@changesets/assemble-release-plan - npm Package Compare versions

Comparing version 5.2.3 to 5.2.4

CHANGELOG.md

 # @changesets/assemble-release-plan
 
+## 5.2.4
+
+### Patch Changes
+
+- [#1176](https://github.com/changesets/changesets/pull/1176) [`41988ce`](https://github.com/changesets/changesets/commit/41988ceb8c1cedd3857c939448bf3965494ff0a4) Thanks [@joshwooding](https://github.com/joshwooding)! - Bump [`semver`](https://github.com/npm/node-semver) dependency to v7.5.3
+
+- Updated dependencies [[`41988ce`](https://github.com/changesets/changesets/commit/41988ceb8c1cedd3857c939448bf3965494ff0a4)]:
+  - @changesets/get-dependents-graph@1.3.6
+
 ## 5.2.3
@@ -4,0 +13,0 @@

dist/assemble-release-plan.cjs.dev.js

@@ -5,4 +5,7 @@ 'use strict';
 
-var semver = require('semver');
+var semverSatisfies = require('semver/functions/satisfies');
+var semverInc = require('semver/functions/inc');
 var errors = require('@changesets/errors');
+var semverGt = require('semver/functions/gt');
+var semverParse = require('semver/functions/parse');
 var getDependentsGraph = require('@changesets/get-dependents-graph');
@@ -12,3 +15,6 @@
 
-var semver__default = /*#__PURE__*/_interopDefault(semver);
+var semverSatisfies__default = /*#__PURE__*/_interopDefault(semverSatisfies);
+var semverInc__default = /*#__PURE__*/_interopDefault(semverInc);
+var semverGt__default = /*#__PURE__*/_interopDefault(semverGt);
+var semverParse__default = /*#__PURE__*/_interopDefault(semverParse);
 
@@ -69,3 +75,3 @@ function _defineProperty(obj, key, value) {
 
-  let version = semver.inc(release.oldVersion, release.type);
+  let version = semverInc__default['default'](release.oldVersion, release.type);
 
@@ -148,3 +154,3 @@ if (preInfo !== undefined && preInfo.state.mode !== "exit") {
             type = "major";
-          } else if ((!releases.has(dependent) || releases.get(dependent).type === "none") && (config.___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH.updateInternalDependents === "always" || !semver__default['default'].satisfies(incrementVersion(nextRelease, preInfo), versionRange))) {
+          } else if ((!releases.has(dependent) || releases.get(dependent).type === "none") && (config.___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH.updateInternalDependents === "always" || !semverSatisfies__default['default'](incrementVersion(nextRelease, preInfo), versionRange))) {
             switch (depType) {
@@ -258,3 +264,3 @@ case "dependencies":
   // 2. If onlyUpdatePeerDependentsWhenOutOfRange set to false, bump major regardless whether or not the version is leaving the range.
-  !onlyUpdatePeerDependentsWhenOutOfRange || !semver__default['default'].satisfies(incrementVersion(nextRelease, preInfo), versionRange)) && ( // bump major only if the dependent doesn't already has a major release.
+  !onlyUpdatePeerDependentsWhenOutOfRange || !semverSatisfies__default['default'](incrementVersion(nextRelease, preInfo), versionRange)) && ( // bump major only if the dependent doesn't already has a major release.
   !releases.has(dependent) || releases.has(dependent) && releases.get(dependent).type !== "major");
@@ -345,3 +351,3 @@ }
 
-    if (highestVersion === undefined || semver__default['default'].gt(pkg.packageJson.version, highestVersion)) {
+    if (highestVersion === undefined || semverGt__default['default'](pkg.packageJson.version, highestVersion)) {
       highestVersion = pkg.packageJson.version;
@@ -438,3 +444,3 @@ }
 function getPreVersion(version) {
-  let parsed = semver.parse(version);
+  let parsed = semverParse__default['default'](version);
   let preVersion = parsed.prerelease[1] === undefined ? -1 : parsed.prerelease[1];
@@ -441,0 +447,0 @@

dist/assemble-release-plan.cjs.prod.js

@@ -7,3 +7,3 @@ "use strict";
 
-var semver = require("semver"), errors = require("@changesets/errors"), getDependentsGraph = require("@changesets/get-dependents-graph");
+var semverSatisfies = require("semver/functions/satisfies"), semverInc = require("semver/functions/inc"), errors = require("@changesets/errors"), semverGt = require("semver/functions/gt"), semverParse = require("semver/functions/parse"), getDependentsGraph = require("@changesets/get-dependents-graph");
 
@@ -16,3 +16,3 @@ function _interopDefault(e) {
 
-var semver__default = _interopDefault(semver);
+var semverSatisfies__default = _interopDefault(semverSatisfies), semverInc__default = _interopDefault(semverInc), semverGt__default = _interopDefault(semverGt), semverParse__default = _interopDefault(semverParse);
 
@@ -53,3 +53,3 @@ function _defineProperty(obj, key, value) {
   if ("none" === release.type) return release.oldVersion;
-  let version = semver.inc(release.oldVersion, release.type);
+  let version = semverInc__default.default(release.oldVersion, release.type);
   if (void 0 !== preInfo && "exit" !== preInfo.state.mode) {
@@ -84,3 +84,3 @@ let preVersion = preInfo.preVersions.get(release.name);
           onlyUpdatePeerDependentsWhenOutOfRange: config.___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH.onlyUpdatePeerDependentsWhenOutOfRange
-        })) type = "major"; else if (!(releases.has(dependent) && "none" !== releases.get(dependent).type || "always" !== config.___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH.updateInternalDependents && semver__default.default.satisfies(incrementVersion(nextRelease, preInfo), versionRange))) switch (depType) {
+        })) type = "major"; else if (!(releases.has(dependent) && "none" !== releases.get(dependent).type || "always" !== config.___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH.updateInternalDependents && semverSatisfies__default.default(incrementVersion(nextRelease, preInfo), versionRange))) switch (depType) {
          case "dependencies":
@@ -137,3 +137,3 @@ case "optionalDependencies":
 function shouldBumpMajor({dependent: dependent, depType: depType, versionRange: versionRange, releases: releases, nextRelease: nextRelease, preInfo: preInfo, onlyUpdatePeerDependentsWhenOutOfRange: onlyUpdatePeerDependentsWhenOutOfRange}) {
-  return "peerDependencies" === depType && "none" !== nextRelease.type && "patch" !== nextRelease.type && (!onlyUpdatePeerDependentsWhenOutOfRange || !semver__default.default.satisfies(incrementVersion(nextRelease, preInfo), versionRange)) && (!releases.has(dependent) || releases.has(dependent) && "major" !== releases.get(dependent).type);
+  return "peerDependencies" === depType && "none" !== nextRelease.type && "patch" !== nextRelease.type && (!onlyUpdatePeerDependentsWhenOutOfRange || !semverSatisfies__default.default(incrementVersion(nextRelease, preInfo), versionRange)) && (!releases.has(dependent) || releases.has(dependent) && "major" !== releases.get(dependent).type);
 }
@@ -181,3 +181,3 @@
     new Error("fatal: could not resolve linked packages");
-    (void 0 === highestVersion || semver__default.default.gt(pkg.packageJson.version, highestVersion)) && (highestVersion = pkg.packageJson.version);
+    (void 0 === highestVersion || semverGt__default.default(pkg.packageJson.version, highestVersion)) && (highestVersion = pkg.packageJson.version);
   }
@@ -223,3 +223,3 @@ return highestVersion;
 function getPreVersion(version) {
-  let parsed = semver.parse(version), preVersion = void 0 === parsed.prerelease[1] ? -1 : parsed.prerelease[1];
+  let parsed = semverParse__default.default(version), preVersion = void 0 === parsed.prerelease[1] ? -1 : parsed.prerelease[1];
   if ("number" != typeof preVersion) throw new errors.InternalError("preVersion is not a number");
@@ -226,0 +226,0 @@ return preVersion++, preVersion;

dist/assemble-release-plan.esm.js

@@ -1,3 +0,6 @@
-import semver, { inc, parse } from 'semver';
+import semverSatisfies from 'semver/functions/satisfies';
+import semverInc from 'semver/functions/inc';
 import { InternalError } from '@changesets/errors';
+import semverGt from 'semver/functions/gt';
+import semverParse from 'semver/functions/parse';
 import { getDependentsGraph } from '@changesets/get-dependents-graph';
@@ -59,3 +62,3 @@
 
-  let version = inc(release.oldVersion, release.type);
+  let version = semverInc(release.oldVersion, release.type);
 
@@ -138,3 +141,3 @@ if (preInfo !== undefined && preInfo.state.mode !== "exit") {
             type = "major";
-          } else if ((!releases.has(dependent) || releases.get(dependent).type === "none") && (config.___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH.updateInternalDependents === "always" || !semver.satisfies(incrementVersion(nextRelease, preInfo), versionRange))) {
+          } else if ((!releases.has(dependent) || releases.get(dependent).type === "none") && (config.___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH.updateInternalDependents === "always" || !semverSatisfies(incrementVersion(nextRelease, preInfo), versionRange))) {
             switch (depType) {
@@ -248,3 +251,3 @@ case "dependencies":
   // 2. If onlyUpdatePeerDependentsWhenOutOfRange set to false, bump major regardless whether or not the version is leaving the range.
-  !onlyUpdatePeerDependentsWhenOutOfRange || !semver.satisfies(incrementVersion(nextRelease, preInfo), versionRange)) && ( // bump major only if the dependent doesn't already has a major release.
+  !onlyUpdatePeerDependentsWhenOutOfRange || !semverSatisfies(incrementVersion(nextRelease, preInfo), versionRange)) && ( // bump major only if the dependent doesn't already has a major release.
   !releases.has(dependent) || releases.has(dependent) && releases.get(dependent).type !== "major");
@@ -335,3 +338,3 @@ }
 
-    if (highestVersion === undefined || semver.gt(pkg.packageJson.version, highestVersion)) {
+    if (highestVersion === undefined || semverGt(pkg.packageJson.version, highestVersion)) {
       highestVersion = pkg.packageJson.version;
@@ -428,3 +431,3 @@ }
 function getPreVersion(version) {
-  let parsed = parse(version);
+  let parsed = semverParse(version);
   let preVersion = parsed.prerelease[1] === undefined ? -1 : parsed.prerelease[1];
@@ -431,0 +434,0 @@

package.json

 {
   "name": "@changesets/assemble-release-plan",
-  "version": "5.2.3",
+  "version": "5.2.4",
   "description": "Reads changesets and adds information on dependents that need bumping",
@@ -12,6 +12,6 @@ "main": "dist/assemble-release-plan.cjs.js",
     "@changesets/errors": "^0.1.4",
-    "@changesets/get-dependents-graph": "^1.3.5",
+    "@changesets/get-dependents-graph": "^1.3.6",
     "@changesets/types": "^5.2.1",
     "@manypkg/get-packages": "^1.1.3",
-    "semver": "^5.4.1"
+    "semver": "^7.5.3"
   },
@@ -18,0 +18,0 @@ "devDependencies": {

src/determine-dependents.ts

@@ -1,2 +0,2 @@
-import semver from "semver";
+import semverSatisfies from "semver/functions/satisfies";
 import {
@@ -89,3 +89,3 @@ DependencyType,
                 .updateInternalDependents === "always" ||
-                !semver.satisfies(
+                !semverSatisfies(
                   incrementVersion(nextRelease, preInfo),
@@ -235,6 +235,3 @@ versionRange
     (!onlyUpdatePeerDependentsWhenOutOfRange ||
-      !semver.satisfies(
-        incrementVersion(nextRelease, preInfo),
-        versionRange
-      )) &&
+      !semverSatisfies(incrementVersion(nextRelease, preInfo), versionRange)) &&
     // bump major only if the dependent doesn't already has a major release.
@@ -241,0 +238,0 @@ (!releases.has(dependent) ||

src/increment.ts

@@ -1,2 +0,2 @@
-import * as semver from "semver";
+import semverInc from "semver/functions/inc";
 import { InternalRelease, PreInfo } from "./types";
@@ -13,3 +13,3 @@ import { InternalError } from "@changesets/errors";
 
-  let version = semver.inc(release.oldVersion, release.type)!;
+  let version = semverInc(release.oldVersion, release.type)!;
   if (preInfo !== undefined && preInfo.state.mode !== "exit") {
@@ -16,0 +16,0 @@ let preVersion = preInfo.preVersions.get(release.name);

src/index.ts

@@ -13,3 +13,3 @@ import {
 import { incrementVersion } from "./increment";
-import * as semver from "semver";
+import semverParse from "semver/functions/parse";
 import { InternalError } from "@changesets/errors";
@@ -26,3 +26,3 @@ import { Packages, Package } from "@manypkg/get-packages";
 function getPreVersion(version: string) {
-  let parsed = semver.parse(version)!;
+  let parsed = semverParse(version)!;
   let preVersion =
@@ -29,0 +29,0 @@ parsed.prerelease[1] === undefined ? -1 : parsed.prerelease[1];

src/utils.ts

 import { PackageGroup, VersionType } from "@changesets/types";
 import { Package } from "@manypkg/get-packages";
-import semver from "semver";
+import semverGt from "semver/functions/gt";
 import { InternalRelease } from "./types";
@@ -53,3 +53,3 @@
       highestVersion === undefined ||
-      semver.gt(pkg.packageJson.version, highestVersion)
+      semverGt(pkg.packageJson.version, highestVersion)
     ) {
@@ -56,0 +56,0 @@ highestVersion = pkg.packageJson.version;

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

170872

increased by0.88%

Lines of code

3759

increased by0.19%

Number of low supply chain risk alerts

2

decreased by-33.33%

Dependency changes

• - Removedsemver@5.7.2(transitive)

• Updated@changesets/get-dependents-graph@^1.3.6

• Updatedsemver@^7.5.3