@backstage/cli-common - npm Package Compare versions

Comparing version 0.2.0-next.2 to 0.2.0

CHANGELOG.md

 # @backstage/cli-common
 
+## 0.2.0
+
+### Minor Changes
+
+- 56bd494: Added `targetPaths` and `findOwnPaths` as replacements for `findPaths`, with a cleaner separation between target project paths and package-relative paths.
+
+  To migrate existing `findPaths` usage:
+
+  ```ts
+  // Before
+  import { findPaths } from '@backstage/cli-common';
+  const paths = findPaths(__dirname);
+
+  // After — for target project paths (cwd-based):
+  import { targetPaths } from '@backstage/cli-common';
+  // paths.targetDir    → targetPaths.dir
+  // paths.targetRoot   → targetPaths.rootDir
+  // paths.resolveTarget('src')      → targetPaths.resolve('src')
+  // paths.resolveTargetRoot('yarn.lock') → targetPaths.resolveRoot('yarn.lock')
+
+  // After — for package-relative paths:
+  import { findOwnPaths } from '@backstage/cli-common';
+  const own = findOwnPaths(__dirname);
+  // paths.ownDir       → own.dir
+  // paths.ownRoot      → own.rootDir
+  // paths.resolveOwn('config/jest.js')    → own.resolve('config/jest.js')
+  // paths.resolveOwnRoot('tsconfig.json') → own.resolveRoot('tsconfig.json')
+  ```
+
+### Patch Changes
+
+- e44b6a9: The `findOwnRootDir` utility now searches for the monorepo root by traversing up the directory tree looking for a `package.json` with `workspaces`, instead of assuming a fixed `../..` relative path. If no workspaces root is found during this traversal, `findOwnRootDir` now throws to enforce stricter validation of the repository layout.
+- 9361965: Fixed `runCheck` to ignore stdio of the spawned process, preventing unwanted output from leaking to the terminal.
+
 ## 0.2.0-next.2
@@ -4,0 +38,0 @@

package.json

 {
   "name": "@backstage/cli-common",
-  "version": "0.2.0-next.2",
+  "version": "0.2.0",
   "description": "Common functionality used by cli, backend, and create-app",
@@ -59,3 +59,3 @@ "backstage": {
   "dependencies": {
-    "@backstage/errors": "1.2.7",
+    "@backstage/errors": "^1.2.7",
     "cross-spawn": "^7.0.3",
@@ -66,3 +66,3 @@ "global-agent": "^3.0.0",
   "devDependencies": {
-    "@backstage/cli": "0.36.0-next.2",
+    "@backstage/cli": "^0.36.0",
     "@types/cross-spawn": "^6.0.2",
@@ -69,0 +69,0 @@ "@types/node": "^22.13.14"

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Improved metrics

Total package byte prevSize

62919

2.55%

Dependency changes

• Updated

  @backstage/errors@^1.2.7