updates 17.15.3 → 17.15.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +1 -1
- package/dist/shared.js +5 -5
- package/package.json +5 -5
package/dist/index.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{a as e,c as t,d as n,f as r,i,l as a,n as o,o as s,r as c,s as l,t as u,u as d}from"./shared.js";import{cwd as f,exit as p,platform as m,stderr as h,stdout as g,versions as _}from"node:process";import{parseArgs as v,stripVTControlCharacters as y,styleText as b}from"node:util";const x=v({strict:!1,allowPositionals:!0,tokens:!0,options:e}),S=x.values;for(let[e,t]of x.tokens.entries())if(t.kind===`option`&&t.value?.startsWith(`-`)){let n=c(t.value.substring(1)),r=x.tokens[e+1];S[t.name]=[!0],S[n]||(S[n]=[]),r?.kind===`positional`&&r.value?S[n].push(r.value):S[n].push(!0)}const C=x.values,w=x.positionals;function T(e){return/^\/.+\/$/.test(e)?new RegExp(e.slice(1,-1)):e}function E(e){let t=l(e);if(t!==!1)return t===!0?!0:Array.from(t).map(T)}let D=String,O=String;async function k(e,t){if(e){let t=e.message??String(e);C.json?console.info(JSON.stringify({error:t})):console.info(D(t))}m===`win32`&&Number(_?.node?.split(`.`)[0])>=23&&await new Promise(e=>setTimeout(e,50)),p(t
|
|
2
|
+
import{a as e,c as t,d as n,f as r,i,l as a,n as o,o as s,r as c,s as l,t as u,u as d}from"./shared.js";import{cwd as f,exit as p,platform as m,stderr as h,stdout as g,versions as _}from"node:process";import{parseArgs as v,stripVTControlCharacters as y,styleText as b}from"node:util";const x=v({strict:!1,allowPositionals:!0,tokens:!0,options:e}),S=x.values;for(let[e,t]of x.tokens.entries())if(t.kind===`option`&&t.value?.startsWith(`-`)){let n=c(t.value.substring(1)),r=x.tokens[e+1];S[t.name]=[!0],S[n]||(S[n]=[]),r?.kind===`positional`&&r.value?S[n].push(r.value):S[n].push(!0)}const C=x.values,w=x.positionals;function T(e){return/^\/.+\/$/.test(e)?new RegExp(e.slice(1,-1)):e}function E(e){let t=l(e);if(t!==!1)return t===!0?!0:Array.from(t).map(T)}let D=String,O=String;async function k(e,t){if(e){let t=e.message??String(e);C.json?console.info(JSON.stringify({error:t})):console.info(D(t))}m===`win32`&&Number(_?.node?.split(`.`)[0])>=23&&await new Promise(e=>setTimeout(e,50)),p(t??+!!e)}async function A(){for(let e of[g,h])e?._handle?.setBlocking?.(!0);C.help&&(g.write(`usage: updates [options] [files...]
|
|
3
3
|
|
|
4
4
|
Options:
|
|
5
5
|
-u, --update Update versions and write dependency file
|
package/dist/shared.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
import{cwd as e,env as t,platform as n,stderr as r}from"node:process";import{promisify as i,styleText as a}from"node:util";import{basename as o,dirname as s,join as c,relative as l,resolve as u}from"node:path";import{accessSync as d,globSync as f,lstatSync as p,
|
|
2
|
-
`;case`r`:return`\r`;case`t`:return` `;case`u`:case`U`:return String.fromCodePoint(Number.parseInt(t.slice(1),16));default:return t}})}const
|
|
3
|
-
`)}return r}const Re={y:365,m:30,w:7,d:1,h:1/24,s:1/86400};function ze(e){let t=/^(\d+(?:\.\d+)?)\s*([a-z])$/i.exec(e);if(t){let[,e,n]=t,r=Re[n.toLowerCase()];if(r)return Number(e)*r}let n=Number(e);if(!Number.isFinite(n))throw Error(`Invalid cooldown value: ${e}`);return n}async function Be(e,t,{concurrency:n=1/0}={}){let r=Array.from(e);if(!Number.isFinite(n))return Promise.all(r.map(t));let i=Array(r.length),a=0;return await Promise.all(Array.from({length:Math.min(n,r.length)},async()=>{for(;a<r.length;){let e=a++;i[e]=await t(r[e])}})),i}const W=e=>e.replace(/[|\\{}()[\]^$+*?.-]/g,`\\$&`);function Ve(){let e=new Map,t=new Map,n=y.lookup;y.lookup=function(r,...i){let a={},o;typeof i[0]==`function`?o=i[0]:(a=typeof i[0]==`number`?{family:i[0]}:i[0]||{},o=i[1]);let s=e.get(r);if(s){a.all?o(null,s):o(null,s[0].address,s[0].family);return}if(t.has(r)){t.get(r).push({options:a,callback:o});return}t.set(r,[{options:a,callback:o}]),n.call(y,r,{all:!0},(n,i)=>{let a=t.get(r);t.delete(r),!n&&i?.length&&e.set(r,i);for(let{options:e,callback:t}of a)n?t(n):e.all?t(null,i):t(null,i[0].address,i[0].family)})}}const He=`17.15.3`,Ue=5e3,G=e=>e.replace(/^v/,``),K=e=>e.endsWith(`/`)?e.slice(0,-1):e;function We(e,t){return{headers:{"user-agent":`updates/${He}`,"accept-encoding":`gzip, deflate, br`,...t&&{Authorization:`${e} ${t}`}}}}async function Ge(e,t){try{return await fetch(e,t)}catch(t){throw Error(`Failed to fetch ${e}${t?.message?`: ${t.message}`:``}`)}}function Ke(e){return(M(e)?.prerelease.length??0)>0}function qe(e){return/[0-9]+\.[0-9]+\.[0-9]+-.+/.test(e)}function Je(e,t,{useRel:n,allowDowngrade:r,name:i,matchesAny:a}){let o=q(e),s=q(t);if(!o||!s)return!0;let c=qe(e)||Ke(e),l=Ke(t);return c&&!l?de(s,o)||n:!l&&fe(s,o)?r===!0||a(i,r):!0}function q(e){try{return ue(e)?.version??``}catch{return``}}function Ye(e,t,{range:n,semvers:r,usePre:i,useRel:a,useGreatest:o,pinnedRange:s}){let c=q(n);if(!c)return c;i=qe(n)||i,i&&(r.add(`prerelease`),r.has(`patch`)&&r.add(`prepatch`),r.has(`minor`)&&r.add(`preminor`),r.has(`major`)&&r.add(`premajor`));let l=0,u=c;for(let n of t){let t=M(n);if(!t?.version||t.prerelease.length&&(!i||a))continue;let c=t.version;if(s&&!be(c,s))continue;let d=F(u,c);if(!(!d||!r.has(d)))if(o||!(`time`in e))(L(q(c),u)||s&&!be(u,s))&&(u=c);else{let t=Date.parse(e.time[n]);t>=0&&t>l&&(u=c,l=t)}}return u||null}function Xe(e,{mode:t,range:n,useGreatest:r,useRel:i,usePre:a,semvers:o,pinnedRange:s},{allowDowngrade:c,matchesAny:l,isGoPseudoVersion:u}){if(n===`*`||n.includes(`||`))return null;let d=[];if(t===`pypi`)d=Object.keys(e.releases).filter(e=>j(e));else if(t===`npm`||t===`cargo`)d=Object.keys(e.versions).filter(e=>j(e));else if(t===`go`){let t=q(n);if(!t)return null;let r=a||qe(n),s=e=>Ke(e)&&(!r||i),d={useRel:i,allowDowngrade:c,name:e.name,matchesAny:l},f=e.old||n,p=q(e.new);if(p&&!u(e.new)&&!s(e.new)){let n=F(t,p);if(n&&o.has(n)&&Je(f,e.new,d))return e.new}let m=q(e.sameMajorNew);if(m&&!u(e.sameMajorNew)&&!s(e.sameMajorNew)){let n=F(t,m);if(n&&o.has(n)&&Je(f,e.sameMajorNew,d))return e.Time=e.sameMajorTime,delete e.newPath,e.sameMajorNew}return null}let f=Ye(e,d,{range:n,semvers:o,usePre:a,useRel:i,useGreatest:r,pinnedRange:s});if(!f)return null;if(r)return f;{let r=``,u=``;t===`pypi`?(u=e.info.version,r=q(e.info.version)):r=e[`dist-tags`].latest;let d=q(n),p=qe(n),m=Ke(f),h=Ke(r),g={useRel:i,allowDowngrade:c,name:e.name,matchesAny:l};if(!i&&a||p&&m)return f;if(p&&!m)return Je(n,f,g)?f:null;let _=F(d,r);return _&&_!==`prerelease`&&!o.has(_.replace(/^pre/,``))||i&&Ke(r)?f:fe(r,d)&&!h?Je(n,r,g)?r:null:!p&&h&&!a||s&&!be(r,s)?f:u||r}}const Ze=new Map;if(t.UPDATES_FORGE_TOKENS)for(let e of t.UPDATES_FORGE_TOKENS.split(`,`)){let t=e.indexOf(`:`);t>0&&Ze.set(e.substring(0,t),e.substring(t+1))}function Qe(e){let n=[];for(let r of e)t[r]&&n.push(t[r]);return Array.from(new Set(n))}const $e=Qe([`UPDATES_GITHUB_API_TOKEN`,`GITHUB_API_TOKEN`,`GH_TOKEN`,`GITHUB_TOKEN`,`HOMEBREW_GITHUB_API_TOKEN`]);try{let e=te(`gh`,[`auth`,`token`],{encoding:`utf8`,timeout:5e3,stdio:[`ignore`,`pipe`,`pipe`]}).trim();e&&!$e.includes(e)&&$e.push(e)}catch{}function et(){return $e}const tt=new Map;function nt(e){try{let t=Ze.get(new URL(e).hostname);if(t)return[t]}catch{}return et()}async function rt(e,t){let n={signal:AbortSignal.timeout(t.fetchTimeout),headers:{"accept-encoding":`gzip, deflate, br`}},r;try{r=new URL(e).hostname}catch{r=``}let i=r?nt(e):et();if(!i.length)return t.doFetch(e,n);let a=r?tt.get(r):void 0;if(a)return t.doFetch(e,{...n,headers:{...n.headers,Authorization:`Bearer ${a}`}});for(let a of i){let i=await t.doFetch(e,{...n,headers:{...n.headers,Authorization:`Bearer ${a}`}});if(i.status!==401&&i.status!==403)return r&&tt.set(r,a),i}return t.doFetch(e,n)}function it(e,t,n){let r=G(t);if(!j(r))return null;if(n){let n=t,i=G(t);for(let t of e){let e=G(t);j(e)&&(!n||de(e,i))&&(n=t,i=e)}if(pe(r,i))return n}else{let t=e.at(-1);if(!t)return null;let n=G(t);if(!j(n))return null;if(pe(r,n))return t}return null}function at(e){return e=e.replace(`git@`,``).replace(/.+?\/\//,`https://`).replace(/\.git$/,``),/^[a-z]+:[a-z0-9-]\/[a-z0-9-]$/.test(e)?e.replace(/^(.+?):/,(e,t)=>`https://${t}.com/`):/^[a-z0-9-]\/[a-z0-9-]$/.test(e)?`https://github.com/${e}`:e}const ot=/^[0-9a-f]{7,}$/i;function st(e){return e.map(e=>({name:e.name,commitSha:e.commit?.sha||``}))}async function ct(e,t,n,r){try{let i=await rt(`${e}/repos/${t}/${n}/tags?per_page=100`,r);if(!i?.ok)return[];let a=st(await i.json()),o=i.headers.get(`link`)||``,s=/<([^>]+)>;\s*rel="last"/.exec(o);if(s){let i=Number(new URL(s[1]).searchParams.get(`page`)),o=await Promise.all(Array.from({length:i-1},(i,a)=>rt(`${e}/repos/${t}/${n}/tags?per_page=100&page=${a+2}`,r)));for(let e of o)e?.ok&&a.push(...st(await e.json()))}return a}catch{return[]}}function lt(e,t,n,r){throw e?.status&&e?.statusText?Error(`Received ${e.status} ${e.statusText} from ${t}`):Error(`Unable to fetch ${n} from ${r}`)}function ut(e,t,n=``){let r=t.startsWith(`v`),i=G(e),a=G(t).split(`.`).length,o=i.split(`.`),s;return s=a===1?o[0]:a===2?`${o[0]}.${o[1]||`0`}`:i,`${r?`v`:``}${s}${n}`}function dt(e){return e.startsWith(`https://bitbucket.org`)?`src/HEAD`:`tree/HEAD`}function ft({repository:e,homepage:t,info:n},r,i){if(n){let t=n.project_urls;for(let n of[`repository`,`Repository`,`repo`,`Repo`,`source`,`Source`,`source code`,`Source code`,`Source Code`,`homepage`,`Homepage`])if(t[n]){e=t[n];break}e??=`https://pypi.org/project/${i}/`}let a=``;return r===`https://npm.pkg.github.com`?`https://github.com/${i.replace(/^@/,``)}`:(e&&(a=at(typeof e==`string`?e:e.url),a&&typeof e!=`string`&&e.directory&&(a=`${a}/${dt(a)}/${e.directory}`)),a||t||``)}const pt={"allow-downgrade":{short:`d`,type:`string`,multiple:!0},"error-on-outdated":{short:`E`,type:`boolean`},"error-on-unchanged":{short:`U`,type:`boolean`},exclude:{short:`e`,type:`string`,multiple:!0},file:{short:`f`,type:`string`,multiple:!0},forgeapi:{type:`string`},goproxy:{type:`string`},cargoapi:{type:`string`},dockerapi:{type:`string`},greatest:{short:`g`,type:`string`,multiple:!0},help:{short:`h`,type:`boolean`},include:{short:`i`,type:`string`,multiple:!0},indirect:{short:`I`,type:`boolean`},json:{short:`j`,type:`boolean`},jsrapi:{type:`string`},cooldown:{short:`C`,type:`string`},minor:{short:`m`,type:`string`,multiple:!0},modes:{short:`M`,type:`string`,multiple:!0},color:{short:`c`,type:`boolean`},"no-cache":{short:`x`,type:`boolean`},"no-color":{short:`n`,type:`boolean`},patch:{short:`P`,type:`string`,multiple:!0},pin:{short:`l`,type:`string`,multiple:!0},prerelease:{short:`p`,type:`string`,multiple:!0},pypiapi:{type:`string`},registry:{short:`r`,type:`string`},release:{short:`R`,type:`string`,multiple:!0},sockets:{short:`s`,type:`string`},timeout:{short:`T`,type:`string`},types:{short:`t`,type:`string`,multiple:!0},update:{short:`u`,type:`boolean`},verbose:{short:`V`,type:`boolean`},version:{short:`v`,type:`boolean`}};function mt(e,t){return RegExp(`^${W(e).replaceAll(`\\*`,`.*`)}$`,t?`i`:``)}function ht(e,t,n){return t&&typeof e==`string`?/^\/.+\/$/.test(e)?new RegExp(e.slice(1,-1)):mt(e,n):e instanceof RegExp?e:mt(e,n)}function gt(e){return Array.isArray(e)&&e.every(e=>e===!0)?!0:Array.isArray(e)?new Set(e.flatMap(e=>typeof e==`string`?Pe(e):``).filter(Boolean)):typeof e==`string`?new Set([e]):typeof e==`boolean`?e:!1}function _t(e){for(let[t,{short:n}]of Object.entries(pt))if(t===e||n===e)return t;return``}function vt(e){return new Set(e.map(e=>ht(e,!1,!0)))}function yt(e){return Array.isArray(e)?e.filter(e=>typeof e==`string`).flatMap(e=>Pe(e)):[]}function bt(e){let t={};if(Array.isArray(e)){for(let n of e)if(typeof n==`string`){let[e,r]=n.split(`=`,2);e&&r&&H(r)&&(t[e]=r)}}else if(typeof e==`string`){let[n,r]=e.split(`=`,2);n&&r&&H(r)&&(t[n]=r)}return t}function xt(e){if(typeof e==`boolean`)return e;if(!Array.isArray(e)||!e.length)return!1;let t=new Set;for(let n of e)t.add(ht(n,!1,!1));return t}async function St(e){let t=[];for(let e of[`js`,`ts`,`mjs`,`mts`])t.push(`updates.config.${e}`);let n={};try{({default:n}=await Promise.any(t.map(async t=>{let n=c(e,...t.split(`/`)),r=ne(n);try{d(n)}catch{throw Error(`File not found: ${t}`)}try{return await import(r.href)}catch(e){throw Error(`Unable to parse config file ${t}: ${e.message}`)}})))}catch(e){if(e instanceof AggregateError){let t=e.errors.filter(e=>e.message.startsWith(`Unable to parse`));if(t.length>0)throw t[0]}}return n}function Ct(e){if(/^\s*\{/.test(e))return JSON.parse(e);let t={};for(let n of e.split(/\r?\n/)){let e=n.trim();if(!e||e.startsWith(`#`)||e.startsWith(`;`))continue;let r=e.indexOf(`=`);if(r===-1)continue;let i=e.slice(r+1).trim();i.length>=2&&(i.startsWith(`"`)&&i.endsWith(`"`)||i.startsWith(`'`)&&i.endsWith(`'`))&&(i=i.slice(1,-1)),t[e.slice(0,r).trim()]=i}return t}function wt(e){try{return Ct(h(e,`utf-8`))}catch{return}}function Tt(t){let n=e();for(;;){let e=c(n,t);try{return _(e),e}catch{}let r=s(n);if(r===n)break;n=r}}function Et(e){let n={},r=e.toLowerCase();for(let[i,a]of Object.entries(t))if(i.toLowerCase().startsWith(r)){let t=i.substring(e.length).split(`__`).filter(Boolean);if(t.length===0)continue;let r=n;for(let e=0;e<t.length;e++){let n=t[e];if(e===t.length-1)r[n]=a;else if(r[n]===void 0&&(r[n]={}),typeof r[n]==`object`)r=r[n];else break}}return n}function Dt(e,r={}){let i=n===`win32`,a=i?t.USERPROFILE:t.HOME,o=[{...r}],s=[];function l(e){if(!e||s.includes(e))return;let t=wt(e);t&&(o.push(t),s.push(e))}i||(l(c(`/etc`,e,`config`)),l(c(`/etc`,`${e}rc`))),a&&(l(c(a,`.config`,e,`config`)),l(c(a,`.config`,e)),l(c(a,`.${e}`,`config`)),l(c(a,`.${e}rc`))),l(Tt(`.${e}rc`));let u=Et(`${e}_`);return u.config&&l(u.config),Object.assign({},...o,u,s.length?{configs:s,config:s[s.length-1]}:void 0)}const Ot=c(n===`win32`?t.LOCALAPPDATA||c(S(),`AppData`,`Local`):t.XDG_CACHE_HOME||c(S(),`.cache`),`updates`);let kt=!1;function At(e){return x(`sha256`).update(e).digest(`hex`).substring(0,16)}function jt(e){try{let t=h(c(Ot,`${At(e)}.cache`),`utf8`),n=t.indexOf(`
|
|
4
|
-
`);if(n===-1)return null;let r=t.substring(0,n),i=t.substring(n+1);return r&&i?{etag:r,body:i}:null}catch{return null}}function Mt(e,t,n){try{kt||=(m(Ot,{recursive:!0}),!0),v(c(Ot,`${At(e)}.cache`),`${t}\n${n}`)}catch{}}const Nt=/^.*?:\/\/(.*?@)?(github\.com[:/])/i,Pt=/^([^/]+)\/([^/]+)\/(?:.*\/)?([0-9a-f]+|v?[0-9]+\.[0-9]+\.[0-9]+)$/i,Ft=/[0-9]+(\.[0-9]+)?(\.[0-9]+)?/g,It=/[0-9]+\.[0-9]+\.[0-9]+(-.+)?/g,Lt=`https://registry.npmjs.org`;let J=null;const Rt=new Map;function zt(){return J||Dt(`npm`,{registry:Lt})}function Bt(e){return e.replace(/^\$\{?([^}]*)\}?$/,(e,n)=>t[n]||``)}function Vt(e,t){let n=n=>t[`${e}:${n}`]||t[`${e}/:${n}`],r=n(`_authToken`);if(r)return{token:Bt(r),type:`Bearer`};let i=n(`username`),a=n(`_password`);if(i&&a){let e=Buffer.from(Bt(a),`base64`).toString(`utf8`);return{token:Buffer.from(`${i}:${e}`).toString(`base64`),type:`Basic`,username:i,password:e}}let o=n(`_auth`);if(o)return{token:Bt(o),type:`Basic`}}function Ht(e,t){let n=new URL(e.startsWith(`//`)?`http:${e}`:e),r;for(;r!==`/`&&n.pathname!==r;){r=n.pathname||`/`;let e=Vt(`//${n.host}${r.replace(/\/$/,``)}`,t);if(e)return e;let i=r.endsWith(`/`)?r:`${r}/`;n.pathname=new URL(`..`,new URL(i,`http://x`)).pathname}let i=t._auth;if(i)return{token:Bt(i),type:`Basic`}}function Ut(e,t){let n=t[`${e}:registry`]||t.registry;return n.endsWith(`/`)?n:`${n}/`}function Wt(e,t){J||=zt();let n=e.startsWith(`@`)?(/@[a-z0-9][\w.-]+/.exec(e)||[``])[0]:``,r=`${n}:${t}`,i=Rt.get(r);if(i)return i;let a;if(!e.startsWith(`@`))a={auth:Ht(t,J),registry:t};else{let e=K(Ut(n,J));if(e!==t)try{let n=Ht(e,J);a=n?.token?{auth:n,registry:e}:{auth:Ht(t,J),registry:t}}catch{a={auth:Ht(t,J),registry:t}}else a={auth:Ht(t,J),registry:t}}return Rt.set(r,a),a}function Gt(e,t,n){J||=zt();let r=K((typeof n.registry==`string`?n.registry:!1)||t.registry||J.registry||Lt);return{...Wt(e,r),originalRegistry:r}}function Kt(e,t,n){let r=`${e}/${t.replace(/\//g,`%2f`)}`;return n?`${r}/${n}`:r}const qt=new Map,Jt=new Map,Yt=new Map;async function Xt(e,t,n,r,i){let{auth:a,registry:s}=Gt(e,n,r),c=Kt(s,t===`resolutions`?o(e):e),l=qt.get(c);if(!l){let t=We(a?.type,a?.token);t.headers={...t.headers,accept:`application/vnd.npm.install-v1+json`};let n=i.noCache?null:jt(c);n&&(t.headers[`if-none-match`]=n.etag),l=i.doFetch(c,{signal:AbortSignal.timeout(i.fetchTimeout),...t}).then(async t=>{if(t?.status===304&&n)return JSON.parse(n.body);if(t?.ok){let e=await t.text(),n=t.headers.get(`etag`);return n&&!i.noCache&&Mt(c,n,e),JSON.parse(e)}lt(t,c,e,s)}).catch(e=>{throw qt.delete(c),e}),qt.set(c,l)}return[await l,t,s,e]}async function Zt(e,t,n,r,i){let{auth:a,registry:o}=Gt(e,n,r),s=Kt(o,e,t),c=Jt.get(s);if(c)return c;let l=(async()=>{try{let n=We(a?.type,a?.token),r=await i.doFetch(s,{signal:AbortSignal.timeout(i.fetchTimeout),...n});if(!r?.ok)return{};let c=await r.json(),l=``,u=c?._npmOperationalInternal?.tmp;if(u){let e=/(\d{13})/.exec(u);e&&(l=new Date(Number(e[1])).toISOString())}if(!l){let r=Kt(o,e),a=Yt.get(r);a||(a=i.doFetch(r,{signal:AbortSignal.timeout(i.fetchTimeout),...n}).then(e=>e?.ok?e.json():null).catch(()=>(Yt.delete(r),null)),Yt.set(r,a)),l=(await a)?.time?.[t]||``}return{repository:c.repository,homepage:c.homepage,date:l}}catch{return{}}})();return Jt.set(s,l),l}function Y(e){return e.startsWith(`npm:@jsr/`)||e.startsWith(`jsr:`)}function Qt(e){return e.startsWith(`link:`)||e.startsWith(`file:`)}function $t(e,t){if(e.startsWith(`npm:@jsr/`)){let t=/^npm:@jsr\/([^_]+)__([^@]+)@(.+)$/.exec(e);if(t)return{scope:t[1],name:t[2],version:t[3]}}else if(e.startsWith(`jsr:@`)){let t=/^jsr:@([^/]+)\/([^@]+)@(.+)$/.exec(e);if(t)return{scope:t[1],name:t[2],version:t[3]}}else if(e.startsWith(`jsr:`)){let n=e.substring(4);if(t?.startsWith(`@`)){let e=/^@([^/]+)\/(.+)$/.exec(t);if(e)return{scope:e[1],name:e[2],version:n}}}return{scope:null,name:null,version:``}}async function en(e,t,n){let r=/^@([^/]+)\/(.+)$/.exec(e);if(!r)throw Error(`Invalid JSR package name: ${e}`);let[,i,a]=r,o=`${n.jsrApiUrl}/@${i}/${a}/meta.json`,s=await n.doFetch(o,{signal:AbortSignal.timeout(n.fetchTimeout),headers:{"accept-encoding":`gzip, deflate, br`}});if(s?.ok){let r=await s.json(),i={},a={};for(let[e,t]of Object.entries(r.versions))i[e]={version:e,time:t.createdAt},a[e]=t.createdAt;return[{name:e,"dist-tags":{latest:r.latest},versions:i,time:a},t,n.jsrApiUrl,e]}lt(s,o,e,`JSR`)}function tn(e,t){let n=e;for(let[e,{old:r,oldOrig:i}]of Object.entries(t)){let[a,o]=e.split(`\0`),s=i||r;if(a===`packageManager`){let r=RegExp(`"${W(a)}": *"${o}@${W(s)}"`,`g`);n=n.replace(r,`"${a}": "${o}@${t[e].new}"`)}else{let r=RegExp(`"${W(o)}": *"${W(s)}"`,`g`);n=n.replace(r,`"${o}": "${t[e].new}"`)}}return n}function nn(e,t,n){let r=e.replace(It,t);if(n&&n!==e&&/^[\^~]/.test(r)){let e=n.substring(1).split(`.`),t=r.substring(1).split(`.`);e.length!==t.length&&(r=`${r[0]}${t.slice(0,e.length).join(`.`)}`)}if(n&&n!==e&&r.startsWith(`>=`)){let e=/^>=\s/.test(n)?`>= `:`>=`,t=n.replace(/^>=\s*/,``),i=r.replace(/^>=\s*/,``),a=t.split(`.`),o=i.split(`.`);a.length!==o.length&&(r=`${e}${o.slice(0,a.length).join(`.`)}`)}return r}function X(e){let t=e.match(Ft);return t?.length===1?e.replace(Ft,q(t[0])):e}async function rn(e,t,n){try{let r=await rt(`${n.forgeApiUrl}/repos/${e}/${t}/commits`,n);if(!r?.ok)return{hash:``,commit:{}};let{sha:i,commit:a}=(await r.json())[0];return{hash:i,commit:a}}catch{return{hash:``,commit:{}}}}async function an(e,t,n){return(await ct(n.forgeApiUrl,e,t,n)).map(e=>e.name)}async function on(e,t,n,r){let i=t.old.replace(Nt,``),[a,o,s,c]=Pt.exec(i)||[];if(!o||!s||!c)return null;if(ot.test(c)){let{hash:n,commit:i}=await rn(o,s,r);if(!n)return null;let a=i?.committer?.date??i?.author?.date,l=n.substring(0,c.length);if(c!==l)return{key:e,newRange:t.old.replace(c,l),user:o,repo:s,oldRef:c,newRef:l,newDate:a}}else{let t=it(await an(o,s,r),c,n);if(t)return{key:e,newRange:t,user:o,repo:s,oldRef:c,newRef:t}}return null}async function sn(e,t,n){let r=`${n.pypiApiUrl}/pypi/${e}/json`,i=await n.doFetch(r,{signal:AbortSignal.timeout(n.fetchTimeout),headers:{"accept-encoding":`gzip, deflate, br`}});if(i?.ok)return[await i.json(),t,null,e];lt(i,r,e,n.pypiApiUrl)}function cn(e,t){let n=e;for(let[e,{old:r,oldOrig:i}]of Object.entries(t)){let[a,o]=e.split(`\0`),s=i||r;n=n.replace(RegExp(`("${W(o)} *[<>=~]+ *)${W(s)}(")`,`g`),(n,r,i)=>`${r}${t[e].new}${i}`)}return n}const ln=i(b);function un(){let e=t.GOPROXY||`https://proxy.golang.org,direct`;for(let t of e.split(/[,|]/)){let e=t.trim();if(e&&e!==`direct`&&e!==`off`)return K(e)}return`https://proxy.golang.org`}function dn(){return(t.GONOPROXY||t.GOPRIVATE||``).split(`,`).map(e=>e.trim()).filter(Boolean)}function fn(e,t){return t.some(t=>e===t||e.startsWith(`${t}/`))}function pn(e){return e.replace(/[A-Z]/g,e=>`!${e.toLowerCase()}`)}function mn(e){let t=/\/v(\d+)$/.exec(e);return t?Number.parseInt(t[1]):1}function hn(e,t){return t<=1?e.replace(/\/v\d+$/,``):`${e.replace(/\/v\d+$/,``)}/v${t}`}function gn(e,t){let n=t?/^(\S+)(?:\s+v\S+)?\s+=>\s+(\S+)\s+(v\S+)/.exec(e):/^replace\s+(\S+)(?:\s+v\S+)?\s+=>\s+(\S+)\s+(v\S+)/.exec(e);if(!n)return null;let[,r,i,a]=n;return i.startsWith(`./`)||i.startsWith(`/`)||i.startsWith(`../`)?null:{origModule:r,targetModule:i,targetVersion:a}}function _n(e,t,n){return t===`indirect`||e.startsWith(`golang.org/x/`)||vn(n)}function vn(e){return/\d{14}-[0-9a-f]{12}$/.test(e)}function yn(e,t,n){return[{name:e,old:t,new:t},n,null,e]}async function bn(e,t,n){if(!t)return null;let r=t,i=e+1,a=1,o=null;for(;o===null;){let t=i+a;if(t>e+100){o=e+101;break}let s=await n(t);s?(r=s,i=t,a*=2):o=t}if(o-i>1){let e=await Promise.all(Array.from({length:o-i-1},(e,t)=>n(i+1+t)));for(let t=e.length-1;t>=0;t--)if(e[t]){r=e[t];break}}return r}function xn(e,t,n,r,i,a){let o=r?.Version??i,s=r?.Time??a,c=r?.path??e;return[{name:e,old:n,new:G(o),Time:s,...c===e?{}:{newPath:c},sameMajorNew:G(i),sameMajorTime:a},t,null,e]}function Sn(e){let t={},n={},r={},i={},a=new Set,o=[],s=e.split(/\r?\n/),c=!1,l=!1,u=!1;for(let e of s){let i=e.trim();if(/^require\s*\(/.test(i)){c=!0;continue}if(/^replace\s*\(/.test(i)){l=!0;continue}if(/^tool\s*\(/.test(i)){u=!0;continue}if(i===`)`){c=!1,l=!1,u=!1;continue}if(u){i&&!i.startsWith(`//`)&&o.push(i);continue}let s=/^tool\s+(\S+)/.exec(i);if(s){o.push(s[1]);continue}let d=i.includes(`// indirect`);if(l||/^replace\s+/.test(i)){let e=gn(i,l);e&&(r[e.targetModule]=e.targetVersion,a.add(e.origModule));continue}let f=c?/^(\S+)\s+(v\S+)/.exec(i):/^require\s+(\S+)\s+(v\S+)/.exec(i);f&&((d?n:t)[f[1]]=f[2])}for(let e of a)delete t[e],delete n[e];if(o.length){let e=[...Object.keys(n),...Object.keys(t)];for(let r of o){let a=``;for(let t of e)(r===t||r.startsWith(`${t}/`))&&t.length>a.length&&(a=t);let o=a?n[a]?n:t[a]?t:null:null;o&&(i[a]=o[a],delete o[a])}}return{deps:t,indirect:n,replace:r,tool:i}}async function Cn(e,n,r,i,a){let o=mn(e),s=async(e,n)=>{try{let{stdout:r}=await ln(`go`,[`list`,`-m`,`-json`,`${e}@latest`],{timeout:n,cwd:i,env:t}),a=JSON.parse(r);return{Version:a.Version,Time:a.Time||``,path:e}}catch{return null}},c=_n(e,n,r),[l,u]=await Promise.all([s(e,a.fetchTimeout),c?null:s(hn(e,o+1),a.goProbeTimeout)]);return l?xn(e,n,r,await bn(o,u,t=>s(hn(e,t),a.goProbeTimeout)),l.Version,l.Time):yn(e,r,n)}async function wn(e,t,n,r,i,a){if(fn(e,a))return Cn(e,t,n,r,i);let o=pn(e),s=mn(e),c=async t=>{let n=hn(e,t);return i.doFetch(`${i.goProxyUrl}/${pn(n)}/@latest`,{signal:AbortSignal.timeout(i.goProbeTimeout)}).then(async e=>e.ok?{...await e.json(),path:n}:null).catch(()=>null)},l=_n(e,t,n),[u,d]=await Promise.all([i.doFetch(`${i.goProxyUrl}/${o}/@latest`,{signal:AbortSignal.timeout(i.fetchTimeout)}),l?null:c(s+1)]);if(!u.ok)return yn(e,n,t);let f,p;try{let e=await u.json();f=e.Version,p=e.Time}catch{return yn(e,n,t)}return xn(e,t,n,await bn(s,d,c),f,p)}function Tn(e,t){let n=W(t);return e=e.replace(RegExp(`^replace\\s+${n}(\\s+v\\S+)?\\s+=>\\s+\\S+(\\s+v\\S+)?\\s*\\n`,`gm`),``),e=e.replace(RegExp(`^\\s+${n}(\\s+v\\S+)?\\s+=>\\s+\\S+(\\s+v\\S+)?\\s*\\n`,`gm`),``),e=e.replace(/^replace\s*\(\s*\)\s*\n/gm,``),e}function En(e,t){let n=e,r={};for(let[e,{old:i,oldOrig:a}]of Object.entries(t)){let[o,s]=e.split(`\0`),c=a||i,l=t[e].new;if(o===`replace`){n=n.replace(RegExp(`(=>\\s+${W(s)}\\s+)v${W(c)}`,`g`),`$1v${l}`);continue}if(o===`indirect`){n=n.replace(RegExp(`(${W(s)}) +v${W(c)}`,`g`),`$1 v${l}`);continue}let u=mn(s),d=Number.parseInt(l.split(`.`)[0]);if(u!==d&&d>1){let e=hn(s,d);n=n.replace(RegExp(`${W(s)} +v${W(c)}`,`g`),`${e} v${l}`),o===`tool`&&(n=n.replace(RegExp(`(^\\s+|^tool\\s+)${W(s)}(/\\S+)?\\s*$`,`gm`),`$1${e}$2`)),r[s]=e}else n=n.replace(RegExp(`(${W(s)}) +v${W(c)}`,`g`),`$1 v${l}`);o!==`tool`&&(n=Tn(n,s))}return[n,r]}function Dn(e,t,n){if(!Object.keys(t).length)return;let r=f(`**/*.go`,{cwd:e});for(let i of r){let r=c(e,i),a=h(r,`utf8`),o=!1;for(let[e,n]of Object.entries(t)){let t=RegExp(`"${W(e)}(/|")`,`g`),r=a.replace(t,`"${n}$1`);r!==a&&(a=r,o=!0)}o&&n(r,a)}}function On(e){let t=[],n={},r=e.split(/\r?\n/),i=!1,a=!1;for(let e of r){let r=e.trim();if(/^use\s*\(/.test(r)){i=!0;continue}if(/^replace\s*\(/.test(r)){a=!0;continue}if(r===`)`){i=!1,a=!1;continue}if(i){let e=/^(\S+)/.exec(r);e&&!r.startsWith(`//`)&&t.push(e[1]);continue}let o=/^use\s+(\S+)/.exec(r);if(o){t.push(o[1]);continue}if(a||/^replace\s+/.test(r)){let e=gn(r,a);e&&(n[e.targetModule]=e.targetVersion);continue}}return{use:t,replace:n}}function kn(e){let t=`https://${An(e)}`,n=new URL(t),r=n.pathname.split(`/`);if(r.length>3){let[e,i,a,...o]=r;return n.pathname=`/${i}/${a}/${dt(t)}/${o.join(`/`)}`,n.toString()}else return t}function An(e){return/\/v[0-9]$/.test(e)?s(e):e}function jn(e){return e.replace(/(\d{7})\d{7}-[0-9a-f]{12}$/,`$1`)}const Mn=/^\s*(?:-\s*)?uses:\s*['"]?([^'"#\s]+)['"]?/gm;function Nn(e){if(e.startsWith(`docker://`)||e.startsWith(`./`))return null;let t=/^https?:\/\/([^/]+)\/(.+)$/.exec(e),n=t?.[1]??null,r=t?.[2]??e,i=r.indexOf(`@`);if(i===-1)return null;let a=r.substring(0,i),o=r.substring(i+1);if(!o)return null;let s=a.split(`/`);if(s.length<2)return null;let c=n?`${n}/${a}`:a;return{host:n,owner:s[0],repo:s[1],ref:o,name:c,isHash:ot.test(o)}}function Pn(e,t){return e?e===`github.com`?`https://api.github.com`:`https://${e}/api/v1`:t}async function Fn(e,t,n,r,i){try{let a=await rt(`${e}/repos/${t}/${n}/git/commits/${r}`,i);if(!a?.ok)return``;let o=await a.json();return o?.committer?.date||o?.author?.date||``}catch{return``}}function In(e,t){return ut(M(G(e))?.version??G(e),t)}function Ln(e,t){let n=e;for(let{name:e,oldRef:r,newRef:i}of t){let t=RegExp(`(uses:\\s*['"]?)${W(e)}@${W(r)}`,`g`);n=n.replace(t,`$1${e}@${i}`)}return n}function Rn(e){let t=e.replace(/\\/g,`/`);return/\.github\/workflows\/[^/]+\.(ya?ml)$/.test(t)}function zn(e){try{return g(e).filter(e=>/\.(ya?ml)$/.test(e)).map(t=>u(c(e,t)))}catch{return[]}}const Bn=/^(v?\d+(?:\.\d+){0,2})(-.+)?$/,Vn=/^\s*FROM\s+(?:--platform=\S+\s+)?(\S+)/gm,Hn=/^\s*image:\s*['"]?([^\s'"#]+)['"]?/gm,Un=/^\s*container:\s*['"]?([^\s'"#{}]+:[^\s'"#{}:]+)['"]?\s*$/gm,Wn=/^\s*(?:-\s*)?uses:\s*['"]?docker:\/\/([^'"#\s]+)['"]?/gm;function Gn(e){let t=e.split(`/`);return t.length===1?{registry:null,namespace:`library`,repo:t[0]}:t.length===2&&!t[0].includes(`.`)&&!t[0].includes(`:`)?{registry:null,namespace:t[0],repo:t[1]}:{registry:t[0],namespace:t.slice(1,-1).join(`/`)||t[1],repo:t[t.length-1]}}function Kn(e){if(e=e.replace(/^docker:\/\//,``),e.includes(`@`))return null;let t=e.lastIndexOf(`:`),n,r;if(t===-1||e.lastIndexOf(`/`)>t||(n=e.substring(0,t),r=e.substring(t+1),!r||!Bn.test(r)))return null;let{registry:i,namespace:a,repo:o}=Gn(n);return{registry:i,namespace:a,repo:o,tag:r,fullImage:n}}function qn(e){let t=Bn.exec(e);return t?{version:t[1],suffix:t[2]||``}:null}function Jn(e,t){let n=qn(t);return n?ut(e,n.version,n.suffix):t}function Yn(e,t){let n=[];for(let r of e.matchAll(t)){let e=Kn(r[1]);e&&n.push({ref:e,match:r[1]})}return n}async function Xn(e,t,n){let r={},i=`${n.dockerApiUrl}/v2/repositories/${e}/${t}/tags`,a=e=>`${i}?page_size=100&ordering=last_updated&page=${e}`,o=e=>{for(let t of e.results||[])r[t.name]=t.tag_last_pushed||t.last_updated||``},[s,c]=await Promise.all([n.doFetch(a(1),{signal:AbortSignal.timeout(n.fetchTimeout)}).then(e=>e?.ok?e.json():null).catch(()=>null),n.doFetch(a(2),{signal:AbortSignal.timeout(n.fetchTimeout)}).then(e=>e?.ok?e.json():null).catch(()=>null)]);if(!s)return r;o(s);let l=Math.min(Math.ceil((s.count||0)/100),10);if(l>=2&&c&&o(c),l>2){let e=await Promise.all(Array.from({length:l-2},(e,t)=>n.doFetch(a(t+3),{signal:AbortSignal.timeout(n.fetchTimeout)}).then(e=>e?.ok?e.json():null).catch(()=>null)));for(let t of e)t&&o(t)}return r}async function Zn(e,t,n){let{registry:r,namespace:i,repo:a}=Gn(e);if(r)throw Error(`Non-Docker-Hub registries are not yet supported: ${r}`);return[{tags:await Xn(i,a,n),name:e},t,null,e]}function Qn(e,t,n){let r=qn(t);if(!r)return null;let i=ue(G(r.version))?.version;if(!i)return null;let a=i,o=``,s=``;for(let[t,i]of Object.entries(e)){let e=qn(t);if(!e||e.suffix!==r.suffix)continue;let c=ue(G(e.version))?.version;if(!c)continue;let l=F(a,c);!l||!n.has(l)||L(c,a)&&(a=c,o=t,s=i)}if(!o||a===i)return null;let c=Jn(a,t);return c===t?null:{newTag:c,date:s}}function $n(e,t,n){let r=e;for(let[e,i]of Object.entries(t)){let[t,a]=e.split(`\0`),o=i.oldOrig||i.old;for(let e of n)r=r.replace(e(W(a),W(o)),`$1${a}:${i.new}`)}return r}function er(e,t){return $n(e,t,[(e,t)=>RegExp(`(FROM\\s+(?:--platform=\\S+\\s+)?)${e}:${t}`,`g`)])}function tr(e,t){return $n(e,t,[(e,t)=>RegExp(`(image:\\s*['"]?)${e}:${t}`,`g`)])}function nr(e,t){return $n(e,t,[(e,t)=>RegExp(`((?:container|image):\\s*['"]?)${e}:${t}`,`g`),(e,t)=>RegExp(`(uses:\\s*['"]?docker://)${e}:${t}`,`g`)])}const rr=[`Dockerfile`,`docker-compose.yml`,`docker-compose.yaml`];function ir(e){return/^docker-.+\.ya?ml$/.test(e)}function ar(e){return/^Dockerfile(\..+)?$/.test(e)}function or(e){return ar(e)||ir(e)}function sr(e){return ar(e)?Vn:Hn}function cr(e){return e.registry?``:e.namespace===`library`?`https://hub.docker.com/_/${e.repo}`:`https://hub.docker.com/r/${e.namespace}/${e.repo}`}const lr=new Map;async function ur(e,t,n){let r=`${K(n.cratesIoUrl)}/api/v1/crates/${encodeURIComponent(e)}/versions?per_page=100`,i=n.noCache?void 0:lr.get(r);return i||(i=n.doFetch(r,{signal:AbortSignal.timeout(n.fetchTimeout),...We()}).then(async t=>{t?.ok||lt(t,r,e,n.cratesIoUrl);let i;try{i=await t.json()}catch{throw Error(`Invalid JSON from ${r}`)}let a=(i.versions||[]).filter(e=>!e.yanked),o={},s={};for(let e of a)e.num&&(o[e.num]={},s[e.num]=e.created_at||``);let c=a[0]?.num??``;return{name:e,versions:o,time:s,"dist-tags":{latest:c}}}).catch(e=>{throw lr.delete(r),e}),lr.set(r,i)),[await i,t,null,e]}function dr(e){let t=new Map;for(let n of e.split(`[[package]]`)){let e=/\bname\s*=\s*"([^"]+)"/.exec(n),r=/\bversion\s*=\s*"([^"]+)"/.exec(n);if(!e||!r)continue;let i=e[1],a=r[1];if(!j(a))continue;let o=t.get(i)||[];o.push(a),t.set(i,o)}return t}const fr=/^\d/;function pr(e,t){return fr.test(e)?nn(X(`^${e}`),t,`^${e}`).replace(/^\^/,``):nn(X(e),t,e)}function mr(e,t,n){let r=e.get(t);if(!r)return;let i=fr.test(n)?`^${n}`:n,a;for(let e of r)be(e,i)&&(!a||de(e,a))&&(a=e);return a}const hr=Me.map(e=>W(e)).join(`|`);function gr(e,t){let n=e;for(let[e,r]of Object.entries(t)){let[,t]=e.split(`\0`),i=r.oldOrig||r.old,a=r.new,o=W(t),s=W(i);n=n.replace(RegExp(`^(\\s*${o}\\s*=\\s*["'])${s}(["'].*)$`,`gm`),`$1${a}$2`),n=n.replace(RegExp(`(\\s*${o}\\s*=\\s*\\{\\s*version\\s*=\\s*["'])${s}(["'])`,`g`),`$1${a}$2`),n=n.replace(RegExp(`(\\[(?:${hr})\\.${o}\\][^\\[]*?version\\s*=\\s*["'])${s}(["'])`,`g`),`$1${a}$2`)}return n}function _r(e){return e.split(`|`)[0]}function vr(e,t){let n=t===`.`?``:`|${t}`,r={};for(let[t,i]of Object.entries(e)){let[e,a]=t.split(`\0`),o=_r(e);e===`${o}${n}`&&(r[`${o}${a}`]=i)}return r}const yr=/[*?{[]/;function br(e,t,n){let r=[],i=new Set;for(let a of e){let e=yr.test(a)?f(a,{cwd:t}).map(e=>u(c(t,e))):[u(c(t,a))];for(let a of e){let e=c(a,n);if(i.has(e))continue;i.add(e);let o;try{o=h(e,`utf8`)}catch{continue}let s=`./${l(t,a).replace(/\\/g,`/`)}`;r.push({absPath:e,content:o,memberPath:s})}}return r}function xr(e){let t=[],n=e.split(`
|
|
5
|
-
`),r=!1;for(let e of n){if(/^packages\s*:/.test(e)){r=!0;continue}if(r){if(/^\S/.test(e))break;let n=/^\s+-\s+['"]?([^'"#\s]+)['"]?/.exec(e);n&&t.push(n[1])}}return t}const Sr={"pnpm-workspace.yaml":`npm`,"package.json":`npm`,"pyproject.toml":`pypi`,"go.work":`go`,"go.mod":`go`,"Cargo.toml":`cargo`},Cr=new Set([`npm`,`pypi`,`go`,`cargo`,`actions`,`docker`]);function wr(e,t){let n=c(t,e);try{return d(n),n}catch{}let r=s(t);return r===t?null:wr(e,r)}function Z(e){try{return h(e,`utf8`)}catch(t){throw Error(`Unable to open ${e}: ${t.message}`)}}function Tr(e,t){t&&(e.date=t,e.age=Te(t,{noAffix:!0}))}function Er(e,t,n){let r=ze(String(t));for(let[t,{date:i}]of Object.entries(e))Fe(i,r,n)||delete e[t]}function Dr(e){let t=0;for(let n of Object.keys(e))t+=Object.keys(e[n]).length;return t}function Or(e){console.error(`${Ie()} ${e}`)}function kr(t){return t.replace(`${e()}/`,``).replace(`${e()}\\`,``)}function Q(e,t,n,r,i){if(i===`engines`&&ke.includes(e)||t===`pypi`&&e===`python`)return!1;if(!n.size&&!r.size)return!0;let a=t===`go`?e.replace(/\/v\d+$/,``):e;for(let t of r)if(t.test(e)||t.test(a))return!1;for(let t of n)if(t.test(e)||t.test(a))return!0;return!n.size}function Ar(t){let n=new Set;if(t)for(let e of t){let t;try{t=p(e)}catch(t){throw Error(`Unable to open ${e}: ${t.message}`)}if(t?.isFile())n.add(u(e));else if(t?.isDirectory()){for(let t of Object.keys(Sr)){let r=c(e,t),i=null;try{i=p(r)}catch{}i?.isFile()&&n.add(u(r))}try{for(let t of g(e))if(or(t)){let r=c(e,t);try{p(r).isFile()&&n.add(u(r))}catch{}}}catch{}let t=u(e).replace(/\\/g,`/`),r;r=t.endsWith(`.github/workflows`)?t:t.endsWith(`.github`)?c(t,`workflows`):c(t,`.github`,`workflows`);for(let e of zn(r))n.add(e)}else throw Error(`${e} is neither a file nor directory`)}else{for(let t of Object.keys(Sr)){let r=wr(t,e());r&&n.add(u(r))}for(let t of rr){let r=wr(t,e());r&&n.add(u(r))}try{for(let t of g(e()))if(or(t)&&!rr.includes(t)){let r=c(e(),t);try{p(r).isFile()&&n.add(u(r))}catch{}}}catch{}let t=wr(c(`.github`,`workflows`),e());if(t)for(let e of zn(t))n.add(e)}for(let e of n)o(e)===`go.work`&&n.delete(c(s(e),`go.mod`));for(let e of n)o(e)===`pnpm-workspace.yaml`&&n.delete(c(s(e),`package.json`));return n}function $(e,t){n===`win32`&&ee(e,0),v(e,t,n===`win32`?{flag:`r+`}:void 0)}function jr(e){for(let t of Object.keys(e))for(let n of Object.values(e[t]))typeof n.oldPrint==`string`&&(n.old=n.oldPrint),typeof n.newPrint==`string`&&(n.new=n.newPrint),typeof n.oldOrig==`string`&&!Y(n.oldOrig)&&(n.old=t===`go`?jn(n.oldOrig):n.oldOrig),t===`go`&&(n.new=jn(n.new)),t===`actions`&&(n.old=G(n.old),n.new=G(n.new)),delete n.oldPrint,delete n.newPrint,delete n.oldOrig,delete n.date;let t={results:{}};for(let n of Object.keys(e))for(let[r,i]of Object.entries(e[n])){let[e,a]=r.split(`\0`);t.results[n]||(t.results[n]={}),t.results[n][e]||(t.results[n][e]={}),t.results[n][e][a]=i}return t}let Mr=!1;async function Nr(t={}){Mr||=(Ve(),!0);let n={...t},i=n.sockets??25,l=n.timeout??0,d=typeof t.forgeapi==`string`?K(t.forgeapi):`https://api.github.com`,f=typeof t.pypiapi==`string`?K(t.pypiapi):`https://pypi.org`,p=typeof t.jsrapi==`string`?K(t.jsrapi):`https://jsr.io`,m=typeof t.goproxy==`string`?K(t.goproxy):un(),g=typeof t.cargoapi==`string`?K(t.cargoapi):`https://crates.io`,_=typeof t.dockerapi==`string`?K(t.dockerapi):`https://hub.docker.com`,ee=dn(),v=n.color===!0||n.noColor!==!0&&r.isTTY,y=e=>v?t=>a(e,String(t)):String,b=y(`magenta`),te=y(`green`),ne=y(`red`),x={fetchTimeout:l||5e3,goProbeTimeout:l?l/2:2500,forgeApiUrl:d,pypiApiUrl:f,jsrApiUrl:p,goProxyUrl:m,cratesIoUrl:g,dockerApiUrl:_,doFetch:async(e,t)=>{n.verbose&&Or(`${b(t?.method||`GET`)} ${e}`);let r=await Ge(e,t);return n.verbose&&Or(`${r.ok?te(r.status):ne(r.status)} ${e}`),r},noCache:!!n.noCache},S=xt(n.greatest),C=xt(n.prerelease),ie=xt(n.release),ae=xt(n.patch),oe=xt(n.minor),se=xt(n.allowDowngrade),w=n.modes?.length?new Set(n.modes):Cr;function ce(e){return ae===!0||U(e,ae)?new Set([`patch`]):oe===!0||U(e,oe)?new Set([`patch`,`minor`]):new Set([`patch`,`minor`,`major`])}function T(e){return{useGreatest:typeof S==`boolean`?S:U(e,S),usePre:typeof C==`boolean`?C:U(e,C),useRel:typeof ie==`boolean`?ie:U(e,ie),semvers:ce(e)}}let le=vt(n.include??[]),E=vt(n.exclude??[]),D=n.pin??{},O={},k={},A={},M={},N=Date.now(),P=0,ue=Ar(n.files?.length?new Set(n.files):!1),F={},I={},de=[],L=null,fe=[],pe=!1,me=[],he=!1,R=[],ge=[],z={};async function _e(t){let r=t===e()?n:await St(t);return{modeConfig:r,modeInclude:r!==n&&r?.include?vt([...n.include??[],...r.include]):le,modeExclude:r!==n&&r?.exclude?vt([...n.exclude??[],...r.exclude]):E,pin:{...r?.pin,...D}}}function ve(e,t){return n.types?.length?n.types:t?.types?.length?t.types:e===`npm`?Oe:e===`pypi`?Array.from(Ae):e===`go`?n.indirect?Array.from(je):je.filter(e=>e!==`indirect`):e===`cargo`?Array.from(Me):[]}function B(e,t,n){O.docker||={};for(let r of n)for(let{ref:n}of Yn(e,r)){if(!Q(n.fullImage,`docker`,le,E,`docker`))continue;let e=`${t}${n.fullImage}`;if(O.docker[e])continue;let r=qn(n.tag);r&&(O.docker[e]={old:r.version,oldOrig:n.tag},ge.push({key:e,fullImage:n.fullImage,ref:n}))}}for(let e of ue){if(Rn(e)){let t=w.has(`actions`),n=w.has(`docker`);if(!t&&!n)continue;let r=Z(e),i=kr(e);if(F[i]={absPath:e,content:r},t){O.actions||={};let e=Array.from(r.matchAll(Mn),e=>Nn(e[1])).filter(e=>e!==null);for(let t of e){if(!Q(t.name,`actions`,le,E,`actions`))continue;let e=`${i}${t.name}`;O.actions[e]||(O.actions[e]={old:t.ref},R.push({...t,key:e,apiUrl:Pn(t.host,d)}))}}n&&(I[i]={absPath:e,content:r,fileType:`workflow`},B(r,i,[Hn,Un,Wn]));continue}let t=o(e);if(or(t)){if(!w.has(`docker`))continue;let n=Z(e),r=kr(e);I[r]={absPath:e,content:n,fileType:ar(t)?`dockerfile`:`compose`},B(n,r,[sr(t)]);continue}let n=Sr[t];if(!w.has(n))continue;if(t===`go.work`){O[n]||(O[n]={});let t=s(u(e)),r=Z(e);L={file:e,content:r};let i=On(r),{modeConfig:a,modeInclude:o,modeExclude:l,pin:d}=await _e(t),f=ve(n,a);M[n]=e,z[n]={modeConfig:a,projectDir:t,pin:d};for(let e of i.use){let r=u(c(t,e,`go.mod`)),i;try{i=h(r,`utf8`)}catch{continue}let a=Sn(i),d=s(r);de.push({absPath:r,content:i,projectDir:d,usePath:e});let p=e===`.`?``:`|${e}`;for(let e of f){let t=a[e]||{};for(let[r,i]of Object.entries(t))Q(r,n,o,l,e)&&(O[n][`${e}${p}${r}`]={old:jn(i),oldOrig:G(i)})}}for(let[e,t]of Object.entries(i.replace))Q(e,n,o,l,`replace`)&&(O[n][`replace${e}`]={old:jn(t),oldOrig:G(t)});P+=Object.keys(O[n]).length;continue}if(t===`go.mod`&&L||t===`package.json`&&he)continue;if(t===`Cargo.toml`){O[n]||(O[n]={});let t=Z(e),r=re(t),i=s(u(e));M[n]=e;let{modeConfig:a,modeInclude:o,modeExclude:c,pin:l}=await _e(i),d=ve(n,a);z[n]={modeConfig:a,projectDir:i,pin:l};let f=new Map,p=wr(`Cargo.lock`,i);p&&(f=dr(Z(p)));let m=(e,t)=>{for(let r of d){let i=Ne(e,r)||{};if(!(typeof i!=`object`||Array.isArray(i))){for(let[e,a]of Object.entries(i))if(Q(e,n,o,c,r)){if(typeof a==`object`&&a&&`version`in a&&!(`git`in a)&&!(`path`in a)){let i=String(a.version);if(H(i)){let a=mr(f,e,i);O[n][`${r}${t}${e}`]={old:a??X(i),oldOrig:i}}}else if(typeof a==`string`&&H(a)){let i=mr(f,e,a);O[n][`${r}${t}${e}`]={old:i??X(a),oldOrig:a}}}}}},h=r.workspace?.members;if(Array.isArray(h)&&h.length){pe=!0,m(r,``),fe.push({absPath:u(e),content:t,memberPath:`.`});for(let e of br(h,i,`Cargo.toml`)){fe.push(e);try{m(re(e.content),`|${e.memberPath}`)}catch(t){throw Error(`Error parsing ${e.absPath}: ${t.message}`)}}}else A[n]=t,m(r,``);P+=Object.keys(O[n]).length;continue}if(t===`pnpm-workspace.yaml`){O[n]||(O[n]={});let t=s(u(e)),r=Z(e);he=!0;let i=xr(r),{modeConfig:a,modeInclude:o,modeExclude:l,pin:d}=await _e(t),f=ve(n,a);M[n]=e,z[n]={modeConfig:a,projectDir:t,pin:d};let p=(e,t)=>{for(let r of f){let i=e[r]||{};if(typeof i==`string`){let[e,a]=i.split(`@`);Q(e,n,o,l,r)&&(O[n][`${r}${t}${e}`]={old:X(a),oldOrig:a})}else if(typeof i==`object`&&!Array.isArray(i))for(let[e,a]of Object.entries(i))if(Y(a)&&Q(e,n,o,l,r)){let i=$t(a,e);O[n][`${r}${t}${e}`]={old:i.version,oldOrig:a}}else H(a)&&Q(e,n,o,l,r)?O[n][`${r}${t}${e}`]={old:X(a),oldOrig:a}:Qt(a)&&Q(e,n,o,l,r)?O[n][`${r}${t}${e}`]={old:`0.0.0`,oldOrig:a}:!Y(a)&&Q(e,n,o,l,r)&&(k[`${r}${t}${e}`]={old:a})}},m=c(t,`package.json`),g;try{g=h(m,`utf8`)}catch{}if(g!==void 0){let e;try{e=JSON.parse(g)}catch(e){throw Error(`Error parsing ${m}: ${e.message}`)}me.push({absPath:u(m),content:g,memberPath:`.`}),p(e,``)}let _=br(i,t,`package.json`);for(let e of _){let t;try{t=JSON.parse(e.content)}catch(t){throw Error(`Error parsing ${e.absPath}: ${t.message}`)}me.push(e),p(t,`|${e.memberPath}`)}P+=Object.keys(O[n]).length+Object.keys(k).length;continue}M[n]=e,O[n]||(O[n]={});let r=s(u(e)),{modeConfig:i,modeInclude:a,modeExclude:l,pin:f}=await _e(r),p=ve(n,i),m={};A[n]=Z(e);try{if(n===`npm`)m=JSON.parse(A[n]);else if(n===`pypi`)m=re(A[n]);else if(n===`go`){let e=Sn(A[n]);m.deps=e.deps,m.indirect=e.indirect,m.replace=e.replace,m.tool=e.tool}}catch(t){throw Error(`Error parsing ${e}: ${t.message}`)}for(let e of p){let t;if(t=n===`npm`||n===`go`?m[e]||{}:Ne(m,e)||{},Array.isArray(t)&&n===`pypi`)for(let{name:r,version:i}of De(t))Q(r,n,a,l,e)&&(O[n][`${e}${r}`]={old:X(i),oldOrig:i});else if(typeof t==`string`){let[r,i]=t.split(`@`);Q(r,n,a,l,e)&&(O[n][`${e}${r}`]={old:X(i),oldOrig:i})}else for(let[r,i]of Object.entries(t))if(n===`npm`&&Y(i)&&Q(r,n,a,l,e)){let t=$t(i,r);O[n][`${e}${r}`]={old:t.version,oldOrig:i}}else n!==`go`&&H(i)&&Q(r,n,a,l,e)?O[n][`${e}${r}`]={old:X(i),oldOrig:i}:n===`npm`&&Qt(i)&&Q(r,n,a,l,e)?O[n][`${e}${r}`]={old:`0.0.0`,oldOrig:i}:n===`npm`&&!Y(i)&&Q(r,n,a,l,e)?k[`${e}${r}`]={old:i}:n===`go`&&Q(r,n,a,l,e)&&(O[n][`${e}${r}`]={old:jn(i),oldOrig:G(i)})}P+=Object.keys(O[n]).length+Object.keys(k).length,z[n]={modeConfig:i,projectDir:r,pin:f}}if(O.actions&&(P+=Object.keys(O.actions).length),O.docker&&(P+=Object.keys(O.docker).length),P===0)return{results:{},message:`No dependencies found, nothing to do.`};let V=[],ye={registry:n.registry};for(let e of Object.keys(z)){if(!O[e]||!Object.keys(O[e]).length&&!Object.keys(k).length)continue;let{modeConfig:t,projectDir:r,pin:a}=z[e];V.push((async()=>{let o=new Map;await Be(Object.keys(O[e]),async n=>{let[i,s]=n.split(`\0`),c=null;if(e===`npm`){let{oldOrig:r}=O[e][n];if(r&&Y(r))c=await en(s,_r(i),x);else if(r&&Qt(r))try{c=await Xt(s,_r(i),t,ye,x)}catch{delete O[e][n];return}else c=await Xt(s,_r(i),t,ye,x)}else c=e===`go`?await wn(s,_r(i),O[e][n].oldOrig||O[e][n].old,r,x,ee):e===`cargo`?await ur(s,_r(i),x):await sn(s,i,x);if(!c)return;let[l,,u]=c;if(l?.error)throw Error(l.error);let{useGreatest:d,usePre:f,useRel:p,semvers:m}=T(l.name),h=O[e][n].old,g=O[e][n].oldOrig,_=a[s],v=Xe(l,{usePre:f,useRel:p,useGreatest:d,semvers:m,range:h,mode:e,pinnedRange:_},{allowDowngrade:se,matchesAny:U,isGoPseudoVersion:vn}),y=``;if([`go`,`pypi`].includes(e)&&v)y=v;else if(e===`cargo`&&v&&g)y=pr(g,v);else if(v)if(g&&Qt(g))y=String(zt()[`save-exact`])===`true`?v:`^${v}`;else if(g&&Y(g))if(g.startsWith(`npm:@jsr/`)){let e=/^(npm:@jsr\/[^@]+@)(.+)$/.exec(g);e&&(y=`${e[1]}${v}`)}else if(g.startsWith(`jsr:@`)){let e=/^(jsr:@[^@]+@)(.+)$/.exec(g);e&&(y=`${e[1]}${v}`)}else g.startsWith(`jsr:`)&&(y=`jsr:${v}`);else y=nn(h,v,g);if(!v||v===h||g&&g===y){delete O[e][n];return}let b=``;e===`pypi`&&l.releases?.[v]?.[0]?.upload_time_iso_8601?b=l.releases[v][0].upload_time_iso_8601:e===`go`&&l.Time?b=l.Time:e===`cargo`&&l.time?.[v]&&(b=l.time[v]),O[e][n].new=y,g&&Y(g)&&(O[e][n].newPrint=v),e===`npm`?o.set(n,{name:s,promise:Zt(l.name,v,t,ye,x)}):e===`pypi`?O[e][n].info=ft(l,u,l.info.name):e===`go`?O[e][n].info=kn(l.newPath||s):e===`cargo`&&(O[e][n].info=`https://crates.io/crates/${s}`),b&&Tr(O[e][n],b)},{concurrency:i});for(let[t,{name:n,promise:r}]of o){let i=await r;O[e][t]&&(O[e][t].info=ft({repository:i.repository,homepage:i.homepage},null,n),i.date&&Tr(O[e][t],i.date))}if(Object.keys(k).length){let t=(await Be(Object.entries(k),([e,t])=>{let n=e.split(`\0`)[1];return on(e,t,typeof S==`boolean`?S:U(n,S),x)},{concurrency:i})).filter(e=>e!==null);for(let n of t){let{key:t,newRange:r,user:i,repo:a,oldRef:o,newRef:s,newDate:c}=n;O[e][t]={old:k[t].old,new:r,oldPrint:ot.test(o)?o.substring(0,7):o,newPrint:ot.test(s)?s.substring(0,7):s,info:`https://github.com/${i}/${a}`},c&&Tr(O[e][t],c)}}let s=n.cooldown??t.cooldown;s&&Er(O[e],String(s),N)})())}if(R.length&&V.push((async()=>{let e=new Map;for(let t of R){let n=`${t.apiUrl}/${t.owner}/${t.repo}`;e.has(n)||e.set(n,{apiUrl:t.apiUrl,owner:t.owner,repo:t.repo,infos:[]}),e.get(n).infos.push(t)}await Be(e.values(),async({apiUrl:e,owner:t,repo:n,infos:r})=>{let i=await ct(e,t,n,x),a=i.map(e=>e.name),o=a.map(e=>G(e)).filter(e=>j(e)),s=new Map;for(let e of i)e.commitSha&&s.set(e.commitSha,e.name);let c=new Map;async function l(r){if(c.has(r))return c.get(r);let i=await Fn(e,t,n,r,x);return c.set(r,i),i}let u=[];for(let e of r){let r=O.actions[e.key],c=`https://${e.host||`github.com`}/${t}/${n}`;if(e.isHash){let{usePre:t,useRel:n}=T(e.name),l=Ye({},o,{range:`0.0.0`,semvers:new Set([`patch`,`minor`,`major`]),usePre:t,useRel:n,useGreatest:!0,pinnedRange:D[e.name]});if(!l){delete O.actions[e.key];continue}let d=a.find(e=>G(e)===l);if(!d){delete O.actions[e.key];continue}let f=i.find(e=>e.name===d)?.commitSha;if(!f||f===e.ref||f.startsWith(e.ref)||e.ref.startsWith(f)){delete O.actions[e.key];continue}let p=s.get(e.ref)||Array.from(s.entries()).find(([t])=>t.startsWith(e.ref))?.[1];r.old=e.ref,r.new=f.substring(0,e.ref.length),r.oldPrint=p||e.ref.substring(0,7),r.newPrint=d,r.info=c,u.push({key:e.key,commitSha:f})}else{let t=q(G(e.ref));if(!t){delete O.actions[e.key];continue}let{useGreatest:n,usePre:s,useRel:l,semvers:d}=T(e.name),f=Ye({},o,{range:t,semvers:d,usePre:s,useRel:l,useGreatest:n||!0,pinnedRange:D[e.name]});if(!f||f===t){delete O.actions[e.key];continue}let p=a.find(e=>G(e)===f);if(!p){delete O.actions[e.key];continue}let m=In(p,e.ref);if(m===e.ref){delete O.actions[e.key];continue}r.new=a.includes(m)?m:p,r.info=c;let h=i.find(e=>e.name===p);h?.commitSha&&u.push({key:e.key,commitSha:h.commitSha})}}let d=await Promise.all(u.map(({commitSha:e})=>l(e)));for(let[e,{key:t}]of u.entries()){let n=O.actions[t];n&&d[e]&&Tr(n,d[e])}},{concurrency:i}),n.cooldown&&Er(O.actions,String(n.cooldown),N),Object.keys(O.actions).length||delete O.actions})()),ge.length&&V.push((async()=>{let e=new Map;for(let t of ge)e.has(t.fullImage)||e.set(t.fullImage,[]),e.get(t.fullImage).push(t);await Be(e.entries(),async([e,t])=>{let n;try{let[t]=await Zn(e,`docker`,x);n=t}catch{for(let e of t)delete O.docker[e.key];return}for(let e of t){let t=O.docker[e.key],r=t.oldOrig||t.old,{semvers:i}=T(e.fullImage),a=Qn(n.tags,r,i);if(!a){delete O.docker[e.key];continue}t.new=a.newTag,t.info=cr(e.ref),Tr(t,a.date)}},{concurrency:i}),n.cooldown&&Er(O.docker,String(n.cooldown),N),Object.keys(O.docker).length||delete O.docker})()),await Promise.all(V),!Dr(O))return{results:{},message:`All dependencies are up to date.`};if(n.update){let e=new Map;if(O.actions)for(let[t,n]of Object.entries(O.actions)){let[r,i]=t.split(`\0`);e.has(r)||e.set(r,[]),e.get(r).push({name:i,oldRef:n.old,newRef:n.new})}let t=new Map;if(O.docker)for(let[e,n]of Object.entries(O.docker)){let[r]=e.split(`\0`);t.has(r)||t.set(r,{}),t.get(r)[e]=n}let n=jr(O);for(let n of Object.keys(O)){if(!Object.keys(O[n]).length)continue;if(n===`actions`){for(let[t,n]of e){let{absPath:e,content:r}=F[t]||{};e&&$(e,Ln(r,n))}continue}if(n===`docker`){for(let[e,n]of t){let t=I[e];if(!t)continue;let{absPath:r,fileType:i}=t,a;try{a=h(r,`utf8`)}catch{continue}$(r,(i===`dockerfile`?er:i===`compose`?tr:nr)(a,n))}continue}let r=A[n];if(n===`go`&&L){for(let e of de){let t=vr(O[n],e.usePath);if(!Object.keys(t).length)continue;let[r,i]=En(e.content,t);r!==e.content&&$(e.absPath,r),Dn(e.projectDir,i,$)}let e={};for(let[t,r]of Object.entries(O[n]))t.split(`\0`)[0]===`replace`&&(e[t]=r);if(Object.keys(e).length){let[t]=En(L.content,e);t!==L.content&&$(L.file,t)}}else if(n===`go`){let[e,t]=En(r,O[n]);$(M[n],e),Dn(s(u(M[n])),t,$)}else if(n===`cargo`&&pe)for(let e of fe){let t=vr(O[n],e.memberPath);Object.keys(t).length&&$(e.absPath,gr(e.content,t))}else if(n===`cargo`)$(M[n],gr(r,O[n]));else if(n===`npm`&&he)for(let e of me){let t=vr(O[n],e.memberPath);Object.keys(t).length&&$(e.absPath,tn(e.content,t))}else{let e=n===`npm`?tn:cn;$(M[n],e(r,O[n]))}}return n}return jr(O)}export{pt as a,bt as c,Ee as d,Le as f,St as i,Ue as l,An as n,yt as o,_t as r,gt as s,Nr as t,He as u};
|
|
1
|
+
import{cwd as e,env as t,platform as n,stderr as r}from"node:process";import{promisify as i,styleText as a}from"node:util";import{basename as o,dirname as s,join as c,relative as l,resolve as u}from"node:path";import{accessSync as d,globSync as f,lstatSync as p,readFileSync as m,readdirSync as h,statSync as g,truncateSync as _,writeFileSync as ee}from"node:fs";import{mkdir as v,readFile as y,writeFile as b}from"node:fs/promises";import te from"node:dns";import{execFile as ne,execFileSync as re}from"node:child_process";import{pathToFileURL as x}from"node:url";import{createHash as S}from"node:crypto";import{homedir as ie}from"node:os";function ae(e){let t={},n=t,r=e.split(/\r?\n/);for(let e=0;e<r.length;e++){let i=r[e].replace(/#.*$/,``).trim();if(!i)continue;let a=/^\[([^\]]+)\]$/.exec(i);if(a){n=t;for(let e of le(a[1]))(!(e in n)||typeof n[e]!=`object`||Array.isArray(n[e]))&&(n[e]={}),n=n[e];continue}let o=ue(i);if(o<0)continue;let s=i.slice(0,o).trim(),c=i.slice(o+1).trim(),l=le(s),u=n;for(let e=0;e<l.length-1;e++)(!(l[e]in u)||typeof u[l[e]]!=`object`||Array.isArray(u[l[e]]))&&(u[l[e]]={}),u=u[l[e]];let d=l[l.length-1];if(c.startsWith(`[`)&&!c.includes(`]`)){let t=[];C(c.slice(1),t);for(let n=e+1;n<r.length;n++){let i=r[n].replace(/#.*$/,``).trim();if(i){if(i.includes(`]`)){C(i.replace(/\].*$/,``),t),e=n;break}C(i,t)}}u[d]=t}else u[d]=oe(c)}return t}function C(e,t){let n=e.trim();if(!n)return;let r=/"""([\s\S]*?)"""|'''([\s\S]*?)'''|"((?:[^"\\]|\\.)*)"|'([^']*)'|([^,\s\]]+)/g,i;for(;i=r.exec(n);){let e=i[1]??i[2]??(i[3]===void 0?void 0:T(i[3]))??i[4]??i[5];e!==void 0&&e!==``&&t.push(se(e))}}function oe(e){if(e.startsWith(`[`)){let t=[];return C(e.slice(1,e.lastIndexOf(`]`)),t),t}return e.startsWith(`{`)?ce(e):e.startsWith(`"""`)?T(e.slice(3,e.lastIndexOf(`"""`))):e.startsWith(`'''`)?e.slice(3,e.lastIndexOf(`'''`)):e.startsWith(`"`)?T(e.slice(1,e.lastIndexOf(`"`))):e.startsWith(`'`)?e.slice(1,e.lastIndexOf(`'`)):se(e)}function se(e){return e===`true`?!0:e===`false`?!1:/^[+-]?\d+(\.\d+)?$/.test(e)?Number(e):e}function ce(e){let t={},n=e.slice(1,e.lastIndexOf(`}`)).trim();if(!n)return t;for(let e of w(n)){let n=e.indexOf(`=`);if(n<0)continue;let r=e.slice(0,n).trim().replace(/^["']|["']$/g,``);t[r]=oe(e.slice(n+1).trim())}return t}function w(e){let t=[],n=0,r=null,i=0;for(let a=0;a<e.length;a++){let o=e[a];if(r){if(o===`\\`&&r===`"`){a++;continue}o===r&&(r=null)}else o===`"`||o===`'`?r=o:o===`[`||o===`{`?n++:o===`]`||o===`}`?n--:o===`,`&&n===0&&(t.push(e.slice(i,a)),i=a+1)}return i<e.length&&t.push(e.slice(i)),t}function le(e){let t=[],n=``,r=null;for(let i of e)if(r){if(i===r){r=null;continue}n+=i}else i===`"`||i===`'`?r=i:i===`.`?(t.push(n.trim()),n=``):n+=i;return n.trim()&&t.push(n.trim()),t}function ue(e){let t=null;for(let n=0;n<e.length;n++){let r=e[n];if(t){if(r===`\\`&&t===`"`){n++;continue}r===t&&(t=null)}else if(r===`"`||r===`'`)t=r;else if(r===`=`)return n}return-1}function T(e){return e.replace(/\\(["\\bfnrt]|u[0-9a-fA-F]{4}|U[0-9a-fA-F]{8})/g,(e,t)=>{switch(t[0]){case`"`:return`"`;case`\\`:return`\\`;case`b`:return`\b`;case`f`:return`\f`;case`n`:return`
|
|
2
|
+
`;case`r`:return`\r`;case`t`:return` `;case`u`:case`U`:return String.fromCodePoint(Number.parseInt(t.slice(1),16));default:return t}})}const de=/^v?(\d+)\.(\d+)\.(\d+)(?:-([a-zA-Z0-9_-]+(?:\.[a-zA-Z0-9_-]+)*))?(?:\+[a-zA-Z0-9._-]+)?$/,E=new Map;function D(e){if(typeof e!=`string`)return null;let t=E.get(e);if(t!==void 0)return t;let n=de.exec(e.trim());if(!n)return E.set(e,null),null;let r=Number(n[1]),i=Number(n[2]),a=Number(n[3]),o=n[4]?n[4].split(`.`).map(e=>/^\d+$/.test(e)?Number(e):e):[],s={major:r,minor:i,patch:a,prerelease:o,version:`${r}.${i}.${a}${o.length?`-${o.join(`.`)}`:``}`};return E.set(e,s),s}function O(e,t){let n=typeof e==`number`,r=typeof t==`number`;return n&&r?e-t:n?-1:r?1:e<t?-1:+(e>t)}function k(e,t){return e.major-t.major||e.minor-t.minor||e.patch-t.patch}function A(e,t){let n=k(e,t);if(n!==0)return n;if(!e.prerelease.length&&!t.prerelease.length)return 0;if(e.prerelease.length&&!t.prerelease.length)return-1;if(!e.prerelease.length&&t.prerelease.length)return 1;let r=Math.max(e.prerelease.length,t.prerelease.length);for(let n=0;n<r;n++){if(e.prerelease[n]===void 0)return-1;if(t.prerelease[n]===void 0)return 1;let r=O(e.prerelease[n],t.prerelease[n]);if(r!==0)return r}return 0}function j(e){return D(e)?.version??null}function M(e){return D(e)}const N=new Map,fe=/(?:^|[^.\d])(\d+)(?:\.(\d+))?(?:\.(\d+))?/;function P(e){if(typeof e!=`string`)return null;let t=N.get(e);if(t!==void 0)return t;let n=fe.exec(e);if(!n)return N.set(e,null),null;let r={version:`${n[1]||`0`}.${n[2]||`0`}.${n[3]||`0`}`};return N.set(e,r),r}function F(e,t){let n=D(e),r=D(t);if(!n||!r||n.version===r.version)return null;let i=A(n,r),a=i>0?n:r,o=i>0?r:n,s=a.prerelease.length>0;if(o.prerelease.length>0&&!s){if(!o.patch&&!o.minor)return`major`;if(k(o,a)===0)return o.minor&&!o.patch?`minor`:`patch`}let c=s?`pre`:``;return n.major===r.major?n.minor===r.minor?n.patch===r.patch?`prerelease`:`${c}patch`:`${c}minor`:`${c}major`}function I(e,t){let n=D(e),r=D(t);return n&&r?A(n,r):null}function pe(e,t){return(I(e,t)??-1)>0}function L(e,t){return(I(e,t)??-1)>=0}function me(e,t){return(I(e,t)??1)<0}function he(e,t){return(I(e,t)??1)!==0}function ge(e){let t=/^(>=|<=|>|<|=)?\s*v?(\d+)(?:\.(\d+))?(?:\.(\d+))?((?:-[a-zA-Z0-9_-]+(?:\.[a-zA-Z0-9_-]+)*)?)$/.exec(e.trim());if(!t)return null;let n=t[2],r=D(`${n}.${t[3]??`0`}.${t[4]??`0`}${t[5]||``}`);return r?{op:t[1]||`=`,semver:r}:null}function _e(e,t){let n=A(e,t.semver);switch(t.op){case`>=`:return n>=0;case`<=`:return n<=0;case`>`:return n>0;case`<`:return n<0;case`=`:return n===0;default:return n===0}}function R(e,t,n){return`${e}.${t}.${n}-0`}function ve(e){return e.replace(/~\s*v?(\d+)(?:\.(\d+))?(?:\.(\d+))?((?:-[a-zA-Z0-9._-]+)?)/g,(e,t,n,r,i)=>{let a=Number(t);if(n===void 0)return`>=${a}.0.0 <${R(a+1,0,0)}`;let o=Number(n);return`>=${a}.${o}.${r===void 0?0:Number(r)}${i||``} <${R(a,o+1,0)}`})}function z(e){return e.replace(/\^\s*v?(\d+)(?:\.(\d+))?(?:\.(\d+))?((?:-[a-zA-Z0-9._-]+)?)/g,(e,t,n,r,i)=>{let a=Number(t),o=i||``;if(n===void 0)return`>=${a}.0.0 <${R(a+1,0,0)}`;let s=Number(n);if(r===void 0)return a===0?`>=${a}.${s}.0 <${R(a,s+1,0)}`:`>=${a}.${s}.0 <${R(a+1,0,0)}`;let c=Number(r);return a===0?s===0?`>=${a}.${s}.${c}${o} <${R(a,s,c+1)}`:`>=${a}.${s}.${c}${o} <${R(a,s+1,0)}`:`>=${a}.${s}.${c}${o} <${R(a+1,0,0)}`})}function ye(e){return e.replace(/v?(\d+)(?:\.(\d+))?(?:\.(\d+))?((?:-[a-zA-Z0-9._-]+)?)\s+-\s+v?(\d+)(?:\.(\d+))?(?:\.(\d+))?((?:-[a-zA-Z0-9._-]+)?)/g,(e,t,n,r,i,a,o,s,c)=>{let l=Number(t),u=n===void 0?0:Number(n),d=r===void 0?0:Number(r),f=i||``,p=Number(a),m;return m=s===void 0?o===void 0?`<${R(p+1,0,0)}`:`<${R(p,Number(o)+1,0)}`:`<=${p}.${Number(o)}.${Number(s)}${c||``}`,`>=${l}.${u}.${d}${f} ${m}`})}function be(e){return/^\s*[*xX]\s*$/.test(e)?`>=0.0.0`:(e=e.replace(/v?(\d+)\.[xX*](?:\.[xX*])?/g,(e,t)=>{let n=Number(t);return`>=${n}.0.0 <${R(n+1,0,0)}`}),e=e.replace(/v?(\d+)\.(\d+)\.[xX*]/g,(e,t,n)=>{let r=Number(t),i=Number(n);return`>=${r}.${i}.0 <${R(r,i+1,0)}`}),e=e.replace(/(^|[\s|])(\d+)\.(\d+)(?=\s|$)/g,(t,n,r,i,a)=>{let o=e.substring(0,a).trimEnd();if(/[<>=]$/.test(o))return t;let s=Number(r),c=Number(i);return`${n}>=${s}.${c}.0 <${R(s,c+1,0)}`}),e=e.replace(/(^|[\s|])(\d+)(?=\s|$)/g,(t,n,r,i)=>{let a=e.substring(0,i).trimEnd();if(/[<>=]$/.test(a))return t;let o=Number(r);return`${n}>=${o}.0.0 <${R(o+1,0,0)}`}),e)}const B=new Map;function V(e){let t=B.get(e);if(t!==void 0)return t;let n=e.split(`||`).map(e=>e.trim()),r=[];for(let t of n){if(!t){r.push([]);continue}t=ye(t),t=z(t),t=ve(t),t=be(t),t=t.replace(/(^|[\s])v?(\d+\.\d+\.\d+(?:-[a-zA-Z0-9_-]+(?:\.[a-zA-Z0-9_-]+)*)?)\b/g,(e,t)=>/[<>=]/.test(t)?e:`${t}=${e.trim()}`),t=t.replace(/(>=|<=|>|<|=)\s+/g,`$1`);let n=t.split(/\s+/).filter(Boolean),i=[];for(let t of n){let n=ge(t);if(!n)return B.set(e,null),null;i.push(n)}if(i.length===0)return B.set(e,null),null;r.push(i)}let i=r.length?r:null;return B.set(e,i),i}function xe(e,t){for(let n of t)if(!_e(e,n))return!1;if(e.prerelease.length>0){for(let n of t)if(n.semver.prerelease.length>0&&n.semver.major===e.major&&n.semver.minor===e.minor&&n.semver.patch===e.patch)return!0;return!1}return!0}function Se(e,t){let n=D(e);if(!n)return!1;let r=V(t);if(!r)return!1;for(let e of r)if(e.length===0||xe(n,e))return!0;return!1}function H(e){if(typeof e!=`string`)return null;try{return V(e)?e:null}catch{return null}}const Ce=[[1e3,6e4,`sec`],[6e4,36e5,`min`],[36e5,864e5,`hour`],[864e5,6048e5,`day`],[6048e5,2628e6,`week`],[2628e6,31536e6,`month`],[31536e6,1/0,`year`]],we={"1 day ago":`yesterday`,"1 week ago":`last week`,"1 month ago":`last month`,"1 year ago":`last year`,"in 1 day":`tomorrow`,"in 1 week":`next week`,"in 1 month":`next month`,"in 1 year":`next year`},Te={sec:`second`,min:`minute`};function Ee(e){return e instanceof Date?e.getTime():typeof e==`string`?Date.parse(e):e}function De(e,{now:t,noAffix:n=!1,times:r=Ce,nowThreshold:i=2e3,nowString:a=`now`,unknownString:o=``,aliases:s=!1,aliasesMap:c=we,longUnits:l=!1}={}){let u=Ee(e),d=t===void 0?Date.now():Ee(t);if(u!==u)return o||String(e);let f=d-u,p=f<0;if(p&&(f=-f),f<i)return a;let m=0,h=``;for(let e=0,t=r.length;e<t;e++){let t=r[e];if(!(f>=t[1])){m=f/t[0]|0,h=(l&&Te[t[2]]||t[2])+(m>1?`s`:``);break}}let g=`${m} ${h}`,_;return _=n?g:p?`in ${g}`:`${g} ago`,s?c[_]??_:_}function Oe(e,t,n){if(e===t)return e;let r=0;for(;r<e.length&&r<t.length&&e[r]===t[r];)r++;if(r>0&&e[r-1]!==`.`&&e[r-1]!==`-`){let t=r-1;for(;t>=0&&e[t]!==`.`&&e[t]!==`-`;)t--;if(t>=0)r=t+1;else{let t=0;for(;t<r&&!/\d/.test(e[t]);)t++;r=t}}let i=e.substring(r);return i?e.substring(0,r)+n(i):e}function ke(e){let t=[];for(let n of e){let[e,r]=n.replaceAll(/\s+/g,``).split(/[<>=~]+/);e&&/^[0-9.a-z]+$/.test(r)&&t.push({name:e,version:r})}return t}const Ae=[`dependencies`,`devDependencies`,`peerDependencies`,`optionalDependencies`,`resolutions`,`packageManager`],je=[`node`,`deno`,`bun`],Me=[`project.dependencies`,`project.optional-dependencies`,`dependency-groups.dev`,`dependency-groups.lint`,`dependency-groups.test`],Ne=[`deps`,`indirect`,`replace`,`tool`],Pe=[`dependencies`,`dev-dependencies`,`build-dependencies`,`workspace.dependencies`];function U(e,t){for(let n of t instanceof Set?t:[])if(n.test(e))return!0;return!1}function Fe(e,t){return t.split(`.`).reduce((e,t)=>e?.[t]??null,e)}function Ie(e){return e.split(`,`).filter(Boolean)}function Le(e,t,n){return!e||!t?!0:(n-Date.parse(e))/(24*3600*1e3)>=t}function Re(){let e=new Date;return[e.getFullYear(),`-`,String(e.getMonth()+1).padStart(2,`0`),`-`,String(e.getDate()).padStart(2,`0`),` `,String(e.getHours()).padStart(2,`0`),`:`,String(e.getMinutes()).padStart(2,`0`),`:`,String(e.getSeconds()).padStart(2,`0`),`.`,String(e.getMilliseconds()).padStart(3,`0`)].join(``)}function ze(e,t,n=` `){let r=``,i=Array(e[0].length).fill(0);for(let n of e)for(let[e,r]of n.entries()){let n=t(r);n>i[e]&&(i[e]=n)}for(let[a,o]of e.entries()){for(let[e,a]of o.entries()){e>0&&(r+=n);let s=` `.repeat(i[e]-t(a));r+=a+(e===o.length-1?``:s)}a<e.length-1&&(r+=`
|
|
3
|
+
`)}return r}const Be={y:365,m:30,w:7,d:1,h:1/24,s:1/86400};function Ve(e){let t=/^(\d+(?:\.\d+)?)\s*([a-z])$/i.exec(e);if(t){let[,e,n]=t,r=Be[n.toLowerCase()];if(r)return Number(e)*r}let n=Number(e);if(!Number.isFinite(n))throw Error(`Invalid cooldown value: ${e}`);return n}async function W(e,t,{concurrency:n=1/0}={}){let r=Array.from(e);if(!Number.isFinite(n))return Promise.all(r.map(t));let i=Array(r.length),a=0;return await Promise.all(Array.from({length:Math.min(n,r.length)},async()=>{for(;a<r.length;){let e=a++;i[e]=await t(r[e])}})),i}const G=e=>e.replace(/[|\\{}()[\]^$+*?.-]/g,`\\$&`);function He(){let e=new Map,t=new Map,n=te.lookup;te.lookup=function(r,...i){let a={},o;typeof i[0]==`function`?o=i[0]:(a=typeof i[0]==`number`?{family:i[0]}:i[0]||{},o=i[1]);let s=e.get(r);if(s){a.all?o(null,s):o(null,s[0].address,s[0].family);return}if(t.has(r)){t.get(r).push({options:a,callback:o});return}t.set(r,[{options:a,callback:o}]),n.call(te,r,{all:!0},(n,i)=>{let a=t.get(r);t.delete(r),!n&&i?.length&&e.set(r,i);for(let{options:e,callback:t}of a)n?t(n):e.all?t(null,i):t(null,i[0].address,i[0].family)})}}const Ue=`17.15.4`,We=5e3,K=e=>e.replace(/^v/,``),q=e=>e.endsWith(`/`)?e.slice(0,-1):e;function Ge(e,t){return{headers:{"user-agent":`updates/${Ue}`,"accept-encoding":`gzip, deflate, br`,...t&&{Authorization:`${e} ${t}`}}}}async function Ke(e,t){try{return await fetch(e,t)}catch(t){throw Error(`Failed to fetch ${e}${t?.message?`: ${t.message}`:``}`)}}function qe(e){return(M(e)?.prerelease.length??0)>0}function Je(e){return/[0-9]+\.[0-9]+\.[0-9]+-.+/.test(e)}function Ye(e,t,{useRel:n,allowDowngrade:r,name:i,matchesAny:a}){let o=J(e),s=J(t);if(!o||!s)return!0;let c=Je(e)||qe(e),l=qe(t);return c&&!l?pe(s,o)||n:!l&&me(s,o)?r===!0||a(i,r):!0}function J(e){try{return P(e)?.version??``}catch{return``}}function Xe(e,t,{range:n,semvers:r,usePre:i,useRel:a,useGreatest:o,pinnedRange:s}){let c=J(n);if(!c)return c;i=Je(n)||i,i&&(r.add(`prerelease`),r.has(`patch`)&&r.add(`prepatch`),r.has(`minor`)&&r.add(`preminor`),r.has(`major`)&&r.add(`premajor`));let l=0,u=c;for(let n of t){let t=M(n);if(!t?.version||t.prerelease.length&&(!i||a))continue;let c=t.version;if(s&&!Se(c,s))continue;let d=F(u,c);if(!(!d||!r.has(d)))if(o||!(`time`in e))(L(J(c),u)||s&&!Se(u,s))&&(u=c);else{let t=Date.parse(e.time[n]);t>=0&&t>l&&(u=c,l=t)}}return u||null}function Ze(e,{mode:t,range:n,useGreatest:r,useRel:i,usePre:a,semvers:o,pinnedRange:s},{allowDowngrade:c,matchesAny:l,isGoPseudoVersion:u}){if(n===`*`||n.includes(`||`))return null;let d=[];if(t===`pypi`)d=Object.keys(e.releases).filter(e=>j(e));else if(t===`npm`||t===`cargo`)d=Object.keys(e.versions).filter(e=>j(e));else if(t===`go`){let t=J(n);if(!t)return null;let r=a||Je(n),s=e=>qe(e)&&(!r||i),d={useRel:i,allowDowngrade:c,name:e.name,matchesAny:l},f=e.old||n,p=J(e.new);if(p&&!u(e.new)&&!s(e.new)){let n=F(t,p);if(n&&o.has(n)&&Ye(f,e.new,d))return e.new}let m=J(e.sameMajorNew);if(m&&!u(e.sameMajorNew)&&!s(e.sameMajorNew)){let n=F(t,m);if(n&&o.has(n)&&Ye(f,e.sameMajorNew,d))return e.Time=e.sameMajorTime,delete e.newPath,e.sameMajorNew}return null}let f=Xe(e,d,{range:n,semvers:o,usePre:a,useRel:i,useGreatest:r,pinnedRange:s});if(!f)return null;if(r)return f;{let r=``,u=``;t===`pypi`?(u=e.info.version,r=J(e.info.version)):r=e[`dist-tags`].latest;let d=J(n),p=Je(n),m=qe(f),h=qe(r),g={useRel:i,allowDowngrade:c,name:e.name,matchesAny:l};if(!i&&a||p&&m)return f;if(p&&!m)return Ye(n,f,g)?f:null;let _=F(d,r);return _&&_!==`prerelease`&&!o.has(_.replace(/^pre/,``))||i&&qe(r)?f:me(r,d)&&!h?Ye(n,r,g)?r:null:!p&&h&&!a||s&&!Se(r,s)?f:u||r}}const Qe=new Map;if(t.UPDATES_FORGE_TOKENS)for(let e of t.UPDATES_FORGE_TOKENS.split(`,`)){let t=e.indexOf(`:`);t>0&&Qe.set(e.substring(0,t),e.substring(t+1))}function $e(e){let n=[];for(let r of e)t[r]&&n.push(t[r]);return Array.from(new Set(n))}const et=$e([`UPDATES_GITHUB_API_TOKEN`,`GITHUB_API_TOKEN`,`GH_TOKEN`,`GITHUB_TOKEN`,`HOMEBREW_GITHUB_API_TOKEN`]);try{let e=re(`gh`,[`auth`,`token`],{encoding:`utf8`,timeout:5e3,stdio:[`ignore`,`pipe`,`pipe`]}).trim();e&&!et.includes(e)&&et.push(e)}catch{}function tt(){return et}const nt=new Map;function rt(e){try{let t=Qe.get(new URL(e).hostname);if(t)return[t]}catch{}return tt()}async function it(e,t){let n={signal:AbortSignal.timeout(t.fetchTimeout),headers:{"accept-encoding":`gzip, deflate, br`}},r;try{r=new URL(e).hostname}catch{r=``}let i=r?rt(e):tt();if(!i.length)return t.doFetch(e,n);let a=r?nt.get(r):void 0;if(a)return t.doFetch(e,{...n,headers:{...n.headers,Authorization:`Bearer ${a}`}});for(let a of i){let i=await t.doFetch(e,{...n,headers:{...n.headers,Authorization:`Bearer ${a}`}});if(i.status!==401&&i.status!==403)return r&&nt.set(r,a),i}return t.doFetch(e,n)}function at(e,t,n){let r=K(t);if(!j(r))return null;if(n){let n=t,i=K(t);for(let t of e){let e=K(t);j(e)&&(!n||pe(e,i))&&(n=t,i=e)}if(he(r,i))return n}else{let t=e.at(-1);if(!t)return null;let n=K(t);if(!j(n))return null;if(he(r,n))return t}return null}function ot(e){return e=e.replace(`git@`,``).replace(/.+?\/\//,`https://`).replace(/\.git$/,``),/^[a-z]+:[a-z0-9-]\/[a-z0-9-]$/.test(e)?e.replace(/^(.+?):/,(e,t)=>`https://${t}.com/`):/^[a-z0-9-]\/[a-z0-9-]$/.test(e)?`https://github.com/${e}`:e}const st=/^[0-9a-f]{7,}$/i;function ct(e){return e.map(e=>({name:e.name,commitSha:e.commit?.sha||``}))}async function lt(e,t,n,r){let i=r=>`${e}/repos/${t}/${n}/tags?per_page=100&page=${r}`;try{let[a,o]=await Promise.all([it(`${e}/repos/${t}/${n}/tags?per_page=100`,r),it(i(2),r).catch(()=>null)]);if(!a?.ok)return[];let s=ct(await a.json()),c=a.headers.get(`link`)||``,l=/<([^>]+)>;\s*rel="last"/.exec(c);if(!l)return s;let u=Number(new URL(l[1]).searchParams.get(`page`));if(u>=2&&o?.ok&&s.push(...ct(await o.json())),u>2){let e=await Promise.all(Array.from({length:u-2},(e,t)=>it(i(t+3),r)));for(let t of e)t?.ok&&s.push(...ct(await t.json()))}return s}catch{return[]}}function ut(e,t,n,r){throw e?.status&&e?.statusText?Error(`Received ${e.status} ${e.statusText} from ${t}`):Error(`Unable to fetch ${n} from ${r}`)}function dt(e,t,n=``){let r=t.startsWith(`v`),i=K(e),a=K(t).split(`.`).length,o=i.split(`.`),s;return s=a===1?o[0]:a===2?`${o[0]}.${o[1]||`0`}`:i,`${r?`v`:``}${s}${n}`}function ft(e){return e.startsWith(`https://bitbucket.org`)?`src/HEAD`:`tree/HEAD`}function pt({repository:e,homepage:t,info:n},r,i){if(n){let t=n.project_urls;for(let n of[`repository`,`Repository`,`repo`,`Repo`,`source`,`Source`,`source code`,`Source code`,`Source Code`,`homepage`,`Homepage`])if(t[n]){e=t[n];break}e??=`https://pypi.org/project/${i}/`}let a=``;return r===`https://npm.pkg.github.com`?`https://github.com/${i.replace(/^@/,``)}`:(e&&(a=ot(typeof e==`string`?e:e.url),a&&typeof e!=`string`&&e.directory&&(a=`${a}/${ft(a)}/${e.directory}`)),a||t||``)}const mt={"allow-downgrade":{short:`d`,type:`string`,multiple:!0},"error-on-outdated":{short:`E`,type:`boolean`},"error-on-unchanged":{short:`U`,type:`boolean`},exclude:{short:`e`,type:`string`,multiple:!0},file:{short:`f`,type:`string`,multiple:!0},forgeapi:{type:`string`},goproxy:{type:`string`},cargoapi:{type:`string`},dockerapi:{type:`string`},greatest:{short:`g`,type:`string`,multiple:!0},help:{short:`h`,type:`boolean`},include:{short:`i`,type:`string`,multiple:!0},indirect:{short:`I`,type:`boolean`},json:{short:`j`,type:`boolean`},jsrapi:{type:`string`},cooldown:{short:`C`,type:`string`},minor:{short:`m`,type:`string`,multiple:!0},modes:{short:`M`,type:`string`,multiple:!0},color:{short:`c`,type:`boolean`},"no-cache":{short:`x`,type:`boolean`},"no-color":{short:`n`,type:`boolean`},patch:{short:`P`,type:`string`,multiple:!0},pin:{short:`l`,type:`string`,multiple:!0},prerelease:{short:`p`,type:`string`,multiple:!0},pypiapi:{type:`string`},registry:{short:`r`,type:`string`},release:{short:`R`,type:`string`,multiple:!0},sockets:{short:`s`,type:`string`},timeout:{short:`T`,type:`string`},types:{short:`t`,type:`string`,multiple:!0},update:{short:`u`,type:`boolean`},verbose:{short:`V`,type:`boolean`},version:{short:`v`,type:`boolean`}};function ht(e,t){return RegExp(`^${G(e).replaceAll(`\\*`,`.*`)}$`,t?`i`:``)}function gt(e,t,n){return t&&typeof e==`string`?/^\/.+\/$/.test(e)?new RegExp(e.slice(1,-1)):ht(e,n):e instanceof RegExp?e:ht(e,n)}function _t(e){return Array.isArray(e)&&e.every(e=>e===!0)?!0:Array.isArray(e)?new Set(e.flatMap(e=>typeof e==`string`?Ie(e):``).filter(Boolean)):typeof e==`string`?new Set([e]):typeof e==`boolean`?e:!1}function vt(e){for(let[t,{short:n}]of Object.entries(mt))if(t===e||n===e)return t;return``}function yt(e){return new Set(e.map(e=>gt(e,!1,!0)))}function bt(e){return Array.isArray(e)?e.filter(e=>typeof e==`string`).flatMap(e=>Ie(e)):[]}function xt(e){let t={};if(Array.isArray(e)){for(let n of e)if(typeof n==`string`){let[e,r]=n.split(`=`,2);e&&r&&H(r)&&(t[e]=r)}}else if(typeof e==`string`){let[n,r]=e.split(`=`,2);n&&r&&H(r)&&(t[n]=r)}return t}function St(e){if(typeof e==`boolean`)return e;if(!Array.isArray(e)||!e.length)return!1;let t=new Set;for(let n of e)t.add(gt(n,!1,!1));return t}async function Ct(e){let t=[];for(let e of[`js`,`ts`,`mjs`,`mts`])t.push(`updates.config.${e}`);let n={};try{({default:n}=await Promise.any(t.map(async t=>{let n=c(e,...t.split(`/`)),r=x(n);try{d(n)}catch{throw Error(`File not found: ${t}`)}try{return await import(r.href)}catch(e){throw Error(`Unable to parse config file ${t}: ${e.message}`)}})))}catch(e){if(e instanceof AggregateError){let t=e.errors.filter(e=>e.message.startsWith(`Unable to parse`));if(t.length>0)throw t[0]}}return n}function wt(e){if(/^\s*\{/.test(e))return JSON.parse(e);let t={};for(let n of e.split(/\r?\n/)){let e=n.trim();if(!e||e.startsWith(`#`)||e.startsWith(`;`))continue;let r=e.indexOf(`=`);if(r===-1)continue;let i=e.slice(r+1).trim();i.length>=2&&(i.startsWith(`"`)&&i.endsWith(`"`)||i.startsWith(`'`)&&i.endsWith(`'`))&&(i=i.slice(1,-1)),t[e.slice(0,r).trim()]=i}return t}function Tt(e){try{return wt(m(e,`utf-8`))}catch{return}}function Et(t){let n=e();for(;;){let e=c(n,t);try{return g(e),e}catch{}let r=s(n);if(r===n)break;n=r}}function Dt(e){let n={},r=e.toLowerCase();for(let[i,a]of Object.entries(t))if(i.toLowerCase().startsWith(r)){let t=i.substring(e.length).split(`__`).filter(Boolean);if(t.length===0)continue;let r=n;for(let e=0;e<t.length;e++){let n=t[e];if(e===t.length-1)r[n]=a;else if(r[n]===void 0&&(r[n]={}),typeof r[n]==`object`)r=r[n];else break}}return n}function Ot(e,r={}){let i=n===`win32`,a=i?t.USERPROFILE:t.HOME,o=[{...r}],s=[];function l(e){if(!e||s.includes(e))return;let t=Tt(e);t&&(o.push(t),s.push(e))}i||(l(c(`/etc`,e,`config`)),l(c(`/etc`,`${e}rc`))),a&&(l(c(a,`.config`,e,`config`)),l(c(a,`.config`,e)),l(c(a,`.${e}`,`config`)),l(c(a,`.${e}rc`))),l(Et(`.${e}rc`));let u=Dt(`${e}_`);return u.config&&l(u.config),Object.assign({},...o,u,s.length?{configs:s,config:s[s.length-1]}:void 0)}const kt=c(n===`win32`?t.LOCALAPPDATA||c(ie(),`AppData`,`Local`):t.XDG_CACHE_HOME||c(ie(),`.cache`),`updates`);let At=null;function jt(e){return S(`sha256`).update(e).digest(`hex`).substring(0,16)}async function Mt(e){try{let t=await y(c(kt,`${jt(e)}.cache`),`utf8`),n=t.indexOf(`
|
|
4
|
+
`);if(n===-1)return null;let r=t.substring(0,n),i=t.substring(n+1);return r&&i?{etag:r,body:i}:null}catch{return null}}async function Nt(e,t,n){try{await(At??=v(kt,{recursive:!0})),await b(c(kt,`${jt(e)}.cache`),`${t}\n${n}`)}catch{}}const Pt=/^.*?:\/\/(.*?@)?(github\.com[:/])/i,Ft=/^([^/]+)\/([^/]+)\/(?:.*\/)?([0-9a-f]+|v?[0-9]+\.[0-9]+\.[0-9]+)$/i,It=/[0-9]+(\.[0-9]+)?(\.[0-9]+)?/g,Lt=/[0-9]+\.[0-9]+\.[0-9]+(-.+)?/g,Rt=`https://registry.npmjs.org`;let Y=null;const zt=new Map;function Bt(){return Y||Ot(`npm`,{registry:Rt})}function Vt(e){return e.replace(/^\$\{?([^}]*)\}?$/,(e,n)=>t[n]||``)}function Ht(e,t){let n=n=>t[`${e}:${n}`]||t[`${e}/:${n}`],r=n(`_authToken`);if(r)return{token:Vt(r),type:`Bearer`};let i=n(`username`),a=n(`_password`);if(i&&a){let e=Buffer.from(Vt(a),`base64`).toString(`utf8`);return{token:Buffer.from(`${i}:${e}`).toString(`base64`),type:`Basic`,username:i,password:e}}let o=n(`_auth`);if(o)return{token:Vt(o),type:`Basic`}}function Ut(e,t){let n=new URL(e.startsWith(`//`)?`http:${e}`:e),r;for(;r!==`/`&&n.pathname!==r;){r=n.pathname||`/`;let e=Ht(`//${n.host}${r.replace(/\/$/,``)}`,t);if(e)return e;let i=r.endsWith(`/`)?r:`${r}/`;n.pathname=new URL(`..`,new URL(i,`http://x`)).pathname}let i=t._auth;if(i)return{token:Vt(i),type:`Basic`}}function Wt(e,t){let n=t[`${e}:registry`]||t.registry;return n.endsWith(`/`)?n:`${n}/`}function Gt(e,t){Y||=Bt();let n=e.startsWith(`@`)?(/@[a-z0-9][\w.-]+/.exec(e)||[``])[0]:``,r=`${n}:${t}`,i=zt.get(r);if(i)return i;let a;if(!e.startsWith(`@`))a={auth:Ut(t,Y),registry:t};else{let e=q(Wt(n,Y));if(e!==t)try{let n=Ut(e,Y);a=n?.token?{auth:n,registry:e}:{auth:Ut(t,Y),registry:t}}catch{a={auth:Ut(t,Y),registry:t}}else a={auth:Ut(t,Y),registry:t}}return zt.set(r,a),a}function Kt(e,t,n){Y||=Bt();let r=q((typeof n.registry==`string`?n.registry:!1)||t.registry||Y.registry||Rt);return{...Gt(e,r),originalRegistry:r}}function qt(e,t,n){let r=`${e}/${t.replace(/\//g,`%2f`)}`;return n?`${r}/${n}`:r}const Jt=new Map,Yt=new Map,Xt=new Map;async function Zt(e,t,n,r,i){let{auth:a,registry:s}=Kt(e,n,r),c=qt(s,t===`resolutions`?o(e):e),l=Jt.get(c);if(!l){let t=Ge(a?.type,a?.token),n={...t.headers,accept:`application/vnd.npm.install-v1+json`};t.headers=n,l=(async()=>{let r=i.noCache?null:await Mt(c);r&&(n[`if-none-match`]=r.etag);let a=await i.doFetch(c,{signal:AbortSignal.timeout(i.fetchTimeout),...t});if(a?.status===304&&r)return JSON.parse(r.body);if(a?.ok){let e=await a.text(),t=a.headers.get(`etag`);return t&&!i.noCache&&Nt(c,t,e),JSON.parse(e)}ut(a,c,e,s)})().catch(e=>{throw Jt.delete(c),e}),Jt.set(c,l)}return[await l,t,s,e]}async function Qt(e,t,n,r,i){let{auth:a,registry:o}=Kt(e,n,r),s=qt(o,e,t),c=Yt.get(s);if(c)return c;let l=(async()=>{try{let n=Ge(a?.type,a?.token),r=await i.doFetch(s,{signal:AbortSignal.timeout(i.fetchTimeout),...n});if(!r?.ok)return{};let c=await r.json(),l=``,u=c?._npmOperationalInternal?.tmp;if(u){let e=/(\d{13})/.exec(u);e&&(l=new Date(Number(e[1])).toISOString())}if(!l){let r=qt(o,e),a=Xt.get(r);a||(a=i.doFetch(r,{signal:AbortSignal.timeout(i.fetchTimeout),...n}).then(e=>e?.ok?e.json():null).catch(()=>(Xt.delete(r),null)),Xt.set(r,a)),l=(await a)?.time?.[t]||``}return{repository:c.repository,homepage:c.homepage,date:l}}catch{return{}}})();return Yt.set(s,l),l}function X(e){return e.startsWith(`npm:@jsr/`)||e.startsWith(`jsr:`)}function $t(e){return e.startsWith(`link:`)||e.startsWith(`file:`)}function en(e,t){if(e.startsWith(`npm:@jsr/`)){let t=/^npm:@jsr\/([^_]+)__([^@]+)@(.+)$/.exec(e);if(t)return{scope:t[1],name:t[2],version:t[3]}}else if(e.startsWith(`jsr:@`)){let t=/^jsr:@([^/]+)\/([^@]+)@(.+)$/.exec(e);if(t)return{scope:t[1],name:t[2],version:t[3]}}else if(e.startsWith(`jsr:`)){let n=e.substring(4);if(t?.startsWith(`@`)){let e=/^@([^/]+)\/(.+)$/.exec(t);if(e)return{scope:e[1],name:e[2],version:n}}}return{scope:null,name:null,version:``}}async function tn(e,t,n){let r=/^@([^/]+)\/(.+)$/.exec(e);if(!r)throw Error(`Invalid JSR package name: ${e}`);let[,i,a]=r,o=`${n.jsrApiUrl}/@${i}/${a}/meta.json`,s=await n.doFetch(o,{signal:AbortSignal.timeout(n.fetchTimeout),headers:{"accept-encoding":`gzip, deflate, br`}});if(s?.ok){let r=await s.json(),i={},a={};for(let[e,t]of Object.entries(r.versions))i[e]={version:e,time:t.createdAt},a[e]=t.createdAt;return[{name:e,"dist-tags":{latest:r.latest},versions:i,time:a},t,n.jsrApiUrl,e]}ut(s,o,e,`JSR`)}function nn(e,t){let n=e;for(let[e,{old:r,oldOrig:i}]of Object.entries(t)){let[a,o]=e.split(`\0`),s=i||r;if(a===`packageManager`){let r=RegExp(`"${G(a)}": *"${o}@${G(s)}"`,`g`);n=n.replace(r,`"${a}": "${o}@${t[e].new}"`)}else{let r=RegExp(`"${G(o)}": *"${G(s)}"`,`g`);n=n.replace(r,`"${o}": "${t[e].new}"`)}}return n}function rn(e,t,n){let r=e.replace(Lt,t);if(n&&n!==e&&/^[\^~]/.test(r)){let e=n.substring(1).split(`.`),t=r.substring(1).split(`.`);e.length!==t.length&&(r=`${r[0]}${t.slice(0,e.length).join(`.`)}`)}if(n&&n!==e&&r.startsWith(`>=`)){let e=/^>=\s/.test(n)?`>= `:`>=`,t=n.replace(/^>=\s*/,``),i=r.replace(/^>=\s*/,``),a=t.split(`.`),o=i.split(`.`);a.length!==o.length&&(r=`${e}${o.slice(0,a.length).join(`.`)}`)}return r}function Z(e){let t=e.match(It);return t?.length===1?e.replace(It,J(t[0])):e}async function an(e,t,n){try{let r=await it(`${n.forgeApiUrl}/repos/${e}/${t}/commits`,n);if(!r?.ok)return{hash:``,commit:{}};let{sha:i,commit:a}=(await r.json())[0];return{hash:i,commit:a}}catch{return{hash:``,commit:{}}}}async function on(e,t,n){return(await lt(n.forgeApiUrl,e,t,n)).map(e=>e.name)}async function sn(e,t,n,r){let i=t.old.replace(Pt,``),[a,o,s,c]=Ft.exec(i)||[];if(!o||!s||!c)return null;if(st.test(c)){let{hash:n,commit:i}=await an(o,s,r);if(!n)return null;let a=i?.committer?.date??i?.author?.date,l=n.substring(0,c.length);if(c!==l)return{key:e,newRange:t.old.replace(c,l),user:o,repo:s,oldRef:c,newRef:l,newDate:a}}else{let t=at(await on(o,s,r),c,n);if(t)return{key:e,newRange:t,user:o,repo:s,oldRef:c,newRef:t}}return null}async function cn(e,t,n){let r=`${n.pypiApiUrl}/pypi/${e}/json`,i=await n.doFetch(r,{signal:AbortSignal.timeout(n.fetchTimeout),headers:{"accept-encoding":`gzip, deflate, br`}});if(i?.ok)return[await i.json(),t,null,e];ut(i,r,e,n.pypiApiUrl)}function ln(e,t){let n=e;for(let[e,{old:r,oldOrig:i}]of Object.entries(t)){let[a,o]=e.split(`\0`),s=i||r;n=n.replace(RegExp(`("${G(o)} *[<>=~]+ *)${G(s)}(")`,`g`),(n,r,i)=>`${r}${t[e].new}${i}`)}return n}const un=i(ne);function dn(){let e=t.GOPROXY||`https://proxy.golang.org,direct`;for(let t of e.split(/[,|]/)){let e=t.trim();if(e&&e!==`direct`&&e!==`off`)return q(e)}return`https://proxy.golang.org`}function fn(){return(t.GONOPROXY||t.GOPRIVATE||``).split(`,`).map(e=>e.trim()).filter(Boolean)}function pn(e,t){return t.some(t=>e===t||e.startsWith(`${t}/`))}function mn(e){return e.replace(/[A-Z]/g,e=>`!${e.toLowerCase()}`)}function hn(e){let t=/\/v(\d+)$/.exec(e);return t?Number.parseInt(t[1]):1}function gn(e,t){return t<=1?e.replace(/\/v\d+$/,``):`${e.replace(/\/v\d+$/,``)}/v${t}`}function _n(e,t){let n=t?/^(\S+)(?:\s+v\S+)?\s+=>\s+(\S+)\s+(v\S+)/.exec(e):/^replace\s+(\S+)(?:\s+v\S+)?\s+=>\s+(\S+)\s+(v\S+)/.exec(e);if(!n)return null;let[,r,i,a]=n;return i.startsWith(`./`)||i.startsWith(`/`)||i.startsWith(`../`)?null:{origModule:r,targetModule:i,targetVersion:a}}function vn(e,t,n){return t===`indirect`||e.startsWith(`golang.org/x/`)||yn(n)}function yn(e){return/\d{14}-[0-9a-f]{12}$/.test(e)}function bn(e,t,n){return[{name:e,old:t,new:t},n,null,e]}async function xn(e,t,n){if(!t)return null;let r=t,i=e+101,a=e+2,o=7;for(;a<=i;){let e=Math.min(a+o-1,i),t=await Promise.all(Array.from({length:e-a+1},(e,t)=>n(a+t))),s=t.indexOf(null),c=s===-1?t:t.slice(0,s);if(c.length&&(r=c.at(-1)),s!==-1)break;a=e+1,o*=2}return r}function Sn(e,t,n,r,i,a){let o=r?.Version??i,s=r?.Time??a,c=r?.path??e;return[{name:e,old:n,new:K(o),Time:s,...c===e?{}:{newPath:c},sameMajorNew:K(i),sameMajorTime:a},t,null,e]}function Cn(e){let t={},n={},r={},i={},a=new Set,o=[],s=e.split(/\r?\n/),c=!1,l=!1,u=!1;for(let e of s){let i=e.trim();if(/^require\s*\(/.test(i)){c=!0;continue}if(/^replace\s*\(/.test(i)){l=!0;continue}if(/^tool\s*\(/.test(i)){u=!0;continue}if(i===`)`){c=!1,l=!1,u=!1;continue}if(u){i&&!i.startsWith(`//`)&&o.push(i);continue}let s=/^tool\s+(\S+)/.exec(i);if(s){o.push(s[1]);continue}let d=i.includes(`// indirect`);if(l||/^replace\s+/.test(i)){let e=_n(i,l);e&&(r[e.targetModule]=e.targetVersion,a.add(e.origModule));continue}let f=c?/^(\S+)\s+(v\S+)/.exec(i):/^require\s+(\S+)\s+(v\S+)/.exec(i);f&&((d?n:t)[f[1]]=f[2])}for(let e of a)delete t[e],delete n[e];if(o.length){let e=[...Object.keys(n),...Object.keys(t)];for(let r of o){let a=``;for(let t of e)(r===t||r.startsWith(`${t}/`))&&t.length>a.length&&(a=t);let o=a?n[a]?n:t[a]?t:null:null;o&&(i[a]=o[a],delete o[a])}}return{deps:t,indirect:n,replace:r,tool:i}}async function wn(e,n,r,i,a){let o=hn(e),s=async(e,n)=>{try{let{stdout:r}=await un(`go`,[`list`,`-m`,`-json`,`${e}@latest`],{timeout:n,cwd:i,env:t}),a=JSON.parse(r);return{Version:a.Version,Time:a.Time||``,path:e}}catch{return null}},c=vn(e,n,r),[l,u]=await Promise.all([s(e,a.fetchTimeout),c?null:s(gn(e,o+1),a.goProbeTimeout)]);return l?Sn(e,n,r,await xn(o,u,t=>s(gn(e,t),a.goProbeTimeout)),l.Version,l.Time):bn(e,r,n)}async function Tn(e,t,n,r,i,a){if(pn(e,a))return wn(e,t,n,r,i);let o=mn(e),s=hn(e),c=async t=>{let n=gn(e,t);return i.doFetch(`${i.goProxyUrl}/${mn(n)}/@latest`,{signal:AbortSignal.timeout(i.goProbeTimeout)}).then(async e=>e.ok?{...await e.json(),path:n}:null).catch(()=>null)},l=vn(e,t,n),[u,d]=await Promise.all([i.doFetch(`${i.goProxyUrl}/${o}/@latest`,{signal:AbortSignal.timeout(i.fetchTimeout)}),l?null:c(s+1)]);if(!u.ok)return bn(e,n,t);let f,p;try{let e=await u.json();f=e.Version,p=e.Time}catch{return bn(e,n,t)}return Sn(e,t,n,await xn(s,d,c),f,p)}function En(e,t){let n=G(t);return e=e.replace(RegExp(`^replace\\s+${n}(\\s+v\\S+)?\\s+=>\\s+\\S+(\\s+v\\S+)?\\s*\\n`,`gm`),``),e=e.replace(RegExp(`^\\s+${n}(\\s+v\\S+)?\\s+=>\\s+\\S+(\\s+v\\S+)?\\s*\\n`,`gm`),``),e=e.replace(/^replace\s*\(\s*\)\s*\n/gm,``),e}function Dn(e,t){let n=e,r={};for(let[e,{old:i,oldOrig:a}]of Object.entries(t)){let[o,s]=e.split(`\0`),c=a||i,l=t[e].new;if(o===`replace`){n=n.replace(RegExp(`(=>\\s+${G(s)}\\s+)v${G(c)}`,`g`),`$1v${l}`);continue}if(o===`indirect`){n=n.replace(RegExp(`(${G(s)}) +v${G(c)}`,`g`),`$1 v${l}`);continue}let u=hn(s),d=Number.parseInt(l.split(`.`)[0]);if(u!==d&&d>1){let e=gn(s,d);n=n.replace(RegExp(`${G(s)} +v${G(c)}`,`g`),`${e} v${l}`),o===`tool`&&(n=n.replace(RegExp(`(^\\s+|^tool\\s+)${G(s)}(/\\S+)?\\s*$`,`gm`),`$1${e}$2`)),r[s]=e}else n=n.replace(RegExp(`(${G(s)}) +v${G(c)}`,`g`),`$1 v${l}`);o!==`tool`&&(n=En(n,s))}return[n,r]}function On(e,t,n){if(!Object.keys(t).length)return;let r=f(`**/*.go`,{cwd:e});for(let i of r){let r=c(e,i),a=m(r,`utf8`),o=!1;for(let[e,n]of Object.entries(t)){let t=RegExp(`"${G(e)}(/|")`,`g`),r=a.replace(t,`"${n}$1`);r!==a&&(a=r,o=!0)}o&&n(r,a)}}function kn(e){let t=[],n={},r=e.split(/\r?\n/),i=!1,a=!1;for(let e of r){let r=e.trim();if(/^use\s*\(/.test(r)){i=!0;continue}if(/^replace\s*\(/.test(r)){a=!0;continue}if(r===`)`){i=!1,a=!1;continue}if(i){let e=/^(\S+)/.exec(r);e&&!r.startsWith(`//`)&&t.push(e[1]);continue}let o=/^use\s+(\S+)/.exec(r);if(o){t.push(o[1]);continue}if(a||/^replace\s+/.test(r)){let e=_n(r,a);e&&(n[e.targetModule]=e.targetVersion);continue}}return{use:t,replace:n}}function An(e){let t=`https://${jn(e)}`,n=new URL(t),r=n.pathname.split(`/`);if(r.length>3){let[e,i,a,...o]=r;return n.pathname=`/${i}/${a}/${ft(t)}/${o.join(`/`)}`,n.toString()}else return t}function jn(e){return/\/v[0-9]$/.test(e)?s(e):e}function Mn(e){return e.replace(/(\d{7})\d{7}-[0-9a-f]{12}$/,`$1`)}const Nn=/^\s*(?:-\s*)?uses:\s*['"]?([^'"#\s]+)['"]?/gm;function Pn(e){if(e.startsWith(`docker://`)||e.startsWith(`./`))return null;let t=/^https?:\/\/([^/]+)\/(.+)$/.exec(e),n=t?.[1]??null,r=t?.[2]??e,i=r.indexOf(`@`);if(i===-1)return null;let a=r.substring(0,i),o=r.substring(i+1);if(!o)return null;let s=a.split(`/`);if(s.length<2)return null;let c=n?`${n}/${a}`:a;return{host:n,owner:s[0],repo:s[1],ref:o,name:c,isHash:st.test(o)}}function Fn(e,t){return e?e===`github.com`?`https://api.github.com`:`https://${e}/api/v1`:t}async function In(e,t,n,r,i){try{let a=await it(`${e}/repos/${t}/${n}/git/commits/${r}`,i);if(!a?.ok)return``;let o=await a.json();return o?.committer?.date||o?.author?.date||``}catch{return``}}function Ln(e,t){return dt(M(K(e))?.version??K(e),t)}function Rn(e,t){let n=e;for(let{name:e,oldRef:r,newRef:i}of t){let t=RegExp(`(uses:\\s*['"]?)${G(e)}@${G(r)}`,`g`);n=n.replace(t,`$1${e}@${i}`)}return n}function zn(e){let t=e.replace(/\\/g,`/`);return/\.github\/workflows\/[^/]+\.(ya?ml)$/.test(t)}function Bn(e){try{return h(e).filter(e=>/\.(ya?ml)$/.test(e)).map(t=>u(c(e,t)))}catch{return[]}}const Vn=/^(v?\d+(?:\.\d+){0,2})(-.+)?$/,Hn=/^\s*FROM\s+(?:--platform=\S+\s+)?(\S+)/gm,Un=/^\s*image:\s*['"]?([^\s'"#]+)['"]?/gm,Wn=/^\s*container:\s*['"]?([^\s'"#{}]+:[^\s'"#{}:]+)['"]?\s*$/gm,Gn=/^\s*(?:-\s*)?uses:\s*['"]?docker:\/\/([^'"#\s]+)['"]?/gm;function Kn(e){let t=e.split(`/`);return t.length===1?{registry:null,namespace:`library`,repo:t[0]}:t.length===2&&!t[0].includes(`.`)&&!t[0].includes(`:`)?{registry:null,namespace:t[0],repo:t[1]}:{registry:t[0],namespace:t.slice(1,-1).join(`/`)||t[1],repo:t[t.length-1]}}function qn(e){if(e=e.replace(/^docker:\/\//,``),e.includes(`@`))return null;let t=e.lastIndexOf(`:`),n,r;if(t===-1||e.lastIndexOf(`/`)>t||(n=e.substring(0,t),r=e.substring(t+1),!r||!Vn.test(r)))return null;let{registry:i,namespace:a,repo:o}=Kn(n);return{registry:i,namespace:a,repo:o,tag:r,fullImage:n}}function Jn(e){let t=Vn.exec(e);return t?{version:t[1],suffix:t[2]||``}:null}function Yn(e,t){let n=Jn(t);return n?dt(e,n.version,n.suffix):t}function Xn(e,t){let n=[];for(let r of e.matchAll(t)){let e=qn(r[1]);e&&n.push({ref:e,match:r[1]})}return n}async function Zn(e,t,n){let r={},i=`${n.dockerApiUrl}/v2/repositories/${e}/${t}/tags`,a=e=>`${i}?page_size=100&ordering=last_updated&page=${e}`,o=e=>{for(let t of e.results||[])r[t.name]=t.tag_last_pushed||t.last_updated||``},[s,c]=await Promise.all([n.doFetch(a(1),{signal:AbortSignal.timeout(n.fetchTimeout)}).then(e=>e?.ok?e.json():null).catch(()=>null),n.doFetch(a(2),{signal:AbortSignal.timeout(n.fetchTimeout)}).then(e=>e?.ok?e.json():null).catch(()=>null)]);if(!s)return r;o(s);let l=Math.min(Math.ceil((s.count||0)/100),10);if(l>=2&&c&&o(c),l>2){let e=await Promise.all(Array.from({length:l-2},(e,t)=>n.doFetch(a(t+3),{signal:AbortSignal.timeout(n.fetchTimeout)}).then(e=>e?.ok?e.json():null).catch(()=>null)));for(let t of e)t&&o(t)}return r}async function Qn(e,t,n){let{registry:r,namespace:i,repo:a}=Kn(e);if(r)throw Error(`Non-Docker-Hub registries are not yet supported: ${r}`);return[{tags:await Zn(i,a,n),name:e},t,null,e]}function $n(e,t,n){let r=Jn(t);if(!r)return null;let i=P(K(r.version))?.version;if(!i)return null;let a=i,o=``,s=``;for(let[t,i]of Object.entries(e)){let e=Jn(t);if(!e||e.suffix!==r.suffix)continue;let c=P(K(e.version))?.version;if(!c)continue;let l=F(a,c);!l||!n.has(l)||L(c,a)&&(a=c,o=t,s=i)}if(!o||a===i)return null;let c=Yn(a,t);return c===t?null:{newTag:c,date:s}}function er(e,t,n){let r=e;for(let[e,i]of Object.entries(t)){let[t,a]=e.split(`\0`),o=i.oldOrig||i.old;for(let e of n)r=r.replace(e(G(a),G(o)),`$1${a}:${i.new}`)}return r}function tr(e,t){return er(e,t,[(e,t)=>RegExp(`(FROM\\s+(?:--platform=\\S+\\s+)?)${e}:${t}`,`g`)])}function nr(e,t){return er(e,t,[(e,t)=>RegExp(`(image:\\s*['"]?)${e}:${t}`,`g`)])}function rr(e,t){return er(e,t,[(e,t)=>RegExp(`((?:container|image):\\s*['"]?)${e}:${t}`,`g`),(e,t)=>RegExp(`(uses:\\s*['"]?docker://)${e}:${t}`,`g`)])}const ir=[`Dockerfile`,`docker-compose.yml`,`docker-compose.yaml`];function ar(e){return/^docker-.+\.ya?ml$/.test(e)}function or(e){return/^Dockerfile(\..+)?$/.test(e)}function sr(e){return or(e)||ar(e)}function cr(e){return or(e)?Hn:Un}function lr(e){return e.registry?``:e.namespace===`library`?`https://hub.docker.com/_/${e.repo}`:`https://hub.docker.com/r/${e.namespace}/${e.repo}`}const ur=new Map;async function dr(e,t,n){let r=`${q(n.cratesIoUrl)}/api/v1/crates/${encodeURIComponent(e)}/versions?per_page=100`,i=n.noCache?void 0:ur.get(r);return i||(i=n.doFetch(r,{signal:AbortSignal.timeout(n.fetchTimeout),...Ge()}).then(async t=>{t?.ok||ut(t,r,e,n.cratesIoUrl);let i;try{i=await t.json()}catch{throw Error(`Invalid JSON from ${r}`)}let a=(i.versions||[]).filter(e=>!e.yanked),o={},s={};for(let e of a)e.num&&(o[e.num]={},s[e.num]=e.created_at||``);return{name:e,versions:o,time:s,"dist-tags":{latest:a[0]?.num??``}}}).catch(e=>{throw ur.delete(r),e}),ur.set(r,i)),[await i,t,null,e]}function fr(e){let t=new Map;for(let n of e.split(`[[package]]`)){let e=/\bname\s*=\s*"([^"]+)"/.exec(n),r=/\bversion\s*=\s*"([^"]+)"/.exec(n);if(!e||!r)continue;let i=e[1],a=r[1];if(!j(a))continue;let o=t.get(i)||[];o.push(a),t.set(i,o)}return t}const pr=/^\d/;function mr(e,t){return pr.test(e)?rn(Z(`^${e}`),t,`^${e}`).replace(/^\^/,``):rn(Z(e),t,e)}function hr(e,t,n){let r=e.get(t);if(!r)return;let i=pr.test(n)?`^${n}`:n,a;for(let e of r)Se(e,i)&&(!a||pe(e,a))&&(a=e);return a}const gr=Pe.map(e=>G(e)).join(`|`);function _r(e,t){let n=e;for(let[e,r]of Object.entries(t)){let[,t]=e.split(`\0`),i=r.oldOrig||r.old,a=r.new,o=G(t),s=G(i);n=n.replace(RegExp(`^(\\s*${o}\\s*=\\s*["'])${s}(["'].*)$`,`gm`),`$1${a}$2`),n=n.replace(RegExp(`(\\s*${o}\\s*=\\s*\\{\\s*version\\s*=\\s*["'])${s}(["'])`,`g`),`$1${a}$2`),n=n.replace(RegExp(`(\\[(?:${gr})\\.${o}\\][^\\[]*?version\\s*=\\s*["'])${s}(["'])`,`g`),`$1${a}$2`)}return n}function vr(e){return e.split(`|`)[0]}function yr(e,t){let n=t===`.`?``:`|${t}`,r={};for(let[t,i]of Object.entries(e)){let[e,a]=t.split(`\0`),o=vr(e);e===`${o}${n}`&&(r[`${o}${a}`]=i)}return r}const br=/[*?{[]/;async function xr(e,t,n,r=32){let i=new Set,a=[];for(let r of e){let e=br.test(r)?f(r,{cwd:t}).map(e=>u(c(t,e))):[u(c(t,r))];for(let r of e){let e=c(r,n);if(i.has(e))continue;i.add(e);let o=l(t,r);a.push({absPath:e,memberPath:`./${o.replace(/\\/g,`/`)}`})}}return(await W(a,async({absPath:e,memberPath:t})=>{try{return{absPath:e,content:await y(e,`utf8`),memberPath:t}}catch{return null}},{concurrency:r})).filter(e=>e!==null)}function Sr(e){let t=[],n=e.split(`
|
|
5
|
+
`),r=!1;for(let e of n){if(/^packages\s*:/.test(e)){r=!0;continue}if(r){if(/^\S/.test(e))break;let n=/^\s+-\s+['"]?([^'"#\s]+)['"]?/.exec(e);n&&t.push(n[1])}}return t}const Cr={"pnpm-workspace.yaml":`npm`,"package.json":`npm`,"pyproject.toml":`pypi`,"go.work":`go`,"go.mod":`go`,"Cargo.toml":`cargo`},wr=new Set([`npm`,`pypi`,`go`,`cargo`,`actions`,`docker`]);function Tr(e,t){let n=new Map,r=new Set(e),i=t;for(;r.size;){for(let e of r){let t=c(i,e);try{d(t),n.set(e,t),r.delete(e)}catch{}}let e=s(i);if(e===i)break;i=e}return n}async function Er(e,t){let n=await W(e,async e=>{try{return[e,await y(e,`utf8`)]}catch(t){throw Error(`Unable to open ${e}: ${t.message}`)}},{concurrency:t});return new Map(n)}function Dr(e,t){t&&(e.date=t,e.age=De(t,{noAffix:!0}))}function Or(e,t,n){let r=Ve(String(t));for(let[t,{date:i}]of Object.entries(e))Le(i,r,n)||delete e[t]}function kr(e){let t=0;for(let n of Object.keys(e))t+=Object.keys(e[n]).length;return t}function Ar(e){console.error(`${Re()} ${e}`)}function jr(t){return t.replace(`${e()}/`,``).replace(`${e()}\\`,``)}function Q(e,t,n,r,i){if(i===`engines`&&je.includes(e)||t===`pypi`&&e===`python`)return!1;if(!n.size&&!r.size)return!0;let a=t===`go`?e.replace(/\/v\d+$/,``):e;for(let t of r)if(t.test(e)||t.test(a))return!1;for(let t of n)if(t.test(e)||t.test(a))return!0;return!n.size}function Mr(t){let n=new Set;if(t)for(let e of t){let t;try{t=p(e)}catch(t){throw Error(`Unable to open ${e}: ${t.message}`)}if(t?.isFile())n.add(u(e));else if(t?.isDirectory()){for(let t of Object.keys(Cr)){let r=c(e,t),i=null;try{i=p(r)}catch{}i?.isFile()&&n.add(u(r))}try{for(let t of h(e))if(sr(t)){let r=c(e,t);try{p(r).isFile()&&n.add(u(r))}catch{}}}catch{}let t=u(e).replace(/\\/g,`/`),r;r=t.endsWith(`.github/workflows`)?t:t.endsWith(`.github`)?c(t,`workflows`):c(t,`.github`,`workflows`);for(let e of Bn(r))n.add(e)}else throw Error(`${e} is neither a file nor directory`)}else{let t=c(`.github`,`workflows`),r=[...Object.keys(Cr),...ir,t];for(let[i,a]of Tr(r,e()))if(i===t)for(let e of Bn(a))n.add(e);else n.add(u(a));try{for(let t of h(e()))if(sr(t)&&!ir.includes(t)){let r=c(e(),t);try{p(r).isFile()&&n.add(u(r))}catch{}}}catch{}}for(let e of n)o(e)===`go.work`&&n.delete(c(s(e),`go.mod`));for(let e of n)o(e)===`pnpm-workspace.yaml`&&n.delete(c(s(e),`package.json`));return n}function $(e,t){n===`win32`&&_(e,0),ee(e,t,n===`win32`?{flag:`r+`}:void 0)}function Nr(e){for(let t of Object.keys(e))for(let n of Object.values(e[t]))typeof n.oldPrint==`string`&&(n.old=n.oldPrint),typeof n.newPrint==`string`&&(n.new=n.newPrint),typeof n.oldOrig==`string`&&!X(n.oldOrig)&&(n.old=t===`go`?Mn(n.oldOrig):n.oldOrig),t===`go`&&(n.new=Mn(n.new)),t===`actions`&&(n.old=K(n.old),n.new=K(n.new)),delete n.oldPrint,delete n.newPrint,delete n.oldOrig,delete n.date;let t={results:{}};for(let n of Object.keys(e))for(let[r,i]of Object.entries(e[n])){let[e,a]=r.split(`\0`);t.results[n]||(t.results[n]={}),t.results[n][e]||(t.results[n][e]={}),t.results[n][e][a]=i}return t}let Pr=!1;async function Fr(t={}){Pr||=(He(),!0);let n={...t},i=n.sockets??25,l=n.timeout??0,d=typeof t.forgeapi==`string`?q(t.forgeapi):`https://api.github.com`,f=typeof t.pypiapi==`string`?q(t.pypiapi):`https://pypi.org`,p=typeof t.jsrapi==`string`?q(t.jsrapi):`https://jsr.io`,h=typeof t.goproxy==`string`?q(t.goproxy):dn(),g=typeof t.cargoapi==`string`?q(t.cargoapi):`https://crates.io`,_=typeof t.dockerapi==`string`?q(t.dockerapi):`https://hub.docker.com`,ee=fn(),v=n.color===!0||n.noColor!==!0&&r.isTTY,b=e=>v?t=>a(e,String(t)):String,te=b(`magenta`),ne=b(`green`),re=b(`red`),x={fetchTimeout:l||5e3,goProbeTimeout:l?l/2:2500,forgeApiUrl:d,pypiApiUrl:f,jsrApiUrl:p,goProxyUrl:h,cratesIoUrl:g,dockerApiUrl:_,doFetch:async(e,t)=>{n.verbose&&Ar(`${te(t?.method||`GET`)} ${e}`);let r=await Ke(e,t);return n.verbose&&Ar(`${r.ok?ne(r.status):re(r.status)} ${e}`),r},noCache:!!n.noCache},S=St(n.greatest),ie=St(n.prerelease),C=St(n.release),oe=St(n.patch),se=St(n.minor),ce=St(n.allowDowngrade),w=n.modes?.length?new Set(n.modes):wr;function le(e){return oe===!0||U(e,oe)?new Set([`patch`]):se===!0||U(e,se)?new Set([`patch`,`minor`]):new Set([`patch`,`minor`,`major`])}function ue(e){return{useGreatest:typeof S==`boolean`?S:U(e,S),usePre:typeof ie==`boolean`?ie:U(e,ie),useRel:typeof C==`boolean`?C:U(e,C),semvers:le(e)}}let T=yt(n.include??[]),de=yt(n.exclude??[]),E=n.pin??{},D={},O={},k={},A={},M=Date.now(),N=0,fe=Mr(n.files?.length?new Set(n.files):!1),P=await Er(Array.from(fe).filter(e=>{if(zn(e))return w.has(`actions`)||w.has(`docker`);let t=o(e);if(sr(t))return w.has(`docker`);let n=Cr[t];return!!n&&w.has(n)}),i),F={},I={},pe=[],L=null,me=[],he=!1,ge=[],_e=!1,R=[],ve=[],z={};async function ye(t){let r=t===e()?n:await Ct(t);return{modeConfig:r,modeInclude:r!==n&&r?.include?yt([...n.include??[],...r.include]):T,modeExclude:r!==n&&r?.exclude?yt([...n.exclude??[],...r.exclude]):de,pin:{...r?.pin,...E}}}function be(e,t){return n.types?.length?n.types:t?.types?.length?t.types:e===`npm`?Ae:e===`pypi`?Array.from(Me):e===`go`?n.indirect?Array.from(Ne):Ne.filter(e=>e!==`indirect`):e===`cargo`?Array.from(Pe):[]}function B(e,t,n){D.docker||={};for(let r of n)for(let{ref:n}of Xn(e,r)){if(!Q(n.fullImage,`docker`,T,de,`docker`))continue;let e=`${t}${n.fullImage}`;if(D.docker[e])continue;let r=Jn(n.tag);r&&(D.docker[e]={old:r.version,oldOrig:n.tag},ve.push({key:e,fullImage:n.fullImage,ref:n}))}}for(let e of fe){if(zn(e)){let t=w.has(`actions`),n=w.has(`docker`);if(!t&&!n)continue;let r=P.get(e),i=jr(e);if(F[i]={absPath:e,content:r},t){D.actions||={};let e=Array.from(r.matchAll(Nn),e=>Pn(e[1])).filter(e=>e!==null);for(let t of e){if(!Q(t.name,`actions`,T,de,`actions`))continue;let e=`${i}${t.name}`;D.actions[e]||(D.actions[e]={old:t.ref},R.push({...t,key:e,apiUrl:Fn(t.host,d)}))}}n&&(I[i]={absPath:e,content:r,fileType:`workflow`},B(r,i,[Un,Wn,Gn]));continue}let t=o(e);if(sr(t)){if(!w.has(`docker`))continue;let n=P.get(e),r=jr(e);I[r]={absPath:e,content:n,fileType:or(t)?`dockerfile`:`compose`},B(n,r,[cr(t)]);continue}let n=Cr[t];if(!w.has(n))continue;if(t===`go.work`){D[n]||(D[n]={});let t=s(u(e)),r=P.get(e);L={file:e,content:r};let a=kn(r),[o,l]=await Promise.all([ye(t),W(a.use,async e=>{let n=u(c(t,e,`go.mod`));try{return{usePath:e,modPath:n,content:await y(n,`utf8`)}}catch{return null}},{concurrency:i})]),{modeConfig:d,modeInclude:f,modeExclude:p,pin:m}=o,h=be(n,d);A[n]=e,z[n]={modeConfig:d,projectDir:t,pin:m};for(let e of l){if(!e)continue;let{usePath:t,modPath:r,content:i}=e,a=Cn(i),o=s(r);pe.push({absPath:r,content:i,projectDir:o,usePath:t});let c=t===`.`?``:`|${t}`;for(let e of h){let t=a[e]||{};for(let[r,i]of Object.entries(t))Q(r,n,f,p,e)&&(D[n][`${e}${c}${r}`]={old:Mn(i),oldOrig:K(i)})}}for(let[e,t]of Object.entries(a.replace))Q(e,n,f,p,`replace`)&&(D[n][`replace${e}`]={old:Mn(t),oldOrig:K(t)});N+=Object.keys(D[n]).length;continue}if(t===`go.mod`&&L||t===`package.json`&&_e)continue;if(t===`Cargo.toml`){D[n]||(D[n]={});let t=P.get(e),r=ae(t),a=s(u(e));A[n]=e;let o=Tr([`Cargo.lock`],a).get(`Cargo.lock`),c=r.workspace?.members,l=Array.isArray(c)&&c.length,[d,f,p]=await Promise.all([ye(a),o?y(o,`utf8`):Promise.resolve(null),l?xr(c,a,`Cargo.toml`,i):Promise.resolve([])]),{modeConfig:m,modeInclude:h,modeExclude:g,pin:_}=d,ee=be(n,m);z[n]={modeConfig:m,projectDir:a,pin:_};let v=f?fr(f):new Map,b=(e,t)=>{for(let r of ee){let i=Fe(e,r)||{};if(!(typeof i!=`object`||Array.isArray(i))){for(let[e,a]of Object.entries(i))if(Q(e,n,h,g,r)){if(typeof a==`object`&&a&&`version`in a&&!(`git`in a)&&!(`path`in a)){let i=String(a.version);if(H(i)){let a=hr(v,e,i);D[n][`${r}${t}${e}`]={old:a??Z(i),oldOrig:i}}}else if(typeof a==`string`&&H(a)){let i=hr(v,e,a);D[n][`${r}${t}${e}`]={old:i??Z(a),oldOrig:a}}}}}};if(l){he=!0,b(r,``),me.push({absPath:u(e),content:t,memberPath:`.`});for(let e of p){me.push(e);try{b(ae(e.content),`|${e.memberPath}`)}catch(t){throw Error(`Error parsing ${e.absPath}: ${t.message}`)}}}else k[n]=t,b(r,``);N+=Object.keys(D[n]).length;continue}if(t===`pnpm-workspace.yaml`){D[n]||(D[n]={});let t=s(u(e)),r=P.get(e);_e=!0;let a=Sr(r),o=c(t,`package.json`),[l,d,f]=await Promise.all([ye(t),y(o,`utf8`).catch(()=>null),xr(a,t,`package.json`,i)]),{modeConfig:p,modeInclude:m,modeExclude:h,pin:g}=l,_=be(n,p);A[n]=e,z[n]={modeConfig:p,projectDir:t,pin:g};let ee=(e,t)=>{for(let r of _){let i=e[r]||{};if(typeof i==`string`){let[e,a]=i.split(`@`);Q(e,n,m,h,r)&&(D[n][`${r}${t}${e}`]={old:Z(a),oldOrig:a})}else if(typeof i==`object`&&!Array.isArray(i))for(let[e,a]of Object.entries(i))if(X(a)&&Q(e,n,m,h,r)){let i=en(a,e);D[n][`${r}${t}${e}`]={old:i.version,oldOrig:a}}else H(a)&&Q(e,n,m,h,r)?D[n][`${r}${t}${e}`]={old:Z(a),oldOrig:a}:$t(a)&&Q(e,n,m,h,r)?D[n][`${r}${t}${e}`]={old:`0.0.0`,oldOrig:a}:!X(a)&&Q(e,n,m,h,r)&&(O[`${r}${t}${e}`]={old:a})}};if(d!==null){let e;try{e=JSON.parse(d)}catch(e){throw Error(`Error parsing ${o}: ${e.message}`)}ge.push({absPath:u(o),content:d,memberPath:`.`}),ee(e,``)}for(let e of f){let t;try{t=JSON.parse(e.content)}catch(t){throw Error(`Error parsing ${e.absPath}: ${t.message}`)}ge.push(e),ee(t,`|${e.memberPath}`)}N+=Object.keys(D[n]).length+Object.keys(O).length;continue}A[n]=e,D[n]||(D[n]={});let r=s(u(e)),{modeConfig:a,modeInclude:l,modeExclude:f,pin:p}=await ye(r),m=be(n,a),h={};k[n]=P.get(e);try{if(n===`npm`)h=JSON.parse(k[n]);else if(n===`pypi`)h=ae(k[n]);else if(n===`go`){let e=Cn(k[n]);h.deps=e.deps,h.indirect=e.indirect,h.replace=e.replace,h.tool=e.tool}}catch(t){throw Error(`Error parsing ${e}: ${t.message}`)}for(let e of m){let t;if(t=n===`npm`||n===`go`?h[e]||{}:Fe(h,e)||{},Array.isArray(t)&&n===`pypi`)for(let{name:r,version:i}of ke(t))Q(r,n,l,f,e)&&(D[n][`${e}${r}`]={old:Z(i),oldOrig:i});else if(typeof t==`string`){let[r,i]=t.split(`@`);Q(r,n,l,f,e)&&(D[n][`${e}${r}`]={old:Z(i),oldOrig:i})}else for(let[r,i]of Object.entries(t))if(n===`npm`&&X(i)&&Q(r,n,l,f,e)){let t=en(i,r);D[n][`${e}${r}`]={old:t.version,oldOrig:i}}else n!==`go`&&H(i)&&Q(r,n,l,f,e)?D[n][`${e}${r}`]={old:Z(i),oldOrig:i}:n===`npm`&&$t(i)&&Q(r,n,l,f,e)?D[n][`${e}${r}`]={old:`0.0.0`,oldOrig:i}:n===`npm`&&!X(i)&&Q(r,n,l,f,e)?O[`${e}${r}`]={old:i}:n===`go`&&Q(r,n,l,f,e)&&(D[n][`${e}${r}`]={old:Mn(i),oldOrig:K(i)})}N+=Object.keys(D[n]).length+Object.keys(O).length,z[n]={modeConfig:a,projectDir:r,pin:p}}if(D.actions&&(N+=Object.keys(D.actions).length),D.docker&&(N+=Object.keys(D.docker).length),N===0)return{results:{},message:`No dependencies found, nothing to do.`};let V=[],xe={registry:n.registry};for(let e of Object.keys(z)){if(!D[e]||!Object.keys(D[e]).length&&!Object.keys(O).length)continue;let{modeConfig:t,projectDir:r,pin:a}=z[e];V.push((async()=>{let o=new Map;if(await W(Object.keys(D[e]),async n=>{let[i,s]=n.split(`\0`),c=null;if(e===`npm`){let{oldOrig:r}=D[e][n];if(r&&X(r))c=await tn(s,vr(i),x);else if(r&&$t(r))try{c=await Zt(s,vr(i),t,xe,x)}catch{delete D[e][n];return}else c=await Zt(s,vr(i),t,xe,x)}else c=e===`go`?await Tn(s,vr(i),D[e][n].oldOrig||D[e][n].old,r,x,ee):e===`cargo`?await dr(s,vr(i),x):await cn(s,i,x);if(!c)return;let[l,,u]=c;if(l?.error)throw Error(l.error);let{useGreatest:d,usePre:f,useRel:p,semvers:m}=ue(l.name),h=D[e][n].old,g=D[e][n].oldOrig,_=a[s],v=Ze(l,{usePre:f,useRel:p,useGreatest:d,semvers:m,range:h,mode:e,pinnedRange:_},{allowDowngrade:ce,matchesAny:U,isGoPseudoVersion:yn}),y=``;if([`go`,`pypi`].includes(e)&&v)y=v;else if(e===`cargo`&&v&&g)y=mr(g,v);else if(v)if(g&&$t(g))y=String(Bt()[`save-exact`])===`true`?v:`^${v}`;else if(g&&X(g))if(g.startsWith(`npm:@jsr/`)){let e=/^(npm:@jsr\/[^@]+@)(.+)$/.exec(g);e&&(y=`${e[1]}${v}`)}else if(g.startsWith(`jsr:@`)){let e=/^(jsr:@[^@]+@)(.+)$/.exec(g);e&&(y=`${e[1]}${v}`)}else g.startsWith(`jsr:`)&&(y=`jsr:${v}`);else y=rn(h,v,g);if(!v||v===h||g&&g===y){delete D[e][n];return}let b=``;e===`pypi`&&l.releases?.[v]?.[0]?.upload_time_iso_8601?b=l.releases[v][0].upload_time_iso_8601:e===`go`&&l.Time?b=l.Time:e===`cargo`&&l.time?.[v]&&(b=l.time[v]),D[e][n].new=y,g&&X(g)&&(D[e][n].newPrint=v),e===`npm`?o.set(n,{name:s,promise:Qt(l.name,v,t,xe,x)}):e===`pypi`?D[e][n].info=pt(l,u,l.info.name):e===`go`?D[e][n].info=An(l.newPath||s):e===`cargo`&&(D[e][n].info=`https://crates.io/crates/${s}`),b&&Dr(D[e][n],b)},{concurrency:i}),await Promise.all(Array.from(o,async([t,{name:n,promise:r}])=>{let i=await r;D[e][t]&&(D[e][t].info=pt({repository:i.repository,homepage:i.homepage},null,n),i.date&&Dr(D[e][t],i.date))})),Object.keys(O).length){let t=(await W(Object.entries(O),([e,t])=>{let n=e.split(`\0`)[1];return sn(e,t,typeof S==`boolean`?S:U(n,S),x)},{concurrency:i})).filter(e=>e!==null);for(let n of t){let{key:t,newRange:r,user:i,repo:a,oldRef:o,newRef:s,newDate:c}=n;D[e][t]={old:O[t].old,new:r,oldPrint:st.test(o)?o.substring(0,7):o,newPrint:st.test(s)?s.substring(0,7):s,info:`https://github.com/${i}/${a}`},c&&Dr(D[e][t],c)}}let s=n.cooldown??t.cooldown;s&&Or(D[e],String(s),M)})())}if(R.length&&V.push((async()=>{let e=new Map;for(let t of R){let n=`${t.apiUrl}/${t.owner}/${t.repo}`;e.has(n)||e.set(n,{apiUrl:t.apiUrl,owner:t.owner,repo:t.repo,infos:[]}),e.get(n).infos.push(t)}await W(e.values(),async({apiUrl:e,owner:t,repo:n,infos:r})=>{let i=await lt(e,t,n,x),a=i.map(e=>e.name),o=a.map(e=>K(e)).filter(e=>j(e)),s=new Map;for(let e of i)e.commitSha&&s.set(e.commitSha,e.name);let c=new Map;async function l(r){if(c.has(r))return c.get(r);let i=await In(e,t,n,r,x);return c.set(r,i),i}let u=[];for(let e of r){let r=D.actions[e.key],c=`https://${e.host||`github.com`}/${t}/${n}`;if(e.isHash){let{usePre:t,useRel:n}=ue(e.name),l=Xe({},o,{range:`0.0.0`,semvers:new Set([`patch`,`minor`,`major`]),usePre:t,useRel:n,useGreatest:!0,pinnedRange:E[e.name]});if(!l){delete D.actions[e.key];continue}let d=a.find(e=>K(e)===l);if(!d){delete D.actions[e.key];continue}let f=i.find(e=>e.name===d)?.commitSha;if(!f||f===e.ref||f.startsWith(e.ref)||e.ref.startsWith(f)){delete D.actions[e.key];continue}let p=s.get(e.ref)||Array.from(s.entries()).find(([t])=>t.startsWith(e.ref))?.[1];r.old=e.ref,r.new=f.substring(0,e.ref.length),r.oldPrint=p||e.ref.substring(0,7),r.newPrint=d,r.info=c,u.push({key:e.key,commitSha:f})}else{let t=J(K(e.ref));if(!t){delete D.actions[e.key];continue}let{useGreatest:n,usePre:s,useRel:l,semvers:d}=ue(e.name),f=Xe({},o,{range:t,semvers:d,usePre:s,useRel:l,useGreatest:n||!0,pinnedRange:E[e.name]});if(!f||f===t){delete D.actions[e.key];continue}let p=a.find(e=>K(e)===f);if(!p){delete D.actions[e.key];continue}let m=Ln(p,e.ref);if(m===e.ref){delete D.actions[e.key];continue}r.new=a.includes(m)?m:p,r.info=c;let h=i.find(e=>e.name===p);h?.commitSha&&u.push({key:e.key,commitSha:h.commitSha})}}let d=await Promise.all(u.map(({commitSha:e})=>l(e)));for(let[e,{key:t}]of u.entries()){let n=D.actions[t];n&&d[e]&&Dr(n,d[e])}},{concurrency:i}),n.cooldown&&Or(D.actions,String(n.cooldown),M),Object.keys(D.actions).length||delete D.actions})()),ve.length&&V.push((async()=>{let e=new Map;for(let t of ve)e.has(t.fullImage)||e.set(t.fullImage,[]),e.get(t.fullImage).push(t);await W(e.entries(),async([e,t])=>{let n;try{let[t]=await Qn(e,`docker`,x);n=t}catch{for(let e of t)delete D.docker[e.key];return}for(let e of t){let t=D.docker[e.key],r=t.oldOrig||t.old,{semvers:i}=ue(e.fullImage),a=$n(n.tags,r,i);if(!a){delete D.docker[e.key];continue}t.new=a.newTag,t.info=lr(e.ref),Dr(t,a.date)}},{concurrency:i}),n.cooldown&&Or(D.docker,String(n.cooldown),M),Object.keys(D.docker).length||delete D.docker})()),await Promise.all(V),!kr(D))return{results:{},message:`All dependencies are up to date.`};if(n.update){let e=new Map;if(D.actions)for(let[t,n]of Object.entries(D.actions)){let[r,i]=t.split(`\0`);e.has(r)||e.set(r,[]),e.get(r).push({name:i,oldRef:n.old,newRef:n.new})}let t=new Map;if(D.docker)for(let[e,n]of Object.entries(D.docker)){let[r]=e.split(`\0`);t.has(r)||t.set(r,{}),t.get(r)[e]=n}let n=Nr(D);for(let n of Object.keys(D)){if(!Object.keys(D[n]).length)continue;if(n===`actions`){for(let[t,n]of e){let{absPath:e,content:r}=F[t]||{};e&&$(e,Rn(r,n))}continue}if(n===`docker`){for(let[e,n]of t){let t=I[e];if(!t)continue;let{absPath:r,fileType:i}=t,a;try{a=m(r,`utf8`)}catch{continue}$(r,(i===`dockerfile`?tr:i===`compose`?nr:rr)(a,n))}continue}let r=k[n];if(n===`go`&&L){for(let e of pe){let t=yr(D[n],e.usePath);if(!Object.keys(t).length)continue;let[r,i]=Dn(e.content,t);r!==e.content&&$(e.absPath,r),On(e.projectDir,i,$)}let e={};for(let[t,r]of Object.entries(D[n]))t.split(`\0`)[0]===`replace`&&(e[t]=r);if(Object.keys(e).length){let[t]=Dn(L.content,e);t!==L.content&&$(L.file,t)}}else if(n===`go`){let[e,t]=Dn(r,D[n]);$(A[n],e),On(s(u(A[n])),t,$)}else if(n===`cargo`&&he)for(let e of me){let t=yr(D[n],e.memberPath);Object.keys(t).length&&$(e.absPath,_r(e.content,t))}else if(n===`cargo`)$(A[n],_r(r,D[n]));else if(n===`npm`&&_e)for(let e of ge){let t=yr(D[n],e.memberPath);Object.keys(t).length&&$(e.absPath,nn(e.content,t))}else{let e=n===`npm`?nn:ln;$(A[n],e(r,D[n]))}}return n}return Nr(D)}export{mt as a,xt as c,Oe as d,ze as f,Ct as i,We as l,jn as n,bt as o,vt as r,_t as s,Fr as t,Ue as u};
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "updates",
|
|
3
|
-
"version": "17.15.
|
|
3
|
+
"version": "17.15.4",
|
|
4
4
|
"description": "CLI dependency update tool for npm, uv, cargo, go and actions",
|
|
5
5
|
"author": "silverwind",
|
|
6
6
|
"repository": "silverwind/updates",
|
|
@@ -22,18 +22,18 @@
|
|
|
22
22
|
},
|
|
23
23
|
"devDependencies": {
|
|
24
24
|
"@types/node": "25.6.0",
|
|
25
|
-
"@typescript/native-preview": "7.0.0-dev.
|
|
25
|
+
"@typescript/native-preview": "7.0.0-dev.20260415.1",
|
|
26
26
|
"@vitest/coverage-v8": "4.1.4",
|
|
27
27
|
"eslint": "10.2.0",
|
|
28
28
|
"eslint-config-silverwind": "131.0.4",
|
|
29
29
|
"jest-extended": "7.0.0",
|
|
30
30
|
"timerel": "5.8.6",
|
|
31
|
-
"tsdown": "0.21.
|
|
32
|
-
"tsdown-config-silverwind": "2.0.
|
|
31
|
+
"tsdown": "0.21.8",
|
|
32
|
+
"tsdown-config-silverwind": "2.0.6",
|
|
33
33
|
"typescript": "6.0.2",
|
|
34
34
|
"typescript-config-silverwind": "17.0.0",
|
|
35
35
|
"updates-config-silverwind": "2.1.0",
|
|
36
|
-
"versions": "
|
|
36
|
+
"versions": "15.0.0",
|
|
37
37
|
"vitest": "4.1.4",
|
|
38
38
|
"vitest-config-silverwind": "11.1.4"
|
|
39
39
|
}
|