@vercel/build-utils - npm Package Compare versions

Comparing version 7.5.1 to 7.6.0

CHANGELOG.md

 # @vercel/build-utils
 
+## 7.6.0
+
+### Minor Changes
+
+- Revert "Default ruby to only currently supported version (3.2.0)" ([#11135](https://github.com/vercel/vercel/pull/11135))
+
+- Mark `flags` as deprecated and replace them with `variants` ([#11098](https://github.com/vercel/vercel/pull/11098))
+
+- [build-utils] change default package manager when no lockfile detected from `yarn` to `npm` (gated behind feature flag) ([#11131](https://github.com/vercel/vercel/pull/11131))
+
+### Patch Changes
+
+- Update internal type for variants ([#11111](https://github.com/vercel/vercel/pull/11111))
+
 ## 7.5.1
@@ -4,0 +18,0 @@

dist/fs/run-user-scripts.js

@@ -223,3 +223,3 @@ "use strict";
   let lockfileVersion;
-  let cliType = "yarn";
+  let cliType;
   const [hasYarnLock, packageLockJson, pnpmLockYaml, bunLockBin] = await Promise.all([
@@ -250,2 +250,8 @@ Boolean(yarnLockPath),
     lockfileVersion = 0;
+  } else {
+    if (process.env.VERCEL_ENABLE_NPM_DEFAULT === "1") {
+      cliType = "npm";
+    } else {
+      cliType = "yarn";
+    }
   }
@@ -307,2 +313,9 @@ const packageJsonPath = pkgJsonPath || void 0;
     );
+    if (!packageJsonPath) {
+      (0, import_debug.default)(
+        `Skipping dependency installation because no package.json was found for ${destPath}`
+      );
+      runNpmInstallSema.release();
+      return false;
+    }
     if (meta && packageJsonPath && args.length === 0) {
@@ -309,0 +322,0 @@ if (!isSet(meta.runNpmInstallSet)) {

dist/types.d.ts

@@ -388,2 +388,5 @@ /// <reference types="node" />
 }
+/**
+ * @deprecated Replaced by Variants. Remove once fully replaced.
+ */
 export interface Flag {
@@ -416,3 +419,5 @@ key: string;
     };
+    /** @deprecated Replaced by Variants. Remove once fully replaced. */
     flags?: Flag[];
+    variants?: Record<string, VariantDefinition>;
 }
@@ -429,2 +434,19 @@ export type BuildResultV2 = BuildResultV2Typical | BuildResultBuildOutput;
 export type StartDevServer = (options: StartDevServerOptions) => Promise<StartDevServerResult>;
+/**
+ * TODO: The following types will eventually be exported by a more
+ *       relevant package.
+ */
+type VariantJSONArray = ReadonlyArray<VariantJSONValue>;
+type VariantJSONValue = string | boolean | number | null | VariantJSONArray | {
+    [key: string]: VariantJSONValue;
+};
+type VariantOption = {
+    value: VariantJSONValue;
+    label?: string;
+};
+export interface VariantDefinition {
+    options?: VariantOption[];
+    origin?: string;
+    description?: string;
+}
 export {};

package.json

 {
   "name": "@vercel/build-utils",
-  "version": "7.5.1",
+  "version": "7.6.0",
   "license": "Apache-2.0",
@@ -5,0 +5,0 @@ "main": "./dist/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1202796

increased by0.16%

Lines of code

27119

increased by0.18%

Worsened metrics

Number of low supply chain risk alerts

23

increased by4.55%

No dependency changes