolve after the next lock file maintenance run.';\n            logger.warn({ npmLock }, message);\n            artifactNotices.push({ file: npmLock, message });\n          }\n          const existingContent = await getFile(\n            npmLock,\n            config.reuseExistingBranch ? config.branchName : config.baseBranch,\n          );\n          if (res.lockFile === existingContent) {\n            logger.debug(`${npmLock} hasn't changed`);\n          } else {\n            logger.debug(`${npmLock} needs updating`);\n            updatedArtifacts.push({\n              type: 'addition',\n              path: npmLock,\n              // TODO: can this be undefined? (#22198)\n\n              contents: res.lockFile.replace(tokenRe, ''),\n            });\n          }\n        }\n      },\n    );\n  }\n\n  for (const yarnLock of dirs.yarnLockDirs) {\n    const lockFileDir = upath.dirname(yarnLock);\n    let yarnRcYmlFilename: string | undefined;\n    let existingYarnrcYmlContent: string | undefined | null;\n    await withNpmrcHostRules(lockFileDir, additionalNpmrcContent, async () => {\n      if (additionalYarnRcYml) {\n        yarnRcYmlFilename = getSiblingFileName(yarnLock, '.yarnrc.yml');\n        existingYarnrcYmlContent = await readLocalFile(\n          yarnRcYmlFilename,\n          'utf8',\n        );\n        // v8 ignore else -- TODO: add test #40625\n        if (existingYarnrcYmlContent) {\n          try {\n            // TODO: use schema (#9610)\n            const existingYarnrRcYml = parseSingleYaml<Record<string, unknown>>(\n              existingYarnrcYmlContent,\n            );\n\n            const updatedYarnYrcYml = deepmerge(\n              existingYarnrRcYml,\n              yarn.fuzzyMatchAdditionalYarnrcYml(\n                additionalYarnRcYml,\n                existingYarnrRcYml,\n              ),\n            );\n\n            await writeLocalFile(yarnRcYmlFilename, dump(updatedYarnYrcYml));\n            logger.debug('Added authentication to .yarnrc.yml');\n          } catch (err) {\n            logger.warn({ err }, 'Error appending .yarnrc.yml content');\n          }\n        }\n      }\n      logger.debug(`Generating yarn.lock for ${lockFileDir}`);\n      const lockFileName = upath.join(lockFileDir, 'yarn.lock');\n      const upgrades = config.upgrades.filter(\n        (upgrade) => upgrade.managerData?.yarnLock === yarnLock,\n      );\n      const res = await yarn.generateLockFile(\n        lockFileDir,\n        env,\n        config,\n        upgrades,\n      );\n      if (res.error) {\n        /* v8 ignore next -- needs test */\n        if (res.stderr?.includes(`Couldn't find any versions for`)) {\n          for (const upgrade of config.upgrades) {\n            if (\n              res.stderr.includes(\n                `Couldn't find any versions for \\\\\"${upgrade.depName}\\\\\"`,\n              )\n            ) {\n              logger.debug(\n                { dependency: upgrade.depName, type: 'yarn' },\n                'lock file failed for the dependency being updated - skipping branch creation',\n              );\n              throw new ExternalHostError(\n                new Error(\n                  'lock file failed for the dependency being updated - skipping branch creation',\n                ),\n                NpmDatasource.id,\n              );\n            }\n          }\n        }\n\n        artifactErrors.push({\n          fileName: yarnLock,\n          stderr: artifactErrorMessageFromExecError(res, ''),\n        });\n      } else {\n        const existingContent = await getFile(\n          lockFileName,\n          config.reuseExistingBranch ? config.branchName : config.baseBranch,\n        );\n        if (res.lockFile === existingContent) {\n          logger.debug(\"yarn.lock hasn't changed\");\n        } else {\n          logger.debug('yarn.lock needs updating');\n          updatedArtifacts.push({\n            type: 'addition',\n            path: lockFileName,\n            // TODO #22198\n            contents: res.lockFile!,\n          });\n          await updateYarnOffline(lockFileDir, updatedArtifacts);\n        }\n\n        /* v8 ignore next -- needs test */\n        if (upgrades.some(yarn.isYarnUpdate)) {\n          existingYarnrcYmlContent = await updateYarnBinary(\n            lockFileDir,\n            updatedArtifacts,\n            existingYarnrcYmlContent,\n          );\n        }\n      }\n    });\n    /* v8 ignore next -- needs test */\n    if (existingYarnrcYmlContent) {\n      // TODO #22198\n      await writeLocalFile(yarnRcYmlFilename!, existingYarnrcYmlContent);\n    }\n  }\n\n  for (const pnpmLockFile of dirs.pnpmLockFileDirs) {\n    const lockFileDir = upath.dirname(pnpmLockFile);\n    await withNpmrcHostRules(\n      lockFileDir,\n      additionalNpmrcContent,\n      async (npmrcContent) => {\n        logger.debug(`Generating pnpm-lock.yaml for ${lockFileDir}`);\n        const upgrades = config.upgrades.filter(\n          (upgrade) => upgrade.managerData?.pnpmLockFile === pnpmLockFile,\n        );\n        const res = await pnpm.generateLockFile(\n          lockFileDir,\n          env,\n          config,\n          upgrades,\n          npmrcContent,\n        );\n        // Renovate shows artifact notices only if there are no artifact\n        // errors, so a failed pnpm run reports the notice with its error\n        if (res.minimumReleaseAgeNotice && !res.error) {\n          artifactNotices.push({\n            file: pnpmLockFile,\n            message: res.minimumReleaseAgeNotice,\n          });\n        }\n        if (res.error) {\n          /* v8 ignore next -- needs test */\n          if (res.stdout?.includes(`No compatible version found:`)) {\n            for (const upgrade of config.upgrades) {\n              if (\n                res.stdout.includes(\n                  `No compatible version found: ${upgrade.depName}`,\n                )\n              ) {\n                logger.debug(\n                  { dependency: upgrade.depName, type: 'pnpm' },\n                  'lock file failed for the dependency being updated - skipping branch creation',\n                );\n                throw new ExternalHostError(\n                  Error(\n                    'lock file failed for the dependency being updated - skipping branch creation',\n                  ),\n                  NpmDatasource.id,\n                );\n              }\n            }\n          }\n\n          const stderr = artifactErrorMessageFromExecError(res, '');\n          artifactErrors.push({\n            fileName: pnpmLockFile,\n            stderr: res.minimumReleaseAgeNotice\n              ? `${res.minimumReleaseAgeNotice}\\n\\n${stderr}`\n              : stderr,\n          });\n        } else {\n          const existingContent = await getFile(\n            pnpmLockFile,\n            config.reuseExistingBranch ? config.branchName : config.baseBranch,\n          );\n          if (res.lockFile === existingContent) {\n            logger.debug(\"pnpm-lock.yaml hasn't changed\");\n          } else {\n            logger.debug('pnpm-lock.yaml needs updating');\n            updatedArtifacts.push({\n              type: 'addition',\n              path: pnpmLockFile,\n              // TODO: can be undefined? (#22198)\n              contents: res.lockFile!,\n            });\n          }\n        }\n      },\n    );\n  }\n\n  return { artifactErrors, artifactNotices, updatedArtifacts };\n}\n\nexport async function getAdditionalFiles(\n  config: PostUpdateConfig,\n  packageFiles: AdditionalPackageFiles,\n): Promise<WriteExistingFilesResult> {\n  const originalNpmrcFiles = new Map<string, string>();\n  try {\n    return await getAdditionalFilesInner(\n      // The branch config carries the manager data of every upgrade untyped; the npm post-update only reads the optional npm fields of it.\n      config as PostUpdateConfig<NpmManagerData>,\n      packageFiles,\n      originalNpmrcFiles,\n    );\n  } finally {\n    await restoreNpmrcFiles(originalNpmrcFiles);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA0DA,SAAS,QAAQ,KAA8C;CAC7D,OAAO,MAAM,KAAK,IAAI,IAAI,IAAI,OAAO,QAAQ,CAAC,CAAC;AACjD;AAEA,SAAgB,sBACd,QACA,cAC6B;CAC7B,MAAM,cAAsC,CAAC;CAC7C,MAAM,eAAuC,CAAC;CAC9C,MAAM,mBAA2C,CAAC;CAElD,KAAK,MAAM,WAAW,OAAO;;CAE3B,IACE,QAAQ,eAAe,yBACvB,QAAQ,kBAAkB,QAC1B,QAAQ,qBAAqB,MAC7B;EACA,aAAa,KAAK,QAAQ,aAAa,QAAQ;EAC/C,YAAY,KAAK,QAAQ,aAAa,OAAO;EAC7C,iBAAiB,KAAK,QAAQ,aAAa,YAAY;CACzD;CAGF,IACE,OAAO,SAAS,OACb,YACC,QAAQ,eAAe,yBACvB,QAAQ,gBACZ,GAEA,OAAO;EACL,cAAc,QAAQ,YAAY;EAClC,aAAa,QAAQ,WAAW;EAChC,kBAAkB,QAAQ,gBAAgB;CAC5C;CAGF,SAAS,eACP,UAC2C;EAC3C,OAAO,MAAM,4BAA4B,UAAU;EAEnD,KAAK,MAAM,eAAe,aAAa,KAAM;GAC3C,IAAI,YAAY,gBAAgB,UAAU;IACxC,OAAO,MAAM,EAAE,YAAY,GAAG,mBAAmB;IACjD,OAAO;GACT;GACA,OAAO,MAAM,UAAU;EACzB;EACA,OAAO,CAAC;CACV;CAGA,KAAK,MAAM,KAAK,OAAO,qBAAsB;EAC3C,OAAO,MAAM,YAAY,OAAO,EAAE,IAAI,EAAE,gBAAgB;EACxD,MAAM,cAAc,eAAe,EAAE,IAAI;;EAEzC,IAAI,CAAC,YAAY,aACf;EAGF,aAAa,KAAK,YAAY,YAAY,QAAQ;EAClD,YAAY,KAAK,YAAY,YAAY,OAAO;EAChD,iBAAiB,KAAK,YAAY,YAAY,YAAY;CAC5D;CAEA,OAAO;EACL,cAAc,QAAQ,YAAY;EAClC,aAAa,QAAQ,WAAW;EAChC,kBAAkB,QAAQ,gBAAgB;CAC5C;AACF;AAEA,eAAsB,mBACpB,QACA,cACA,qCAAqB,IAAI,IAAoB,GAC9B;CACf,IAAI,CAAC,aAAa,KAChB;CAEF,MAAM,WAAW,aAAa;CAC9B,OAAO,MACL,EAAE,cAAc,SAAS,KAAK,MAAM,EAAE,WAAW,EAAE,GACnD,4BACF;CACA,KAAK,MAAM,eAAe,UAAU;;EAElC,IAAI,CAAC,YAAY,aACf;EAGF,MAAM,UAAU,MAAM,QAAQ,YAAY,WAAY;EACtD,MAAM,QAAQ,YAAY;EAC1B,MAAM,gBAAgB,MAAM,KAAK,SAAS,QAAQ;EAGlD,MAAM,iBACJ,kBAAkB,YAAY,YAAY,iBAC1C,CAAC,YAAY,YAAY;EAC3B,IAAI,SAAS,KAAK,KAAK,gBACrB,IAAI;GACF,IAAI,CAAC,mBAAmB,IAAI,aAAa,GAAG;IAC1C,MAAM,gBAAgB,MAAM,cAAc,eAAe,MAAM;IAC/D,IAAI,SAAS,aAAa,GACxB,mBAAmB,IAAI,eAAe,aAAa;GAEvD;GACA,MAAM,eAAe,eAAe,MAAM,QAAQ,MAAM,MAAM,GAAG,IAAI,CAAC;EACxE,SAAS,mDAAmD;GAC1D,OAAO,KAAK;IAAE;IAAe;GAAI,GAAG,sBAAsB;EAC5D;EAEF,MAAM,UAAU,YAAY,YAAY;EACxC,IAAI,SAAS;GACX,MAAM,cAAc;GACpB,OAAO,MAAM,WAAW,SAAS;GACjC,IAAI;GACJ,IAAI;IACF,kBAAmB,MAAM,QAAQ,OAAO,KAAM;GAChD,SAAS,mDAAmD;IAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,6BAA6B;IAClD,kBAAkB;GACpB;GACA,MAAM,EAAE,gBAAgB,gBAAgB,kBACtC,cAAc,eAAe;GAC/B,IAAI,eAAe;IACjB,MAAM,eACJ,cAAc,gBACV,OAAO,KAAK,cAAc,QAAQ,IAClC,CAAC;IACP,MAAM,SAAmB,CAAC;IAC1B,IAAI,kBAAkB;IACtB,KAAK,MAAM,WAAW,OAAO,UAAU;KACrC,IAAI,QAAQ,aAAa,CAAC,QAAQ,UAAU,SAAS,OAAO,GAC1D;KAEF,IAAI,CAAC,QAAQ,aACX;KAEF,IACE,QAAQ,kBAAkB,WAC1B,QAAQ,YAAY,YAAY,SAGhC,OAAO,KAAK,QAAQ,OAAQ;KAE9B,MAAM,EAAE,YAAY;KACpB,MAAM,aAAa,QAAQ,iBAAiB,QAAQ;KACpD,IAAI,cAAc,eAChB,KAAK,MAAM,eAAe,cAAc;MACtC,IACE,gBAAgB,gBAAgB,aAChC,YAAY,WAAW,gBAAgB,QAAQ,EAAE,GACjD;OACA,OAAO,MAAM,EAAE,YAAY,GAAG,4BAA4B;OAC1D,kBAAkB;OAClB,OAAO,cAAc,SAAS;OAC9B;MACF;MACA,IACE,CAAC,WACD,CAAC,cAID,CAAC,YAAY,WAAW,eAAe,GAEvC;MAMF,MAAM,QAAQ,cAAc,SAAS;MAKrC,IAHE,OAAO,mBAAmB,aAAa,cACvC,OAAO,eAAe,aAAa,cACnC,OAAO,uBAAuB,aAAa,YACjC;OACV,OAAO,MACL;QAAE;QAAa;QAAS;OAAW,GACnC,gCACF;OACA,kBAAkB;OAClB,OAAO,cAAc,SAAS;MAChC;KACF;IAEJ;;IAEA,IAAI,OAAO,QAAQ;KACjB,OAAO,MACL,YAAY,OAAO,MAAM,EAAE,QAAQ,QAAQ,oBAC7C;KACA,kBAAkB;KAClB,IAAI;MACF,IAAI,kBAAkB,iBAAiB,cAAc,cACnD,OAAO,SAAS,YAAY;OAE1B,OAAO,cAAc,aAAc;MACrC,CAAC;KAEL,sDAAsD;MACpD,OAAO,KACL,EAAE,QAAQ,GACV,6CACF;KACF;IACF;;IAEA,IAAI,iBAAiB;KACnB,OAAO,MAAM,gDAAgD;KAC7D,kBAAkB,gBAAgB,eAAe,cAAc;IACjE;IACA,MAAM,eAAe,aAAa,eAAe;GACnD;EACF;CACF;AACF;AAEA,eAAe,kBACb,oBACe;CACf,KAAK,MAAM,CAAC,eAAe,kBAAkB,oBAC3C,IAAI;EACF,MAAM,eAAe,eAAe,aAAa;CACnD,SAAS,KAAK;EACZ,OAAO,KAAK;GAAE;GAAe;EAAI,GAAG,wBAAwB;CAC9D;AAEJ;AAEA,eAAsB,yBACpB,QACe;CACf,OAAO,MAAM,EAAE,OAAO,GAAG,0BAA0B;CACnD,OAAO,MAAM,mCAAmC;CAChD,IAAI,CAAC,OAAO,qBAAqB;EAC/B,OAAO,MAAM,gBAAgB;EAC7B;CACF;CAEA,MAAM,mCAAmB,IAAI,IAAoB;CACjD,IAAI,OAAO,kBACJ;OAAA,MAAM,YAAY,OAAO,kBAC5B,IAAI,SAAS,SAAS,cAAc,SAAS,UAC3C,iBAAiB,IAAI,SAAS,MAAM,SAAS,SAAS,SAAS,CAAC;CAAA;CAItE,MAAM,qBAAqB,CAAC,qBAAqB,WAAW;CAC5D,KAAK,MAAM,eAAe,OAAO,qBAAqB;EACpD,IAAI,YAAY,SAAS,YACvB;EAEF,IACE,mBAAmB,MAAM,aAAa,YAAY,KAAK,SAAS,QAAQ,CAAC,GACzE;GACA,OAAO,MAAM,sBAAsB,YAAY,MAAM;GAGrD,MAAM,eAAe,YAAY,MAAM,YAAY,QAAS;GAC5D;EACF;EACA,IAAI,EACF,YAAY,KAAK,SAAS,cAAc,KACxC,YAAY,KAAK,SAAS,qBAAqB,KAC/C,YAAY,KAAK,SAAS,aAAa,IAEvC;EAEF,MAAM,WACJ,iBAAiB,IAAI,YAAY,IAAI,KAAK,YAAY;EACxD,OAAO,MAAM,WAAW,YAAY,MAAM;EAC1C,MAAM,eAAe,YAAY,MAAM,QAAQ;CACjD;AACF;;AAGA,eAAe,kBACb,aACA,kBACe;CACf,IAAI;EACF,MAAM,gBAA0B,CAAC;EACjC,MAAM,YAAY,MAAM,QAAQ,MAAM,KAAK,aAAa,aAAa,CAAC;EACtE,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,aAAa,SAAS,CAAC;EAI/D,IAAI,WAAW;GAEb,MAAM,QAAQ,oBAAoB,SAAS;GAC3C,cAAc,KAAK,GAAG,MAAM,KAAK,MAAM,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC;EACpE,OAAO,IAAI,QAAQ;GAEjB,MAAM,aAAa,OAChB,MAAM,YAAY,CAAC,CACnB,MAAM,SAAS,KAAK,WAAW,sBAAsB,CAAC;GACzD,IAAI,YAAY;IACd,MAAM,aAAa,oBACjB,WAAW,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,MAAM,IAAI,GAAG,EAAE,CAClD;IACA,cAAc,KAAK,MAAM,KAAK,aAAa,UAAU,CAAC;GACxD;EACF;EACA,OAAO,MAAM,EAAE,cAAc,GAAG,iCAAiC;EAEjE,IAAI,cAAc,QAAQ;GACxB,MAAM,SAAS,MAAM,cAAc;GACnC,KAAK,MAAM,KAAK,OAAO,SAAS,OAAO,OAAO,SAAS,GACrD,IAAI,cAAc,MAAM,MAAM,EAAE,WAAW,CAAC,CAAC,GAC3C,iBAAiB,KAAK;IACpB,MAAM;IACN,MAAM;IACN,UAAU,MAAM,cAAc,CAAC;GACjC,CAAC;GAGL,KAAK,MAAM,KAAK,OAAO,WAAW,CAAC,GACjC,IAAI,cAAc,MAAM,MAAM,EAAE,WAAW,CAAC,CAAC,GAC3C,iBAAiB,KAAK;IAAE,MAAM;IAAY,MAAM;GAAE,CAAC;EAGzD;CACF,SAAS,KAAK;EACZ,OAAO,MAAM,EAAE,IAAI,GAAG,sCAAsC;CAC9D;AACF;AAIA,eAAsB,iBACpB,aACA,kBACA,0BACoC;CACpC,IAAI,YAAY;CAChB,IAAI;EACF,MAAM,oBAAoB,MAAM,KAAK,aAAa,aAAa;EAC/D,IAAI,kBAAkB,SAAS,GAC7B,YAAa,MAAM,QAAQ,iBAAiB,KAAM,KAAA;EAEpD,MAAM,eAAe,MAAM,cAAc,mBAAmB,MAAM;EAClE,IAAI,CAAC,SAAS,SAAS,KAAK,CAAC,SAAS,YAAY,GAChD,OAAO;EAIT,MAAM,cAAc,gBAA+B,SAAS,CAAC,EAAE;EAC/D,MAAM,cAAc,gBAA+B,YAAY,CAAC,EAAE;EAClE,IACE,CAAC,iCAAiC,WAAW,KAC7C,CAAC,iCAAiC,WAAW,GAE7C,OAAO;EAGT,MAAM,kBAAkB,MAAM,KAAK,aAAa,WAAW;EAC3D,MAAM,kBAAkB,MAAM,KAAK,aAAa,WAAW;EAC3D,OAAO,MAAM;GAAE;GAAa;EAAY,GAAG,2BAA2B;EAEtE,YAAY,UAAU,QAAQ,aAAa,WAAW;EACtD,iBAAiB,KACf;GACE,MAAM;GACN,MAAM;GACN,UAAU;EACZ,GACA;GACE,MAAM;GACN,MAAM;EACR,GACA;GACE,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,iBAAiB,MAAM;GACrD,cAAc;EAChB,CACF;CACF,SAAS,mDAAmD;EAC1D,OAAO,MAAM,EAAE,IAAI,GAAG,4BAA4B;CACpD;CACA,OAAO,4BAA4B;AACrC;AAEA,eAAe,wBACb,QACA,cACA,oBACmC;CACnC,OAAO,MAAM,EAAE,OAAO,GAAG,oBAAoB;CAC7C,MAAM,iBAAkC,CAAC;CACzC,MAAM,kBAAoC,CAAC;CAC3C,MAAM,mBAAiC,CAAC;CACxC,IAAI,CAAC,aAAa,KAAK,QACrB,OAAO;EAAE;EAAgB;EAAiB;CAAiB;CAE7D,IAAI,OAAO,qBAAqB;EAC9B,OAAO,MAAM,+BAA+B;EAC5C,OAAO;GAAE;GAAgB;GAAiB;EAAiB;CAC7D;CACA,OAAO,MAAM,4BAA4B;CACzC,IAAI,OAAO,yBAAyB,OAAO,qBAErC;MAAA,MADuB,IAAI,aAAa,OAAO,UAAU,GAC3C;GAChB,OAAO,MAAM,qCAAqC;GAClD,OAAO;IAAE;IAAgB;IAAiB;GAAiB;EAC7D;;CAEF,MAAM,OAAO,sBAAsB,QAAQ,YAAY;CACvD,OAAO,MAAM,EAAE,KAAK,GAAG,gBAAgB;CACvC,MAAM,mBAAmB,QAAQ,cAAc,kBAAkB;CACjE,MAAM,yBAAyB,MAAM;CAErC,MAAM,EAAE,wBAAwB,wBAAwB,iBAAiB;CAIzE,MAAM,MAAM;EACV,GAAG,OAAO;EACV,kBAAkB,MAAM,eAAA,KAA4B;EACpD,mBAAmB,MAAM,eAAe,cAAc;EACtD,oBAAoB,MAAM,eAAe,eAAe;EACxD,kBAAkB,MAAM,eAAe,mBAAmB;EAC1D,UAAU;CACZ;CAEA,IAAI;CACJ,IAAI;EACF,CAAC,CAAE,SAAUA,KAAe;GAC1B,UAAU;GACV,KAAK;EACP,CAAC;;EAED,QAAQ,QAAQ,GAAG,MAAM,KAAK;CAChC,SAAS,mDAAmD;EAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,qCAAqC;CAC5D;CACA,MAAM,UAAU,MAAM,GAAG,SAAS,MAAM,KAAK,KAAK;CAClD,KAAK,MAAM,WAAW,KAAK,aAAa;EACtC,MAAM,cAAc,MAAM,QAAQ,OAAO;EACzC,MAAM,mBACJ,aACA,wBACA,OAAO,iBAAiB;GACtB,MAAM,WAAW,MAAM,SAAS,OAAO;GACvC,OAAO,MAAM,cAAc,SAAS,OAAO,aAAa;GACxD,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,YAAY,OAChD;GACA,MAAM,MAAM,MAAMC,iBAChB,aACA,KACA,UACA,QACA,UACA,YACF;GACA,IAAI,IAAI,OAAO;;IAEb,IAAI,IAAI,QAAQ,SAAS,+BAA+B,GACjD;UAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,iCAAiC,QAAQ,SAC3C,GACA;MACA,OAAO,MACL;OAAE,YAAY,QAAQ;OAAS,MAAM;MAAM,GAC3C,8EACF;MAIA,MAAM,IAAI,kCAAkB,IAHZ,MACd,8EAE4B,GAAG,cAAc,EAAE;KACnD;;IAIJ,eAAe,KAAK;KAClB,UAAU;KACV,QAAQ,IAAI;IACd,CAAC;GACH,OAAO,IAAI,IAAI,UAAU;IACvB,IAAI,IAAI,yBACN,gBAAgB,KAAK;KACnB,MAAM;KACN,SAAS,IAAI;IACf,CAAC;IAEH,IAAI,IAAI,gBAAgB;KACtB,MAAM,UACJ;KACF,OAAO,KAAK,EAAE,QAAQ,GAAG,OAAO;KAChC,gBAAgB,KAAK;MAAE,MAAM;MAAS;KAAQ,CAAC;IACjD;IACA,MAAM,kBAAkB,MAAM,QAC5B,SACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;IACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,GAAG,QAAQ,gBAAgB;SACnC;KACL,OAAO,MAAM,GAAG,QAAQ,gBAAgB;KACxC,iBAAiB,KAAK;MACpB,MAAM;MACN,MAAM;MAGN,UAAU,IAAI,SAAS,QAAQ,SAAS,EAAE;KAC5C,CAAC;IACH;GACF;EACF,CACF;CACF;CAEA,KAAK,MAAM,YAAY,KAAK,cAAc;EACxC,MAAM,cAAc,MAAM,QAAQ,QAAQ;EAC1C,IAAI;EACJ,IAAI;EACJ,MAAM,mBAAmB,aAAa,wBAAwB,YAAY;GACxE,IAAI,qBAAqB;IACvB,oBAAoB,mBAAmB,UAAU,aAAa;IAC9D,2BAA2B,MAAM,cAC/B,mBACA,MACF;;IAEA,IAAI,0BACF,IAAI;KAEF,MAAM,qBAAqB,gBACzB,wBACF;KAEA,MAAM,oBAAoBC,MACxB,oBACAC,8BACE,qBACA,kBACF,CACF;KAEA,MAAM,eAAe,mBAAmB,KAAK,iBAAiB,CAAC;KAC/D,OAAO,MAAM,qCAAqC;IACpD,SAAS,KAAK;KACZ,OAAO,KAAK,EAAE,IAAI,GAAG,qCAAqC;IAC5D;GAEJ;GACA,OAAO,MAAM,4BAA4B,aAAa;GACtD,MAAM,eAAe,MAAM,KAAK,aAAa,WAAW;GACxD,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,aAAa,QACjD;GACA,MAAM,MAAM,MAAMC,mBAChB,aACA,KACA,QACA,QACF;GACA,IAAI,IAAI,OAAO;;IAEb,IAAI,IAAI,QAAQ,SAAS,gCAAgC,GAClD;UAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,qCAAqC,QAAQ,QAAQ,IACvD,GACA;MACA,OAAO,MACL;OAAE,YAAY,QAAQ;OAAS,MAAM;MAAO,GAC5C,8EACF;MACA,MAAM,IAAI,kCACR,IAAI,MACF,8EACF,GACA,cAAc,EAChB;KACF;;IAIJ,eAAe,KAAK;KAClB,UAAU;KACV,QAAQ,kCAAkC,KAAK,EAAE;IACnD,CAAC;GACH,OAAO;IACL,MAAM,kBAAkB,MAAM,QAC5B,cACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;IACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,0BAA0B;SAClC;KACL,OAAO,MAAM,0BAA0B;KACvC,iBAAiB,KAAK;MACpB,MAAM;MACN,MAAM;MAEN,UAAU,IAAI;KAChB,CAAC;KACD,MAAM,kBAAkB,aAAa,gBAAgB;IACvD;;IAGA,IAAI,SAAS,KAAKC,YAAiB,GACjC,2BAA2B,MAAM,iBAC/B,aACA,kBACA,wBACF;GAEJ;EACF,CAAC;;EAED,IAAI,0BAEF,MAAM,eAAe,mBAAoB,wBAAwB;CAErE;CAEA,KAAK,MAAM,gBAAgB,KAAK,kBAAkB;EAChD,MAAM,cAAc,MAAM,QAAQ,YAAY;EAC9C,MAAM,mBACJ,aACA,wBACA,OAAO,iBAAiB;GACtB,OAAO,MAAM,iCAAiC,aAAa;GAC3D,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,iBAAiB,YACrD;GACA,MAAM,MAAM,MAAMC,mBAChB,aACA,KACA,QACA,UACA,YACF;GAGA,IAAI,IAAI,2BAA2B,CAAC,IAAI,OACtC,gBAAgB,KAAK;IACnB,MAAM;IACN,SAAS,IAAI;GACf,CAAC;GAEH,IAAI,IAAI,OAAO;;IAEb,IAAI,IAAI,QAAQ,SAAS,8BAA8B,GAChD;UAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,gCAAgC,QAAQ,SAC1C,GACA;MACA,OAAO,MACL;OAAE,YAAY,QAAQ;OAAS,MAAM;MAAO,GAC5C,8EACF;MACA,MAAM,IAAI,kBACR,MACE,8EACF,GACA,cAAc,EAChB;KACF;;IAIJ,MAAM,SAAS,kCAAkC,KAAK,EAAE;IACxD,eAAe,KAAK;KAClB,UAAU;KACV,QAAQ,IAAI,0BACR,GAAG,IAAI,wBAAwB,MAAM,WACrC;IACN,CAAC;GACH,OAAO;IACL,MAAM,kBAAkB,MAAM,QAC5B,cACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;IACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,+BAA+B;SACvC;KACL,OAAO,MAAM,+BAA+B;KAC5C,iBAAiB,KAAK;MACpB,MAAM;MACN,MAAM;MAEN,UAAU,IAAI;KAChB,CAAC;IACH;GACF;EACF,CACF;CACF;CAEA,OAAO;EAAE;EAAgB;EAAiB;CAAiB;AAC7D;AAEA,eAAsB,mBACpB,QACA,cACmC;CACnC,MAAM,qCAAqB,IAAI,IAAoB;CACnD,IAAI;EACF,OAAO,MAAM,wBAEX,QACA,cACA,kBACF;CACF,UAAU;EACR,MAAM,kBAAkB,kBAAkB;CAC5C;AACF"}

package/dist/modules/manager/npm/post-update/npm.js

@@ -4,44 +4,24 @@ import { logger } from "../../../../logger/index.js";
 import { exec, getToolSettingsOptions } from "../../../../util/exec/index.js";
 import { deleteLocalFile, localPathExists, readLocalFile, renameLocalFile } from "../../../../util/fs/index.js";
 import { minimatch } from "../../../../util/minimatch.js";
+import { calculatePackageManagerMinimumReleaseAgeMs, getMinimumReleaseAgeExemption } from "../../../../util/minimum-release-age.js";
 import { toMs } from "../../../../util/pretty-time.js";
 import { regEx } from "../../../../util/regex.js";
 import { Result } from "../../../../util/result.js";
 import { trimSlashes } from "../../../../util/url.js";
+import { NpmDatasource } from "../../../datasource/npm/index.js";
 import { resolveToolConstraint } from "../../util.js";
-import { NpmrcCooldown, PackageLock } from "../schema.js";
+import { parseNpmrcCooldown } from "../extract/npmrc.js";
+import { PackageLock } from "../schema.js";
 import { composeLockFile, parseLockFile } from "../utils.js";
 import { getNodeToolConstraint } from "./node-version.js";
 import { getNodeOptions, getPackageManagerVersion, lazyLoadPackageJson } from "./utils.js";
-import { isNonEmptyString, isNullOrUndefined, isNumber, isString } from "@sindresorhus/is";
-import { DateTime } from "luxon";
+import { isNonEmptyString, isNullOrUndefined, isString } from "@sindresorhus/is";
+import { DateTime, Duration } from "luxon";
 import { quote } from "shlex";
 import upath from "upath";
 import semver from "semver";
 // lib/modules/manager/npm/post-update/npm.ts
-function parseNpmrcCooldownDate(npmrcContent) {
-	if (!npmrcContent) return null;
-	const parsed = NpmrcCooldown.parse(npmrcContent);
-	const before = parsed.before;
-	if (isNonEmptyString(before)) {
-		const dt = DateTime.fromISO(before, { zone: "utc" });
-		if (dt.isValid) return {
-			date: dt,
-			source: "before"
-		};
-		logger.debug(`Invalid before date in .npmrc: ${before}, ignoring`);
-	}
-	const minReleaseAge = parsed["min-release-age"];
-	if (isNonEmptyString(minReleaseAge)) {
-		const days = parseInt(minReleaseAge, 10);
-		if (isNumber(days) && days >= 0) return {
-			date: DateTime.now().minus({ days }).toUTC(),
-			source: "min-release-age"
-		};
-		logger.debug(`Invalid min-release-age in .npmrc: ${minReleaseAge}, ignoring`);
-	}
-	return null;
-}
 async function getNpmConstraintFromPackageLock(lockFileDir, filename) {
 	const packageLockFileName = upath.join(lockFileDir, filename);
 	const packageLockContents = await readLocalFile(packageLockFileName, "utf8");
@@ -61,12 +41,78 @@ async function getNpmConstraintFromPackageLock(lockFileDir, filename) {
 	}
 	return null;
 }
+function toHuman(durationMs) {
+	return Duration.fromMillis(durationMs).rescale().toHuman();
+}
+/**
+* Whether the `before` date of the `.npmrc` is older than a minimum release age of `ageMs`, where `0` means none.
+*/
+function isNpmrcBeforeOlder(npmrcDate, ageMs) {
+	if (!npmrcDate) return false;
+	return !ageMs || npmrcDate < DateTime.now().minus(ageMs);
+}
+/**
+* Describes the minimum release age which npm checks with a lowered age of `ageMs` and the `before` date of the `.npmrc`.
+*/
+function getCheckedMinimumReleaseAge(npmrcDate, ageMs) {
+	if (isNpmrcBeforeOlder(npmrcDate, ageMs)) return `the \`before\` date ${npmrcDate.toISO()} of the \`.npmrc\``;
+	return ageMs ? `a minimum release age of ${toHuman(ageMs)}` : "no minimum release age";
+}
+/**
+* Returns the `--before` flag for `minimumReleaseAgeMs` and the `.npmrc`, lowered to the smaller `minimumReleaseAge` of exempted updates in `upgrades`, and the notice for such a lowering.
+*/
+function getBeforeFlag(minimumReleaseAgeMs, npmrcCooldown, upgrades) {
+	if (npmrcCooldown?.source === "min-release-age") {
+		logger.debug(`Skipping --before flag because .npmrc already contains min-release-age=${npmrcCooldown.days}`);
+		return { flag: "" };
+	}
+	const exemption = getMinimumReleaseAgeExemption(upgrades, "npm", NpmDatasource.id, minimumReleaseAgeMs);
+	const npmrcDate = npmrcCooldown?.date;
+	let notice;
+	let ageMs = minimumReleaseAgeMs;
+	if (exemption && !isNpmrcBeforeOlder(npmrcDate, minimumReleaseAgeMs)) {
+		ageMs = exemption.ageMs;
+		const checked = getCheckedMinimumReleaseAge(npmrcDate, ageMs);
+		logger.debug(`npm checks ${checked} instead of ${toHuman(minimumReleaseAgeMs)}, as the minimumReleaseAge of ${exemption.depNames.join(", ")} is smaller and their release is younger or has no timestamp`);
+		const packages = exemption.depNames.map((name) => `\`${name}\``).join(", ");
+		notice = `npm checked ${checked} instead of ${toHuman(minimumReleaseAgeMs)} for this update, because the \`minimumReleaseAge\` of ${packages} is smaller. npm has no per-package exclude for \`--before\`.`;
+		if (!ageMs) return {
+			flag: "",
+			notice
+		};
+	}
+	let beforeDate = DateTime.now().minus(ageMs).toUTC();
+	if (npmrcDate && npmrcDate < beforeDate) {
+		logger.debug({
+			npmrcDate: npmrcDate.toISO(),
+			beforeDate: beforeDate.toISO()
+		}, "Using stricter .npmrc cooldown date over minimumReleaseAge date");
+		beforeDate = npmrcDate;
+	}
+	const beforeISO = beforeDate.toISO();
+	logger.debug(`Setting npm --before=${beforeISO} based on minimumReleaseAge`);
+	return {
+		flag: ` --before=${beforeISO}`,
+		notice
+	};
+}
+/**
+* Returns the minimum release age for `--before`, or `null` for none: `syncAgeMs` with `minimumReleaseAgePackageManagerSync`, else the `minimumReleaseAge` of `config`.
+*/
+function getBeforeAgeMs(config, syncAgeMs) {
+	if (syncAgeMs !== null) return syncAgeMs || null;
+	if (!config.minimumReleaseAge) return null;
+	const ms = toMs(config.minimumReleaseAge);
+	if (ms === null) logger.debug(`Invalid minimumReleaseAge ${config.minimumReleaseAge}, skipping --before for npm install`);
+	return ms;
+}
 async function generateLockFile(lockFileDir, env, filename, config = {}, upgrades = [], npmrcContent = null) {
 	const lockFileName = upath.join(lockFileDir, filename);
 	logger.debug(`Spawning npm install to create ${lockFileDir}/${filename}`);
 	const { skipInstalls, postUpdateOptions } = config;
 	let lockFile = null;
 	let beforeFallback = false;
+	let minimumReleaseAgeNotice;
 	try {
 		const lazyPkgJson = lazyLoadPackageJson(lockFileDir);
 		const npmToolConstraint = {
@@ -92,34 +138,18 @@ async function generateLockFile(lockFileDir, env, filename, config = {}, upgrade
 			cmdOptions += " --prefer-dedupe";
 		}
 		if (!GlobalConfig.get("allowScripts") || config.ignoreScripts) cmdOptions += " --ignore-scripts";
-		let beforeFlag = "";
-		if (config.minimumReleaseAge) {
-			const ms = toMs(config.minimumReleaseAge);
-			if (ms === null) logger.debug({ minimumReleaseAge: config.minimumReleaseAge }, "Invalid minimumReleaseAge, skipping --before for npm install");
-			else {
-				const npmrcCooldown = parseNpmrcCooldownDate(npmrcContent);
-				if (npmrcCooldown?.source === "min-release-age") logger.debug({
-					npmrcMinReleaseAge: npmrcCooldown.date.toISO(),
-					minimumReleaseAge: config.minimumReleaseAge
-				}, "Skipping --before flag because .npmrc already contains min-release-age");
-				else {
-					let beforeDate = DateTime.now().minus(ms).toUTC();
-					if (npmrcCooldown && npmrcCooldown.date < beforeDate) {
-						logger.debug({
-							npmrcDate: npmrcCooldown.date.toISO(),
-							beforeDate: beforeDate.toISO()
-						}, "Using stricter .npmrc cooldown date over minimumReleaseAge date");
-						beforeDate = npmrcCooldown.date;
-					}
-					const beforeISO = beforeDate.toISO();
-					logger.debug({
-						beforeISO,
-						minimumReleaseAge: config.minimumReleaseAge
-					}, "Setting npm --before based on minimumReleaseAge");
-					beforeFlag = ` --before=${beforeISO}`;
-				}
-			}
-		}
+		const minimumReleaseAgeOptions = {
+			config,
+			manager: "npm",
+			packageFile: upath.join(lockFileDir, "package.json"),
+			upgrades
+		};
+		const syncAgeMs = calculatePackageManagerMinimumReleaseAgeMs(minimumReleaseAgeOptions);
+		const isSyncEnabled = syncAgeMs !== null;
+		const beforeAgeMs = getBeforeAgeMs(config, syncAgeMs);
+		const before = beforeAgeMs === null ? { flag: "" } : getBeforeFlag(beforeAgeMs, parseNpmrcCooldown(npmrcContent, !isSyncEnabled), isSyncEnabled ? upgrades : []);
+		const beforeFlag = before.flag;
+		minimumReleaseAgeNotice = before.notice;
 		const extraEnv = {
 			NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,
 			npm_config_store: env.npm_config_store
@@ -183,8 +213,9 @@ async function generateLockFile(lockFileDir, env, filename, config = {}, upgrade
 				if (command.startsWith("npm install")) commands.push(command);
 			}
 		}
+		const skipsBeforeRetry = isSyncEnabled && upgrades.some((upgrade) => upgrade.isLockFileMaintenance);
 		await exec(commands, execOptions).catch(async (err) => {
-			if (beforeFlag && err.stderr?.includes("with a date before")) {
+			if (beforeFlag && !skipsBeforeRetry && err.stderr?.includes("with a date before")) {
 				logger.debug("npm --before caused ETARGET, retrying without --before");
 				const commandsWithoutBefore = commands.map((cmd) => cmd.replace(beforeFlag, ""));
 				beforeFallback = true;
@@ -224,7 +255,8 @@ async function generateLockFile(lockFileDir, env, filename, config = {}, upgrade
 	return {
 		error: !lockFile,
 		lockFile,
-		beforeFallback
+		beforeFallback,
+		minimumReleaseAgeNotice
 	};
 }
 function divideWorkspaceAndRootDeps(lockFileDir, lockUpdates) {
@@ -275,6 +307,6 @@ function divideWorkspaceAndRootDeps(lockFileDir, lockUpdates) {
 function generatePackageKey(packageName, version) {
 	return `${packageName}@${version}`;
 }
-export { divideWorkspaceAndRootDeps, generateLockFile, parseNpmrcCooldownDate };
+export { divideWorkspaceAndRootDeps, generateLockFile };
 
 //# sourceMappingURL=npm.js.map