renovate 44.53.0 → 44.55.0

package/dist/modules/manager/npm/extract/pnpm.js.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm.js","names":[],"sources":["../../../../../lib/modules/manager/npm/extract/pnpm.ts"],"sourcesContent":["import { parsePkgAndParentSelector } from '@pnpm/parse-overrides';\nimport {\n  isNonEmptyObject,\n  isNumber,\n  isObject,\n  isPlainObject,\n  isString,\n} from '@sindresorhus/is';\nimport { findPackages } from 'find-packages';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport {\n  findLocalSiblingOrParent,\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { coerceObject } from '../../../../util/object.ts';\nimport { parseSingleYaml, parseYaml } from '../../../../util/yaml.ts';\nimport { NpmDatasource } from '../../../datasource/npm/index.ts';\nimport type {\n  PackageDependency,\n  PackageFile,\n  PackageFileContent,\n} from '../../types.ts';\nimport { pnpmWorkspaceOverrides } from '../dep-types.ts';\nimport type { PnpmDependency, PnpmLockFile } from '../post-update/types.ts';\nimport type { PnpmCatalogs, PnpmWorkspaceFile } from '../schema.ts';\nimport type { NpmManagerData } from '../types.ts';\nimport { extractCatalogDeps } from './common/catalogs.ts';\nimport { extractDependency } from './common/dependency.ts';\nimport type { Catalog, LockFile } from './types.ts';\n\nfunction isPnpmLockfile(obj: any): obj is PnpmLockFile {\n  return isPlainObject(obj) && 'lockfileVersion' in obj;\n}\n\nexport async function extractPnpmFilters(\n  fileName: string,\n): Promise<string[] | undefined> {\n  try {\n    // TODO: use schema (#9610,#22198)\n    const contents = parseSingleYaml<PnpmWorkspaceFile>(\n      (await readLocalFile(fileName, 'utf8'))!,\n    );\n    if (\n      !Array.isArray(contents.packages) ||\n      !contents.packages.every((item) => isString(item))\n    ) {\n      logger.trace(\n        { fileName },\n        'Failed to find required \"packages\" array in pnpm-workspace.yaml',\n      );\n      return undefined;\n    }\n    return contents.packages;\n  } catch (err) {\n    logger.trace({ fileName, err }, 'Failed to parse pnpm-workspace.yaml');\n    return undefined;\n  }\n}\n\nexport async function findPnpmWorkspace(\n  packageFile: string,\n): Promise<{ lockFilePath: string; workspaceYamlPath: string } | null> {\n  // search for pnpm-workspace.yaml\n  const workspaceYamlPath = await findLocalSiblingOrParent(\n    packageFile,\n    'pnpm-workspace.yaml',\n  );\n  if (!workspaceYamlPath) {\n    logger.trace(\n      { packageFile },\n      'Failed to locate pnpm-workspace.yaml in a parent directory.',\n    );\n    return null;\n  }\n\n  // search for pnpm-lock.yaml next to pnpm-workspace.yaml\n  const pnpmLockfilePath = getSiblingFileName(\n    workspaceYamlPath,\n    'pnpm-lock.yaml',\n  );\n  if (!(await localPathExists(pnpmLockfilePath))) {\n    logger.trace(\n      { workspaceYamlPath, packageFile },\n      'Failed to find a pnpm-lock.yaml sibling for the workspace.',\n    );\n    return null;\n  }\n\n  return {\n    lockFilePath: pnpmLockfilePath,\n    workspaceYamlPath,\n  };\n}\n\nexport async function detectPnpmWorkspaces(\n  packageFiles: Partial<PackageFile<NpmManagerData>>[],\n): Promise<void> {\n  logger.debug(`Detecting pnpm Workspaces`);\n  const packagePathCache = new Map<string, string[] | null>();\n\n  for (const p of packageFiles) {\n    const { packageFile, managerData } = p;\n    const pnpmShrinkwrap = managerData?.pnpmShrinkwrap;\n\n    // check if pnpmShrinkwrap-file has already been provided\n    if (pnpmShrinkwrap) {\n      logger.trace(\n        { packageFile, pnpmShrinkwrap },\n        'Found an existing pnpm shrinkwrap file; skipping pnpm monorepo check.',\n      );\n      continue;\n    }\n\n    // search for corresponding pnpm workspace\n    // TODO #22198\n    const pnpmWorkspace = await findPnpmWorkspace(packageFile!);\n    if (pnpmWorkspace === null) {\n      continue;\n    }\n    const { workspaceYamlPath, lockFilePath } = pnpmWorkspace;\n\n    // check if package matches workspace filter\n    if (!packagePathCache.has(workspaceYamlPath)) {\n      const filters = await extractPnpmFilters(workspaceYamlPath);\n      // TODO: types (#22198)\n      const localDir = GlobalConfig.get('localDir');\n      const packages = await findPackages(\n        upath.dirname(upath.join(localDir, workspaceYamlPath)),\n        {\n          patterns: filters,\n          // Match the ignores used in @pnpm/find-workspace-packages\n          ignore: ['**/node_modules/**', '**/bower_components/**'],\n        },\n      );\n      const packagePaths = packages.map((pkg) =>\n        upath.join(pkg.dir, 'package.json'),\n      );\n      packagePathCache.set(workspaceYamlPath, packagePaths);\n    }\n    const packagePaths = packagePathCache.get(workspaceYamlPath);\n\n    const isPackageInWorkspace = packagePaths?.some((p) =>\n      p.endsWith(packageFile!),\n    );\n\n    if (isPackageInWorkspace) {\n      p.managerData ??= {};\n      p.managerData.pnpmShrinkwrap = lockFilePath;\n    } else {\n      logger.trace(\n        { packageFile, workspaceYamlPath },\n        `Didn't find the package in the pnpm workspace`,\n      );\n    }\n  }\n}\n\nexport async function getPnpmLock(filePath: string): Promise<LockFile> {\n  try {\n    const pnpmLockRaw = await readLocalFile(filePath, 'utf8');\n    if (!pnpmLockRaw) {\n      throw new Error('Unable to read pnpm-lock.yaml');\n    }\n\n    // pnpm writes a multi-document YAML lockfile when `pnpm-workspace.yaml`\n    // declares `configDependencies`; the env document (config-deps + integrity\n    // metadata) is unconditionally prepended before the main lockfile, so the\n    // main lockfile is always the last document.\n    // https://pnpm.io/config-dependencies.\n    const parsedDocs = parseYaml(pnpmLockRaw);\n    const lockParsed = parsedDocs.at(-1);\n    if (!isPnpmLockfile(lockParsed)) {\n      throw new Error('Invalid or empty lockfile');\n    }\n    logger.trace({ lockParsed }, 'pnpm lockfile parsed');\n\n    // field lockfileVersion is type string in lockfileVersion = 6 and type number in < 6\n    const lockfileVersion: number = isNumber(lockParsed.lockfileVersion)\n      ? lockParsed.lockfileVersion\n      : parseFloat(lockParsed.lockfileVersion);\n\n    const lockedVersions = getLockedVersions(lockParsed);\n    const lockedCatalogVersions = getLockedCatalogVersions(lockParsed);\n\n    return {\n      lockedVersionsWithPath: lockedVersions,\n      lockedVersionsWithCatalog: lockedCatalogVersions,\n      lockfileVersion,\n    };\n  } catch (err) {\n    logger.debug({ filePath, err }, 'Warning: Exception parsing pnpm lockfile');\n    return { lockedVersions: {} };\n  }\n}\n\nfunction getLockedCatalogVersions(\n  lockParsed: PnpmLockFile,\n): Record<string, Record<string, string>> {\n  const lockedVersions: Record<string, Record<string, string>> = {};\n\n  if (isNonEmptyObject(lockParsed.catalogs)) {\n    for (const [catalog, dependencies] of Object.entries(lockParsed.catalogs)) {\n      const versions: Record<string, string> = {};\n\n      for (const [dep, versionCarrier] of Object.entries(dependencies)) {\n        versions[dep] = versionCarrier.version;\n      }\n\n      lockedVersions[catalog] = versions;\n    }\n  }\n\n  return lockedVersions;\n}\n\nfunction getLockedVersions(\n  lockParsed: PnpmLockFile,\n): Record<string, Record<string, Record<string, string>>> {\n  const lockedVersions: Record<\n    string,\n    Record<string, Record<string, string>>\n  > = {};\n\n  // monorepo\n  if (isNonEmptyObject(lockParsed.importers)) {\n    for (const [importer, imports] of Object.entries(lockParsed.importers)) {\n      lockedVersions[importer] = getLockedDependencyVersions(imports);\n    }\n  }\n  // normal repo\n  else {\n    lockedVersions['.'] = getLockedDependencyVersions(lockParsed);\n  }\n\n  return lockedVersions;\n}\n\nfunction getLockedDependencyVersions(\n  obj: PnpmLockFile | Record<string, PnpmDependency>,\n): Record<string, Record<string, string>> {\n  const dependencyTypes = [\n    'dependencies',\n    'devDependencies',\n    'optionalDependencies',\n  ] as const;\n\n  const res: Record<string, Record<string, string>> = {};\n  for (const depType of dependencyTypes) {\n    res[depType] = {};\n    for (const [pkgName, versionCarrier] of Object.entries(\n      coerceObject(obj[depType]),\n    )) {\n      let version: string;\n      if (isObject(versionCarrier)) {\n        version = versionCarrier.version;\n      } else {\n        version = versionCarrier;\n      }\n\n      const pkgVersion = version.split('(')[0].trim();\n      res[depType][pkgName] = pkgVersion;\n    }\n  }\n\n  return res;\n}\n\nexport async function extractPnpmWorkspaceFile(\n  workspaceFile: PnpmWorkspaceFile,\n  packageFile: string,\n): Promise<PackageFileContent<NpmManagerData> | null> {\n  logger.trace(`pnpm.extractPnpmWorkspaceFile(${packageFile})`);\n\n  const pnpmCatalogs = pnpmCatalogsToArray(workspaceFile);\n\n  const deps = extractCatalogDeps(pnpmCatalogs);\n\n  if (workspaceFile.overrides) {\n    for (const [overridesKey, overridesVal] of Object.entries(\n      workspaceFile.overrides,\n    )) {\n      // flat syntax: `parent>parent>child`\n      const packageName =\n        parsePkgAndParentSelector(overridesKey).targetPkg.name;\n      const depType = pnpmWorkspaceOverrides;\n      deps.push({\n        depName: overridesKey,\n        packageName,\n        depType,\n        ...extractDependency(depType, packageName, overridesVal),\n      });\n    }\n  }\n\n  const { registry, registries } = workspaceFile;\n  applyPnpmWorkspaceRegistries(deps, registries, registry);\n\n  let pnpmShrinkwrap;\n  const filePath = getSiblingFileName(packageFile, 'pnpm-lock.yaml');\n\n  if (await readLocalFile(filePath, 'utf8')) {\n    pnpmShrinkwrap = filePath;\n  }\n\n  return {\n    deps,\n    managerData: {\n      pnpmShrinkwrap,\n    },\n  };\n}\n\nfunction pnpmCatalogsToArray({\n  catalog: defaultCatalogDeps,\n  catalogs: namedCatalogs,\n}: PnpmCatalogs): Catalog[] {\n  const result: Catalog[] = [];\n\n  if (defaultCatalogDeps !== undefined) {\n    result.push({ name: 'default', dependencies: defaultCatalogDeps });\n  }\n\n  if (!namedCatalogs) {\n    return result;\n  }\n\n  for (const [name, dependencies] of Object.entries(namedCatalogs)) {\n    result.push({\n      name,\n      dependencies,\n    });\n  }\n\n  return result;\n}\n\nexport function applyPnpmWorkspaceRegistries(\n  deps: PackageDependency[],\n  registries: Record<string, string> | undefined,\n  registry: string | undefined,\n): void {\n  if (!(registry ?? registries)) {\n    return;\n  }\n  for (const dep of deps) {\n    const lookupName = dep.packageName ?? dep.depName;\n    if (lookupName && dep.datasource === NpmDatasource.id) {\n      const registryUrl = resolveRegistryUrl(lookupName, registries, registry);\n      if (registryUrl) {\n        dep.registryUrls = [registryUrl];\n      }\n    }\n  }\n}\n\nexport function resolveRegistryUrl(\n  packageName: string,\n  registries: Record<string, string> | undefined,\n  defaultRegistry: string | undefined,\n): string | null {\n  if (registries) {\n    for (const scope in registries) {\n      // `default` is the fallback registry, not a scope\n      if (scope === 'default') {\n        continue;\n      }\n      // pnpm scope keys keep the leading `@`, e.g. `@my-org`\n      if (packageName.startsWith(`${scope}/`)) {\n        return registries[scope];\n      }\n    }\n    if (registries.default) {\n      return registries.default;\n    }\n  }\n  return defaultRegistry ?? null;\n}\n"],"mappings":";;;;;;;;;;;;;;AAkCA,SAAS,eAAe,KAA+B;CACrD,OAAO,cAAc,GAAG,KAAK,qBAAqB;AACpD;AAEA,eAAsB,mBACpB,UAC+B;CAC/B,IAAI;EAEF,MAAM,WAAW,gBACd,MAAM,cAAc,UAAU,MAAM,CACvC;EACA,IACE,CAAC,MAAM,QAAQ,SAAS,QAAQ,KAChC,CAAC,SAAS,SAAS,OAAO,SAAS,SAAS,IAAI,CAAC,GACjD;GACA,OAAO,MACL,EAAE,SAAS,GACX,mEACF;GACA;EACF;EACA,OAAO,SAAS;CAClB,SAAS,KAAK;EACZ,OAAO,MAAM;GAAE;GAAU;EAAI,GAAG,qCAAqC;EACrE;CACF;AACF;AAEA,eAAsB,kBACpB,aACqE;CAErE,MAAM,oBAAoB,MAAM,yBAC9B,aACA,qBACF;CACA,IAAI,CAAC,mBAAmB;EACtB,OAAO,MACL,EAAE,YAAY,GACd,6DACF;EACA,OAAO;CACT;CAGA,MAAM,mBAAmB,mBACvB,mBACA,gBACF;CACA,IAAI,CAAE,MAAM,gBAAgB,gBAAgB,GAAI;EAC9C,OAAO,MACL;GAAE;GAAmB;EAAY,GACjC,4DACF;EACA,OAAO;CACT;CAEA,OAAO;EACL,cAAc;EACd;CACF;AACF;AAEA,eAAsB,qBACpB,cACe;CACf,OAAO,MAAM,2BAA2B;CACxC,MAAM,mCAAmB,IAAI,IAA6B;CAE1D,KAAK,MAAM,KAAK,cAAc;EAC5B,MAAM,EAAE,aAAa,gBAAgB;EACrC,MAAM,iBAAiB,aAAa;EAGpC,IAAI,gBAAgB;GAClB,OAAO,MACL;IAAE;IAAa;GAAe,GAC9B,uEACF;GACA;EACF;EAIA,MAAM,gBAAgB,MAAM,kBAAkB,WAAY;EAC1D,IAAI,kBAAkB,MACpB;EAEF,MAAM,EAAE,mBAAmB,iBAAiB;EAG5C,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,GAAG;GAC5C,MAAM,UAAU,MAAM,mBAAmB,iBAAiB;GAE1D,MAAM,WAAW,aAAa,IAAI,UAAU;GAS5C,MAAM,gBAAe,MARE,aACrB,MAAM,QAAQ,MAAM,KAAK,UAAU,iBAAiB,CAAC,GACrD;IACE,UAAU;IAEV,QAAQ,CAAC,sBAAsB,wBAAwB;GACzD,CACF,EAAA,CAC8B,KAAK,QACjC,MAAM,KAAK,IAAI,KAAK,cAAc,CACpC;GACA,iBAAiB,IAAI,mBAAmB,YAAY;EACtD;EAOA,IANqB,iBAAiB,IAAI,iBAEF,CAAC,EAAE,MAAM,MAC/C,EAAE,SAAS,WAAY,CACzB,GAE0B;GACxB,EAAE,gBAAgB,CAAC;GACnB,EAAE,YAAY,iBAAiB;EACjC,OACE,OAAO,MACL;GAAE;GAAa;EAAkB,GACjC,+CACF;CAEJ;AACF;AAEA,eAAsB,YAAY,UAAqC;CACrE,IAAI;EACF,MAAM,cAAc,MAAM,cAAc,UAAU,MAAM;EACxD,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,+BAA+B;EASjD,MAAM,aADa,UAAU,WACD,CAAC,CAAC,GAAG,EAAE;EACnC,IAAI,CAAC,eAAe,UAAU,GAC5B,MAAM,IAAI,MAAM,2BAA2B;EAE7C,OAAO,MAAM,EAAE,WAAW,GAAG,sBAAsB;EAGnD,MAAM,kBAA0B,SAAS,WAAW,eAAe,IAC/D,WAAW,kBACX,WAAW,WAAW,eAAe;EAKzC,OAAO;GACL,wBAJqB,kBAAkB,UAIF;GACrC,2BAJ4B,yBAAyB,UAIN;GAC/C;EACF;CACF,SAAS,KAAK;EACZ,OAAO,MAAM;GAAE;GAAU;EAAI,GAAG,0CAA0C;EAC1E,OAAO,EAAE,gBAAgB,CAAC,EAAE;CAC9B;AACF;AAEA,SAAS,yBACP,YACwC;CACxC,MAAM,iBAAyD,CAAC;CAEhE,IAAI,iBAAiB,WAAW,QAAQ,GACtC,KAAK,MAAM,CAAC,SAAS,iBAAiB,OAAO,QAAQ,WAAW,QAAQ,GAAG;EACzE,MAAM,WAAmC,CAAC;EAE1C,KAAK,MAAM,CAAC,KAAK,mBAAmB,OAAO,QAAQ,YAAY,GAC7D,SAAS,OAAO,eAAe;EAGjC,eAAe,WAAW;CAC5B;CAGF,OAAO;AACT;AAEA,SAAS,kBACP,YACwD;CACxD,MAAM,iBAGF,CAAC;CAGL,IAAI,iBAAiB,WAAW,SAAS,GACvC,KAAK,MAAM,CAAC,UAAU,YAAY,OAAO,QAAQ,WAAW,SAAS,GACnE,eAAe,YAAY,4BAA4B,OAAO;MAKhE,eAAe,OAAO,4BAA4B,UAAU;CAG9D,OAAO;AACT;AAEA,SAAS,4BACP,KACwC;CACxC,MAAM,kBAAkB;EACtB;EACA;EACA;CACF;CAEA,MAAM,MAA8C,CAAC;CACrD,KAAK,MAAM,WAAW,iBAAiB;EACrC,IAAI,WAAW,CAAC;EAChB,KAAK,MAAM,CAAC,SAAS,mBAAmB,OAAO,QAC7C,aAAa,IAAI,QAAQ,CAC3B,GAAG;GACD,IAAI;GACJ,IAAI,SAAS,cAAc,GACzB,UAAU,eAAe;QAEzB,UAAU;GAGZ,MAAM,aAAa,QAAQ,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK;GAC9C,IAAI,QAAQ,CAAC,WAAW;EAC1B;CACF;CAEA,OAAO;AACT;AAEA,eAAsB,yBACpB,eACA,aACoD;CACpD,OAAO,MAAM,iCAAiC,YAAY,EAAE;CAE5D,MAAM,eAAe,oBAAoB,aAAa;CAEtD,MAAM,OAAO,mBAAmB,YAAY;CAE5C,IAAI,cAAc,WAChB,KAAK,MAAM,CAAC,cAAc,iBAAiB,OAAO,QAChD,cAAc,SAChB,GAAG;EAED,MAAM,cACJ,0BAA0B,YAAY,CAAC,CAAC,UAAU;EACpD,MAAM,UAAU;EAChB,KAAK,KAAK;GACR,SAAS;GACT;GACA;GACA,GAAG,kBAAkB,SAAS,aAAa,YAAY;EACzD,CAAC;CACH;CAGF,MAAM,EAAE,UAAU,eAAe;CACjC,6BAA6B,MAAM,YAAY,QAAQ;CAEvD,IAAI;CACJ,MAAM,WAAW,mBAAmB,aAAa,gBAAgB;CAEjE,IAAI,MAAM,cAAc,UAAU,MAAM,GACtC,iBAAiB;CAGnB,OAAO;EACL;EACA,aAAa,EACX,eACF;CACF;AACF;AAEA,SAAS,oBAAoB,EAC3B,SAAS,oBACT,UAAU,iBACgB;CAC1B,MAAM,SAAoB,CAAC;CAE3B,IAAI,uBAAuB,KAAA,GACzB,OAAO,KAAK;EAAE,MAAM;EAAW,cAAc;CAAmB,CAAC;CAGnE,IAAI,CAAC,eACH,OAAO;CAGT,KAAK,MAAM,CAAC,MAAM,iBAAiB,OAAO,QAAQ,aAAa,GAC7D,OAAO,KAAK;EACV;EACA;CACF,CAAC;CAGH,OAAO;AACT;AAEA,SAAgB,6BACd,MACA,YACA,UACM;CACN,IAAI,EAAE,YAAY,aAChB;CAEF,KAAK,MAAM,OAAO,MAAM;EACtB,MAAM,aAAa,IAAI,eAAe,IAAI;EAC1C,IAAI,cAAc,IAAI,eAAe,cAAc,IAAI;GACrD,MAAM,cAAc,mBAAmB,YAAY,YAAY,QAAQ;GACvE,IAAI,aACF,IAAI,eAAe,CAAC,WAAW;EAEnC;CACF;AACF;AAEA,SAAgB,mBACd,aACA,YACA,iBACe;CACf,IAAI,YAAY;EACd,KAAK,MAAM,SAAS,YAAY;GAE9B,IAAI,UAAU,WACZ;GAGF,IAAI,YAAY,WAAW,GAAG,MAAM,EAAE,GACpC,OAAO,WAAW;EAEtB;EACA,IAAI,WAAW,SACb,OAAO,WAAW;CAEtB;CACA,OAAO,mBAAmB;AAC5B"}
+{"version":3,"file":"pnpm.js","names":[],"sources":["../../../../../lib/modules/manager/npm/extract/pnpm.ts"],"sourcesContent":["import { parsePkgAndParentSelector } from '@pnpm/parse-overrides';\nimport {\n  isNonEmptyObject,\n  isNumber,\n  isObject,\n  isPlainObject,\n  isString,\n} from '@sindresorhus/is';\nimport { findPackages } from 'find-packages';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport {\n  findLocalSiblingOrParent,\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { coerceObject } from '../../../../util/object.ts';\nimport { parseSingleYaml, parseYaml } from '../../../../util/yaml.ts';\nimport { NpmDatasource } from '../../../datasource/npm/index.ts';\nimport type {\n  PackageDependency,\n  PackageFile,\n  PackageFileContent,\n} from '../../types.ts';\nimport { pnpmWorkspaceOverrides } from '../dep-types.ts';\nimport type { PnpmDependency, PnpmLockFile } from '../post-update/types.ts';\nimport type { PnpmCatalogs, PnpmWorkspaceFile } from '../schema.ts';\nimport type { NpmManagerData } from '../types.ts';\nimport { extractCatalogDeps } from './common/catalogs.ts';\nimport { extractDependency } from './common/dependency.ts';\nimport type { Catalog, LockFile } from './types.ts';\n\nfunction isPnpmLockfile(obj: any): obj is PnpmLockFile {\n  return isPlainObject(obj) && 'lockfileVersion' in obj;\n}\n\nexport async function extractPnpmFilters(\n  fileName: string,\n): Promise<string[] | undefined> {\n  try {\n    // TODO: use schema (#9610,#22198)\n    const contents = parseSingleYaml<PnpmWorkspaceFile>(\n      (await readLocalFile(fileName, 'utf8'))!,\n    );\n    if (\n      !Array.isArray(contents.packages) ||\n      !contents.packages.every((item) => isString(item))\n    ) {\n      logger.trace(\n        { fileName },\n        'Failed to find required \"packages\" array in pnpm-workspace.yaml',\n      );\n      return undefined;\n    }\n    return contents.packages;\n  } catch (err) {\n    logger.trace({ fileName, err }, 'Failed to parse pnpm-workspace.yaml');\n    return undefined;\n  }\n}\n\nexport async function findPnpmWorkspace(\n  packageFile: string,\n): Promise<{ lockFilePath: string; workspaceYamlPath: string } | null> {\n  // search for pnpm-workspace.yaml\n  const workspaceYamlPath = await findLocalSiblingOrParent(\n    packageFile,\n    'pnpm-workspace.yaml',\n  );\n  if (!workspaceYamlPath) {\n    logger.trace(\n      { packageFile },\n      'Failed to locate pnpm-workspace.yaml in a parent directory.',\n    );\n    return null;\n  }\n\n  // search for pnpm-lock.yaml next to pnpm-workspace.yaml\n  const pnpmLockfilePath = getSiblingFileName(\n    workspaceYamlPath,\n    'pnpm-lock.yaml',\n  );\n  if (!(await localPathExists(pnpmLockfilePath))) {\n    logger.trace(\n      { workspaceYamlPath, packageFile },\n      'Failed to find a pnpm-lock.yaml sibling for the workspace.',\n    );\n    return null;\n  }\n\n  return {\n    lockFilePath: pnpmLockfilePath,\n    workspaceYamlPath,\n  };\n}\n\nexport async function detectPnpmWorkspaces(\n  packageFiles: Partial<PackageFile<NpmManagerData>>[],\n): Promise<void> {\n  logger.debug(`Detecting pnpm Workspaces`);\n  const packagePathCache = new Map<string, string[] | null>();\n\n  for (const p of packageFiles) {\n    const { packageFile, managerData } = p;\n    const pnpmLockFile = managerData?.pnpmLockFile;\n\n    // check if pnpmLockFile-file has already been provided\n    if (pnpmLockFile) {\n      logger.trace(\n        { packageFile, pnpmLockFile },\n        'Found an existing pnpm shrinkwrap file; skipping pnpm monorepo check.',\n      );\n      continue;\n    }\n\n    // search for corresponding pnpm workspace\n    // TODO #22198\n    const pnpmWorkspace = await findPnpmWorkspace(packageFile!);\n    if (pnpmWorkspace === null) {\n      continue;\n    }\n    const { workspaceYamlPath, lockFilePath } = pnpmWorkspace;\n\n    // check if package matches workspace filter\n    if (!packagePathCache.has(workspaceYamlPath)) {\n      const filters = await extractPnpmFilters(workspaceYamlPath);\n      // TODO: types (#22198)\n      const localDir = GlobalConfig.get('localDir');\n      const packages = await findPackages(\n        upath.dirname(upath.join(localDir, workspaceYamlPath)),\n        {\n          patterns: filters,\n          // Match the ignores used in @pnpm/find-workspace-packages\n          ignore: ['**/node_modules/**', '**/bower_components/**'],\n        },\n      );\n      const packagePaths = packages.map((pkg) =>\n        upath.join(pkg.dir, 'package.json'),\n      );\n      packagePathCache.set(workspaceYamlPath, packagePaths);\n    }\n    const packagePaths = packagePathCache.get(workspaceYamlPath);\n\n    const isPackageInWorkspace = packagePaths?.some((p) =>\n      p.endsWith(packageFile!),\n    );\n\n    if (isPackageInWorkspace) {\n      p.managerData ??= {};\n      p.managerData.pnpmLockFile = lockFilePath;\n    } else {\n      logger.trace(\n        { packageFile, workspaceYamlPath },\n        `Didn't find the package in the pnpm workspace`,\n      );\n    }\n  }\n}\n\nexport async function getPnpmLock(filePath: string): Promise<LockFile> {\n  try {\n    const pnpmLockRaw = await readLocalFile(filePath, 'utf8');\n    if (!pnpmLockRaw) {\n      throw new Error('Unable to read pnpm-lock.yaml');\n    }\n\n    // pnpm writes a multi-document YAML lockfile when `pnpm-workspace.yaml`\n    // declares `configDependencies`; the env document (config-deps + integrity\n    // metadata) is unconditionally prepended before the main lockfile, so the\n    // main lockfile is always the last document.\n    // https://pnpm.io/config-dependencies.\n    const parsedDocs = parseYaml(pnpmLockRaw);\n    const lockParsed = parsedDocs.at(-1);\n    if (!isPnpmLockfile(lockParsed)) {\n      throw new Error('Invalid or empty lockfile');\n    }\n    logger.trace({ lockParsed }, 'pnpm lockfile parsed');\n\n    // field lockfileVersion is type string in lockfileVersion = 6 and type number in < 6\n    const lockfileVersion: number = isNumber(lockParsed.lockfileVersion)\n      ? lockParsed.lockfileVersion\n      : parseFloat(lockParsed.lockfileVersion);\n\n    const lockedVersions = getLockedVersions(lockParsed);\n    const lockedCatalogVersions = getLockedCatalogVersions(lockParsed);\n\n    return {\n      lockedVersionsWithPath: lockedVersions,\n      lockedVersionsWithCatalog: lockedCatalogVersions,\n      lockfileVersion,\n    };\n  } catch (err) {\n    logger.debug({ filePath, err }, 'Warning: Exception parsing pnpm lockfile');\n    return { lockedVersions: {} };\n  }\n}\n\nfunction getLockedCatalogVersions(\n  lockParsed: PnpmLockFile,\n): Record<string, Record<string, string>> {\n  const lockedVersions: Record<string, Record<string, string>> = {};\n\n  if (isNonEmptyObject(lockParsed.catalogs)) {\n    for (const [catalog, dependencies] of Object.entries(lockParsed.catalogs)) {\n      const versions: Record<string, string> = {};\n\n      for (const [dep, versionCarrier] of Object.entries(dependencies)) {\n        versions[dep] = versionCarrier.version;\n      }\n\n      lockedVersions[catalog] = versions;\n    }\n  }\n\n  return lockedVersions;\n}\n\nfunction getLockedVersions(\n  lockParsed: PnpmLockFile,\n): Record<string, Record<string, Record<string, string>>> {\n  const lockedVersions: Record<\n    string,\n    Record<string, Record<string, string>>\n  > = {};\n\n  // monorepo\n  if (isNonEmptyObject(lockParsed.importers)) {\n    for (const [importer, imports] of Object.entries(lockParsed.importers)) {\n      lockedVersions[importer] = getLockedDependencyVersions(imports);\n    }\n  }\n  // normal repo\n  else {\n    lockedVersions['.'] = getLockedDependencyVersions(lockParsed);\n  }\n\n  return lockedVersions;\n}\n\nfunction getLockedDependencyVersions(\n  obj: PnpmLockFile | Record<string, PnpmDependency>,\n): Record<string, Record<string, string>> {\n  const dependencyTypes = [\n    'dependencies',\n    'devDependencies',\n    'optionalDependencies',\n  ] as const;\n\n  const res: Record<string, Record<string, string>> = {};\n  for (const depType of dependencyTypes) {\n    res[depType] = {};\n    for (const [pkgName, versionCarrier] of Object.entries(\n      coerceObject(obj[depType]),\n    )) {\n      let version: string;\n      if (isObject(versionCarrier)) {\n        version = versionCarrier.version;\n      } else {\n        version = versionCarrier;\n      }\n\n      const pkgVersion = version.split('(')[0].trim();\n      res[depType][pkgName] = pkgVersion;\n    }\n  }\n\n  return res;\n}\n\nexport async function extractPnpmWorkspaceFile(\n  workspaceFile: PnpmWorkspaceFile,\n  packageFile: string,\n): Promise<PackageFileContent<NpmManagerData> | null> {\n  logger.trace(`pnpm.extractPnpmWorkspaceFile(${packageFile})`);\n\n  const pnpmCatalogs = pnpmCatalogsToArray(workspaceFile);\n\n  const deps = extractCatalogDeps(pnpmCatalogs);\n\n  if (workspaceFile.overrides) {\n    for (const [overridesKey, overridesVal] of Object.entries(\n      workspaceFile.overrides,\n    )) {\n      // flat syntax: `parent>parent>child`\n      const packageName =\n        parsePkgAndParentSelector(overridesKey).targetPkg.name;\n      const depType = pnpmWorkspaceOverrides;\n      deps.push({\n        depName: overridesKey,\n        packageName,\n        depType,\n        ...extractDependency(depType, packageName, overridesVal),\n      });\n    }\n  }\n\n  const { registry, registries } = workspaceFile;\n  applyPnpmWorkspaceRegistries(deps, registries, registry);\n\n  let pnpmLockFile;\n  const filePath = getSiblingFileName(packageFile, 'pnpm-lock.yaml');\n\n  if (await readLocalFile(filePath, 'utf8')) {\n    pnpmLockFile = filePath;\n  }\n\n  return {\n    deps,\n    managerData: {\n      pnpmLockFile,\n    },\n  };\n}\n\nfunction pnpmCatalogsToArray({\n  catalog: defaultCatalogDeps,\n  catalogs: namedCatalogs,\n}: PnpmCatalogs): Catalog[] {\n  const result: Catalog[] = [];\n\n  if (defaultCatalogDeps !== undefined) {\n    result.push({ name: 'default', dependencies: defaultCatalogDeps });\n  }\n\n  if (!namedCatalogs) {\n    return result;\n  }\n\n  for (const [name, dependencies] of Object.entries(namedCatalogs)) {\n    result.push({\n      name,\n      dependencies,\n    });\n  }\n\n  return result;\n}\n\nexport function applyPnpmWorkspaceRegistries(\n  deps: PackageDependency[],\n  registries: Record<string, string> | undefined,\n  registry: string | undefined,\n): void {\n  if (!(registry ?? registries)) {\n    return;\n  }\n  for (const dep of deps) {\n    const lookupName = dep.packageName ?? dep.depName;\n    if (lookupName && dep.datasource === NpmDatasource.id) {\n      const registryUrl = resolveRegistryUrl(lookupName, registries, registry);\n      if (registryUrl) {\n        dep.registryUrls = [registryUrl];\n      }\n    }\n  }\n}\n\nexport function resolveRegistryUrl(\n  packageName: string,\n  registries: Record<string, string> | undefined,\n  defaultRegistry: string | undefined,\n): string | null {\n  if (registries) {\n    for (const scope in registries) {\n      // `default` is the fallback registry, not a scope\n      if (scope === 'default') {\n        continue;\n      }\n      // pnpm scope keys keep the leading `@`, e.g. `@my-org`\n      if (packageName.startsWith(`${scope}/`)) {\n        return registries[scope];\n      }\n    }\n    if (registries.default) {\n      return registries.default;\n    }\n  }\n  return defaultRegistry ?? null;\n}\n"],"mappings":";;;;;;;;;;;;;;AAkCA,SAAS,eAAe,KAA+B;CACrD,OAAO,cAAc,GAAG,KAAK,qBAAqB;AACpD;AAEA,eAAsB,mBACpB,UAC+B;CAC/B,IAAI;EAEF,MAAM,WAAW,gBACd,MAAM,cAAc,UAAU,MAAM,CACvC;EACA,IACE,CAAC,MAAM,QAAQ,SAAS,QAAQ,KAChC,CAAC,SAAS,SAAS,OAAO,SAAS,SAAS,IAAI,CAAC,GACjD;GACA,OAAO,MACL,EAAE,SAAS,GACX,mEACF;GACA;EACF;EACA,OAAO,SAAS;CAClB,SAAS,KAAK;EACZ,OAAO,MAAM;GAAE;GAAU;EAAI,GAAG,qCAAqC;EACrE;CACF;AACF;AAEA,eAAsB,kBACpB,aACqE;CAErE,MAAM,oBAAoB,MAAM,yBAC9B,aACA,qBACF;CACA,IAAI,CAAC,mBAAmB;EACtB,OAAO,MACL,EAAE,YAAY,GACd,6DACF;EACA,OAAO;CACT;CAGA,MAAM,mBAAmB,mBACvB,mBACA,gBACF;CACA,IAAI,CAAE,MAAM,gBAAgB,gBAAgB,GAAI;EAC9C,OAAO,MACL;GAAE;GAAmB;EAAY,GACjC,4DACF;EACA,OAAO;CACT;CAEA,OAAO;EACL,cAAc;EACd;CACF;AACF;AAEA,eAAsB,qBACpB,cACe;CACf,OAAO,MAAM,2BAA2B;CACxC,MAAM,mCAAmB,IAAI,IAA6B;CAE1D,KAAK,MAAM,KAAK,cAAc;EAC5B,MAAM,EAAE,aAAa,gBAAgB;EACrC,MAAM,eAAe,aAAa;EAGlC,IAAI,cAAc;GAChB,OAAO,MACL;IAAE;IAAa;GAAa,GAC5B,uEACF;GACA;EACF;EAIA,MAAM,gBAAgB,MAAM,kBAAkB,WAAY;EAC1D,IAAI,kBAAkB,MACpB;EAEF,MAAM,EAAE,mBAAmB,iBAAiB;EAG5C,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,GAAG;GAC5C,MAAM,UAAU,MAAM,mBAAmB,iBAAiB;GAE1D,MAAM,WAAW,aAAa,IAAI,UAAU;GAS5C,MAAM,gBAAe,MARE,aACrB,MAAM,QAAQ,MAAM,KAAK,UAAU,iBAAiB,CAAC,GACrD;IACE,UAAU;IAEV,QAAQ,CAAC,sBAAsB,wBAAwB;GACzD,CACF,EAAA,CAC8B,KAAK,QACjC,MAAM,KAAK,IAAI,KAAK,cAAc,CACpC;GACA,iBAAiB,IAAI,mBAAmB,YAAY;EACtD;EAOA,IANqB,iBAAiB,IAAI,iBAEF,CAAC,EAAE,MAAM,MAC/C,EAAE,SAAS,WAAY,CACzB,GAE0B;GACxB,EAAE,gBAAgB,CAAC;GACnB,EAAE,YAAY,eAAe;EAC/B,OACE,OAAO,MACL;GAAE;GAAa;EAAkB,GACjC,+CACF;CAEJ;AACF;AAEA,eAAsB,YAAY,UAAqC;CACrE,IAAI;EACF,MAAM,cAAc,MAAM,cAAc,UAAU,MAAM;EACxD,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,+BAA+B;EASjD,MAAM,aADa,UAAU,WACD,CAAC,CAAC,GAAG,EAAE;EACnC,IAAI,CAAC,eAAe,UAAU,GAC5B,MAAM,IAAI,MAAM,2BAA2B;EAE7C,OAAO,MAAM,EAAE,WAAW,GAAG,sBAAsB;EAGnD,MAAM,kBAA0B,SAAS,WAAW,eAAe,IAC/D,WAAW,kBACX,WAAW,WAAW,eAAe;EAKzC,OAAO;GACL,wBAJqB,kBAAkB,UAIF;GACrC,2BAJ4B,yBAAyB,UAIN;GAC/C;EACF;CACF,SAAS,KAAK;EACZ,OAAO,MAAM;GAAE;GAAU;EAAI,GAAG,0CAA0C;EAC1E,OAAO,EAAE,gBAAgB,CAAC,EAAE;CAC9B;AACF;AAEA,SAAS,yBACP,YACwC;CACxC,MAAM,iBAAyD,CAAC;CAEhE,IAAI,iBAAiB,WAAW,QAAQ,GACtC,KAAK,MAAM,CAAC,SAAS,iBAAiB,OAAO,QAAQ,WAAW,QAAQ,GAAG;EACzE,MAAM,WAAmC,CAAC;EAE1C,KAAK,MAAM,CAAC,KAAK,mBAAmB,OAAO,QAAQ,YAAY,GAC7D,SAAS,OAAO,eAAe;EAGjC,eAAe,WAAW;CAC5B;CAGF,OAAO;AACT;AAEA,SAAS,kBACP,YACwD;CACxD,MAAM,iBAGF,CAAC;CAGL,IAAI,iBAAiB,WAAW,SAAS,GACvC,KAAK,MAAM,CAAC,UAAU,YAAY,OAAO,QAAQ,WAAW,SAAS,GACnE,eAAe,YAAY,4BAA4B,OAAO;MAKhE,eAAe,OAAO,4BAA4B,UAAU;CAG9D,OAAO;AACT;AAEA,SAAS,4BACP,KACwC;CACxC,MAAM,kBAAkB;EACtB;EACA;EACA;CACF;CAEA,MAAM,MAA8C,CAAC;CACrD,KAAK,MAAM,WAAW,iBAAiB;EACrC,IAAI,WAAW,CAAC;EAChB,KAAK,MAAM,CAAC,SAAS,mBAAmB,OAAO,QAC7C,aAAa,IAAI,QAAQ,CAC3B,GAAG;GACD,IAAI;GACJ,IAAI,SAAS,cAAc,GACzB,UAAU,eAAe;QAEzB,UAAU;GAGZ,MAAM,aAAa,QAAQ,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK;GAC9C,IAAI,QAAQ,CAAC,WAAW;EAC1B;CACF;CAEA,OAAO;AACT;AAEA,eAAsB,yBACpB,eACA,aACoD;CACpD,OAAO,MAAM,iCAAiC,YAAY,EAAE;CAE5D,MAAM,eAAe,oBAAoB,aAAa;CAEtD,MAAM,OAAO,mBAAmB,YAAY;CAE5C,IAAI,cAAc,WAChB,KAAK,MAAM,CAAC,cAAc,iBAAiB,OAAO,QAChD,cAAc,SAChB,GAAG;EAED,MAAM,cACJ,0BAA0B,YAAY,CAAC,CAAC,UAAU;EACpD,MAAM,UAAU;EAChB,KAAK,KAAK;GACR,SAAS;GACT;GACA;GACA,GAAG,kBAAkB,SAAS,aAAa,YAAY;EACzD,CAAC;CACH;CAGF,MAAM,EAAE,UAAU,eAAe;CACjC,6BAA6B,MAAM,YAAY,QAAQ;CAEvD,IAAI;CACJ,MAAM,WAAW,mBAAmB,aAAa,gBAAgB;CAEjE,IAAI,MAAM,cAAc,UAAU,MAAM,GACtC,eAAe;CAGjB,OAAO;EACL;EACA,aAAa,EACX,aACF;CACF;AACF;AAEA,SAAS,oBAAoB,EAC3B,SAAS,oBACT,UAAU,iBACgB;CAC1B,MAAM,SAAoB,CAAC;CAE3B,IAAI,uBAAuB,KAAA,GACzB,OAAO,KAAK;EAAE,MAAM;EAAW,cAAc;CAAmB,CAAC;CAGnE,IAAI,CAAC,eACH,OAAO;CAGT,KAAK,MAAM,CAAC,MAAM,iBAAiB,OAAO,QAAQ,aAAa,GAC7D,OAAO,KAAK;EACV;EACA;CACF,CAAC;CAGH,OAAO;AACT;AAEA,SAAgB,6BACd,MACA,YACA,UACM;CACN,IAAI,EAAE,YAAY,aAChB;CAEF,KAAK,MAAM,OAAO,MAAM;EACtB,MAAM,aAAa,IAAI,eAAe,IAAI;EAC1C,IAAI,cAAc,IAAI,eAAe,cAAc,IAAI;GACrD,MAAM,cAAc,mBAAmB,YAAY,YAAY,QAAQ;GACvE,IAAI,aACF,IAAI,eAAe,CAAC,WAAW;EAEnC;CACF;AACF;AAEA,SAAgB,mBACd,aACA,YACA,iBACe;CACf,IAAI,YAAY;EACd,KAAK,MAAM,SAAS,YAAY;GAE9B,IAAI,UAAU,WACZ;GAGF,IAAI,YAAY,WAAW,GAAG,MAAM,EAAE,GACpC,OAAO,WAAW;EAEtB;EACA,IAAI,WAAW,SACb,OAAO,WAAW;CAEtB;CACA,OAAO,mBAAmB;AAC5B"}

package/dist/modules/manager/npm/extract/post/locked-versions.js

@@ -13,7 +13,7 @@ async function getLockedVersions(packageFiles) {
 	logger.debug("Finding locked versions");
 	for (const packageFile of packageFiles) {
 		const { managerData = {} } = packageFile;
-		const { yarnLock, npmLock, pnpmShrinkwrap } = managerData;
+		const { yarnLock, npmLock, pnpmLockFile } = managerData;
 		const lockFiles = [];
 		if (yarnLock) {
 			logger.trace("Found yarnLock");
@@ -79,25 +79,25 @@ async function getLockedVersions(packageFiles) {
 				if (relativeDir && relativeDir !== ".") lockedDepName = `${relativeDir}/node_modules/${dep.depName}`;
 				dep.lockedVersion = semver.valid(lockFileCache[npmLock].lockedVersions?.[lockedDepName]);
 			}
-		} else if (pnpmShrinkwrap) {
+		} else if (pnpmLockFile) {
 			logger.debug("Found pnpm lock-file");
-			lockFiles.push(pnpmShrinkwrap);
-			if (!lockFileCache[pnpmShrinkwrap]) {
-				logger.trace(`Retrieving/parsing ${pnpmShrinkwrap}`);
-				lockFileCache[pnpmShrinkwrap] = await getPnpmLock(pnpmShrinkwrap);
+			lockFiles.push(pnpmLockFile);
+			if (!lockFileCache[pnpmLockFile]) {
+				logger.trace(`Retrieving/parsing ${pnpmLockFile}`);
+				lockFileCache[pnpmLockFile] = await getPnpmLock(pnpmLockFile);
 			}
 			const packageDir = upath.dirname(packageFile.packageFile);
-			const pnpmRootDir = upath.dirname(pnpmShrinkwrap);
+			const pnpmRootDir = upath.dirname(pnpmLockFile);
 			const relativeDir = upath.relative(pnpmRootDir, packageDir) || ".";
 			for (const dep of packageFile.deps) {
 				const { depName, depType } = dep;
 				const catalogName = pnpmCatalogDepTypeRe.exec(depType)?.groups?.version;
 				if (catalogName) {
-					const lockedVersion = semver.valid(lockFileCache[pnpmShrinkwrap].lockedVersionsWithCatalog?.[catalogName]?.[depName]);
+					const lockedVersion = semver.valid(lockFileCache[pnpmLockFile].lockedVersionsWithCatalog?.[catalogName]?.[depName]);
 					// v8 ignore else -- TODO: add test #40625
 					if (isString(lockedVersion)) dep.lockedVersion = lockedVersion;
 				} else {
-					const lockedVersion = semver.valid(lockFileCache[pnpmShrinkwrap].lockedVersionsWithPath?.[relativeDir]?.[depType]?.[depName]);
+					const lockedVersion = semver.valid(lockFileCache[pnpmLockFile].lockedVersionsWithPath?.[relativeDir]?.[depType]?.[depName]);
 					// v8 ignore else -- TODO: add test #40625
 					if (isString(lockedVersion)) dep.lockedVersion = lockedVersion;
 				}

package/dist/modules/manager/npm/extract/post/locked-versions.js.map

@@ -1 +1 @@
-{"version":3,"file":"locked-versions.js","names":[],"sources":["../../../../../../lib/modules/manager/npm/extract/post/locked-versions.ts"],"sourcesContent":["import { isString } from '@sindresorhus/is';\nimport semver from 'semver';\nimport upath from 'upath';\nimport { logger } from '../../../../../logger/index.ts';\nimport { regEx } from '../../../../../util/regex.ts';\nimport type { PackageFile } from '../../../types.ts';\nimport type { NpmManagerData } from '../../types.ts';\nimport { getNpmLock } from '../npm.ts';\nimport { getPnpmLock } from '../pnpm.ts';\nimport type { LockFile } from '../types.ts';\nimport { getYarnLock, getYarnVersionFromLock } from '../yarn.ts';\n\nconst pnpmCatalogDepTypeRe = regEx(/pnpm\\.catalog\\.(?<version>.*)/);\n\nexport async function getLockedVersions(\n  packageFiles: PackageFile<NpmManagerData>[],\n): Promise<void> {\n  const lockFileCache: Record<string, LockFile> = {};\n  logger.debug('Finding locked versions');\n  for (const packageFile of packageFiles) {\n    const { managerData = {} } = packageFile;\n    const { yarnLock, npmLock, pnpmShrinkwrap } = managerData;\n    const lockFiles: string[] = [];\n    if (yarnLock) {\n      logger.trace('Found yarnLock');\n      lockFiles.push(yarnLock);\n      // v8 ignore else -- TODO: add test #40625\n      if (!lockFileCache[yarnLock]) {\n        logger.trace(`Retrieving/parsing ${yarnLock}`);\n        lockFileCache[yarnLock] = await getYarnLock(yarnLock);\n      }\n      const { isYarn1 } = lockFileCache[yarnLock];\n      let yarn: string | undefined;\n      if (!isYarn1 && !packageFile.extractedConstraints?.yarn) {\n        yarn = getYarnVersionFromLock(lockFileCache[yarnLock]);\n      }\n      if (yarn) {\n        packageFile.extractedConstraints ??= {};\n        packageFile.extractedConstraints.yarn = yarn;\n      }\n      for (const dep of packageFile.deps) {\n        dep.lockedVersion =\n          lockFileCache[yarnLock].lockedVersions?.[\n            // TODO: types (#22198)\n            `${dep.depName}@${dep.currentValue}`\n          ];\n        if (\n          (dep.depType === 'engines' || dep.depType === 'packageManager') &&\n          dep.depName === 'yarn' &&\n          !isYarn1\n        ) {\n          dep.packageName = '@yarnpkg/cli';\n        }\n      }\n    } else if (npmLock) {\n      logger.debug(`Found ${npmLock} for ${packageFile.packageFile}`);\n      lockFiles.push(npmLock);\n      if (!lockFileCache[npmLock]) {\n        logger.trace(`Retrieving/parsing ${npmLock}`);\n        const cache = await getNpmLock(npmLock);\n        /* v8 ignore next -- needs test */\n        if (!cache) {\n          logger.warn({ npmLock }, 'Npm: unable to get lockfile');\n          return;\n        }\n        lockFileCache[npmLock] = cache;\n      }\n\n      const { lockfileVersion } = lockFileCache[npmLock];\n      let npm: string | undefined;\n      if (lockfileVersion === 1) {\n        if (packageFile.extractedConstraints?.npm) {\n          // Add a <7 constraint if it's not already a fixed version\n          if (\n            semver.satisfies('6.14.18', packageFile.extractedConstraints.npm)\n          ) {\n            npm = `${packageFile.extractedConstraints.npm} <7`;\n          }\n        } else {\n          npm = '<7';\n        }\n      } else if (lockfileVersion === 2) {\n        if (packageFile.extractedConstraints?.npm) {\n          // Add a <9 constraint if the latest 8.x is compatible\n          if (\n            semver.satisfies('8.19.3', packageFile.extractedConstraints.npm)\n          ) {\n            npm = `${packageFile.extractedConstraints.npm} <9`;\n          }\n        } else {\n          npm = '<9';\n        }\n      } else if (lockfileVersion === 3) {\n        if (!packageFile.extractedConstraints?.npm) {\n          npm = '>=7';\n        }\n      } else {\n        logger.warn(\n          { lockfileVersion, npmLock },\n          'Found unsupported npm lockfile version',\n        );\n        return;\n      }\n      if (npm) {\n        packageFile.extractedConstraints ??= {};\n        packageFile.extractedConstraints.npm = npm;\n      }\n\n      const packageDir = upath.dirname(packageFile.packageFile);\n      const npmRootDir = upath.dirname(npmLock);\n      const relativeDir = upath.relative(npmRootDir, packageDir);\n\n      for (const dep of packageFile.deps) {\n        // Skip dependency types which are not locked in the lock file\n        if (\n          dep.depType === 'engines' ||\n          dep.depType === 'packageManager' ||\n          dep.depType === 'volta'\n        ) {\n          continue;\n        }\n\n        // TODO: types (#22198)\n        let lockedDepName = dep.depName!;\n        if (relativeDir && relativeDir !== '.') {\n          lockedDepName = `${relativeDir}/node_modules/${dep.depName}`;\n        }\n\n        dep.lockedVersion = semver.valid(\n          lockFileCache[npmLock].lockedVersions?.[lockedDepName],\n        )!;\n      }\n    } else if (pnpmShrinkwrap) {\n      logger.debug('Found pnpm lock-file');\n      lockFiles.push(pnpmShrinkwrap);\n      if (!lockFileCache[pnpmShrinkwrap]) {\n        logger.trace(`Retrieving/parsing ${pnpmShrinkwrap}`);\n        lockFileCache[pnpmShrinkwrap] = await getPnpmLock(pnpmShrinkwrap);\n      }\n\n      const packageDir = upath.dirname(packageFile.packageFile);\n      const pnpmRootDir = upath.dirname(pnpmShrinkwrap);\n      const relativeDir = upath.relative(pnpmRootDir, packageDir) || '.';\n\n      for (const dep of packageFile.deps) {\n        const { depName, depType } = dep;\n\n        const catalogName = pnpmCatalogDepTypeRe.exec(depType!)?.groups\n          ?.version;\n\n        if (catalogName) {\n          const lockedVersion = semver.valid(\n            lockFileCache[pnpmShrinkwrap].lockedVersionsWithCatalog?.[\n              catalogName\n            ]?.[depName!],\n          );\n\n          // v8 ignore else -- TODO: add test #40625\n          if (isString(lockedVersion)) {\n            dep.lockedVersion = lockedVersion;\n          }\n        } else {\n          // TODO: types (#22198)\n          const lockedVersion = semver.valid(\n            lockFileCache[pnpmShrinkwrap].lockedVersionsWithPath?.[\n              relativeDir\n            ]?.[depType!]?.[depName!],\n          );\n\n          // v8 ignore else -- TODO: add test #40625\n          if (isString(lockedVersion)) {\n            dep.lockedVersion = lockedVersion;\n          }\n        }\n      }\n    }\n    if (lockFiles.length) {\n      packageFile.lockFiles = lockFiles;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAYA,MAAM,uBAAuB,MAAM,+BAA+B;AAElE,eAAsB,kBACpB,cACe;CACf,MAAM,gBAA0C,CAAC;CACjD,OAAO,MAAM,yBAAyB;CACtC,KAAK,MAAM,eAAe,cAAc;EACtC,MAAM,EAAE,cAAc,CAAC,MAAM;EAC7B,MAAM,EAAE,UAAU,SAAS,mBAAmB;EAC9C,MAAM,YAAsB,CAAC;EAC7B,IAAI,UAAU;GACZ,OAAO,MAAM,gBAAgB;GAC7B,UAAU,KAAK,QAAQ;;GAEvB,IAAI,CAAC,cAAc,WAAW;IAC5B,OAAO,MAAM,sBAAsB,UAAU;IAC7C,cAAc,YAAY,MAAM,YAAY,QAAQ;GACtD;GACA,MAAM,EAAE,YAAY,cAAc;GAClC,IAAI;GACJ,IAAI,CAAC,WAAW,CAAC,YAAY,sBAAsB,MACjD,OAAO,uBAAuB,cAAc,SAAS;GAEvD,IAAI,MAAM;IACR,YAAY,yBAAyB,CAAC;IACtC,YAAY,qBAAqB,OAAO;GAC1C;GACA,KAAK,MAAM,OAAO,YAAY,MAAM;IAClC,IAAI,gBACF,cAAc,SAAS,CAAC,iBAEtB,GAAG,IAAI,QAAQ,GAAG,IAAI;IAE1B,KACG,IAAI,YAAY,aAAa,IAAI,YAAY,qBAC9C,IAAI,YAAY,UAChB,CAAC,SAED,IAAI,cAAc;GAEtB;EACF,OAAO,IAAI,SAAS;GAClB,OAAO,MAAM,SAAS,QAAQ,OAAO,YAAY,aAAa;GAC9D,UAAU,KAAK,OAAO;GACtB,IAAI,CAAC,cAAc,UAAU;IAC3B,OAAO,MAAM,sBAAsB,SAAS;IAC5C,MAAM,QAAQ,MAAM,WAAW,OAAO;;IAEtC,IAAI,CAAC,OAAO;KACV,OAAO,KAAK,EAAE,QAAQ,GAAG,6BAA6B;KACtD;IACF;IACA,cAAc,WAAW;GAC3B;GAEA,MAAM,EAAE,oBAAoB,cAAc;GAC1C,IAAI;GACJ,IAAI,oBAAoB,GAAG;IACzB,IAAI,YAAY,sBAAsB,KAGlC;SAAA,OAAO,UAAU,WAAW,YAAY,qBAAqB,GAAG,GAEhE,MAAM,GAAG,YAAY,qBAAqB,IAAI;IAAA,OAGhD,MAAM;GAEV,OAAO,IAAI,oBAAoB,GAAG;IAChC,IAAI,YAAY,sBAAsB,KAGlC;SAAA,OAAO,UAAU,UAAU,YAAY,qBAAqB,GAAG,GAE/D,MAAM,GAAG,YAAY,qBAAqB,IAAI;IAAA,OAGhD,MAAM;GAEV,OAAO,IAAI,oBAAoB,GACzB;QAAA,CAAC,YAAY,sBAAsB,KACrC,MAAM;GAAA,OAEH;IACL,OAAO,KACL;KAAE;KAAiB;IAAQ,GAC3B,wCACF;IACA;GACF;GACA,IAAI,KAAK;IACP,YAAY,yBAAyB,CAAC;IACtC,YAAY,qBAAqB,MAAM;GACzC;GAEA,MAAM,aAAa,MAAM,QAAQ,YAAY,WAAW;GACxD,MAAM,aAAa,MAAM,QAAQ,OAAO;GACxC,MAAM,cAAc,MAAM,SAAS,YAAY,UAAU;GAEzD,KAAK,MAAM,OAAO,YAAY,MAAM;IAElC,IACE,IAAI,YAAY,aAChB,IAAI,YAAY,oBAChB,IAAI,YAAY,SAEhB;IAIF,IAAI,gBAAgB,IAAI;IACxB,IAAI,eAAe,gBAAgB,KACjC,gBAAgB,GAAG,YAAY,gBAAgB,IAAI;IAGrD,IAAI,gBAAgB,OAAO,MACzB,cAAc,QAAQ,CAAC,iBAAiB,cAC1C;GACF;EACF,OAAO,IAAI,gBAAgB;GACzB,OAAO,MAAM,sBAAsB;GACnC,UAAU,KAAK,cAAc;GAC7B,IAAI,CAAC,cAAc,iBAAiB;IAClC,OAAO,MAAM,sBAAsB,gBAAgB;IACnD,cAAc,kBAAkB,MAAM,YAAY,cAAc;GAClE;GAEA,MAAM,aAAa,MAAM,QAAQ,YAAY,WAAW;GACxD,MAAM,cAAc,MAAM,QAAQ,cAAc;GAChD,MAAM,cAAc,MAAM,SAAS,aAAa,UAAU,KAAK;GAE/D,KAAK,MAAM,OAAO,YAAY,MAAM;IAClC,MAAM,EAAE,SAAS,YAAY;IAE7B,MAAM,cAAc,qBAAqB,KAAK,OAAQ,CAAC,EAAE,QACrD;IAEJ,IAAI,aAAa;KACf,MAAM,gBAAgB,OAAO,MAC3B,cAAc,eAAe,CAAC,4BAC5B,YACD,GAAG,QACN;;KAGA,IAAI,SAAS,aAAa,GACxB,IAAI,gBAAgB;IAExB,OAAO;KAEL,MAAM,gBAAgB,OAAO,MAC3B,cAAc,eAAe,CAAC,yBAC5B,YACD,GAAG,QAAS,GAAG,QAClB;;KAGA,IAAI,SAAS,aAAa,GACxB,IAAI,gBAAgB;IAExB;GACF;EACF;EACA,IAAI,UAAU,QACZ,YAAY,YAAY;CAE5B;AACF"}
+{"version":3,"file":"locked-versions.js","names":[],"sources":["../../../../../../lib/modules/manager/npm/extract/post/locked-versions.ts"],"sourcesContent":["import { isString } from '@sindresorhus/is';\nimport semver from 'semver';\nimport upath from 'upath';\nimport { logger } from '../../../../../logger/index.ts';\nimport { regEx } from '../../../../../util/regex.ts';\nimport type { PackageFile } from '../../../types.ts';\nimport type { NpmManagerData } from '../../types.ts';\nimport { getNpmLock } from '../npm.ts';\nimport { getPnpmLock } from '../pnpm.ts';\nimport type { LockFile } from '../types.ts';\nimport { getYarnLock, getYarnVersionFromLock } from '../yarn.ts';\n\nconst pnpmCatalogDepTypeRe = regEx(/pnpm\\.catalog\\.(?<version>.*)/);\n\nexport async function getLockedVersions(\n  packageFiles: PackageFile<NpmManagerData>[],\n): Promise<void> {\n  const lockFileCache: Record<string, LockFile> = {};\n  logger.debug('Finding locked versions');\n  for (const packageFile of packageFiles) {\n    const { managerData = {} } = packageFile;\n    const { yarnLock, npmLock, pnpmLockFile } = managerData;\n    const lockFiles: string[] = [];\n    if (yarnLock) {\n      logger.trace('Found yarnLock');\n      lockFiles.push(yarnLock);\n      // v8 ignore else -- TODO: add test #40625\n      if (!lockFileCache[yarnLock]) {\n        logger.trace(`Retrieving/parsing ${yarnLock}`);\n        lockFileCache[yarnLock] = await getYarnLock(yarnLock);\n      }\n      const { isYarn1 } = lockFileCache[yarnLock];\n      let yarn: string | undefined;\n      if (!isYarn1 && !packageFile.extractedConstraints?.yarn) {\n        yarn = getYarnVersionFromLock(lockFileCache[yarnLock]);\n      }\n      if (yarn) {\n        packageFile.extractedConstraints ??= {};\n        packageFile.extractedConstraints.yarn = yarn;\n      }\n      for (const dep of packageFile.deps) {\n        dep.lockedVersion =\n          lockFileCache[yarnLock].lockedVersions?.[\n            // TODO: types (#22198)\n            `${dep.depName}@${dep.currentValue}`\n          ];\n        if (\n          (dep.depType === 'engines' || dep.depType === 'packageManager') &&\n          dep.depName === 'yarn' &&\n          !isYarn1\n        ) {\n          dep.packageName = '@yarnpkg/cli';\n        }\n      }\n    } else if (npmLock) {\n      logger.debug(`Found ${npmLock} for ${packageFile.packageFile}`);\n      lockFiles.push(npmLock);\n      if (!lockFileCache[npmLock]) {\n        logger.trace(`Retrieving/parsing ${npmLock}`);\n        const cache = await getNpmLock(npmLock);\n        /* v8 ignore next -- needs test */\n        if (!cache) {\n          logger.warn({ npmLock }, 'Npm: unable to get lockfile');\n          return;\n        }\n        lockFileCache[npmLock] = cache;\n      }\n\n      const { lockfileVersion } = lockFileCache[npmLock];\n      let npm: string | undefined;\n      if (lockfileVersion === 1) {\n        if (packageFile.extractedConstraints?.npm) {\n          // Add a <7 constraint if it's not already a fixed version\n          if (\n            semver.satisfies('6.14.18', packageFile.extractedConstraints.npm)\n          ) {\n            npm = `${packageFile.extractedConstraints.npm} <7`;\n          }\n        } else {\n          npm = '<7';\n        }\n      } else if (lockfileVersion === 2) {\n        if (packageFile.extractedConstraints?.npm) {\n          // Add a <9 constraint if the latest 8.x is compatible\n          if (\n            semver.satisfies('8.19.3', packageFile.extractedConstraints.npm)\n          ) {\n            npm = `${packageFile.extractedConstraints.npm} <9`;\n          }\n        } else {\n          npm = '<9';\n        }\n      } else if (lockfileVersion === 3) {\n        if (!packageFile.extractedConstraints?.npm) {\n          npm = '>=7';\n        }\n      } else {\n        logger.warn(\n          { lockfileVersion, npmLock },\n          'Found unsupported npm lockfile version',\n        );\n        return;\n      }\n      if (npm) {\n        packageFile.extractedConstraints ??= {};\n        packageFile.extractedConstraints.npm = npm;\n      }\n\n      const packageDir = upath.dirname(packageFile.packageFile);\n      const npmRootDir = upath.dirname(npmLock);\n      const relativeDir = upath.relative(npmRootDir, packageDir);\n\n      for (const dep of packageFile.deps) {\n        // Skip dependency types which are not locked in the lock file\n        if (\n          dep.depType === 'engines' ||\n          dep.depType === 'packageManager' ||\n          dep.depType === 'volta'\n        ) {\n          continue;\n        }\n\n        // TODO: types (#22198)\n        let lockedDepName = dep.depName!;\n        if (relativeDir && relativeDir !== '.') {\n          lockedDepName = `${relativeDir}/node_modules/${dep.depName}`;\n        }\n\n        dep.lockedVersion = semver.valid(\n          lockFileCache[npmLock].lockedVersions?.[lockedDepName],\n        )!;\n      }\n    } else if (pnpmLockFile) {\n      logger.debug('Found pnpm lock-file');\n      lockFiles.push(pnpmLockFile);\n      if (!lockFileCache[pnpmLockFile]) {\n        logger.trace(`Retrieving/parsing ${pnpmLockFile}`);\n        lockFileCache[pnpmLockFile] = await getPnpmLock(pnpmLockFile);\n      }\n\n      const packageDir = upath.dirname(packageFile.packageFile);\n      const pnpmRootDir = upath.dirname(pnpmLockFile);\n      const relativeDir = upath.relative(pnpmRootDir, packageDir) || '.';\n\n      for (const dep of packageFile.deps) {\n        const { depName, depType } = dep;\n\n        const catalogName = pnpmCatalogDepTypeRe.exec(depType!)?.groups\n          ?.version;\n\n        if (catalogName) {\n          const lockedVersion = semver.valid(\n            lockFileCache[pnpmLockFile].lockedVersionsWithCatalog?.[\n              catalogName\n            ]?.[depName!],\n          );\n\n          // v8 ignore else -- TODO: add test #40625\n          if (isString(lockedVersion)) {\n            dep.lockedVersion = lockedVersion;\n          }\n        } else {\n          // TODO: types (#22198)\n          const lockedVersion = semver.valid(\n            lockFileCache[pnpmLockFile].lockedVersionsWithPath?.[relativeDir]?.[\n              depType!\n            ]?.[depName!],\n          );\n\n          // v8 ignore else -- TODO: add test #40625\n          if (isString(lockedVersion)) {\n            dep.lockedVersion = lockedVersion;\n          }\n        }\n      }\n    }\n    if (lockFiles.length) {\n      packageFile.lockFiles = lockFiles;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAYA,MAAM,uBAAuB,MAAM,+BAA+B;AAElE,eAAsB,kBACpB,cACe;CACf,MAAM,gBAA0C,CAAC;CACjD,OAAO,MAAM,yBAAyB;CACtC,KAAK,MAAM,eAAe,cAAc;EACtC,MAAM,EAAE,cAAc,CAAC,MAAM;EAC7B,MAAM,EAAE,UAAU,SAAS,iBAAiB;EAC5C,MAAM,YAAsB,CAAC;EAC7B,IAAI,UAAU;GACZ,OAAO,MAAM,gBAAgB;GAC7B,UAAU,KAAK,QAAQ;;GAEvB,IAAI,CAAC,cAAc,WAAW;IAC5B,OAAO,MAAM,sBAAsB,UAAU;IAC7C,cAAc,YAAY,MAAM,YAAY,QAAQ;GACtD;GACA,MAAM,EAAE,YAAY,cAAc;GAClC,IAAI;GACJ,IAAI,CAAC,WAAW,CAAC,YAAY,sBAAsB,MACjD,OAAO,uBAAuB,cAAc,SAAS;GAEvD,IAAI,MAAM;IACR,YAAY,yBAAyB,CAAC;IACtC,YAAY,qBAAqB,OAAO;GAC1C;GACA,KAAK,MAAM,OAAO,YAAY,MAAM;IAClC,IAAI,gBACF,cAAc,SAAS,CAAC,iBAEtB,GAAG,IAAI,QAAQ,GAAG,IAAI;IAE1B,KACG,IAAI,YAAY,aAAa,IAAI,YAAY,qBAC9C,IAAI,YAAY,UAChB,CAAC,SAED,IAAI,cAAc;GAEtB;EACF,OAAO,IAAI,SAAS;GAClB,OAAO,MAAM,SAAS,QAAQ,OAAO,YAAY,aAAa;GAC9D,UAAU,KAAK,OAAO;GACtB,IAAI,CAAC,cAAc,UAAU;IAC3B,OAAO,MAAM,sBAAsB,SAAS;IAC5C,MAAM,QAAQ,MAAM,WAAW,OAAO;;IAEtC,IAAI,CAAC,OAAO;KACV,OAAO,KAAK,EAAE,QAAQ,GAAG,6BAA6B;KACtD;IACF;IACA,cAAc,WAAW;GAC3B;GAEA,MAAM,EAAE,oBAAoB,cAAc;GAC1C,IAAI;GACJ,IAAI,oBAAoB,GAAG;IACzB,IAAI,YAAY,sBAAsB,KAGlC;SAAA,OAAO,UAAU,WAAW,YAAY,qBAAqB,GAAG,GAEhE,MAAM,GAAG,YAAY,qBAAqB,IAAI;IAAA,OAGhD,MAAM;GAEV,OAAO,IAAI,oBAAoB,GAAG;IAChC,IAAI,YAAY,sBAAsB,KAGlC;SAAA,OAAO,UAAU,UAAU,YAAY,qBAAqB,GAAG,GAE/D,MAAM,GAAG,YAAY,qBAAqB,IAAI;IAAA,OAGhD,MAAM;GAEV,OAAO,IAAI,oBAAoB,GACzB;QAAA,CAAC,YAAY,sBAAsB,KACrC,MAAM;GAAA,OAEH;IACL,OAAO,KACL;KAAE;KAAiB;IAAQ,GAC3B,wCACF;IACA;GACF;GACA,IAAI,KAAK;IACP,YAAY,yBAAyB,CAAC;IACtC,YAAY,qBAAqB,MAAM;GACzC;GAEA,MAAM,aAAa,MAAM,QAAQ,YAAY,WAAW;GACxD,MAAM,aAAa,MAAM,QAAQ,OAAO;GACxC,MAAM,cAAc,MAAM,SAAS,YAAY,UAAU;GAEzD,KAAK,MAAM,OAAO,YAAY,MAAM;IAElC,IACE,IAAI,YAAY,aAChB,IAAI,YAAY,oBAChB,IAAI,YAAY,SAEhB;IAIF,IAAI,gBAAgB,IAAI;IACxB,IAAI,eAAe,gBAAgB,KACjC,gBAAgB,GAAG,YAAY,gBAAgB,IAAI;IAGrD,IAAI,gBAAgB,OAAO,MACzB,cAAc,QAAQ,CAAC,iBAAiB,cAC1C;GACF;EACF,OAAO,IAAI,cAAc;GACvB,OAAO,MAAM,sBAAsB;GACnC,UAAU,KAAK,YAAY;GAC3B,IAAI,CAAC,cAAc,eAAe;IAChC,OAAO,MAAM,sBAAsB,cAAc;IACjD,cAAc,gBAAgB,MAAM,YAAY,YAAY;GAC9D;GAEA,MAAM,aAAa,MAAM,QAAQ,YAAY,WAAW;GACxD,MAAM,cAAc,MAAM,QAAQ,YAAY;GAC9C,MAAM,cAAc,MAAM,SAAS,aAAa,UAAU,KAAK;GAE/D,KAAK,MAAM,OAAO,YAAY,MAAM;IAClC,MAAM,EAAE,SAAS,YAAY;IAE7B,MAAM,cAAc,qBAAqB,KAAK,OAAQ,CAAC,EAAE,QACrD;IAEJ,IAAI,aAAa;KACf,MAAM,gBAAgB,OAAO,MAC3B,cAAc,aAAa,CAAC,4BAC1B,YACD,GAAG,QACN;;KAGA,IAAI,SAAS,aAAa,GACxB,IAAI,gBAAgB;IAExB,OAAO;KAEL,MAAM,gBAAgB,OAAO,MAC3B,cAAc,aAAa,CAAC,yBAAyB,YAAY,GAC/D,QACD,GAAG,QACN;;KAGA,IAAI,SAAS,aAAa,GACxB,IAAI,gBAAgB;IAExB;GACF;EACF;EACA,IAAI,UAAU,QACZ,YAAY,YAAY;CAE5B;AACF"}

package/dist/modules/manager/npm/post-update/index.js

@@ -27,18 +27,18 @@ function getDirs(arr) {
 function determineLockFileDirs(config, packageFiles) {
 	const npmLockDirs = [];
 	const yarnLockDirs = [];
-	const pnpmShrinkwrapDirs = [];
+	const pnpmLockFileDirs = [];
 	for (const upgrade of config.upgrades)
  // v8 ignore else -- TODO: add test #40625
 	if (upgrade.updateType === "lockFileMaintenance" || upgrade.isRemediation === true || upgrade.isLockfileUpdate === true) {
 		yarnLockDirs.push(upgrade.managerData?.yarnLock);
 		npmLockDirs.push(upgrade.managerData?.npmLock);
-		pnpmShrinkwrapDirs.push(upgrade.managerData?.pnpmShrinkwrap);
+		pnpmLockFileDirs.push(upgrade.managerData?.pnpmLockFile);
 	}
 	if (config.upgrades.every((upgrade) => upgrade.updateType === "lockFileMaintenance" || upgrade.isLockfileUpdate)) return {
 		yarnLockDirs: getDirs(yarnLockDirs),
 		npmLockDirs: getDirs(npmLockDirs),
-		pnpmShrinkwrapDirs: getDirs(pnpmShrinkwrapDirs)
+		pnpmLockFileDirs: getDirs(pnpmLockFileDirs)
 	};
 	function getPackageFile(fileName) {
 		logger.trace(`Looking for packageFile: ${fileName}`);
@@ -58,12 +58,12 @@ function determineLockFileDirs(config, packageFiles) {
 		if (!packageFile.managerData) continue;
 		yarnLockDirs.push(packageFile.managerData.yarnLock);
 		npmLockDirs.push(packageFile.managerData.npmLock);
-		pnpmShrinkwrapDirs.push(packageFile.managerData.pnpmShrinkwrap);
+		pnpmLockFileDirs.push(packageFile.managerData.pnpmLockFile);
 	}
 	return {
 		yarnLockDirs: getDirs(yarnLockDirs),
 		npmLockDirs: getDirs(npmLockDirs),
-		pnpmShrinkwrapDirs: getDirs(pnpmShrinkwrapDirs)
+		pnpmLockFileDirs: getDirs(pnpmLockFileDirs)
 	};
 }
 async function writeExistingFiles(config, packageFiles) {
@@ -380,12 +380,12 @@ async function getAdditionalFiles(config, packageFiles) {
 		/* v8 ignore next -- needs test */
 		if (existingYarnrcYmlContent) await writeLocalFile(yarnRcYmlFilename, existingYarnrcYmlContent);
 	}
-	for (const pnpmShrinkwrap of dirs.pnpmShrinkwrapDirs) {
-		const lockFileDir = upath.dirname(pnpmShrinkwrap);
+	for (const pnpmLockFile of dirs.pnpmLockFileDirs) {
+		const lockFileDir = upath.dirname(pnpmLockFile);
 		const npmrcContent = await getNpmrcContent(lockFileDir);
 		await updateNpmrcContent(lockFileDir, npmrcContent, additionalNpmrcContent);
 		logger.debug(`Generating pnpm-lock.yaml for ${lockFileDir}`);
-		const upgrades = config.upgrades.filter((upgrade) => upgrade.managerData?.pnpmShrinkwrap === pnpmShrinkwrap);
+		const upgrades = config.upgrades.filter((upgrade) => upgrade.managerData?.pnpmLockFile === pnpmLockFile);
 		const res = await generateLockFile$1(lockFileDir, env, config, upgrades);
 		if (res.error) {
 			/* v8 ignore next -- needs test */
@@ -399,17 +399,17 @@ async function getAdditionalFiles(config, packageFiles) {
 				}
 			}
 			artifactErrors.push({
-				fileName: pnpmShrinkwrap,
+				fileName: pnpmLockFile,
 				stderr: artifactErrorMessageFromExecError(res, "")
 			});
 		} else {
-			const existingContent = await getFile(pnpmShrinkwrap, config.reuseExistingBranch ? config.branchName : config.baseBranch);
+			const existingContent = await getFile(pnpmLockFile, config.reuseExistingBranch ? config.branchName : config.baseBranch);
 			if (res.lockFile === existingContent) logger.debug("pnpm-lock.yaml hasn't changed");
 			else {
 				logger.debug("pnpm-lock.yaml needs updating");
 				updatedArtifacts.push({
 					type: "addition",
-					path: pnpmShrinkwrap,
+					path: pnpmLockFile,
 					contents: res.lockFile
 				});
 			}

package/dist/modules/manager/npm/post-update/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["hostRules.find","npm.generateLockFile","deepmerge","yarn.fuzzyMatchAdditionalYarnrcYml","yarn.generateLockFile","yarn.isYarnUpdate","pnpm.generateLockFile"],"sources":["../../../../../lib/modules/manager/npm/post-update/index.ts"],"sourcesContent":["// TODO: types (#22198)\nimport { isNonEmptyStringAndNotWhitespace, isString } from '@sindresorhus/is';\nimport deepmerge from 'deepmerge';\nimport upath from 'upath';\nimport { logger } from '../../../../logger/index.ts';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error.ts';\nimport { getEnv } from '../../../../util/env.ts';\nimport {\n  ensureCacheDir,\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { getFile, getRepoStatus } from '../../../../util/git/index.ts';\nimport type { FileChange } from '../../../../util/git/types.ts';\nimport * as hostRules from '../../../../util/host-rules.ts';\nimport { newlineRegex, regEx } from '../../../../util/regex.ts';\nimport { ensureTrailingSlash } from '../../../../util/url.ts';\nimport { dump, parseSingleYaml } from '../../../../util/yaml.ts';\nimport { NpmDatasource } from '../../../datasource/npm/index.ts';\nimport { scm } from '../../../platform/scm.ts';\nimport type {\n  ArtifactError,\n  ArtifactNotice,\n  PackageFile,\n  PostUpdateConfig,\n  Upgrade,\n} from '../../types.ts';\nimport { artifactErrorMessageFromExecError } from '../../util.ts';\nimport {\n  NPM_CACHE_DIR,\n  PNPM_CACHE_BASE_DIR,\n  YARN_CACHE_DIR,\n  YARN_GLOBAL_DIR,\n} from '../constants.ts';\nimport { getZeroInstallPaths } from '../extract/yarn.ts';\nimport type { NpmManagerData } from '../types.ts';\nimport {\n  composeLockFile,\n  getNpmrcContent,\n  parseLockFile,\n  resetNpmrcContent,\n  updateNpmrcContent,\n} from '../utils.ts';\nimport * as npm from './npm.ts';\nimport * as pnpm from './pnpm.ts';\nimport { processHostRules } from './rules.ts';\nimport type {\n  AdditionalPackageFiles,\n  DetermineLockFileDirsResult,\n  WriteExistingFilesResult,\n  YarnRcYmlFile,\n} from './types.ts';\nimport * as yarn from './yarn.ts';\n\n// Strips empty values, deduplicates, and returns the directories from filenames\nfunction getDirs(arr: (string | null | undefined)[]): string[] {\n  return Array.from(new Set(arr.filter(isString)));\n}\n\nexport function determineLockFileDirs(\n  config: PostUpdateConfig,\n  packageFiles: AdditionalPackageFiles,\n): DetermineLockFileDirsResult {\n  const npmLockDirs: (string | undefined)[] = [];\n  const yarnLockDirs: (string | undefined)[] = [];\n  const pnpmShrinkwrapDirs: (string | undefined)[] = [];\n\n  for (const upgrade of config.upgrades) {\n    // v8 ignore else -- TODO: add test #40625\n    if (\n      upgrade.updateType === 'lockFileMaintenance' ||\n      upgrade.isRemediation === true ||\n      upgrade.isLockfileUpdate === true\n    ) {\n      yarnLockDirs.push(upgrade.managerData?.yarnLock);\n      npmLockDirs.push(upgrade.managerData?.npmLock);\n      pnpmShrinkwrapDirs.push(upgrade.managerData?.pnpmShrinkwrap);\n    }\n  }\n\n  if (\n    config.upgrades.every(\n      (upgrade: Upgrade) =>\n        upgrade.updateType === 'lockFileMaintenance' ||\n        upgrade.isLockfileUpdate,\n    )\n  ) {\n    return {\n      yarnLockDirs: getDirs(yarnLockDirs),\n      npmLockDirs: getDirs(npmLockDirs),\n      pnpmShrinkwrapDirs: getDirs(pnpmShrinkwrapDirs),\n    };\n  }\n\n  function getPackageFile(\n    fileName: string,\n  ): Partial<PackageFile<NpmManagerData>> {\n    logger.trace(`Looking for packageFile: ${fileName}`);\n\n    for (const packageFile of packageFiles.npm!) {\n      if (packageFile.packageFile === fileName) {\n        logger.trace({ packageFile }, 'Found packageFile');\n        return packageFile;\n      }\n      logger.trace('No match');\n    }\n    return {};\n  }\n\n  // TODO #22198\n  for (const p of config.updatedPackageFiles!) {\n    logger.trace(`Checking ${String(p.path)} for lock files`);\n    const packageFile = getPackageFile(p.path);\n    /* v8 ignore next -- needs test */\n    if (!packageFile.managerData) {\n      continue;\n    }\n    // push full lock file names and convert them later\n    yarnLockDirs.push(packageFile.managerData.yarnLock);\n    npmLockDirs.push(packageFile.managerData.npmLock);\n    pnpmShrinkwrapDirs.push(packageFile.managerData.pnpmShrinkwrap);\n  }\n\n  return {\n    yarnLockDirs: getDirs(yarnLockDirs),\n    npmLockDirs: getDirs(npmLockDirs),\n    pnpmShrinkwrapDirs: getDirs(pnpmShrinkwrapDirs),\n  };\n}\n\nexport async function writeExistingFiles(\n  config: PostUpdateConfig,\n  packageFiles: AdditionalPackageFiles,\n): Promise<void> {\n  if (!packageFiles.npm) {\n    return;\n  }\n  const npmFiles = packageFiles.npm;\n  logger.debug(\n    { packageFiles: npmFiles.map((n) => n.packageFile) },\n    'Writing package.json files',\n  );\n  for (const packageFile of npmFiles) {\n    /* v8 ignore if -- TODO: add test #40625 */\n    if (!packageFile.managerData) {\n      continue;\n    }\n    // TODO #22198\n    const basedir = upath.dirname(packageFile.packageFile!);\n    const npmrc = packageFile.npmrc;\n    const npmrcFilename = upath.join(basedir, '.npmrc');\n    // Write out the file unless the npmrc came from the workspace\n    // npmrcFilename will be set whenever the file was read from disk during extract\n    if (\n      isString(npmrc) &&\n      (npmrcFilename === packageFile.managerData.npmrcFileName ||\n        !packageFile.managerData.npmrcFileName)\n    ) {\n      try {\n        await writeLocalFile(npmrcFilename, npmrc.replace(regEx(/\\n?$/), '\\n'));\n      } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n        logger.warn({ npmrcFilename, err }, 'Error writing .npmrc');\n      }\n    }\n    const npmLock = packageFile.managerData.npmLock;\n    if (npmLock) {\n      const npmLockPath = npmLock;\n      logger.debug(`Writing ${npmLock}`);\n      let existingNpmLock: string;\n      try {\n        existingNpmLock = (await getFile(npmLock)) ?? '';\n      } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n        logger.warn({ err }, 'Error reading npm lock file');\n        existingNpmLock = '';\n      }\n      const { detectedIndent, lockFileParsed: npmLockParsed } =\n        parseLockFile(existingNpmLock);\n      if (npmLockParsed) {\n        const packageNames =\n          'packages' in npmLockParsed\n            ? Object.keys(npmLockParsed.packages)\n            : [];\n        const widens: string[] = [];\n        let lockFileChanged = false;\n        for (const upgrade of config.upgrades) {\n          if (upgrade.lockFiles && !upgrade.lockFiles.includes(npmLock)) {\n            continue;\n          }\n          if (!upgrade.managerData) {\n            continue;\n          }\n          if (\n            upgrade.rangeStrategy === 'widen' &&\n            upgrade.managerData.npmLock === npmLock\n          ) {\n            // TODO #22198\n            widens.push(upgrade.depName!);\n          }\n          const { depName } = upgrade;\n          for (const packageName of packageNames) {\n            if (\n              'packages' in npmLockParsed &&\n              (packageName === `node_modules/${depName}` ||\n                packageName.startsWith(`node_modules/${depName}/`))\n            ) {\n              logger.trace({ packageName }, 'Massaging out package name');\n              lockFileChanged = true;\n              delete npmLockParsed.packages[packageName];\n            }\n          }\n        }\n        // v8 ignore else -- TODO: add test #40625\n        if (widens.length) {\n          logger.debug(\n            `Removing ${String(widens)} from ${npmLock} to force an update`,\n          );\n          lockFileChanged = true;\n          try {\n            if ('dependencies' in npmLockParsed && npmLockParsed.dependencies) {\n              widens.forEach((depName) => {\n                // TODO #22198\n                delete npmLockParsed.dependencies![depName];\n              });\n            }\n          } catch /* v8 ignore next -- TODO: add test #40625 */ {\n            logger.warn(\n              { npmLock },\n              'Error massaging package-lock.json for widen',\n            );\n          }\n        }\n        // v8 ignore else -- TODO: add test #40625\n        if (lockFileChanged) {\n          logger.debug('Massaging npm lock file before writing to disk');\n          existingNpmLock = composeLockFile(npmLockParsed, detectedIndent);\n        }\n        await writeLocalFile(npmLockPath, existingNpmLock);\n      }\n    }\n  }\n}\n\nexport async function writeUpdatedPackageFiles(\n  config: PostUpdateConfig,\n): Promise<void> {\n  logger.trace({ config }, 'writeUpdatedPackageFiles');\n  logger.debug('Writing any updated package files');\n  if (!config.updatedPackageFiles) {\n    logger.debug('No files found');\n    return;\n  }\n  // prefer artifact content when it updates the same file (e.g. pnpm-workspace.yaml)\n  const artifactContents = new Map<string, string>();\n  if (config.updatedArtifacts) {\n    for (const artifact of config.updatedArtifacts) {\n      if (artifact.type === 'addition' && artifact.contents) {\n        artifactContents.set(artifact.path, artifact.contents.toString());\n      }\n    }\n  }\n  const supportedLockFiles = ['package-lock.json', 'yarn.lock'];\n  for (const packageFile of config.updatedPackageFiles) {\n    if (packageFile.type !== 'addition') {\n      continue;\n    }\n    if (\n      supportedLockFiles.some((fileName) => packageFile.path.endsWith(fileName))\n    ) {\n      logger.debug(`Writing lock file: ${packageFile.path}`);\n      // TODO #22198\n\n      await writeLocalFile(packageFile.path, packageFile.contents!);\n      continue;\n    }\n    if (\n      !(\n        packageFile.path.endsWith('package.json') ||\n        packageFile.path.endsWith('pnpm-workspace.yaml') ||\n        packageFile.path.endsWith('.yarnrc.yml')\n      )\n    ) {\n      continue;\n    }\n    const contents =\n      artifactContents.get(packageFile.path) ?? packageFile.contents!;\n    logger.debug(`Writing ${packageFile.path}`);\n    await writeLocalFile(packageFile.path, contents);\n  }\n}\n\n/* v8 ignore next -- needs test */\nasync function updateYarnOffline(\n  lockFileDir: string,\n  updatedArtifacts: FileChange[],\n): Promise<void> {\n  try {\n    const resolvedPaths: string[] = [];\n    const yarnrcYml = await getFile(upath.join(lockFileDir, '.yarnrc.yml'));\n    const yarnrc = await getFile(upath.join(lockFileDir, '.yarnrc'));\n\n    // As .yarnrc.yml overrides .yarnrc in Yarn 1 (https://git.io/JUcco)\n    // both files may exist, so check for .yarnrc.yml first\n    if (yarnrcYml) {\n      // Yarn 2 (offline cache and zero-installs)\n      const paths = getZeroInstallPaths(yarnrcYml);\n      resolvedPaths.push(...paths.map((p) => upath.join(lockFileDir, p)));\n    } else if (yarnrc) {\n      // Yarn 1 (offline mirror)\n      const mirrorLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-offline-mirror '));\n      if (mirrorLine) {\n        const mirrorPath = ensureTrailingSlash(\n          mirrorLine.split(' ')[1].replace(regEx(/\"/g), ''),\n        );\n        resolvedPaths.push(upath.join(lockFileDir, mirrorPath));\n      }\n    }\n    logger.debug({ resolvedPaths }, 'updateYarnOffline resolvedPaths');\n\n    if (resolvedPaths.length) {\n      const status = await getRepoStatus();\n      for (const f of status.modified.concat(status.not_added)) {\n        if (resolvedPaths.some((p) => f.startsWith(p))) {\n          updatedArtifacts.push({\n            type: 'addition',\n            path: f,\n            contents: await readLocalFile(f),\n          });\n        }\n      }\n      for (const f of status.deleted || []) {\n        if (resolvedPaths.some((p) => f.startsWith(p))) {\n          updatedArtifacts.push({ type: 'deletion', path: f });\n        }\n      }\n    }\n  } catch (err) {\n    logger.error({ err }, 'Error updating yarn offline packages');\n  }\n}\n\n// TODO: move to ./yarn.ts\n// exported for testing\nexport async function updateYarnBinary(\n  lockFileDir: string,\n  updatedArtifacts: FileChange[],\n  existingYarnrcYmlContent: string | undefined | null,\n): Promise<string | undefined | null> {\n  let yarnrcYml = existingYarnrcYmlContent;\n  try {\n    const yarnrcYmlFilename = upath.join(lockFileDir, '.yarnrc.yml');\n    yarnrcYml ??= (await getFile(yarnrcYmlFilename)) ?? undefined;\n    const newYarnrcYml = await readLocalFile(yarnrcYmlFilename, 'utf8');\n    if (!isString(yarnrcYml) || !isString(newYarnrcYml)) {\n      return existingYarnrcYmlContent;\n    }\n\n    // TODO: use schema (#9610)\n    const oldYarnPath = parseSingleYaml<YarnRcYmlFile>(yarnrcYml)?.yarnPath;\n    const newYarnPath = parseSingleYaml<YarnRcYmlFile>(newYarnrcYml)?.yarnPath;\n    if (\n      !isNonEmptyStringAndNotWhitespace(oldYarnPath) ||\n      !isNonEmptyStringAndNotWhitespace(newYarnPath)\n    ) {\n      return existingYarnrcYmlContent;\n    }\n\n    const oldYarnFullPath = upath.join(lockFileDir, oldYarnPath);\n    const newYarnFullPath = upath.join(lockFileDir, newYarnPath);\n    logger.debug({ oldYarnPath, newYarnPath }, 'Found updated Yarn binary');\n\n    yarnrcYml = yarnrcYml.replace(oldYarnPath, newYarnPath);\n    updatedArtifacts.push(\n      {\n        type: 'addition',\n        path: yarnrcYmlFilename,\n        contents: yarnrcYml,\n      },\n      {\n        type: 'deletion',\n        path: oldYarnFullPath,\n      },\n      {\n        type: 'addition',\n        path: newYarnFullPath,\n        contents: await readLocalFile(newYarnFullPath, 'utf8'),\n        isExecutable: true,\n      },\n    );\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.error({ err }, 'Error updating Yarn binary');\n  }\n  return existingYarnrcYmlContent && yarnrcYml;\n}\n\nexport async function getAdditionalFiles(\n  config: PostUpdateConfig<NpmManagerData>,\n  packageFiles: AdditionalPackageFiles,\n): Promise<WriteExistingFilesResult> {\n  logger.trace({ config }, 'getAdditionalFiles');\n  const artifactErrors: ArtifactError[] = [];\n  const artifactNotices: ArtifactNotice[] = [];\n  const updatedArtifacts: FileChange[] = [];\n  if (!packageFiles.npm?.length) {\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  if (config.skipArtifactsUpdate) {\n    logger.debug('Skipping lock file generation');\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  logger.debug('Getting updated lock files');\n  if (\n    config.isLockFileMaintenance &&\n    config.reuseExistingBranch &&\n    (await scm.branchExists(config.branchName))\n  ) {\n    logger.debug('Skipping lockFileMaintenance update');\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  const dirs = determineLockFileDirs(config, packageFiles);\n  logger.trace({ dirs }, 'lock file dirs');\n  await writeExistingFiles(config, packageFiles);\n  await writeUpdatedPackageFiles(config);\n\n  const { additionalNpmrcContent, additionalYarnRcYml } = processHostRules();\n\n  // This isn't passed directly to the child process, so no need to filter.\n  // But pass custom env and user vars.\n  const env = {\n    ...getEnv(),\n    NPM_CONFIG_CACHE: await ensureCacheDir(NPM_CACHE_DIR),\n    YARN_CACHE_FOLDER: await ensureCacheDir(YARN_CACHE_DIR),\n    YARN_GLOBAL_FOLDER: await ensureCacheDir(YARN_GLOBAL_DIR),\n    npm_config_store: await ensureCacheDir(PNPM_CACHE_BASE_DIR),\n    NODE_ENV: 'dev',\n  };\n\n  let token: string | undefined;\n  try {\n    ({ token } = hostRules.find({\n      hostType: 'github',\n      url: 'https://api.github.com/',\n    }));\n    // v8 ignore next -- TODO: add test #40625\n    token = token ? `${token}@` : token;\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.warn({ err }, 'Error getting token for packageFile');\n  }\n  const tokenRe = regEx(`${token ?? ''}`, 'g', false);\n  for (const npmLock of dirs.npmLockDirs) {\n    const lockFileDir = upath.dirname(npmLock);\n    const npmrcContent = await getNpmrcContent(lockFileDir);\n    await updateNpmrcContent(lockFileDir, npmrcContent, additionalNpmrcContent);\n    const fileName = upath.basename(npmLock);\n    logger.debug(`Generating ${fileName} for ${lockFileDir}`);\n    const upgrades = config.upgrades.filter(\n      (upgrade) => upgrade.managerData?.npmLock === npmLock,\n    );\n    const res = await npm.generateLockFile(\n      lockFileDir,\n      env,\n      fileName,\n      config,\n      upgrades,\n      npmrcContent,\n    );\n    if (res.error) {\n      /* v8 ignore next -- needs test */\n      if (res.stderr?.includes('No matching version found for')) {\n        for (const upgrade of config.upgrades) {\n          if (\n            res.stderr.includes(\n              `No matching version found for ${upgrade.depName}`,\n            )\n          ) {\n            logger.debug(\n              { dependency: upgrade.depName, type: 'npm' },\n              'lock file failed for the dependency being updated - skipping branch creation',\n            );\n            const err = new Error(\n              'lock file failed for the dependency being updated - skipping branch creation',\n            );\n            throw new ExternalHostError(err, NpmDatasource.id);\n          }\n        }\n      }\n\n      artifactErrors.push({\n        fileName: npmLock,\n        stderr: res.stderr,\n      });\n    } else if (res.lockFile) {\n      if (res.beforeFallback) {\n        const message =\n          'npm `--before` could not be enforced because existing locked packages were published after the `minimumReleaseAge` cutoff. This will resolve after the next lock file maintenance run.';\n        logger.warn({ npmLock }, message);\n        artifactNotices.push({ file: npmLock, message });\n      }\n      const existingContent = await getFile(\n        npmLock,\n        config.reuseExistingBranch ? config.branchName : config.baseBranch,\n      );\n      if (res.lockFile === existingContent) {\n        logger.debug(`${npmLock} hasn't changed`);\n      } else {\n        logger.debug(`${npmLock} needs updating`);\n        updatedArtifacts.push({\n          type: 'addition',\n          path: npmLock,\n          // TODO: can this be undefined? (#22198)\n\n          contents: res.lockFile.replace(tokenRe, ''),\n        });\n      }\n    }\n    await resetNpmrcContent(lockFileDir, npmrcContent);\n  }\n\n  for (const yarnLock of dirs.yarnLockDirs) {\n    const lockFileDir = upath.dirname(yarnLock);\n    const npmrcContent = await getNpmrcContent(lockFileDir);\n    await updateNpmrcContent(lockFileDir, npmrcContent, additionalNpmrcContent);\n    let yarnRcYmlFilename: string | undefined;\n    let existingYarnrcYmlContent: string | undefined | null;\n    if (additionalYarnRcYml) {\n      yarnRcYmlFilename = getSiblingFileName(yarnLock, '.yarnrc.yml');\n      existingYarnrcYmlContent = await readLocalFile(yarnRcYmlFilename, 'utf8');\n      // v8 ignore else -- TODO: add test #40625\n      if (existingYarnrcYmlContent) {\n        try {\n          // TODO: use schema (#9610)\n          const existingYarnrRcYml = parseSingleYaml<Record<string, unknown>>(\n            existingYarnrcYmlContent,\n          );\n\n          const updatedYarnYrcYml = deepmerge(\n            existingYarnrRcYml,\n            yarn.fuzzyMatchAdditionalYarnrcYml(\n              additionalYarnRcYml,\n              existingYarnrRcYml,\n            ),\n          );\n\n          await writeLocalFile(yarnRcYmlFilename, dump(updatedYarnYrcYml));\n          logger.debug('Added authentication to .yarnrc.yml');\n        } catch (err) {\n          logger.warn({ err }, 'Error appending .yarnrc.yml content');\n        }\n      }\n    }\n    logger.debug(`Generating yarn.lock for ${lockFileDir}`);\n    const lockFileName = upath.join(lockFileDir, 'yarn.lock');\n    const upgrades = config.upgrades.filter(\n      (upgrade) => upgrade.managerData?.yarnLock === yarnLock,\n    );\n    const res = await yarn.generateLockFile(lockFileDir, env, config, upgrades);\n    if (res.error) {\n      /* v8 ignore next -- needs test */\n      if (res.stderr?.includes(`Couldn't find any versions for`)) {\n        for (const upgrade of config.upgrades) {\n          if (\n            res.stderr.includes(\n              `Couldn't find any versions for \\\\\"${upgrade.depName}\\\\\"`,\n            )\n          ) {\n            logger.debug(\n              { dependency: upgrade.depName, type: 'yarn' },\n              'lock file failed for the dependency being updated - skipping branch creation',\n            );\n            throw new ExternalHostError(\n              new Error(\n                'lock file failed for the dependency being updated - skipping branch creation',\n              ),\n              NpmDatasource.id,\n            );\n          }\n        }\n      }\n\n      artifactErrors.push({\n        fileName: yarnLock,\n        stderr: artifactErrorMessageFromExecError(res, ''),\n      });\n    } else {\n      const existingContent = await getFile(\n        lockFileName,\n        config.reuseExistingBranch ? config.branchName : config.baseBranch,\n      );\n      if (res.lockFile === existingContent) {\n        logger.debug(\"yarn.lock hasn't changed\");\n      } else {\n        logger.debug('yarn.lock needs updating');\n        updatedArtifacts.push({\n          type: 'addition',\n          path: lockFileName,\n          // TODO #22198\n          contents: res.lockFile!,\n        });\n        await updateYarnOffline(lockFileDir, updatedArtifacts);\n      }\n\n      /* v8 ignore next -- needs test */\n      if (upgrades.some(yarn.isYarnUpdate)) {\n        existingYarnrcYmlContent = await updateYarnBinary(\n          lockFileDir,\n          updatedArtifacts,\n          existingYarnrcYmlContent,\n        );\n      }\n    }\n    await resetNpmrcContent(lockFileDir, npmrcContent);\n    /* v8 ignore next -- needs test */\n    if (existingYarnrcYmlContent) {\n      // TODO #22198\n      await writeLocalFile(yarnRcYmlFilename!, existingYarnrcYmlContent);\n    }\n  }\n\n  for (const pnpmShrinkwrap of dirs.pnpmShrinkwrapDirs) {\n    const lockFileDir = upath.dirname(pnpmShrinkwrap);\n    const npmrcContent = await getNpmrcContent(lockFileDir);\n    await updateNpmrcContent(lockFileDir, npmrcContent, additionalNpmrcContent);\n    logger.debug(`Generating pnpm-lock.yaml for ${lockFileDir}`);\n    const upgrades = config.upgrades.filter(\n      (upgrade) => upgrade.managerData?.pnpmShrinkwrap === pnpmShrinkwrap,\n    );\n    const res = await pnpm.generateLockFile(lockFileDir, env, config, upgrades);\n    if (res.error) {\n      /* v8 ignore next -- needs test */\n      if (res.stdout?.includes(`No compatible version found:`)) {\n        for (const upgrade of config.upgrades) {\n          if (\n            res.stdout.includes(\n              `No compatible version found: ${upgrade.depName}`,\n            )\n          ) {\n            logger.debug(\n              { dependency: upgrade.depName, type: 'pnpm' },\n              'lock file failed for the dependency being updated - skipping branch creation',\n            );\n            throw new ExternalHostError(\n              Error(\n                'lock file failed for the dependency being updated - skipping branch creation',\n              ),\n              NpmDatasource.id,\n            );\n          }\n        }\n      }\n\n      artifactErrors.push({\n        fileName: pnpmShrinkwrap,\n        stderr: artifactErrorMessageFromExecError(res, ''),\n      });\n    } else {\n      const existingContent = await getFile(\n        pnpmShrinkwrap,\n        config.reuseExistingBranch ? config.branchName : config.baseBranch,\n      );\n      if (res.lockFile === existingContent) {\n        logger.debug(\"pnpm-lock.yaml hasn't changed\");\n      } else {\n        logger.debug('pnpm-lock.yaml needs updating');\n        updatedArtifacts.push({\n          type: 'addition',\n          path: pnpmShrinkwrap,\n          // TODO: can be undefined? (#22198)\n          contents: res.lockFile!,\n        });\n      }\n    }\n    await resetNpmrcContent(lockFileDir, npmrcContent);\n  }\n\n  return { artifactErrors, artifactNotices, updatedArtifacts };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAwDA,SAAS,QAAQ,KAA8C;CAC7D,OAAO,MAAM,KAAK,IAAI,IAAI,IAAI,OAAO,QAAQ,CAAC,CAAC;AACjD;AAEA,SAAgB,sBACd,QACA,cAC6B;CAC7B,MAAM,cAAsC,CAAC;CAC7C,MAAM,eAAuC,CAAC;CAC9C,MAAM,qBAA6C,CAAC;CAEpD,KAAK,MAAM,WAAW,OAAO;;CAE3B,IACE,QAAQ,eAAe,yBACvB,QAAQ,kBAAkB,QAC1B,QAAQ,qBAAqB,MAC7B;EACA,aAAa,KAAK,QAAQ,aAAa,QAAQ;EAC/C,YAAY,KAAK,QAAQ,aAAa,OAAO;EAC7C,mBAAmB,KAAK,QAAQ,aAAa,cAAc;CAC7D;CAGF,IACE,OAAO,SAAS,OACb,YACC,QAAQ,eAAe,yBACvB,QAAQ,gBACZ,GAEA,OAAO;EACL,cAAc,QAAQ,YAAY;EAClC,aAAa,QAAQ,WAAW;EAChC,oBAAoB,QAAQ,kBAAkB;CAChD;CAGF,SAAS,eACP,UACsC;EACtC,OAAO,MAAM,4BAA4B,UAAU;EAEnD,KAAK,MAAM,eAAe,aAAa,KAAM;GAC3C,IAAI,YAAY,gBAAgB,UAAU;IACxC,OAAO,MAAM,EAAE,YAAY,GAAG,mBAAmB;IACjD,OAAO;GACT;GACA,OAAO,MAAM,UAAU;EACzB;EACA,OAAO,CAAC;CACV;CAGA,KAAK,MAAM,KAAK,OAAO,qBAAsB;EAC3C,OAAO,MAAM,YAAY,OAAO,EAAE,IAAI,EAAE,gBAAgB;EACxD,MAAM,cAAc,eAAe,EAAE,IAAI;;EAEzC,IAAI,CAAC,YAAY,aACf;EAGF,aAAa,KAAK,YAAY,YAAY,QAAQ;EAClD,YAAY,KAAK,YAAY,YAAY,OAAO;EAChD,mBAAmB,KAAK,YAAY,YAAY,cAAc;CAChE;CAEA,OAAO;EACL,cAAc,QAAQ,YAAY;EAClC,aAAa,QAAQ,WAAW;EAChC,oBAAoB,QAAQ,kBAAkB;CAChD;AACF;AAEA,eAAsB,mBACpB,QACA,cACe;CACf,IAAI,CAAC,aAAa,KAChB;CAEF,MAAM,WAAW,aAAa;CAC9B,OAAO,MACL,EAAE,cAAc,SAAS,KAAK,MAAM,EAAE,WAAW,EAAE,GACnD,4BACF;CACA,KAAK,MAAM,eAAe,UAAU;;EAElC,IAAI,CAAC,YAAY,aACf;EAGF,MAAM,UAAU,MAAM,QAAQ,YAAY,WAAY;EACtD,MAAM,QAAQ,YAAY;EAC1B,MAAM,gBAAgB,MAAM,KAAK,SAAS,QAAQ;EAGlD,IACE,SAAS,KAAK,MACb,kBAAkB,YAAY,YAAY,iBACzC,CAAC,YAAY,YAAY,gBAE3B,IAAI;GACF,MAAM,eAAe,eAAe,MAAM,QAAQ,MAAM,MAAM,GAAG,IAAI,CAAC;EACxE,SAAS,mDAAmD;GAC1D,OAAO,KAAK;IAAE;IAAe;GAAI,GAAG,sBAAsB;EAC5D;EAEF,MAAM,UAAU,YAAY,YAAY;EACxC,IAAI,SAAS;GACX,MAAM,cAAc;GACpB,OAAO,MAAM,WAAW,SAAS;GACjC,IAAI;GACJ,IAAI;IACF,kBAAmB,MAAM,QAAQ,OAAO,KAAM;GAChD,SAAS,mDAAmD;IAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,6BAA6B;IAClD,kBAAkB;GACpB;GACA,MAAM,EAAE,gBAAgB,gBAAgB,kBACtC,cAAc,eAAe;GAC/B,IAAI,eAAe;IACjB,MAAM,eACJ,cAAc,gBACV,OAAO,KAAK,cAAc,QAAQ,IAClC,CAAC;IACP,MAAM,SAAmB,CAAC;IAC1B,IAAI,kBAAkB;IACtB,KAAK,MAAM,WAAW,OAAO,UAAU;KACrC,IAAI,QAAQ,aAAa,CAAC,QAAQ,UAAU,SAAS,OAAO,GAC1D;KAEF,IAAI,CAAC,QAAQ,aACX;KAEF,IACE,QAAQ,kBAAkB,WAC1B,QAAQ,YAAY,YAAY,SAGhC,OAAO,KAAK,QAAQ,OAAQ;KAE9B,MAAM,EAAE,YAAY;KACpB,KAAK,MAAM,eAAe,cACxB,IACE,cAAc,kBACb,gBAAgB,gBAAgB,aAC/B,YAAY,WAAW,gBAAgB,QAAQ,EAAE,IACnD;MACA,OAAO,MAAM,EAAE,YAAY,GAAG,4BAA4B;MAC1D,kBAAkB;MAClB,OAAO,cAAc,SAAS;KAChC;IAEJ;;IAEA,IAAI,OAAO,QAAQ;KACjB,OAAO,MACL,YAAY,OAAO,MAAM,EAAE,QAAQ,QAAQ,oBAC7C;KACA,kBAAkB;KAClB,IAAI;MACF,IAAI,kBAAkB,iBAAiB,cAAc,cACnD,OAAO,SAAS,YAAY;OAE1B,OAAO,cAAc,aAAc;MACrC,CAAC;KAEL,sDAAsD;MACpD,OAAO,KACL,EAAE,QAAQ,GACV,6CACF;KACF;IACF;;IAEA,IAAI,iBAAiB;KACnB,OAAO,MAAM,gDAAgD;KAC7D,kBAAkB,gBAAgB,eAAe,cAAc;IACjE;IACA,MAAM,eAAe,aAAa,eAAe;GACnD;EACF;CACF;AACF;AAEA,eAAsB,yBACpB,QACe;CACf,OAAO,MAAM,EAAE,OAAO,GAAG,0BAA0B;CACnD,OAAO,MAAM,mCAAmC;CAChD,IAAI,CAAC,OAAO,qBAAqB;EAC/B,OAAO,MAAM,gBAAgB;EAC7B;CACF;CAEA,MAAM,mCAAmB,IAAI,IAAoB;CACjD,IAAI,OAAO,kBACJ;OAAA,MAAM,YAAY,OAAO,kBAC5B,IAAI,SAAS,SAAS,cAAc,SAAS,UAC3C,iBAAiB,IAAI,SAAS,MAAM,SAAS,SAAS,SAAS,CAAC;CAAA;CAItE,MAAM,qBAAqB,CAAC,qBAAqB,WAAW;CAC5D,KAAK,MAAM,eAAe,OAAO,qBAAqB;EACpD,IAAI,YAAY,SAAS,YACvB;EAEF,IACE,mBAAmB,MAAM,aAAa,YAAY,KAAK,SAAS,QAAQ,CAAC,GACzE;GACA,OAAO,MAAM,sBAAsB,YAAY,MAAM;GAGrD,MAAM,eAAe,YAAY,MAAM,YAAY,QAAS;GAC5D;EACF;EACA,IACE,EACE,YAAY,KAAK,SAAS,cAAc,KACxC,YAAY,KAAK,SAAS,qBAAqB,KAC/C,YAAY,KAAK,SAAS,aAAa,IAGzC;EAEF,MAAM,WACJ,iBAAiB,IAAI,YAAY,IAAI,KAAK,YAAY;EACxD,OAAO,MAAM,WAAW,YAAY,MAAM;EAC1C,MAAM,eAAe,YAAY,MAAM,QAAQ;CACjD;AACF;;AAGA,eAAe,kBACb,aACA,kBACe;CACf,IAAI;EACF,MAAM,gBAA0B,CAAC;EACjC,MAAM,YAAY,MAAM,QAAQ,MAAM,KAAK,aAAa,aAAa,CAAC;EACtE,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,aAAa,SAAS,CAAC;EAI/D,IAAI,WAAW;GAEb,MAAM,QAAQ,oBAAoB,SAAS;GAC3C,cAAc,KAAK,GAAG,MAAM,KAAK,MAAM,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC;EACpE,OAAO,IAAI,QAAQ;GAEjB,MAAM,aAAa,OAChB,MAAM,YAAY,CAAC,CACnB,MAAM,SAAS,KAAK,WAAW,sBAAsB,CAAC;GACzD,IAAI,YAAY;IACd,MAAM,aAAa,oBACjB,WAAW,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,MAAM,IAAI,GAAG,EAAE,CAClD;IACA,cAAc,KAAK,MAAM,KAAK,aAAa,UAAU,CAAC;GACxD;EACF;EACA,OAAO,MAAM,EAAE,cAAc,GAAG,iCAAiC;EAEjE,IAAI,cAAc,QAAQ;GACxB,MAAM,SAAS,MAAM,cAAc;GACnC,KAAK,MAAM,KAAK,OAAO,SAAS,OAAO,OAAO,SAAS,GACrD,IAAI,cAAc,MAAM,MAAM,EAAE,WAAW,CAAC,CAAC,GAC3C,iBAAiB,KAAK;IACpB,MAAM;IACN,MAAM;IACN,UAAU,MAAM,cAAc,CAAC;GACjC,CAAC;GAGL,KAAK,MAAM,KAAK,OAAO,WAAW,CAAC,GACjC,IAAI,cAAc,MAAM,MAAM,EAAE,WAAW,CAAC,CAAC,GAC3C,iBAAiB,KAAK;IAAE,MAAM;IAAY,MAAM;GAAE,CAAC;EAGzD;CACF,SAAS,KAAK;EACZ,OAAO,MAAM,EAAE,IAAI,GAAG,sCAAsC;CAC9D;AACF;AAIA,eAAsB,iBACpB,aACA,kBACA,0BACoC;CACpC,IAAI,YAAY;CAChB,IAAI;EACF,MAAM,oBAAoB,MAAM,KAAK,aAAa,aAAa;EAC/D,cAAe,MAAM,QAAQ,iBAAiB,KAAM,KAAA;EACpD,MAAM,eAAe,MAAM,cAAc,mBAAmB,MAAM;EAClE,IAAI,CAAC,SAAS,SAAS,KAAK,CAAC,SAAS,YAAY,GAChD,OAAO;EAIT,MAAM,cAAc,gBAA+B,SAAS,CAAC,EAAE;EAC/D,MAAM,cAAc,gBAA+B,YAAY,CAAC,EAAE;EAClE,IACE,CAAC,iCAAiC,WAAW,KAC7C,CAAC,iCAAiC,WAAW,GAE7C,OAAO;EAGT,MAAM,kBAAkB,MAAM,KAAK,aAAa,WAAW;EAC3D,MAAM,kBAAkB,MAAM,KAAK,aAAa,WAAW;EAC3D,OAAO,MAAM;GAAE;GAAa;EAAY,GAAG,2BAA2B;EAEtE,YAAY,UAAU,QAAQ,aAAa,WAAW;EACtD,iBAAiB,KACf;GACE,MAAM;GACN,MAAM;GACN,UAAU;EACZ,GACA;GACE,MAAM;GACN,MAAM;EACR,GACA;GACE,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,iBAAiB,MAAM;GACrD,cAAc;EAChB,CACF;CACF,SAAS,mDAAmD;EAC1D,OAAO,MAAM,EAAE,IAAI,GAAG,4BAA4B;CACpD;CACA,OAAO,4BAA4B;AACrC;AAEA,eAAsB,mBACpB,QACA,cACmC;CACnC,OAAO,MAAM,EAAE,OAAO,GAAG,oBAAoB;CAC7C,MAAM,iBAAkC,CAAC;CACzC,MAAM,kBAAoC,CAAC;CAC3C,MAAM,mBAAiC,CAAC;CACxC,IAAI,CAAC,aAAa,KAAK,QACrB,OAAO;EAAE;EAAgB;EAAiB;CAAiB;CAE7D,IAAI,OAAO,qBAAqB;EAC9B,OAAO,MAAM,+BAA+B;EAC5C,OAAO;GAAE;GAAgB;GAAiB;EAAiB;CAC7D;CACA,OAAO,MAAM,4BAA4B;CACzC,IACE,OAAO,yBACP,OAAO,uBACN,MAAM,IAAI,aAAa,OAAO,UAAU,GACzC;EACA,OAAO,MAAM,qCAAqC;EAClD,OAAO;GAAE;GAAgB;GAAiB;EAAiB;CAC7D;CACA,MAAM,OAAO,sBAAsB,QAAQ,YAAY;CACvD,OAAO,MAAM,EAAE,KAAK,GAAG,gBAAgB;CACvC,MAAM,mBAAmB,QAAQ,YAAY;CAC7C,MAAM,yBAAyB,MAAM;CAErC,MAAM,EAAE,wBAAwB,wBAAwB,iBAAiB;CAIzE,MAAM,MAAM;EACV,GAAG,OAAO;EACV,kBAAkB,MAAM,eAAA,KAA4B;EACpD,mBAAmB,MAAM,eAAe,cAAc;EACtD,oBAAoB,MAAM,eAAe,eAAe;EACxD,kBAAkB,MAAM,eAAe,mBAAmB;EAC1D,UAAU;CACZ;CAEA,IAAI;CACJ,IAAI;EACF,CAAC,CAAE,SAAUA,KAAe;GAC1B,UAAU;GACV,KAAK;EACP,CAAC;;EAED,QAAQ,QAAQ,GAAG,MAAM,KAAK;CAChC,SAAS,mDAAmD;EAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,qCAAqC;CAC5D;CACA,MAAM,UAAU,MAAM,GAAG,SAAS,MAAM,KAAK,KAAK;CAClD,KAAK,MAAM,WAAW,KAAK,aAAa;EACtC,MAAM,cAAc,MAAM,QAAQ,OAAO;EACzC,MAAM,eAAe,MAAM,gBAAgB,WAAW;EACtD,MAAM,mBAAmB,aAAa,cAAc,sBAAsB;EAC1E,MAAM,WAAW,MAAM,SAAS,OAAO;EACvC,OAAO,MAAM,cAAc,SAAS,OAAO,aAAa;EACxD,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,YAAY,OAChD;EACA,MAAM,MAAM,MAAMC,iBAChB,aACA,KACA,UACA,QACA,UACA,YACF;EACA,IAAI,IAAI,OAAO;;GAEb,IAAI,IAAI,QAAQ,SAAS,+BAA+B,GACjD;SAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,iCAAiC,QAAQ,SAC3C,GACA;KACA,OAAO,MACL;MAAE,YAAY,QAAQ;MAAS,MAAM;KAAM,GAC3C,8EACF;KAIA,MAAM,IAAI,kCAAkB,IAHZ,MACd,8EAE4B,GAAG,cAAc,EAAE;IACnD;;GAIJ,eAAe,KAAK;IAClB,UAAU;IACV,QAAQ,IAAI;GACd,CAAC;EACH,OAAO,IAAI,IAAI,UAAU;GACvB,IAAI,IAAI,gBAAgB;IACtB,MAAM,UACJ;IACF,OAAO,KAAK,EAAE,QAAQ,GAAG,OAAO;IAChC,gBAAgB,KAAK;KAAE,MAAM;KAAS;IAAQ,CAAC;GACjD;GACA,MAAM,kBAAkB,MAAM,QAC5B,SACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;GACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,GAAG,QAAQ,gBAAgB;QACnC;IACL,OAAO,MAAM,GAAG,QAAQ,gBAAgB;IACxC,iBAAiB,KAAK;KACpB,MAAM;KACN,MAAM;KAGN,UAAU,IAAI,SAAS,QAAQ,SAAS,EAAE;IAC5C,CAAC;GACH;EACF;EACA,MAAM,kBAAkB,aAAa,YAAY;CACnD;CAEA,KAAK,MAAM,YAAY,KAAK,cAAc;EACxC,MAAM,cAAc,MAAM,QAAQ,QAAQ;EAC1C,MAAM,eAAe,MAAM,gBAAgB,WAAW;EACtD,MAAM,mBAAmB,aAAa,cAAc,sBAAsB;EAC1E,IAAI;EACJ,IAAI;EACJ,IAAI,qBAAqB;GACvB,oBAAoB,mBAAmB,UAAU,aAAa;GAC9D,2BAA2B,MAAM,cAAc,mBAAmB,MAAM;;GAExE,IAAI,0BACF,IAAI;IAEF,MAAM,qBAAqB,gBACzB,wBACF;IAEA,MAAM,oBAAoBC,MACxB,oBACAC,8BACE,qBACA,kBACF,CACF;IAEA,MAAM,eAAe,mBAAmB,KAAK,iBAAiB,CAAC;IAC/D,OAAO,MAAM,qCAAqC;GACpD,SAAS,KAAK;IACZ,OAAO,KAAK,EAAE,IAAI,GAAG,qCAAqC;GAC5D;EAEJ;EACA,OAAO,MAAM,4BAA4B,aAAa;EACtD,MAAM,eAAe,MAAM,KAAK,aAAa,WAAW;EACxD,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,aAAa,QACjD;EACA,MAAM,MAAM,MAAMC,mBAAsB,aAAa,KAAK,QAAQ,QAAQ;EAC1E,IAAI,IAAI,OAAO;;GAEb,IAAI,IAAI,QAAQ,SAAS,gCAAgC,GAClD;SAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,qCAAqC,QAAQ,QAAQ,IACvD,GACA;KACA,OAAO,MACL;MAAE,YAAY,QAAQ;MAAS,MAAM;KAAO,GAC5C,8EACF;KACA,MAAM,IAAI,kCACR,IAAI,MACF,8EACF,GACA,cAAc,EAChB;IACF;;GAIJ,eAAe,KAAK;IAClB,UAAU;IACV,QAAQ,kCAAkC,KAAK,EAAE;GACnD,CAAC;EACH,OAAO;GACL,MAAM,kBAAkB,MAAM,QAC5B,cACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;GACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,0BAA0B;QAClC;IACL,OAAO,MAAM,0BAA0B;IACvC,iBAAiB,KAAK;KACpB,MAAM;KACN,MAAM;KAEN,UAAU,IAAI;IAChB,CAAC;IACD,MAAM,kBAAkB,aAAa,gBAAgB;GACvD;;GAGA,IAAI,SAAS,KAAKC,YAAiB,GACjC,2BAA2B,MAAM,iBAC/B,aACA,kBACA,wBACF;EAEJ;EACA,MAAM,kBAAkB,aAAa,YAAY;;EAEjD,IAAI,0BAEF,MAAM,eAAe,mBAAoB,wBAAwB;CAErE;CAEA,KAAK,MAAM,kBAAkB,KAAK,oBAAoB;EACpD,MAAM,cAAc,MAAM,QAAQ,cAAc;EAChD,MAAM,eAAe,MAAM,gBAAgB,WAAW;EACtD,MAAM,mBAAmB,aAAa,cAAc,sBAAsB;EAC1E,OAAO,MAAM,iCAAiC,aAAa;EAC3D,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,mBAAmB,cACvD;EACA,MAAM,MAAM,MAAMC,mBAAsB,aAAa,KAAK,QAAQ,QAAQ;EAC1E,IAAI,IAAI,OAAO;;GAEb,IAAI,IAAI,QAAQ,SAAS,8BAA8B,GAChD;SAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,gCAAgC,QAAQ,SAC1C,GACA;KACA,OAAO,MACL;MAAE,YAAY,QAAQ;MAAS,MAAM;KAAO,GAC5C,8EACF;KACA,MAAM,IAAI,kBACR,MACE,8EACF,GACA,cAAc,EAChB;IACF;;GAIJ,eAAe,KAAK;IAClB,UAAU;IACV,QAAQ,kCAAkC,KAAK,EAAE;GACnD,CAAC;EACH,OAAO;GACL,MAAM,kBAAkB,MAAM,QAC5B,gBACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;GACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,+BAA+B;QACvC;IACL,OAAO,MAAM,+BAA+B;IAC5C,iBAAiB,KAAK;KACpB,MAAM;KACN,MAAM;KAEN,UAAU,IAAI;IAChB,CAAC;GACH;EACF;EACA,MAAM,kBAAkB,aAAa,YAAY;CACnD;CAEA,OAAO;EAAE;EAAgB;EAAiB;CAAiB;AAC7D"}
+{"version":3,"file":"index.js","names":["hostRules.find","npm.generateLockFile","deepmerge","yarn.fuzzyMatchAdditionalYarnrcYml","yarn.generateLockFile","yarn.isYarnUpdate","pnpm.generateLockFile"],"sources":["../../../../../lib/modules/manager/npm/post-update/index.ts"],"sourcesContent":["// TODO: types (#22198)\nimport { isNonEmptyStringAndNotWhitespace, isString } from '@sindresorhus/is';\nimport deepmerge from 'deepmerge';\nimport upath from 'upath';\nimport { logger } from '../../../../logger/index.ts';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error.ts';\nimport { getEnv } from '../../../../util/env.ts';\nimport {\n  ensureCacheDir,\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { getFile, getRepoStatus } from '../../../../util/git/index.ts';\nimport type { FileChange } from '../../../../util/git/types.ts';\nimport * as hostRules from '../../../../util/host-rules.ts';\nimport { newlineRegex, regEx } from '../../../../util/regex.ts';\nimport { ensureTrailingSlash } from '../../../../util/url.ts';\nimport { dump, parseSingleYaml } from '../../../../util/yaml.ts';\nimport { NpmDatasource } from '../../../datasource/npm/index.ts';\nimport { scm } from '../../../platform/scm.ts';\nimport type {\n  ArtifactError,\n  ArtifactNotice,\n  PackageFile,\n  PostUpdateConfig,\n  Upgrade,\n} from '../../types.ts';\nimport { artifactErrorMessageFromExecError } from '../../util.ts';\nimport {\n  NPM_CACHE_DIR,\n  PNPM_CACHE_BASE_DIR,\n  YARN_CACHE_DIR,\n  YARN_GLOBAL_DIR,\n} from '../constants.ts';\nimport { getZeroInstallPaths } from '../extract/yarn.ts';\nimport type { NpmManagerData } from '../types.ts';\nimport {\n  composeLockFile,\n  getNpmrcContent,\n  parseLockFile,\n  resetNpmrcContent,\n  updateNpmrcContent,\n} from '../utils.ts';\nimport * as npm from './npm.ts';\nimport * as pnpm from './pnpm.ts';\nimport { processHostRules } from './rules.ts';\nimport type {\n  AdditionalPackageFiles,\n  DetermineLockFileDirsResult,\n  WriteExistingFilesResult,\n  YarnRcYmlFile,\n} from './types.ts';\nimport * as yarn from './yarn.ts';\n\n// Strips empty values, deduplicates, and returns the directories from filenames\nfunction getDirs(arr: (string | null | undefined)[]): string[] {\n  return Array.from(new Set(arr.filter(isString)));\n}\n\nexport function determineLockFileDirs(\n  config: PostUpdateConfig,\n  packageFiles: AdditionalPackageFiles,\n): DetermineLockFileDirsResult {\n  const npmLockDirs: (string | undefined)[] = [];\n  const yarnLockDirs: (string | undefined)[] = [];\n  const pnpmLockFileDirs: (string | undefined)[] = [];\n\n  for (const upgrade of config.upgrades) {\n    // v8 ignore else -- TODO: add test #40625\n    if (\n      upgrade.updateType === 'lockFileMaintenance' ||\n      upgrade.isRemediation === true ||\n      upgrade.isLockfileUpdate === true\n    ) {\n      yarnLockDirs.push(upgrade.managerData?.yarnLock);\n      npmLockDirs.push(upgrade.managerData?.npmLock);\n      pnpmLockFileDirs.push(upgrade.managerData?.pnpmLockFile);\n    }\n  }\n\n  if (\n    config.upgrades.every(\n      (upgrade: Upgrade) =>\n        upgrade.updateType === 'lockFileMaintenance' ||\n        upgrade.isLockfileUpdate,\n    )\n  ) {\n    return {\n      yarnLockDirs: getDirs(yarnLockDirs),\n      npmLockDirs: getDirs(npmLockDirs),\n      pnpmLockFileDirs: getDirs(pnpmLockFileDirs),\n    };\n  }\n\n  function getPackageFile(\n    fileName: string,\n  ): Partial<PackageFile<NpmManagerData>> {\n    logger.trace(`Looking for packageFile: ${fileName}`);\n\n    for (const packageFile of packageFiles.npm!) {\n      if (packageFile.packageFile === fileName) {\n        logger.trace({ packageFile }, 'Found packageFile');\n        return packageFile;\n      }\n      logger.trace('No match');\n    }\n    return {};\n  }\n\n  // TODO #22198\n  for (const p of config.updatedPackageFiles!) {\n    logger.trace(`Checking ${String(p.path)} for lock files`);\n    const packageFile = getPackageFile(p.path);\n    /* v8 ignore next -- needs test */\n    if (!packageFile.managerData) {\n      continue;\n    }\n    // push full lock file names and convert them later\n    yarnLockDirs.push(packageFile.managerData.yarnLock);\n    npmLockDirs.push(packageFile.managerData.npmLock);\n    pnpmLockFileDirs.push(packageFile.managerData.pnpmLockFile);\n  }\n\n  return {\n    yarnLockDirs: getDirs(yarnLockDirs),\n    npmLockDirs: getDirs(npmLockDirs),\n    pnpmLockFileDirs: getDirs(pnpmLockFileDirs),\n  };\n}\n\nexport async function writeExistingFiles(\n  config: PostUpdateConfig,\n  packageFiles: AdditionalPackageFiles,\n): Promise<void> {\n  if (!packageFiles.npm) {\n    return;\n  }\n  const npmFiles = packageFiles.npm;\n  logger.debug(\n    { packageFiles: npmFiles.map((n) => n.packageFile) },\n    'Writing package.json files',\n  );\n  for (const packageFile of npmFiles) {\n    /* v8 ignore if -- TODO: add test #40625 */\n    if (!packageFile.managerData) {\n      continue;\n    }\n    // TODO #22198\n    const basedir = upath.dirname(packageFile.packageFile!);\n    const npmrc = packageFile.npmrc;\n    const npmrcFilename = upath.join(basedir, '.npmrc');\n    // Write out the file unless the npmrc came from the workspace\n    // npmrcFilename will be set whenever the file was read from disk during extract\n    if (\n      isString(npmrc) &&\n      (npmrcFilename === packageFile.managerData.npmrcFileName ||\n        !packageFile.managerData.npmrcFileName)\n    ) {\n      try {\n        await writeLocalFile(npmrcFilename, npmrc.replace(regEx(/\\n?$/), '\\n'));\n      } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n        logger.warn({ npmrcFilename, err }, 'Error writing .npmrc');\n      }\n    }\n    const npmLock = packageFile.managerData.npmLock;\n    if (npmLock) {\n      const npmLockPath = npmLock;\n      logger.debug(`Writing ${npmLock}`);\n      let existingNpmLock: string;\n      try {\n        existingNpmLock = (await getFile(npmLock)) ?? '';\n      } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n        logger.warn({ err }, 'Error reading npm lock file');\n        existingNpmLock = '';\n      }\n      const { detectedIndent, lockFileParsed: npmLockParsed } =\n        parseLockFile(existingNpmLock);\n      if (npmLockParsed) {\n        const packageNames =\n          'packages' in npmLockParsed\n            ? Object.keys(npmLockParsed.packages)\n            : [];\n        const widens: string[] = [];\n        let lockFileChanged = false;\n        for (const upgrade of config.upgrades) {\n          if (upgrade.lockFiles && !upgrade.lockFiles.includes(npmLock)) {\n            continue;\n          }\n          if (!upgrade.managerData) {\n            continue;\n          }\n          if (\n            upgrade.rangeStrategy === 'widen' &&\n            upgrade.managerData.npmLock === npmLock\n          ) {\n            // TODO #22198\n            widens.push(upgrade.depName!);\n          }\n          const { depName } = upgrade;\n          for (const packageName of packageNames) {\n            if (\n              'packages' in npmLockParsed &&\n              (packageName === `node_modules/${depName}` ||\n                packageName.startsWith(`node_modules/${depName}/`))\n            ) {\n              logger.trace({ packageName }, 'Massaging out package name');\n              lockFileChanged = true;\n              delete npmLockParsed.packages[packageName];\n            }\n          }\n        }\n        // v8 ignore else -- TODO: add test #40625\n        if (widens.length) {\n          logger.debug(\n            `Removing ${String(widens)} from ${npmLock} to force an update`,\n          );\n          lockFileChanged = true;\n          try {\n            if ('dependencies' in npmLockParsed && npmLockParsed.dependencies) {\n              widens.forEach((depName) => {\n                // TODO #22198\n                delete npmLockParsed.dependencies![depName];\n              });\n            }\n          } catch /* v8 ignore next -- TODO: add test #40625 */ {\n            logger.warn(\n              { npmLock },\n              'Error massaging package-lock.json for widen',\n            );\n          }\n        }\n        // v8 ignore else -- TODO: add test #40625\n        if (lockFileChanged) {\n          logger.debug('Massaging npm lock file before writing to disk');\n          existingNpmLock = composeLockFile(npmLockParsed, detectedIndent);\n        }\n        await writeLocalFile(npmLockPath, existingNpmLock);\n      }\n    }\n  }\n}\n\nexport async function writeUpdatedPackageFiles(\n  config: PostUpdateConfig,\n): Promise<void> {\n  logger.trace({ config }, 'writeUpdatedPackageFiles');\n  logger.debug('Writing any updated package files');\n  if (!config.updatedPackageFiles) {\n    logger.debug('No files found');\n    return;\n  }\n  // prefer artifact content when it updates the same file (e.g. pnpm-workspace.yaml)\n  const artifactContents = new Map<string, string>();\n  if (config.updatedArtifacts) {\n    for (const artifact of config.updatedArtifacts) {\n      if (artifact.type === 'addition' && artifact.contents) {\n        artifactContents.set(artifact.path, artifact.contents.toString());\n      }\n    }\n  }\n  const supportedLockFiles = ['package-lock.json', 'yarn.lock'];\n  for (const packageFile of config.updatedPackageFiles) {\n    if (packageFile.type !== 'addition') {\n      continue;\n    }\n    if (\n      supportedLockFiles.some((fileName) => packageFile.path.endsWith(fileName))\n    ) {\n      logger.debug(`Writing lock file: ${packageFile.path}`);\n      // TODO #22198\n\n      await writeLocalFile(packageFile.path, packageFile.contents!);\n      continue;\n    }\n    if (\n      !(\n        packageFile.path.endsWith('package.json') ||\n        packageFile.path.endsWith('pnpm-workspace.yaml') ||\n        packageFile.path.endsWith('.yarnrc.yml')\n      )\n    ) {\n      continue;\n    }\n    const contents =\n      artifactContents.get(packageFile.path) ?? packageFile.contents!;\n    logger.debug(`Writing ${packageFile.path}`);\n    await writeLocalFile(packageFile.path, contents);\n  }\n}\n\n/* v8 ignore next -- needs test */\nasync function updateYarnOffline(\n  lockFileDir: string,\n  updatedArtifacts: FileChange[],\n): Promise<void> {\n  try {\n    const resolvedPaths: string[] = [];\n    const yarnrcYml = await getFile(upath.join(lockFileDir, '.yarnrc.yml'));\n    const yarnrc = await getFile(upath.join(lockFileDir, '.yarnrc'));\n\n    // As .yarnrc.yml overrides .yarnrc in Yarn 1 (https://git.io/JUcco)\n    // both files may exist, so check for .yarnrc.yml first\n    if (yarnrcYml) {\n      // Yarn 2 (offline cache and zero-installs)\n      const paths = getZeroInstallPaths(yarnrcYml);\n      resolvedPaths.push(...paths.map((p) => upath.join(lockFileDir, p)));\n    } else if (yarnrc) {\n      // Yarn 1 (offline mirror)\n      const mirrorLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-offline-mirror '));\n      if (mirrorLine) {\n        const mirrorPath = ensureTrailingSlash(\n          mirrorLine.split(' ')[1].replace(regEx(/\"/g), ''),\n        );\n        resolvedPaths.push(upath.join(lockFileDir, mirrorPath));\n      }\n    }\n    logger.debug({ resolvedPaths }, 'updateYarnOffline resolvedPaths');\n\n    if (resolvedPaths.length) {\n      const status = await getRepoStatus();\n      for (const f of status.modified.concat(status.not_added)) {\n        if (resolvedPaths.some((p) => f.startsWith(p))) {\n          updatedArtifacts.push({\n            type: 'addition',\n            path: f,\n            contents: await readLocalFile(f),\n          });\n        }\n      }\n      for (const f of status.deleted || []) {\n        if (resolvedPaths.some((p) => f.startsWith(p))) {\n          updatedArtifacts.push({ type: 'deletion', path: f });\n        }\n      }\n    }\n  } catch (err) {\n    logger.error({ err }, 'Error updating yarn offline packages');\n  }\n}\n\n// TODO: move to ./yarn.ts\n// exported for testing\nexport async function updateYarnBinary(\n  lockFileDir: string,\n  updatedArtifacts: FileChange[],\n  existingYarnrcYmlContent: string | undefined | null,\n): Promise<string | undefined | null> {\n  let yarnrcYml = existingYarnrcYmlContent;\n  try {\n    const yarnrcYmlFilename = upath.join(lockFileDir, '.yarnrc.yml');\n    yarnrcYml ??= (await getFile(yarnrcYmlFilename)) ?? undefined;\n    const newYarnrcYml = await readLocalFile(yarnrcYmlFilename, 'utf8');\n    if (!isString(yarnrcYml) || !isString(newYarnrcYml)) {\n      return existingYarnrcYmlContent;\n    }\n\n    // TODO: use schema (#9610)\n    const oldYarnPath = parseSingleYaml<YarnRcYmlFile>(yarnrcYml)?.yarnPath;\n    const newYarnPath = parseSingleYaml<YarnRcYmlFile>(newYarnrcYml)?.yarnPath;\n    if (\n      !isNonEmptyStringAndNotWhitespace(oldYarnPath) ||\n      !isNonEmptyStringAndNotWhitespace(newYarnPath)\n    ) {\n      return existingYarnrcYmlContent;\n    }\n\n    const oldYarnFullPath = upath.join(lockFileDir, oldYarnPath);\n    const newYarnFullPath = upath.join(lockFileDir, newYarnPath);\n    logger.debug({ oldYarnPath, newYarnPath }, 'Found updated Yarn binary');\n\n    yarnrcYml = yarnrcYml.replace(oldYarnPath, newYarnPath);\n    updatedArtifacts.push(\n      {\n        type: 'addition',\n        path: yarnrcYmlFilename,\n        contents: yarnrcYml,\n      },\n      {\n        type: 'deletion',\n        path: oldYarnFullPath,\n      },\n      {\n        type: 'addition',\n        path: newYarnFullPath,\n        contents: await readLocalFile(newYarnFullPath, 'utf8'),\n        isExecutable: true,\n      },\n    );\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.error({ err }, 'Error updating Yarn binary');\n  }\n  return existingYarnrcYmlContent && yarnrcYml;\n}\n\nexport async function getAdditionalFiles(\n  config: PostUpdateConfig<NpmManagerData>,\n  packageFiles: AdditionalPackageFiles,\n): Promise<WriteExistingFilesResult> {\n  logger.trace({ config }, 'getAdditionalFiles');\n  const artifactErrors: ArtifactError[] = [];\n  const artifactNotices: ArtifactNotice[] = [];\n  const updatedArtifacts: FileChange[] = [];\n  if (!packageFiles.npm?.length) {\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  if (config.skipArtifactsUpdate) {\n    logger.debug('Skipping lock file generation');\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  logger.debug('Getting updated lock files');\n  if (\n    config.isLockFileMaintenance &&\n    config.reuseExistingBranch &&\n    (await scm.branchExists(config.branchName))\n  ) {\n    logger.debug('Skipping lockFileMaintenance update');\n    return { artifactErrors, artifactNotices, updatedArtifacts };\n  }\n  const dirs = determineLockFileDirs(config, packageFiles);\n  logger.trace({ dirs }, 'lock file dirs');\n  await writeExistingFiles(config, packageFiles);\n  await writeUpdatedPackageFiles(config);\n\n  const { additionalNpmrcContent, additionalYarnRcYml } = processHostRules();\n\n  // This isn't passed directly to the child process, so no need to filter.\n  // But pass custom env and user vars.\n  const env = {\n    ...getEnv(),\n    NPM_CONFIG_CACHE: await ensureCacheDir(NPM_CACHE_DIR),\n    YARN_CACHE_FOLDER: await ensureCacheDir(YARN_CACHE_DIR),\n    YARN_GLOBAL_FOLDER: await ensureCacheDir(YARN_GLOBAL_DIR),\n    npm_config_store: await ensureCacheDir(PNPM_CACHE_BASE_DIR),\n    NODE_ENV: 'dev',\n  };\n\n  let token: string | undefined;\n  try {\n    ({ token } = hostRules.find({\n      hostType: 'github',\n      url: 'https://api.github.com/',\n    }));\n    // v8 ignore next -- TODO: add test #40625\n    token = token ? `${token}@` : token;\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.warn({ err }, 'Error getting token for packageFile');\n  }\n  const tokenRe = regEx(`${token ?? ''}`, 'g', false);\n  for (const npmLock of dirs.npmLockDirs) {\n    const lockFileDir = upath.dirname(npmLock);\n    const npmrcContent = await getNpmrcContent(lockFileDir);\n    await updateNpmrcContent(lockFileDir, npmrcContent, additionalNpmrcContent);\n    const fileName = upath.basename(npmLock);\n    logger.debug(`Generating ${fileName} for ${lockFileDir}`);\n    const upgrades = config.upgrades.filter(\n      (upgrade) => upgrade.managerData?.npmLock === npmLock,\n    );\n    const res = await npm.generateLockFile(\n      lockFileDir,\n      env,\n      fileName,\n      config,\n      upgrades,\n      npmrcContent,\n    );\n    if (res.error) {\n      /* v8 ignore next -- needs test */\n      if (res.stderr?.includes('No matching version found for')) {\n        for (const upgrade of config.upgrades) {\n          if (\n            res.stderr.includes(\n              `No matching version found for ${upgrade.depName}`,\n            )\n          ) {\n            logger.debug(\n              { dependency: upgrade.depName, type: 'npm' },\n              'lock file failed for the dependency being updated - skipping branch creation',\n            );\n            const err = new Error(\n              'lock file failed for the dependency being updated - skipping branch creation',\n            );\n            throw new ExternalHostError(err, NpmDatasource.id);\n          }\n        }\n      }\n\n      artifactErrors.push({\n        fileName: npmLock,\n        stderr: res.stderr,\n      });\n    } else if (res.lockFile) {\n      if (res.beforeFallback) {\n        const message =\n          'npm `--before` could not be enforced because existing locked packages were published after the `minimumReleaseAge` cutoff. This will resolve after the next lock file maintenance run.';\n        logger.warn({ npmLock }, message);\n        artifactNotices.push({ file: npmLock, message });\n      }\n      const existingContent = await getFile(\n        npmLock,\n        config.reuseExistingBranch ? config.branchName : config.baseBranch,\n      );\n      if (res.lockFile === existingContent) {\n        logger.debug(`${npmLock} hasn't changed`);\n      } else {\n        logger.debug(`${npmLock} needs updating`);\n        updatedArtifacts.push({\n          type: 'addition',\n          path: npmLock,\n          // TODO: can this be undefined? (#22198)\n\n          contents: res.lockFile.replace(tokenRe, ''),\n        });\n      }\n    }\n    await resetNpmrcContent(lockFileDir, npmrcContent);\n  }\n\n  for (const yarnLock of dirs.yarnLockDirs) {\n    const lockFileDir = upath.dirname(yarnLock);\n    const npmrcContent = await getNpmrcContent(lockFileDir);\n    await updateNpmrcContent(lockFileDir, npmrcContent, additionalNpmrcContent);\n    let yarnRcYmlFilename: string | undefined;\n    let existingYarnrcYmlContent: string | undefined | null;\n    if (additionalYarnRcYml) {\n      yarnRcYmlFilename = getSiblingFileName(yarnLock, '.yarnrc.yml');\n      existingYarnrcYmlContent = await readLocalFile(yarnRcYmlFilename, 'utf8');\n      // v8 ignore else -- TODO: add test #40625\n      if (existingYarnrcYmlContent) {\n        try {\n          // TODO: use schema (#9610)\n          const existingYarnrRcYml = parseSingleYaml<Record<string, unknown>>(\n            existingYarnrcYmlContent,\n          );\n\n          const updatedYarnYrcYml = deepmerge(\n            existingYarnrRcYml,\n            yarn.fuzzyMatchAdditionalYarnrcYml(\n              additionalYarnRcYml,\n              existingYarnrRcYml,\n            ),\n          );\n\n          await writeLocalFile(yarnRcYmlFilename, dump(updatedYarnYrcYml));\n          logger.debug('Added authentication to .yarnrc.yml');\n        } catch (err) {\n          logger.warn({ err }, 'Error appending .yarnrc.yml content');\n        }\n      }\n    }\n    logger.debug(`Generating yarn.lock for ${lockFileDir}`);\n    const lockFileName = upath.join(lockFileDir, 'yarn.lock');\n    const upgrades = config.upgrades.filter(\n      (upgrade) => upgrade.managerData?.yarnLock === yarnLock,\n    );\n    const res = await yarn.generateLockFile(lockFileDir, env, config, upgrades);\n    if (res.error) {\n      /* v8 ignore next -- needs test */\n      if (res.stderr?.includes(`Couldn't find any versions for`)) {\n        for (const upgrade of config.upgrades) {\n          if (\n            res.stderr.includes(\n              `Couldn't find any versions for \\\\\"${upgrade.depName}\\\\\"`,\n            )\n          ) {\n            logger.debug(\n              { dependency: upgrade.depName, type: 'yarn' },\n              'lock file failed for the dependency being updated - skipping branch creation',\n            );\n            throw new ExternalHostError(\n              new Error(\n                'lock file failed for the dependency being updated - skipping branch creation',\n              ),\n              NpmDatasource.id,\n            );\n          }\n        }\n      }\n\n      artifactErrors.push({\n        fileName: yarnLock,\n        stderr: artifactErrorMessageFromExecError(res, ''),\n      });\n    } else {\n      const existingContent = await getFile(\n        lockFileName,\n        config.reuseExistingBranch ? config.branchName : config.baseBranch,\n      );\n      if (res.lockFile === existingContent) {\n        logger.debug(\"yarn.lock hasn't changed\");\n      } else {\n        logger.debug('yarn.lock needs updating');\n        updatedArtifacts.push({\n          type: 'addition',\n          path: lockFileName,\n          // TODO #22198\n          contents: res.lockFile!,\n        });\n        await updateYarnOffline(lockFileDir, updatedArtifacts);\n      }\n\n      /* v8 ignore next -- needs test */\n      if (upgrades.some(yarn.isYarnUpdate)) {\n        existingYarnrcYmlContent = await updateYarnBinary(\n          lockFileDir,\n          updatedArtifacts,\n          existingYarnrcYmlContent,\n        );\n      }\n    }\n    await resetNpmrcContent(lockFileDir, npmrcContent);\n    /* v8 ignore next -- needs test */\n    if (existingYarnrcYmlContent) {\n      // TODO #22198\n      await writeLocalFile(yarnRcYmlFilename!, existingYarnrcYmlContent);\n    }\n  }\n\n  for (const pnpmLockFile of dirs.pnpmLockFileDirs) {\n    const lockFileDir = upath.dirname(pnpmLockFile);\n    const npmrcContent = await getNpmrcContent(lockFileDir);\n    await updateNpmrcContent(lockFileDir, npmrcContent, additionalNpmrcContent);\n    logger.debug(`Generating pnpm-lock.yaml for ${lockFileDir}`);\n    const upgrades = config.upgrades.filter(\n      (upgrade) => upgrade.managerData?.pnpmLockFile === pnpmLockFile,\n    );\n    const res = await pnpm.generateLockFile(lockFileDir, env, config, upgrades);\n    if (res.error) {\n      /* v8 ignore next -- needs test */\n      if (res.stdout?.includes(`No compatible version found:`)) {\n        for (const upgrade of config.upgrades) {\n          if (\n            res.stdout.includes(\n              `No compatible version found: ${upgrade.depName}`,\n            )\n          ) {\n            logger.debug(\n              { dependency: upgrade.depName, type: 'pnpm' },\n              'lock file failed for the dependency being updated - skipping branch creation',\n            );\n            throw new ExternalHostError(\n              Error(\n                'lock file failed for the dependency being updated - skipping branch creation',\n              ),\n              NpmDatasource.id,\n            );\n          }\n        }\n      }\n\n      artifactErrors.push({\n        fileName: pnpmLockFile,\n        stderr: artifactErrorMessageFromExecError(res, ''),\n      });\n    } else {\n      const existingContent = await getFile(\n        pnpmLockFile,\n        config.reuseExistingBranch ? config.branchName : config.baseBranch,\n      );\n      if (res.lockFile === existingContent) {\n        logger.debug(\"pnpm-lock.yaml hasn't changed\");\n      } else {\n        logger.debug('pnpm-lock.yaml needs updating');\n        updatedArtifacts.push({\n          type: 'addition',\n          path: pnpmLockFile,\n          // TODO: can be undefined? (#22198)\n          contents: res.lockFile!,\n        });\n      }\n    }\n    await resetNpmrcContent(lockFileDir, npmrcContent);\n  }\n\n  return { artifactErrors, artifactNotices, updatedArtifacts };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAwDA,SAAS,QAAQ,KAA8C;CAC7D,OAAO,MAAM,KAAK,IAAI,IAAI,IAAI,OAAO,QAAQ,CAAC,CAAC;AACjD;AAEA,SAAgB,sBACd,QACA,cAC6B;CAC7B,MAAM,cAAsC,CAAC;CAC7C,MAAM,eAAuC,CAAC;CAC9C,MAAM,mBAA2C,CAAC;CAElD,KAAK,MAAM,WAAW,OAAO;;CAE3B,IACE,QAAQ,eAAe,yBACvB,QAAQ,kBAAkB,QAC1B,QAAQ,qBAAqB,MAC7B;EACA,aAAa,KAAK,QAAQ,aAAa,QAAQ;EAC/C,YAAY,KAAK,QAAQ,aAAa,OAAO;EAC7C,iBAAiB,KAAK,QAAQ,aAAa,YAAY;CACzD;CAGF,IACE,OAAO,SAAS,OACb,YACC,QAAQ,eAAe,yBACvB,QAAQ,gBACZ,GAEA,OAAO;EACL,cAAc,QAAQ,YAAY;EAClC,aAAa,QAAQ,WAAW;EAChC,kBAAkB,QAAQ,gBAAgB;CAC5C;CAGF,SAAS,eACP,UACsC;EACtC,OAAO,MAAM,4BAA4B,UAAU;EAEnD,KAAK,MAAM,eAAe,aAAa,KAAM;GAC3C,IAAI,YAAY,gBAAgB,UAAU;IACxC,OAAO,MAAM,EAAE,YAAY,GAAG,mBAAmB;IACjD,OAAO;GACT;GACA,OAAO,MAAM,UAAU;EACzB;EACA,OAAO,CAAC;CACV;CAGA,KAAK,MAAM,KAAK,OAAO,qBAAsB;EAC3C,OAAO,MAAM,YAAY,OAAO,EAAE,IAAI,EAAE,gBAAgB;EACxD,MAAM,cAAc,eAAe,EAAE,IAAI;;EAEzC,IAAI,CAAC,YAAY,aACf;EAGF,aAAa,KAAK,YAAY,YAAY,QAAQ;EAClD,YAAY,KAAK,YAAY,YAAY,OAAO;EAChD,iBAAiB,KAAK,YAAY,YAAY,YAAY;CAC5D;CAEA,OAAO;EACL,cAAc,QAAQ,YAAY;EAClC,aAAa,QAAQ,WAAW;EAChC,kBAAkB,QAAQ,gBAAgB;CAC5C;AACF;AAEA,eAAsB,mBACpB,QACA,cACe;CACf,IAAI,CAAC,aAAa,KAChB;CAEF,MAAM,WAAW,aAAa;CAC9B,OAAO,MACL,EAAE,cAAc,SAAS,KAAK,MAAM,EAAE,WAAW,EAAE,GACnD,4BACF;CACA,KAAK,MAAM,eAAe,UAAU;;EAElC,IAAI,CAAC,YAAY,aACf;EAGF,MAAM,UAAU,MAAM,QAAQ,YAAY,WAAY;EACtD,MAAM,QAAQ,YAAY;EAC1B,MAAM,gBAAgB,MAAM,KAAK,SAAS,QAAQ;EAGlD,IACE,SAAS,KAAK,MACb,kBAAkB,YAAY,YAAY,iBACzC,CAAC,YAAY,YAAY,gBAE3B,IAAI;GACF,MAAM,eAAe,eAAe,MAAM,QAAQ,MAAM,MAAM,GAAG,IAAI,CAAC;EACxE,SAAS,mDAAmD;GAC1D,OAAO,KAAK;IAAE;IAAe;GAAI,GAAG,sBAAsB;EAC5D;EAEF,MAAM,UAAU,YAAY,YAAY;EACxC,IAAI,SAAS;GACX,MAAM,cAAc;GACpB,OAAO,MAAM,WAAW,SAAS;GACjC,IAAI;GACJ,IAAI;IACF,kBAAmB,MAAM,QAAQ,OAAO,KAAM;GAChD,SAAS,mDAAmD;IAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,6BAA6B;IAClD,kBAAkB;GACpB;GACA,MAAM,EAAE,gBAAgB,gBAAgB,kBACtC,cAAc,eAAe;GAC/B,IAAI,eAAe;IACjB,MAAM,eACJ,cAAc,gBACV,OAAO,KAAK,cAAc,QAAQ,IAClC,CAAC;IACP,MAAM,SAAmB,CAAC;IAC1B,IAAI,kBAAkB;IACtB,KAAK,MAAM,WAAW,OAAO,UAAU;KACrC,IAAI,QAAQ,aAAa,CAAC,QAAQ,UAAU,SAAS,OAAO,GAC1D;KAEF,IAAI,CAAC,QAAQ,aACX;KAEF,IACE,QAAQ,kBAAkB,WAC1B,QAAQ,YAAY,YAAY,SAGhC,OAAO,KAAK,QAAQ,OAAQ;KAE9B,MAAM,EAAE,YAAY;KACpB,KAAK,MAAM,eAAe,cACxB,IACE,cAAc,kBACb,gBAAgB,gBAAgB,aAC/B,YAAY,WAAW,gBAAgB,QAAQ,EAAE,IACnD;MACA,OAAO,MAAM,EAAE,YAAY,GAAG,4BAA4B;MAC1D,kBAAkB;MAClB,OAAO,cAAc,SAAS;KAChC;IAEJ;;IAEA,IAAI,OAAO,QAAQ;KACjB,OAAO,MACL,YAAY,OAAO,MAAM,EAAE,QAAQ,QAAQ,oBAC7C;KACA,kBAAkB;KAClB,IAAI;MACF,IAAI,kBAAkB,iBAAiB,cAAc,cACnD,OAAO,SAAS,YAAY;OAE1B,OAAO,cAAc,aAAc;MACrC,CAAC;KAEL,sDAAsD;MACpD,OAAO,KACL,EAAE,QAAQ,GACV,6CACF;KACF;IACF;;IAEA,IAAI,iBAAiB;KACnB,OAAO,MAAM,gDAAgD;KAC7D,kBAAkB,gBAAgB,eAAe,cAAc;IACjE;IACA,MAAM,eAAe,aAAa,eAAe;GACnD;EACF;CACF;AACF;AAEA,eAAsB,yBACpB,QACe;CACf,OAAO,MAAM,EAAE,OAAO,GAAG,0BAA0B;CACnD,OAAO,MAAM,mCAAmC;CAChD,IAAI,CAAC,OAAO,qBAAqB;EAC/B,OAAO,MAAM,gBAAgB;EAC7B;CACF;CAEA,MAAM,mCAAmB,IAAI,IAAoB;CACjD,IAAI,OAAO,kBACJ;OAAA,MAAM,YAAY,OAAO,kBAC5B,IAAI,SAAS,SAAS,cAAc,SAAS,UAC3C,iBAAiB,IAAI,SAAS,MAAM,SAAS,SAAS,SAAS,CAAC;CAAA;CAItE,MAAM,qBAAqB,CAAC,qBAAqB,WAAW;CAC5D,KAAK,MAAM,eAAe,OAAO,qBAAqB;EACpD,IAAI,YAAY,SAAS,YACvB;EAEF,IACE,mBAAmB,MAAM,aAAa,YAAY,KAAK,SAAS,QAAQ,CAAC,GACzE;GACA,OAAO,MAAM,sBAAsB,YAAY,MAAM;GAGrD,MAAM,eAAe,YAAY,MAAM,YAAY,QAAS;GAC5D;EACF;EACA,IACE,EACE,YAAY,KAAK,SAAS,cAAc,KACxC,YAAY,KAAK,SAAS,qBAAqB,KAC/C,YAAY,KAAK,SAAS,aAAa,IAGzC;EAEF,MAAM,WACJ,iBAAiB,IAAI,YAAY,IAAI,KAAK,YAAY;EACxD,OAAO,MAAM,WAAW,YAAY,MAAM;EAC1C,MAAM,eAAe,YAAY,MAAM,QAAQ;CACjD;AACF;;AAGA,eAAe,kBACb,aACA,kBACe;CACf,IAAI;EACF,MAAM,gBAA0B,CAAC;EACjC,MAAM,YAAY,MAAM,QAAQ,MAAM,KAAK,aAAa,aAAa,CAAC;EACtE,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,aAAa,SAAS,CAAC;EAI/D,IAAI,WAAW;GAEb,MAAM,QAAQ,oBAAoB,SAAS;GAC3C,cAAc,KAAK,GAAG,MAAM,KAAK,MAAM,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC;EACpE,OAAO,IAAI,QAAQ;GAEjB,MAAM,aAAa,OAChB,MAAM,YAAY,CAAC,CACnB,MAAM,SAAS,KAAK,WAAW,sBAAsB,CAAC;GACzD,IAAI,YAAY;IACd,MAAM,aAAa,oBACjB,WAAW,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,MAAM,IAAI,GAAG,EAAE,CAClD;IACA,cAAc,KAAK,MAAM,KAAK,aAAa,UAAU,CAAC;GACxD;EACF;EACA,OAAO,MAAM,EAAE,cAAc,GAAG,iCAAiC;EAEjE,IAAI,cAAc,QAAQ;GACxB,MAAM,SAAS,MAAM,cAAc;GACnC,KAAK,MAAM,KAAK,OAAO,SAAS,OAAO,OAAO,SAAS,GACrD,IAAI,cAAc,MAAM,MAAM,EAAE,WAAW,CAAC,CAAC,GAC3C,iBAAiB,KAAK;IACpB,MAAM;IACN,MAAM;IACN,UAAU,MAAM,cAAc,CAAC;GACjC,CAAC;GAGL,KAAK,MAAM,KAAK,OAAO,WAAW,CAAC,GACjC,IAAI,cAAc,MAAM,MAAM,EAAE,WAAW,CAAC,CAAC,GAC3C,iBAAiB,KAAK;IAAE,MAAM;IAAY,MAAM;GAAE,CAAC;EAGzD;CACF,SAAS,KAAK;EACZ,OAAO,MAAM,EAAE,IAAI,GAAG,sCAAsC;CAC9D;AACF;AAIA,eAAsB,iBACpB,aACA,kBACA,0BACoC;CACpC,IAAI,YAAY;CAChB,IAAI;EACF,MAAM,oBAAoB,MAAM,KAAK,aAAa,aAAa;EAC/D,cAAe,MAAM,QAAQ,iBAAiB,KAAM,KAAA;EACpD,MAAM,eAAe,MAAM,cAAc,mBAAmB,MAAM;EAClE,IAAI,CAAC,SAAS,SAAS,KAAK,CAAC,SAAS,YAAY,GAChD,OAAO;EAIT,MAAM,cAAc,gBAA+B,SAAS,CAAC,EAAE;EAC/D,MAAM,cAAc,gBAA+B,YAAY,CAAC,EAAE;EAClE,IACE,CAAC,iCAAiC,WAAW,KAC7C,CAAC,iCAAiC,WAAW,GAE7C,OAAO;EAGT,MAAM,kBAAkB,MAAM,KAAK,aAAa,WAAW;EAC3D,MAAM,kBAAkB,MAAM,KAAK,aAAa,WAAW;EAC3D,OAAO,MAAM;GAAE;GAAa;EAAY,GAAG,2BAA2B;EAEtE,YAAY,UAAU,QAAQ,aAAa,WAAW;EACtD,iBAAiB,KACf;GACE,MAAM;GACN,MAAM;GACN,UAAU;EACZ,GACA;GACE,MAAM;GACN,MAAM;EACR,GACA;GACE,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,iBAAiB,MAAM;GACrD,cAAc;EAChB,CACF;CACF,SAAS,mDAAmD;EAC1D,OAAO,MAAM,EAAE,IAAI,GAAG,4BAA4B;CACpD;CACA,OAAO,4BAA4B;AACrC;AAEA,eAAsB,mBACpB,QACA,cACmC;CACnC,OAAO,MAAM,EAAE,OAAO,GAAG,oBAAoB;CAC7C,MAAM,iBAAkC,CAAC;CACzC,MAAM,kBAAoC,CAAC;CAC3C,MAAM,mBAAiC,CAAC;CACxC,IAAI,CAAC,aAAa,KAAK,QACrB,OAAO;EAAE;EAAgB;EAAiB;CAAiB;CAE7D,IAAI,OAAO,qBAAqB;EAC9B,OAAO,MAAM,+BAA+B;EAC5C,OAAO;GAAE;GAAgB;GAAiB;EAAiB;CAC7D;CACA,OAAO,MAAM,4BAA4B;CACzC,IACE,OAAO,yBACP,OAAO,uBACN,MAAM,IAAI,aAAa,OAAO,UAAU,GACzC;EACA,OAAO,MAAM,qCAAqC;EAClD,OAAO;GAAE;GAAgB;GAAiB;EAAiB;CAC7D;CACA,MAAM,OAAO,sBAAsB,QAAQ,YAAY;CACvD,OAAO,MAAM,EAAE,KAAK,GAAG,gBAAgB;CACvC,MAAM,mBAAmB,QAAQ,YAAY;CAC7C,MAAM,yBAAyB,MAAM;CAErC,MAAM,EAAE,wBAAwB,wBAAwB,iBAAiB;CAIzE,MAAM,MAAM;EACV,GAAG,OAAO;EACV,kBAAkB,MAAM,eAAA,KAA4B;EACpD,mBAAmB,MAAM,eAAe,cAAc;EACtD,oBAAoB,MAAM,eAAe,eAAe;EACxD,kBAAkB,MAAM,eAAe,mBAAmB;EAC1D,UAAU;CACZ;CAEA,IAAI;CACJ,IAAI;EACF,CAAC,CAAE,SAAUA,KAAe;GAC1B,UAAU;GACV,KAAK;EACP,CAAC;;EAED,QAAQ,QAAQ,GAAG,MAAM,KAAK;CAChC,SAAS,mDAAmD;EAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,qCAAqC;CAC5D;CACA,MAAM,UAAU,MAAM,GAAG,SAAS,MAAM,KAAK,KAAK;CAClD,KAAK,MAAM,WAAW,KAAK,aAAa;EACtC,MAAM,cAAc,MAAM,QAAQ,OAAO;EACzC,MAAM,eAAe,MAAM,gBAAgB,WAAW;EACtD,MAAM,mBAAmB,aAAa,cAAc,sBAAsB;EAC1E,MAAM,WAAW,MAAM,SAAS,OAAO;EACvC,OAAO,MAAM,cAAc,SAAS,OAAO,aAAa;EACxD,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,YAAY,OAChD;EACA,MAAM,MAAM,MAAMC,iBAChB,aACA,KACA,UACA,QACA,UACA,YACF;EACA,IAAI,IAAI,OAAO;;GAEb,IAAI,IAAI,QAAQ,SAAS,+BAA+B,GACjD;SAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,iCAAiC,QAAQ,SAC3C,GACA;KACA,OAAO,MACL;MAAE,YAAY,QAAQ;MAAS,MAAM;KAAM,GAC3C,8EACF;KAIA,MAAM,IAAI,kCAAkB,IAHZ,MACd,8EAE4B,GAAG,cAAc,EAAE;IACnD;;GAIJ,eAAe,KAAK;IAClB,UAAU;IACV,QAAQ,IAAI;GACd,CAAC;EACH,OAAO,IAAI,IAAI,UAAU;GACvB,IAAI,IAAI,gBAAgB;IACtB,MAAM,UACJ;IACF,OAAO,KAAK,EAAE,QAAQ,GAAG,OAAO;IAChC,gBAAgB,KAAK;KAAE,MAAM;KAAS;IAAQ,CAAC;GACjD;GACA,MAAM,kBAAkB,MAAM,QAC5B,SACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;GACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,GAAG,QAAQ,gBAAgB;QACnC;IACL,OAAO,MAAM,GAAG,QAAQ,gBAAgB;IACxC,iBAAiB,KAAK;KACpB,MAAM;KACN,MAAM;KAGN,UAAU,IAAI,SAAS,QAAQ,SAAS,EAAE;IAC5C,CAAC;GACH;EACF;EACA,MAAM,kBAAkB,aAAa,YAAY;CACnD;CAEA,KAAK,MAAM,YAAY,KAAK,cAAc;EACxC,MAAM,cAAc,MAAM,QAAQ,QAAQ;EAC1C,MAAM,eAAe,MAAM,gBAAgB,WAAW;EACtD,MAAM,mBAAmB,aAAa,cAAc,sBAAsB;EAC1E,IAAI;EACJ,IAAI;EACJ,IAAI,qBAAqB;GACvB,oBAAoB,mBAAmB,UAAU,aAAa;GAC9D,2BAA2B,MAAM,cAAc,mBAAmB,MAAM;;GAExE,IAAI,0BACF,IAAI;IAEF,MAAM,qBAAqB,gBACzB,wBACF;IAEA,MAAM,oBAAoBC,MACxB,oBACAC,8BACE,qBACA,kBACF,CACF;IAEA,MAAM,eAAe,mBAAmB,KAAK,iBAAiB,CAAC;IAC/D,OAAO,MAAM,qCAAqC;GACpD,SAAS,KAAK;IACZ,OAAO,KAAK,EAAE,IAAI,GAAG,qCAAqC;GAC5D;EAEJ;EACA,OAAO,MAAM,4BAA4B,aAAa;EACtD,MAAM,eAAe,MAAM,KAAK,aAAa,WAAW;EACxD,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,aAAa,QACjD;EACA,MAAM,MAAM,MAAMC,mBAAsB,aAAa,KAAK,QAAQ,QAAQ;EAC1E,IAAI,IAAI,OAAO;;GAEb,IAAI,IAAI,QAAQ,SAAS,gCAAgC,GAClD;SAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,qCAAqC,QAAQ,QAAQ,IACvD,GACA;KACA,OAAO,MACL;MAAE,YAAY,QAAQ;MAAS,MAAM;KAAO,GAC5C,8EACF;KACA,MAAM,IAAI,kCACR,IAAI,MACF,8EACF,GACA,cAAc,EAChB;IACF;;GAIJ,eAAe,KAAK;IAClB,UAAU;IACV,QAAQ,kCAAkC,KAAK,EAAE;GACnD,CAAC;EACH,OAAO;GACL,MAAM,kBAAkB,MAAM,QAC5B,cACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;GACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,0BAA0B;QAClC;IACL,OAAO,MAAM,0BAA0B;IACvC,iBAAiB,KAAK;KACpB,MAAM;KACN,MAAM;KAEN,UAAU,IAAI;IAChB,CAAC;IACD,MAAM,kBAAkB,aAAa,gBAAgB;GACvD;;GAGA,IAAI,SAAS,KAAKC,YAAiB,GACjC,2BAA2B,MAAM,iBAC/B,aACA,kBACA,wBACF;EAEJ;EACA,MAAM,kBAAkB,aAAa,YAAY;;EAEjD,IAAI,0BAEF,MAAM,eAAe,mBAAoB,wBAAwB;CAErE;CAEA,KAAK,MAAM,gBAAgB,KAAK,kBAAkB;EAChD,MAAM,cAAc,MAAM,QAAQ,YAAY;EAC9C,MAAM,eAAe,MAAM,gBAAgB,WAAW;EACtD,MAAM,mBAAmB,aAAa,cAAc,sBAAsB;EAC1E,OAAO,MAAM,iCAAiC,aAAa;EAC3D,MAAM,WAAW,OAAO,SAAS,QAC9B,YAAY,QAAQ,aAAa,iBAAiB,YACrD;EACA,MAAM,MAAM,MAAMC,mBAAsB,aAAa,KAAK,QAAQ,QAAQ;EAC1E,IAAI,IAAI,OAAO;;GAEb,IAAI,IAAI,QAAQ,SAAS,8BAA8B,GAChD;SAAA,MAAM,WAAW,OAAO,UAC3B,IACE,IAAI,OAAO,SACT,gCAAgC,QAAQ,SAC1C,GACA;KACA,OAAO,MACL;MAAE,YAAY,QAAQ;MAAS,MAAM;KAAO,GAC5C,8EACF;KACA,MAAM,IAAI,kBACR,MACE,8EACF,GACA,cAAc,EAChB;IACF;;GAIJ,eAAe,KAAK;IAClB,UAAU;IACV,QAAQ,kCAAkC,KAAK,EAAE;GACnD,CAAC;EACH,OAAO;GACL,MAAM,kBAAkB,MAAM,QAC5B,cACA,OAAO,sBAAsB,OAAO,aAAa,OAAO,UAC1D;GACA,IAAI,IAAI,aAAa,iBACnB,OAAO,MAAM,+BAA+B;QACvC;IACL,OAAO,MAAM,+BAA+B;IAC5C,iBAAiB,KAAK;KACpB,MAAM;KACN,MAAM;KAEN,UAAU,IAAI;IAChB,CAAC;GACH;EACF;EACA,MAAM,kBAAkB,aAAa,YAAY;CACnD;CAEA,OAAO;EAAE;EAAgB;EAAiB;CAAiB;AAC7D"}

package/dist/util/markdown.js

@@ -6,7 +6,7 @@ import github from "remark-github";
 function sanitizeMarkdown(markdown) {
 	let res = markdown;
 	res = res.replace(regEx(/(\W)#(\d)/gi), "$1#​$2");
-	res = res.split(regEx(/(```[\s\S]*?```|`[^`\n]*?`)/g)).map((part) => part.startsWith("`") ? part : part.replace(regEx(/@/g), "@​")).join("");
+	res = res.split(regEx(/(```[\s\S]*?```|`[^`\n]*?`|https?:\/\/[^\s<]+)/gi)).map((part) => part.startsWith("`") || regEx(/^https?:\/\//i).test(part) ? part : part.replace(regEx(/@/g), "@&#8203;")).join("");
 	res = res.replace(regEx(/([a-z]@)&#8203;/gi), "$1");
 	res = res.replace(regEx(/\/compare\/@&#8203;/g), "/compare/@");
 	res = res.replace(regEx(/(\(https:\/\/[^)]*?)\.\.\.@&#8203;/g), "$1...@");

package/dist/util/markdown.js.map

@@ -1 +1 @@
-{"version":3,"file":"markdown.js","names":[],"sources":["../../lib/util/markdown.ts"],"sourcesContent":["import { remark } from 'remark';\nimport gfm from 'remark-gfm';\nimport type { Options as RemarkGithubOptions } from 'remark-github';\nimport github from 'remark-github';\nimport { regEx } from './regex.ts';\n\n// Generic replacements/link-breakers\nexport function sanitizeMarkdown(markdown: string): string {\n  let res = markdown;\n  // Put a zero width space after every # followed by a digit\n  res = res.replace(regEx(/(\\W)#(\\d)/gi), '$1#&#8203;$2');\n  // Put a zero width space after every @ symbol to prevent unintended hyperlinking,\n  // but leave code blocks (triple backticks) and inline code spans untouched\n  res = res\n    .split(regEx(/(```[\\s\\S]*?```|`[^`\\n]*?`)/g))\n    .map((part) =>\n      part.startsWith('`') ? part : part.replace(regEx(/@/g), '@&#8203;'),\n    )\n    .join('');\n  res = res.replace(regEx(/([a-z]@)&#8203;/gi), '$1');\n  res = res.replace(regEx(/\\/compare\\/@&#8203;/g), '/compare/@');\n  res = res.replace(regEx(/(\\(https:\\/\\/[^)]*?)\\.\\.\\.@&#8203;/g), '$1...@');\n  res = res.replace(regEx(/([\\s(])#(\\d+)([)\\s]?)/g), '$1#&#8203;$2$3');\n  // convert escaped backticks back to `\n  const backTickRe = regEx(/&#x60;([^/]*?)&#x60;/g);\n  res = res.replace(backTickRe, '`$1`');\n  res = res.replace(regEx(/`#&#8203;(\\d+)`/g), '`#$1`');\n  res = res.replace(\n    regEx(/(?<before>[^\\n]\\n)(?<title>#.*)/g),\n    '$<before>\\n$<title>',\n  );\n  return res;\n}\n\n/**\n *\n * @param content content to process\n * @param options github options\n * @returns linkified content\n */\nexport async function linkify(\n  content: string,\n  options: RemarkGithubOptions,\n): Promise<string> {\n  // https://github.com/syntax-tree/mdast-util-to-markdown#optionsbullet\n  const output = await remark()\n    .use({ settings: { bullet: '-' } })\n    .use(gfm)\n    .use(github, { mentionStrong: false, ...options })\n    .process(content);\n  return output.toString();\n}\n"],"mappings":";;;;;AAOA,SAAgB,iBAAiB,UAA0B;CACzD,IAAI,MAAM;CAEV,MAAM,IAAI,QAAQ,MAAM,aAAa,GAAG,cAAc;CAGtD,MAAM,IACH,MAAM,MAAM,8BAA8B,CAAC,CAAC,CAC5C,KAAK,SACJ,KAAK,WAAW,GAAG,IAAI,OAAO,KAAK,QAAQ,MAAM,IAAI,GAAG,UAAU,CACpE,CAAC,CACA,KAAK,EAAE;CACV,MAAM,IAAI,QAAQ,MAAM,mBAAmB,GAAG,IAAI;CAClD,MAAM,IAAI,QAAQ,MAAM,sBAAsB,GAAG,YAAY;CAC7D,MAAM,IAAI,QAAQ,MAAM,qCAAqC,GAAG,QAAQ;CACxE,MAAM,IAAI,QAAQ,MAAM,wBAAwB,GAAG,gBAAgB;CAEnE,MAAM,aAAa,MAAM,uBAAuB;CAChD,MAAM,IAAI,QAAQ,YAAY,MAAM;CACpC,MAAM,IAAI,QAAQ,MAAM,kBAAkB,GAAG,OAAO;CACpD,MAAM,IAAI,QACR,MAAM,kCAAkC,GACxC,qBACF;CACA,OAAO;AACT;;;;;;;AAQA,eAAsB,QACpB,SACA,SACiB;CAOjB,QAAO,MALc,OAAO,CAAC,CAC1B,IAAI,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAClC,IAAI,GAAG,CAAC,CACR,IAAI,QAAQ;EAAE,eAAe;EAAO,GAAG;CAAQ,CAAC,CAAC,CACjD,QAAQ,OAAO,EAAA,CACJ,SAAS;AACzB"}
+{"version":3,"file":"markdown.js","names":[],"sources":["../../lib/util/markdown.ts"],"sourcesContent":["import { remark } from 'remark';\nimport gfm from 'remark-gfm';\nimport type { Options as RemarkGithubOptions } from 'remark-github';\nimport github from 'remark-github';\nimport { regEx } from './regex.ts';\n\n// Generic replacements/link-breakers\nexport function sanitizeMarkdown(markdown: string): string {\n  let res = markdown;\n  // Put a zero width space after every # followed by a digit\n  res = res.replace(regEx(/(\\W)#(\\d)/gi), '$1#&#8203;$2');\n  // Put a zero width space after every @ symbol to prevent unintended hyperlinking,\n  // but leave URLs, code blocks (triple backticks), and inline code spans untouched\n  res = res\n    .split(regEx(/(```[\\s\\S]*?```|`[^`\\n]*?`|https?:\\/\\/[^\\s<]+)/gi))\n    .map((part) =>\n      part.startsWith('`') || regEx(/^https?:\\/\\//i).test(part)\n        ? part\n        : part.replace(regEx(/@/g), '@&#8203;'),\n    )\n    .join('');\n  res = res.replace(regEx(/([a-z]@)&#8203;/gi), '$1');\n  res = res.replace(regEx(/\\/compare\\/@&#8203;/g), '/compare/@');\n  res = res.replace(regEx(/(\\(https:\\/\\/[^)]*?)\\.\\.\\.@&#8203;/g), '$1...@');\n  res = res.replace(regEx(/([\\s(])#(\\d+)([)\\s]?)/g), '$1#&#8203;$2$3');\n  // convert escaped backticks back to `\n  const backTickRe = regEx(/&#x60;([^/]*?)&#x60;/g);\n  res = res.replace(backTickRe, '`$1`');\n  res = res.replace(regEx(/`#&#8203;(\\d+)`/g), '`#$1`');\n  res = res.replace(\n    regEx(/(?<before>[^\\n]\\n)(?<title>#.*)/g),\n    '$<before>\\n$<title>',\n  );\n  return res;\n}\n\n/**\n *\n * @param content content to process\n * @param options github options\n * @returns linkified content\n */\nexport async function linkify(\n  content: string,\n  options: RemarkGithubOptions,\n): Promise<string> {\n  // https://github.com/syntax-tree/mdast-util-to-markdown#optionsbullet\n  const output = await remark()\n    .use({ settings: { bullet: '-' } })\n    .use(gfm)\n    .use(github, { mentionStrong: false, ...options })\n    .process(content);\n  return output.toString();\n}\n"],"mappings":";;;;;AAOA,SAAgB,iBAAiB,UAA0B;CACzD,IAAI,MAAM;CAEV,MAAM,IAAI,QAAQ,MAAM,aAAa,GAAG,cAAc;CAGtD,MAAM,IACH,MAAM,MAAM,kDAAkD,CAAC,CAAC,CAChE,KAAK,SACJ,KAAK,WAAW,GAAG,KAAK,MAAM,eAAe,CAAC,CAAC,KAAK,IAAI,IACpD,OACA,KAAK,QAAQ,MAAM,IAAI,GAAG,UAAU,CAC1C,CAAC,CACA,KAAK,EAAE;CACV,MAAM,IAAI,QAAQ,MAAM,mBAAmB,GAAG,IAAI;CAClD,MAAM,IAAI,QAAQ,MAAM,sBAAsB,GAAG,YAAY;CAC7D,MAAM,IAAI,QAAQ,MAAM,qCAAqC,GAAG,QAAQ;CACxE,MAAM,IAAI,QAAQ,MAAM,wBAAwB,GAAG,gBAAgB;CAEnE,MAAM,aAAa,MAAM,uBAAuB;CAChD,MAAM,IAAI,QAAQ,YAAY,MAAM;CACpC,MAAM,IAAI,QAAQ,MAAM,kBAAkB,GAAG,OAAO;CACpD,MAAM,IAAI,QACR,MAAM,kCAAkC,GACxC,qBACF;CACA,OAAO;AACT;;;;;;;AAQA,eAAsB,QACpB,SACA,SACiB;CAOjB,QAAO,MALc,OAAO,CAAC,CAC1B,IAAI,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAClC,IAAI,GAAG,CAAC,CACR,IAAI,QAAQ;EAAE,eAAe;EAAO,GAAG;CAAQ,CAAC,CAAC,CACjD,QAAQ,OAAO,EAAA,CACJ,SAAS;AACzB"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "renovate",
   "description": "Automated dependency updates. Flexible so you don't need to be.",
-  "version": "44.53.0",
+  "version": "44.55.0",
   "type": "module",
   "bin": {
     "renovate": "dist/renovate.js",

package/renovate-schema.json

@@ -1,8 +1,8 @@
 {
   "$id": "https://docs.renovatebot.com/renovate-schema.json",
-  "title": "JSON schema for Renovate 44.53.0 config files (https://renovatebot.com/)",
+  "title": "JSON schema for Renovate 44.55.0 config files (https://renovatebot.com/)",
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "x-renovate-version": "44.53.0",
+  "x-renovate-version": "44.55.0",
   "allowComments": true,
   "type": "object",
   "definitions": {