@hashicorp/js-releases - npm Package Compare versions

Comparing version 1.6.1 to 1.7.0

CHANGELOG.md

@@ -0,1 +1,34 @@
+# 1.7.0 (2023-09-07)
+
+ENHANCEMENT:
+
+* Add PR test for copyright headers by @radeksimko in https://github.com/hashicorp/js-releases/pull/127
+* Migrate to plain npm publish by @jpogran in https://github.com/hashicorp/js-releases/pull/136
+
+BUG FIXES:
+
+* Update checksum test by @dbanck in https://github.com/hashicorp/js-releases/pull/111
+* Fix outdated SHA in test by @radeksimko in https://github.com/hashicorp/js-releases/pull/126
+
+INTERNAL:
+
+* Add CODEOWNERS file by @radeksimko in https://github.com/hashicorp/js-releases/pull/102
+* Pin external GitHub Actions to hashes by @dbanck in https://github.com/hashicorp/js-releases/pull/99
+* Add MPL 2.0 LICENSE by @hashicorp-copywrite in https://github.com/hashicorp/js-releases/pull/84
+* Update openpgp and remove pin to specific version by @dbanck in https://github.com/hashicorp/js-releases/pull/91
+* Update minimatch to 3.1.2 by @dbanck in https://github.com/hashicorp/js-releases/pull/92
+* Add Copyright and License Headers by @hashicorp-copywrite in https://github.com/hashicorp/js-releases/pull/109
+* Bump @types/node from 14.18.22 to 14.18.58 by @dependabot in https://github.com/hashicorp/js-releases/pull/65
+* Bump @types/semver from 7.3.10 to 7.5.1 by @dependabot in https://github.com/hashicorp/js-releases/pull/67
+* Bump ts-jest from 28.0.7 to 28.0.8 by @dependabot in https://github.com/hashicorp/js-releases/pull/68
+* Bump @types/jest from 28.1.6 to 28.1.8 by @dependabot in https://github.com/hashicorp/js-releases/pull/70
+* Bump semver from 7.3.7 to 7.5.4 by @dependabot in https://github.com/hashicorp/js-releases/pull/82
+* Bump typescript from 4.7.4 to 4.9.5 by @dependabot in https://github.com/hashicorp/js-releases/pull/81
+* Bump prettier from 2.7.1 to 2.8.8 by @dependabot in https://github.com/hashicorp/js-releases/pull/97
+* Bump json5 from 2.2.1 to 2.2.3 by @dependabot in https://github.com/hashicorp/js-releases/pull/103
+* Bump actions/checkout from 3.2.0 to 4.0.0 by @dependabot in https://github.com/hashicorp/js-releases/pull/105
+* Bump actions/setup-node from 3.5.1 to 3.8.1 by @dependabot in https://github.com/hashicorp/js-releases/pull/104
+* Bump openpgp from 5.5.0 to 5.10.1 by @dependabot in https://github.com/hashicorp/js-releases/pull/113
+* Bump hashicorp/setup-copywrite from 1.0.0 to 1.1.2 by @dependabot in https://github.com/hashicorp/js-releases/pull/132
+
 # 1.6.1 (2022-07-22)
@@ -2,0 +35,0 @@

jest.config.js

@@ -0,1 +1,6 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
+
 /** @type {import('ts-jest/dist/types').InitialOptionsTsJest} */
@@ -2,0 +7,0 @@ module.exports = {

out/index.d.ts

@@ -0,1 +1,5 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
 interface Build {
@@ -2,0 +6,0 @@ url: string;

out/index.js

 "use strict";
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
@@ -3,0 +7,0 @@ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }

out/index.test.d.ts

@@ -0,1 +1,5 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
 export {};

out/index.test.js

 "use strict";
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
@@ -46,3 +50,3 @@ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     it('should download the correct sha256 sum', () => __awaiter(void 0, void 0, void 0, function* () {
-        const expectedSum = '8629ccc47ee8d4dfe6d23efb93b293948a088a936180d07d3f2ed118f6dd64a5';
+        const expectedSum = '516fd7722c2a0d2ca774110a26751879e3dfc0146c5ce9d5ed6d7b2ac54a7cbd';
         const remoteSum = yield release.downloadSha256Sum(release.builds[0].filename);
@@ -49,0 +53,0 @@ assert.strictEqual(remoteSum, expectedSum);

out/utils.d.ts

@@ -0,2 +1,6 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
 import { AxiosRequestConfig } from 'axios';
 export declare function request<T = any>(url: string, options?: AxiosRequestConfig): Promise<T>;

out/utils.js

 "use strict";
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
@@ -3,0 +7,0 @@ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }

package.json

 {
   "name": "@hashicorp/js-releases",
-  "version": "1.6.1",
+  "version": "1.7.0",
   "description": "Download packages from releases.hashicorp.com",
@@ -29,3 +29,3 @@ "main": "./out/index.js",
     "https-proxy-agent": "^5.0.1",
-    "openpgp": "5.1.0",
+    "openpgp": "^5.5.0",
     "semver": "^7.3.5",
@@ -32,0 +32,0 @@ "yauzl": "^2.10.0"

src/index.test.ts

@@ -0,1 +1,6 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
+
 import * as assert from 'assert';
@@ -41,3 +46,3 @@ import * as path from 'path';
   it('should download the correct sha256 sum', async () => {
-    const expectedSum = '8629ccc47ee8d4dfe6d23efb93b293948a088a936180d07d3f2ed118f6dd64a5';
+    const expectedSum = '516fd7722c2a0d2ca774110a26751879e3dfc0146c5ce9d5ed6d7b2ac54a7cbd';
 
@@ -44,0 +49,0 @@ const remoteSum = await release.downloadSha256Sum(release.builds[0].filename);

src/index.ts

@@ -0,1 +1,6 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
+
 import * as crypto from 'crypto';
@@ -2,0 +7,0 @@ import * as fs from 'fs';

src/utils.ts

@@ -0,1 +1,6 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
+
 import axiosBase, { AxiosRequestConfig } from 'axios';
@@ -2,0 +7,0 @@ const HttpsProxyAgent = require('https-proxy-agent');

tsconfig.json

@@ -8,3 +8,4 @@ {
     "sourceMap": true,
-    "declaration": true
+    "declaration": true,
+    "skipLibCheck": true
   },
@@ -11,0 +12,0 @@ "include": ["src"],

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

88185

increased by31.07%

Number of package files

27

increased by8%

Lines of code

987

increased by4.33%

Dependency changes

• + Addedopenpgp@5.11.2(transitive)

• - Removedopenpgp@5.1.0(transitive)

• Updatedopenpgp@^5.5.0