Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

@lerna/publish

Package Overview
Dependencies
Maintainers
2
Versions
147
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@lerna/publish - npm Package Compare versions

Comparing version 5.2.0 to 5.3.0

49

index.js

@@ -61,2 +61,5 @@ "use strict";

// For publish we want to enable topological sorting by default, but allow users to override with --no-sort
this.toposort = this.options.sort !== false;
// Defaults are necessary here because yargs defaults

@@ -106,2 +109,9 @@ // override durable options provided by a config file

if (this.options.graphType === "dependencies") {
this.logger.warn(
"graph-type",
"--graph-type=dependencies is deprecated and will be removed in lerna v6. If you have a use-case you feel requires it please open an issue to discuss: https://github.com/lerna/lerna/issues/new/choose"
);
}
if (this.options.skipNpm) {

@@ -631,11 +641,17 @@ // TODO: remove in next major release

topoMapPackages(mapper) {
// we don't respect --no-sort here, sorry
return runTopologically(this.packagesToPublish, mapper, {
concurrency: this.concurrency,
rejectCycles: this.options.rejectCycles,
// By default, do not include devDependencies in the graph because it would
// increase the chance of dependency cycles, causing less-than-ideal order.
// If the user has opted-in to --graph-type=all (or "graphType": "all" in lerna.json),
// devDependencies _will_ be included in the graph construction.
graphType: this.options.graphType === "all" ? "allDependencies" : "dependencies",
/**
* Previously `publish` had unique default behavior for graph creation vs other commands: it would only consider dependencies when finding
* edges by default (i.e. relationships between packages specified via devDependencies would be ignored). It was documented to be the case
* in order to try and reduce the chance of dependency cycles.
*
* We are removing this behavior altogether in v6 because we do not want to have different ways of constructing the graph,
* only different ways of utilizing it (e.g. --no-sort vs topological sort).
*
* Therefore until we remove graphType altogether in v6, we provide a way for users to opt into the old default behavior
* by setting the `graphType` option to `dependencies`.
*/
graphType: this.options.graphType === "dependencies" ? "dependencies" : "allDependencies",
});

@@ -682,3 +698,8 @@ }

chain = chain.then(() => this.topoMapPackages(mapper));
chain = chain.then(() => {
if (this.toposort) {
return this.topoMapPackages(mapper);
}
return pMap(this.packagesToPublish, mapper, { concurrency: this.concurrency });
});

@@ -736,3 +757,8 @@ chain = chain.then(() => removeTempLicenses(this.packagesToBeLicensed));

chain = chain.then(() => this.topoMapPackages(mapper));
chain = chain.then(() => {
if (this.toposort) {
return this.topoMapPackages(mapper);
}
return pMap(this.packagesToPublish, mapper, { concurrency: this.concurrency });
});

@@ -780,3 +806,8 @@ if (!this.hasRootedLeaf) {

chain = chain.then(() => this.topoMapPackages(mapper));
chain = chain.then(() => {
if (this.toposort) {
return this.topoMapPackages(mapper);
}
return pMap(this.packagesToPublish, mapper, { concurrency: this.concurrency });
});

@@ -783,0 +814,0 @@ return chain.finally(() => tracker.finish());

48

package.json
{
"name": "@lerna/publish",
"version": "5.2.0",
"version": "5.3.0",
"description": "Publish packages in the current project",

@@ -38,25 +38,25 @@ "keywords": [

"dependencies": {
"@lerna/check-working-tree": "5.2.0",
"@lerna/child-process": "5.2.0",
"@lerna/collect-updates": "5.2.0",
"@lerna/command": "5.2.0",
"@lerna/describe-ref": "5.2.0",
"@lerna/log-packed": "5.2.0",
"@lerna/npm-conf": "5.2.0",
"@lerna/npm-dist-tag": "5.2.0",
"@lerna/npm-publish": "5.2.0",
"@lerna/otplease": "5.2.0",
"@lerna/output": "5.2.0",
"@lerna/pack-directory": "5.2.0",
"@lerna/prerelease-id-from-version": "5.2.0",
"@lerna/prompt": "5.2.0",
"@lerna/pulse-till-done": "5.2.0",
"@lerna/run-lifecycle": "5.2.0",
"@lerna/run-topologically": "5.2.0",
"@lerna/validation-error": "5.2.0",
"@lerna/version": "5.2.0",
"@lerna/check-working-tree": "5.3.0",
"@lerna/child-process": "5.3.0",
"@lerna/collect-updates": "5.3.0",
"@lerna/command": "5.3.0",
"@lerna/describe-ref": "5.3.0",
"@lerna/log-packed": "5.3.0",
"@lerna/npm-conf": "5.3.0",
"@lerna/npm-dist-tag": "5.3.0",
"@lerna/npm-publish": "5.3.0",
"@lerna/otplease": "5.3.0",
"@lerna/output": "5.3.0",
"@lerna/pack-directory": "5.3.0",
"@lerna/prerelease-id-from-version": "5.3.0",
"@lerna/prompt": "5.3.0",
"@lerna/pulse-till-done": "5.3.0",
"@lerna/run-lifecycle": "5.3.0",
"@lerna/run-topologically": "5.3.0",
"@lerna/validation-error": "5.3.0",
"@lerna/version": "5.3.0",
"fs-extra": "^9.1.0",
"libnpmaccess": "^4.0.1",
"npm-package-arg": "^8.1.0",
"npm-registry-fetch": "^9.0.0",
"libnpmaccess": "^6.0.3",
"npm-package-arg": "8.1.1",
"npm-registry-fetch": "^13.3.0",
"npmlog": "^6.0.2",

@@ -68,3 +68,3 @@ "p-map": "^4.0.0",

},
"gitHead": "4f43ba15b0024f87ec04c68522c78bcd1edbc185"
"gitHead": "535afac9b27892e8e5354aae950338a7187356f2"
}
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc