upd-cli 0.0.26__tar.gz → 0.0.28__tar.gz

{upd_cli-0.0.26 → upd_cli-0.0.28}/CHANGELOG.md

@@ -7,6 +7,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 
 
+
+
+## [0.0.28](https://github.com/rvben/upd/compare/v0.0.27...v0.0.28) - 2026-04-17
+
+### Added
+
+- **updater**: recursive hidden-file discovery, precise line numbers, scoped npm ([5fcc5d8](https://github.com/rvben/upd/commit/5fcc5d818d349abd109ae7cac001972a6a9cadea))
+
+### Fixed
+
+- **package_json**: index dependencies when opening brace starts on its own line ([e40c3f1](https://github.com/rvben/upd/commit/e40c3f1bf736ef3ea0c565047d886ff7543d37c9))
+- **update**: check mode exits 1 when only configured pins differ ([33a69f5](https://github.com/rvben/upd/commit/33a69f5a16ee03247a13c41bfabe1935d09bfa64))
+- **updater**: classify configured pins as pins, not updates ([571a96b](https://github.com/rvben/upd/commit/571a96b9de72fe283c5114e594da72687a67efab))
+
+## [0.0.27](https://github.com/rvben/upd/compare/v0.0.26...v0.0.27) - 2026-04-15
+
+### Fixed
+
+- **align**: use pep440_rs for Python stable-version check ([7f132b3](https://github.com/rvben/upd/commit/7f132b351cdd9225a31df96d2a421c8c42926987))
+- **version**: use PEP 440 release segments for precision matching ([fff041d](https://github.com/rvben/upd/commit/fff041d2d2e9508f117012a6bfc857ee57e5cd20))
+
 ## [0.0.26](https://github.com/rvben/upd/compare/v0.0.25...v0.0.26) - 2026-04-15
 
 ### Fixed

{upd_cli-0.0.26 → upd_cli-0.0.28}/Cargo.lock

@@ -1780,7 +1780,7 @@ checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
 
 [[package]]
 name = "upd"
-version = "0.0.26"
+version = "0.0.28"
 dependencies = [
  "anyhow",
  "async-trait",

{upd_cli-0.0.26 → upd_cli-0.0.28}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "upd"
-version = "0.0.26"
+version = "0.0.28"
 edition = "2024"
 rust-version = "1.91.1"
 description = "A fast dependency updater for Python, Node.js, Rust, Go, Ruby, Terraform, GitHub Actions, pre-commit, and Mise projects"

{upd_cli-0.0.26 → upd_cli-0.0.28}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: upd-cli
-Version: 0.0.26
+Version: 0.0.28
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
@@ -164,7 +164,7 @@ upd align --check  # Exit 1 if misalignments found (for CI)
 
 # Check for security vulnerabilities
 upd audit
-upd audit --check  # Exit 1 if vulnerabilities found (for CI)
+upd audit --check  # Exit 1 if vulnerabilities are found or the audit can't complete (for CI)
 ```
 
 ## Supported Files
@@ -305,7 +305,7 @@ Check your dependencies for known security vulnerabilities using the [OSV (Open
 ```bash
 upd audit              # Scan all dependency files
 upd audit --dry-run    # Same as audit (read-only operation)
-upd audit --check      # Exit 1 if vulnerabilities found (for CI)
+upd audit --check      # Exit 1 if vulnerabilities are found or the audit can't complete
 upd audit --lang python # Audit only Python packages
 upd audit ./services   # Audit specific directory
 ```

{upd_cli-0.0.26 → upd_cli-0.0.28}/README.md

@@ -141,7 +141,7 @@ upd align --check  # Exit 1 if misalignments found (for CI)
 
 # Check for security vulnerabilities
 upd audit
-upd audit --check  # Exit 1 if vulnerabilities found (for CI)
+upd audit --check  # Exit 1 if vulnerabilities are found or the audit can't complete (for CI)
 ```
 
 ## Supported Files
@@ -282,7 +282,7 @@ Check your dependencies for known security vulnerabilities using the [OSV (Open
 ```bash
 upd audit              # Scan all dependency files
 upd audit --dry-run    # Same as audit (read-only operation)
-upd audit --check      # Exit 1 if vulnerabilities found (for CI)
+upd audit --check      # Exit 1 if vulnerabilities are found or the audit can't complete
 upd audit --lang python # Audit only Python packages
 upd audit ./services   # Audit specific directory
 ```

{upd_cli-0.0.26 → upd_cli-0.0.28}/src/align.rs

@@ -8,6 +8,7 @@ use crate::updater::{
     Lang, MiseUpdater, PackageJsonUpdater, ParsedDependency, PreCommitUpdater, PyProjectUpdater,
     RequirementsUpdater, TerraformUpdater, Updater,
 };
+use crate::version::is_stable_pep440;
 use anyhow::Result;
 use std::collections::HashMap;
 use std::path::{Path, PathBuf};
@@ -170,16 +171,7 @@ fn find_highest_version(occurrences: &[PackageOccurrence], lang: Lang) -> Option
 /// Check if a version is stable (not a pre-release)
 fn is_stable_version(version: &str, lang: Lang) -> bool {
     match lang {
-        Lang::Python => {
-            // Python pre-release indicators: a, b, rc, alpha, beta, dev
-            let v = version.to_lowercase();
-            !v.contains("a")
-                && !v.contains("b")
-                && !v.contains("rc")
-                && !v.contains("alpha")
-                && !v.contains("beta")
-                && !v.contains("dev")
-        }
+        Lang::Python => is_stable_pep440(version),
         Lang::Node | Lang::Rust | Lang::Go | Lang::DotNet => {
             // Semver pre-release indicator: hyphen followed by identifier
             !version.contains('-')

{upd_cli-0.0.26 → upd_cli-0.0.28}/src/config.rs

@@ -482,7 +482,7 @@ parent-pkg = "1.0.0"
 
         // Verify results:
         // - requests should be ignored
-        // - flask should be pinned to 2.0.0 (appears in both pinned and updated)
+        // - flask should be pinned to 2.0.0
         // - django should be updated to 4.2.0
 
         assert_eq!(result.ignored.len(), 1);
@@ -492,8 +492,7 @@ parent-pkg = "1.0.0"
         assert_eq!(result.pinned[0].0, "flask");
         assert_eq!(result.pinned[0].2, "2.0.0"); // New version is pinned version
 
-        // Both flask (pinned) and django (registry) are in updated
-        assert_eq!(result.updated.len(), 2);
+        assert_eq!(result.updated.len(), 1);
 
         // Verify contents by checking all updated packages
         let updated_names: Vec<&str> = result
@@ -501,8 +500,8 @@ parent-pkg = "1.0.0"
             .iter()
             .map(|(n, _, _, _)| n.as_str())
             .collect();
-        assert!(updated_names.contains(&"flask"));
         assert!(updated_names.contains(&"django"));
+        assert!(!updated_names.contains(&"flask"));
     }
 
     /// Integration test: Config with all supported file types
@@ -527,7 +526,7 @@ parent-pkg = "1.0.0"
         });
 
         // Test Requirements
-        // RequirementsUpdater: pinned packages appear in BOTH pinned AND updated
+        // RequirementsUpdater: pinned packages appear only in pinned
         {
             let mut file = NamedTempFile::new().unwrap();
             writeln!(file, "ignored-pkg>=1.0.0").unwrap();
@@ -549,8 +548,7 @@ parent-pkg = "1.0.0"
 
             assert_eq!(result.ignored.len(), 1);
             assert_eq!(result.pinned.len(), 1);
-            // RequirementsUpdater counts pinned packages in both updated and pinned
-            assert_eq!(result.updated.len(), 2); // pinned-pkg + other-pkg
+            assert_eq!(result.updated.len(), 1); // other-pkg only
         }
 
         // Test package.json