ripencli 1.2.3 → 1.2.4

package/README.md

@@ -89,7 +89,7 @@ Press `s` to open the settings screen. Settings are persisted at `~/.config/ripe
 | Grouped scopes             | —       | List of scopes to group (e.g. `@heroui`, `@radix-ui`)                                                |
 | SFW Firewall               | Off     | Prepend `sfw` before every generated command (requires [sfw](https://github.com/SocketDev/sfw-free)) |
 
-When using `ripen -g`, all available package managers (npm, pnpm, yarn) are checked in parallel so you see every global package in one place. Bun is not included in global checking because it doesn't provide a JSON output for its outdated command.
+When using `ripen -g`, all available package managers (npm, pnpm, yarn) (except bun) are checked in parallel so you see every global package in one place. Bun is not included in global checking because it doesn't provide a JSON output for its outdated command.
 
 ## License
 

package/dist/cli.js

@@ -106,6 +106,23 @@ function parseBaseVersion(range) {
 }
 //#endregion
 //#region src/registry.ts
+let cachedToken;
+/**
+* Get a GitHub token from the `gh` CLI (`gh auth token`). Unauthenticated
+* requests are limited to 60/hour per IP and are easily exhausted; an
+* authenticated request raises the limit to 5,000/hour. Returns null when
+* `gh` is not installed or the user is not logged in. Cached per process.
+*/
+async function githubToken() {
+	if (cachedToken !== void 0) return cachedToken;
+	try {
+		const { stdout, exitCode } = await execa("gh", ["auth", "token"], { reject: false });
+		cachedToken = exitCode === 0 && stdout.trim() ? stdout.trim() : null;
+	} catch {
+		cachedToken = null;
+	}
+	return cachedToken;
+}
 async function fetchVersions(packageName) {
 	try {
 		const res = await fetch(`https://registry.npmjs.org/${encodeURIComponent(packageName)}`);
@@ -135,11 +152,17 @@ async function fetchVersions(packageName) {
 async function fetchChangelog(packageName, fromVersion, toVersion) {
 	try {
 		const res = await fetch(`https://registry.npmjs.org/${encodeURIComponent(packageName)}/latest`);
-		if (!res.ok) return [];
+		if (!res.ok) return { entries: [] };
 		const repo = extractGitHubRepo(await res.json());
-		if (!repo) return [];
-		const ghRes = await fetch(`https://api.github.com/repos/${repo}/releases?per_page=30`, { headers: { Accept: "application/vnd.github+json" } });
-		if (!ghRes.ok) return [];
+		if (!repo) return { entries: [] };
+		const token = await githubToken();
+		const headers = { Accept: "application/vnd.github+json" };
+		if (token) headers.Authorization = `Bearer ${token}`;
+		const ghRes = await fetch(`https://api.github.com/repos/${repo}/releases?per_page=30`, { headers });
+		if (!ghRes.ok) return {
+			entries: [],
+			rateLimited: (ghRes.status === 403 || ghRes.status === 429) && !token
+		};
 		const releases = await ghRes.json();
 		const toMajor = parseVersion(toVersion)[0];
 		const filtered = releases.filter((r) => {
@@ -153,15 +176,15 @@ async function fetchChangelog(packageName, fromVersion, toVersion) {
 		}));
 		if (filtered.length === 0 && releases.length > 0) {
 			const latest = releases[0];
-			return [{
+			return { entries: [{
 				version: latest.tag_name,
 				body: latest.body?.trim() ?? "No release notes.",
 				url: latest.html_url
-			}];
+			}] };
 		}
-		return filtered.sort((a, b) => compareVersions(a.version, b.version));
+		return { entries: filtered.sort((a, b) => compareVersions(a.version, b.version)) };
 	} catch {
-		return [];
+		return { entries: [] };
 	}
 }
 async function fetchLatestVersion(packageName) {
@@ -1693,6 +1716,7 @@ function MarkdownLine({ line, baseColor = "white", repoUrl }) {
 //#region src/ui/ChangelogPanel.tsx
 function ChangelogPanel({ pkg, onClose }) {
 	const [entries, setEntries] = useState([]);
+	const [rateLimited, setRateLimited] = useState(false);
 	const [repoUrl, setRepoUrl] = useState("");
 	const [loading, setLoading] = useState(true);
 	const [opened, setOpened] = useState(false);
@@ -1701,9 +1725,10 @@ function ChangelogPanel({ pkg, onClose }) {
 	const { columns, rows } = useWindowSize();
 	const isUpToDate = pkg.current === (pkg.targetVersion ?? pkg.latest);
 	useEffect(() => {
-		Promise.all([fetchChangelog(pkg.name, isUpToDate ? "" : pkg.current, pkg.targetVersion ?? pkg.latest), fetchRepoUrl(pkg.name)]).then(([e, repo]) => {
-			setEntries(e);
-			setActiveEntry(isUpToDate ? Math.max(0, e.length - 1) : 0);
+		Promise.all([fetchChangelog(pkg.name, isUpToDate ? "" : pkg.current, pkg.targetVersion ?? pkg.latest), fetchRepoUrl(pkg.name)]).then(([result, repo]) => {
+			setEntries(result.entries);
+			setRateLimited(result.rateLimited ?? false);
+			setActiveEntry(isUpToDate ? Math.max(0, result.entries.length - 1) : 0);
 			setRepoUrl(repo);
 			setLoading(false);
 		});
@@ -1828,6 +1853,41 @@ function ChangelogPanel({ pkg, onClose }) {
 			loading ? /* @__PURE__ */ jsx(Text, {
 				color: "gray",
 				children: " fetching release notes…"
+			}) : rateLimited ? /* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				children: [
+					/* @__PURE__ */ jsx(Text, {
+						color: "yellow",
+						children: " GitHub rate limit reached (60 requests/hour for unauthenticated use)."
+					}),
+					/* @__PURE__ */ jsx(Text, {
+						color: "gray",
+						children: " Install the GitHub CLI and log in to raise the limit to 5,000/hour:"
+					}),
+					/* @__PURE__ */ jsxs(Text, {
+						color: "gray",
+						children: [
+							"   ",
+							/* @__PURE__ */ jsx(Text, {
+								color: "white",
+								children: "gh auth login"
+							}),
+							" — https://cli.github.com"
+						]
+					}),
+					releasesPageUrl && /* @__PURE__ */ jsxs(Text, {
+						color: "gray",
+						children: [
+							" ",
+							"Or press ",
+							/* @__PURE__ */ jsx(Text, {
+								color: "white",
+								children: "r"
+							}),
+							" to open the releases page in browser."
+						]
+					})
+				]
 			}) : entries.length === 0 ? /* @__PURE__ */ jsxs(Box, {
 				flexDirection: "column",
 				children: [/* @__PURE__ */ jsx(Text, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ripencli",
-  "version": "1.2.3",
+  "version": "1.2.4",
   "description": "Interactive dependency updater for npm, pnpm, yarn, and bun",
   "license": "MIT",
   "author": {