CHANGELOG.md

10.1.1 (2024-11-29)

Fixes & improvements

• fix: up deps to fix cross-spawn vuln (faafdeb)

10.1.0 (2024-10-26)

Features

• feat: use "exclude" and "ignore" CLI options when running yarn npm audit command (015a4b9)
• feat: support multi-value CLI options (2664c66)

10.0.9 (2024-08-21)

Fixes & improvements

• fix(deps): update dependency commander to v12 (3fe23a1)

10.0.8 (2024-08-06)

Fixes & improvements

• fix: apply object key sort to npm view deps output (#336) (106229b)
• fix: set shell true to handle sec fix for windows (#335) (6a29f1c)

10.0.7 (2023-11-23)

Fixes & improvements

• fix(deps): update dependency commander to v11 (1cd29fa)

10.0.6 (2023-11-22)

Fixes & improvements

• refactor: use os.temp() instead of find-cache-dir (85776a0)
• fix: rm find-up and pkg-dir from deps to bring back nodejs 16 support (5ac29c1)

10.0.5 (2023-11-16)

Fixes & improvements

• fix(deps): update dependency find-up to v7 (284fb63)

10.0.4 (2023-11-04)

Fixes & improvements

• fix(deps): update dependency pkg-dir to v8 (9b5feac)

10.0.3 (2023-11-02)

Fixes & improvements

• docs: fix docs (a346796)

10.0.2 (2023-11-02)

Fixes & improvements

• docs: mention presentation at HolyJS 2022 (b1641f0)

10.0.1 (2023-08-25)

Fixes & improvements

• fix(deps): update dependency find-cache-dir to v5 (0c7a0eb)

10.0.0 (2023-08-05)

Fixes & improvements

• perf: deps revision (5ec15c0)
• perf: improve exceptions logging on empty stderr (ea3e501)

BREAKING CHANGES

• following the deps, require Node.js v14 (5ec15c0)

9.3.12 (2023-06-16)

Bug Fixes

• rollback commander, fix some sonar issues (f1a9893)

9.3.11 (2023-06-16)

Bug Fixes

• deps: update dependency commander to v11 (2e8aa88)

9.3.10 (2023-03-21)

Bug Fixes

• do no mutate __metadata (97c5706), closes #287

9.3.9 (2023-02-21)

9.3.6 (2022-09-22)

Performance Improvements

• up deps (ccb7c96)

9.3.5 (2022-08-11)

9.3.4 (2022-08-11)

Performance Improvements

• update deps (e2a7224)

9.3.3 (2022-07-27)

Performance Improvements

• up deps (f3ccfc6)

9.3.2 (2022-06-20)

Performance Improvements

• up deps (ad94f27)

9.3.1 (2022-04-25)

Performance Improvements

• update tslib, update jest (0a96659)

9.3.0 (2022-04-21)

Features

• support nodejs v18 (b20fd96)

9.2.4 (2022-04-15)

Bug Fixes

• fix gh-pages publishing (1179475)

9.2.3 (2022-04-15)

Performance Improvements

• update deps (#241) (fb940b5)

9.2.2 (2022-04-03)

9.2.1 (2022-03-20)

Performance Improvements

• up deps (d533180)

9.2.0 (2022-03-14)

Features

• print version via -v and --version flags (fc2fe73)

9.1.3 (2022-03-14)

Performance Improvements

• update deps (c4f0178)

9.1.2 (2022-02-20)

Performance Improvements

• impr stderr logging (33e9770)

9.1.1 (2022-02-20)

Performance Improvements

• tweak up error logging (88ccb5d)

9.1.0 (2022-02-20)

Features

• improve logging for cp.spawn errors (b6ef812)

9.0.11 (2022-02-11)

Bug Fixes

• re-add flow-typings, update deps (f8efc83)

9.0.10 (2022-01-29)

Bug Fixes

• deps: update dependency commander to v9 (a943204)

9.0.9 (2022-01-24)

Bug Fixes

• deps: update dependency globby to v13 (b991173)

9.0.8 (2022-01-20)

9.0.7 (2022-01-18)

Bug Fixes

• update deps, fix some vuls (9f0b743)

9.0.6 (2022-01-11)

9.0.5 (2022-01-10)

9.0.4 (2021-12-15)

Bug Fixes

• do not require node_modules (yarn pnp) (e3d333a)

9.0.3 (2021-12-13)

Bug Fixes

• raise an error if v2 audit report fails (b04900b)

9.0.2 (2021-12-13)

Bug Fixes

• add a symlink for .yarn assets (7898410)

9.0.1 (2021-12-13)

9.0.0 (2021-12-11)

• feat(v9)!: release v9 (0584883)

BREAKING CHANGES

• `enabled experimental Yarn 2+ lockfiles support

9.0.0 (2021-12-11)

Documentation

• readme: mention v9 changes (6c0ae5c)

Features

• provide experimental lockfile v2 (yarn berry) support (0243562)
• use yarn2 if exists as audit provider (0f1537b)

BREAKING CHANGES

• readme: enabled experimental Yarn 2+ lockfiles support

8.0.1 (2021-12-02)

8.0.0 (2021-12-02)

Bug Fixes

• fix npm-path cli default option value (2c58a9b)

Features

• use system npm bin by default (9b21933), closes #200 #199

BREAKING CHANGES

• dropped npm dependency

7.2.3 (2021-11-27)

7.2.2 (2021-11-18)

Bug Fixes

• deps: update dependency npm to v8.1.4 (c9644a0)

7.2.1 (2021-11-14)

7.2.0 (2021-11-05)

Bug Fixes

• deps: update npm to v8.1.3 (d087c41)
• use cwd on temp assets generation (ae2f7f4)

Features

• verify package structure (93b254a)

7.1.5 (2021-11-01)

Bug Fixes

• lockfile: override internal strip-ansi/ansi-regex to v5.0.1 (2b62278), closes #199
• update synp to v1.9.8 (fe13f4c)

7.1.4 (2021-10-28)

Bug Fixes

• deps: update dependency npm to v8.1.2 (2c3ea93)

7.1.3 (2021-10-23)

Bug Fixes

• update npm to v8.1.1 (f817dab)

7.1.2 (2021-10-15)

Bug Fixes

• deps: update dependency npm to v9.0.0 (c685ade)

7.1.1 (2021-10-12)

Bug Fixes

• deps: update dependency typescript to v4.4.4 (#195) (3a4d217)

7.1.0 (2021-10-11)

Bug Fixes

• deps: update dependency npm to v8 (6a07aa2)
• deps: update npm to v8.0.0 (b54cc7a)

Features

• add cwd option (4ff467b), closes #135

7.0.8 (2021-10-04)

Bug Fixes

• deps: update dependency npm to v7.24.2 (2c5728b)

7.0.7 (2021-10-02)

7.0.6 (2021-10-02)

Performance Improvements

• update pkg-dir to v6.0.0 (3b54abb)

7.0.5 (2021-09-28)

Bug Fixes

• deps: update dependency npm to v7.24.1 (28cd8c0)

7.0.4 (2021-09-17)

Bug Fixes

• deps: update dependency npm to v7.24.0 (af0d80f)

7.0.3 (2021-09-13)

7.0.2 (2021-09-10)

Bug Fixes

• package: add missed prod dep find-up (6fa6d8f), closes #179

7.0.1 (2021-09-09)

Bug Fixes

• deps: update dependency npm to v7.23.0 (961db82)

7.0.0 (2021-09-08)

Features

• move to esm (16a3e65)

BREAKING CHANGES

• require Node.js ^12.20.0 || ^14.13.1 || >=16.0.0

6.4.4 (2021-09-02)

Bug Fixes

• deps: update dependency npm to v7.22.0 (41d96bb)

6.4.3 (2021-08-27)

Bug Fixes

• deps: update dependency npm to v7.21.1 (5bdd62a)

6.4.2 (2021-08-19)

Bug Fixes

• deps: update dependency npm to v7.21.0 (17ac930)

6.4.1 (2021-08-12)

Bug Fixes

• deps: update dependency npm to v7.20.6 (466d90c)

6.4.0 (2021-08-11)

Features

• add --ignore-engines flag (3476e8d), closes #166

6.3.11 (2021-08-05)

Bug Fixes

• deps: update dependency npm to v7.20.5 (20139ae)

6.3.10 (2021-08-05)

Bug Fixes

• deps: update dependency npm to v7.20.4 (fc22980)

6.3.9 (2021-08-05)

Bug Fixes

• deps: update dependency npm to v7.20.3 (51efa05)

6.3.8 (2021-07-27)

Bug Fixes

• deps: update dependency npm to v7.20.2 (0a4bbb8)

6.3.7 (2021-07-22)

Bug Fixes

• deps: update dependency npm to v7.20.1 (7c3d340)

6.3.6 (2021-07-15)

Bug Fixes

• deps: update dependency npm to v7.20.0 (32782c6)

6.3.5 (2021-07-01)

Bug Fixes

• deps: update dependency npm to v7.19.1 (874c4bb)

6.3.4 (2021-06-25)

Bug Fixes

• deps: update dependency commander to v8 (9089a71)

6.3.3 (2021-06-24)

Bug Fixes

• deps: update dependency npm to v7.19.0 (a8d93f9)

6.3.2 (2021-06-17)

Bug Fixes

• deps: update dependency npm to v7.18.1 (ca918be)

6.3.1 (2021-06-12)

6.3.0 (2021-06-12)

Bug Fixes

• avoid ERR_UNHANDLED_REJECTION for CLI (a397a7a)

Features

• handle --dry-run option in --flow=patch mode (8fc5db6)

6.2.3 (2021-06-10)

Bug Fixes

• deps: update dependency npm to v7.17.0 (051d19c)

6.2.2 (2021-06-07)

Bug Fixes

• apply yarn install step to cwd not tmp (61bd639)

6.2.1 (2021-06-06)

Bug Fixes

• yarn install cmd (2328203)

6.2.0 (2021-06-06)

Features

• force option for patch flow (0bfc6bc)
• runner: provide custom flows execution (bf8be9c)

6.1.0 (2021-06-06)

Bug Fixes

• set patch flow as default for getFlow helper (517b71b)

Features

• export all inners (4794e2d)

6.0.0 (2021-06-06)

Bug Fixes

• fix dry-run env flag (4d79a4b)

Features

• add lockfile patching flow (b01dd0d)
• add npm-yarn flag mapping (a6f942b)
• set patch flow as default (ed22952)

BREAKING CHANGES

• yaf uses yarn audit json data by default, see --flow option notes for details

5.0.5 (2021-06-03)

Bug Fixes

• deps: update dependency npm to v7.16.0 (5410407)

5.0.4 (2021-06-01)

Bug Fixes

• deps: update dependency npm to v7.15.1 (1077fdb)

5.0.3 (2021-05-27)

Bug Fixes

• deps: update dependency npm to v7.15.0 (a3f32bc)

5.0.2 (2021-05-25)

Performance Improvements

• pkg: up deps (6a3316e)

5.0.1 (2021-05-20)

Bug Fixes

• deps: update dependency npm to v7.14.0 (0244d5f)

5.0.0 (2021-05-16)

chore

• catch breaking change (#121) (f6d683c)

BREAKING CHANGES

• 'junction' is default symlink type for Windows, use --symlink flag to override

4.3.6 (2021-05-14)

Bug Fixes

• handle symlink CLI option (ef225ca)

4.3.5 (2021-05-13)

Bug Fixes

• deps: update dependency npm to v7.13.0 (f30d2be)

4.3.4 (2021-05-10)

Bug Fixes

• deps: update dependency npm to v7.12.1 (7a8a7e7)

4.3.3 (2021-05-08)

Bug Fixes

• deps: update npm to v7.12.0 (d8d0eb5)

4.3.2 (2021-05-04)

4.3.1 (2021-05-03)

Bug Fixes

• deps: update dependency fs-extra to v10 (96cb87a)

4.3.0 (2021-05-01)

Bug Fixes

• deps: update dependency npm to v7.11.2 (b794cb5)

Features

• provide configurable npmPath (5e29c23), closes #107

4.2.4 (2021-04-24)

Bug Fixes

• deps: update dependency npm to v7.11.1 (7c40684)

4.2.3 (2021-04-23)

Bug Fixes

• rollback to npm 7.10.0 (a8fbdf7), closes #111

4.2.2 (2021-04-23)

Bug Fixes

• deps: update dependency npm to v7.11.0 (65cc1d5)

4.2.1 (2021-04-15)

Bug Fixes

• deps: update dependency npm to v7.10.0 (8732f1d)

4.2.0 (2021-04-11)

Features

• clear temp dir on error (01e4f63), closes #102

4.1.9 (2021-04-08)

Bug Fixes

• deps: update dependency npm to v7.9.0 (509ca55)

4.1.8 (2021-04-08)

4.1.7 (2021-04-01)

Bug Fixes

• deps: update dependency npm to v7.8.0 (3f1cb9c)

4.1.6 (2021-04-01)

Bug Fixes

• fix older version detection (81bbce8), closes #96

Performance Improvements

• deps: up npm to v7.7.6 (05be662), closes #94

4.1.5 (2021-03-30)

Bug Fixes

• deps: update dependency npm to v7.7.6 (5258e82)

4.1.4 (2021-03-26)

Bug Fixes

• up npm to 7.7.5 (596d2c9)

4.1.3 (2021-03-26)

Bug Fixes

• deps: update dependency npm to v7.7.5 (5495c19)

4.1.2 (2021-03-25)

Bug Fixes

• deps: rollback npm to 7.7.3 (04b0f63)

4.1.1 (2021-03-25)

Performance Improvements

• deps: up npm to v7.7.4 (cd31155)

4.1.0 (2021-03-24)

Features

• warn if yaf is out of date (6ac2bd1), closes #82

4.0.0 (2021-03-24)

Bug Fixes

• cli: fix env options resolution (2adb481)
• rm duplicated cli options (481ce14)

Features

• add cli guard (7eb3034)
• provide env directives (6a61668)
• use npm v7 by default, introduce npm-path flag (7b723d1)

BREAKING CHANGES

• unsupported flag raises an error. See v3 to v4 migration guide in README.md
• --npm-v7 directive is no longer supported. Follow v3 to v4 migration guide in README.md

3.3.3 (2021-03-22)

Bug Fixes

• deps: up deps, fix vuls (8fe3bbf)

3.3.2 (2021-03-14)

Performance Improvements

• deps: update npm to v7.6.3 (cdb5bae)

3.3.1 (2021-03-03)

Performance Improvements

• package: up npm to v7.6.0 (49e3851)

3.3.0 (2021-02-21)

Features

• replace bash-glob with globby (do not require bash to be installed) (c2999ee)
• use separate temp dir for each exec context (7f24b51), closes #45

3.2.16 (2021-02-13)

Performance Improvements

• package: up deps (b18bb07)

3.2.15 (2021-02-10)

Performance Improvements

• package: up npm (d12ce69)

3.2.14 (2021-02-06)

Performance Improvements

• package: up deps, fix vuls (dd62654)

3.2.13 (2020-12-08)

Performance Improvements

• package: up deps, fix known vuls (972d883)

3.2.12 (2020-10-30)

Bug Fixes

• package: up deps, fix vuls (067b03c)

3.2.11 (2020-10-17)

Bug Fixes

• package: up deps (7b9e6a6)

3.2.10 (2020-10-16)

Bug Fixes

• deps: update dependency npm to v7.0.1 (57317f2)

3.2.9 (2020-10-13)

Bug Fixes

• deps: update dependency npm to v7.0.0 (124a1ce)

3.2.8 (2020-10-10)

Bug Fixes

• deps: update dependency npm to v7.0.0-rc.4 (294716a)

3.2.7 (2020-10-07)

Bug Fixes

• deps: update dependency npm to v7.0.0-rc.3 (c23fc56)

3.2.6 (2020-10-03)

Bug Fixes

• deps: update dependency npm to v7.0.0-rc.2 (5ae4cf4)

3.2.5 (2020-10-02)

Bug Fixes

• deps: update dependency npm to v7.0.0-rc.1 (4a16e51)

3.2.4 (2020-10-01)

Bug Fixes

• deps: up npm (c0123cd)
• deps: up synp to the latest (6afdf87)

3.2.3 (2020-09-30)

Bug Fixes

• check bash to be installed (required by bash-glob) (#47) (278cef8)

3.2.2 (2020-09-29)

Bug Fixes

• deps: update dependency npm to v7.0.0-beta.13 (#46) (f794c49)

3.2.1 (2020-09-27)

Bug Fixes

• up synp, fix consistency issues (5cc1e15)

3.2.0 (2020-09-26)

Features

• provide temp dir customization (d3eda24), closes #42

3.1.0 (2020-09-26)

Features

• handle .npmrc .yarnrc if exist (55340c3), closes #34
• handle registry flag (71d9ba1), closes #34
• let --npm-v7 flag be applied to regular repos (2e648fd)

3.0.4 (2020-09-22)

Bug Fixes

• deps: update dependency npm to v7.0.0-beta.12 (0cc556c)

3.0.3 (2020-09-17)

Performance Improvements

• deps: up deps (8653cba)

3.0.2 (2020-09-16)

Bug Fixes

• deps: update dependency npm to v7.0.0-beta.11 (761b3f1)

3.0.1 (2020-09-12)

Bug Fixes

• fix npm finder (32b7778)

3.0.0 (2020-09-12)

Bug Fixes

• fix npm resolving when launched through npx (e1339e2), closes #32

Features

• print runtime digest (631897e)

BREAKING CHANGES

• --inherit-npm flag was replaced with --npm-v7

2.3.0 (2020-09-12)

Features

• add debug point (53b335b)

2.2.4 (2020-09-08)

Performance Improvements

• deps: up npm to 7.0.0-beta.10 (84ff0a8)

2.2.3 (2020-09-04)

Performance Improvements

• package: up deps (f53d564)

2.2.2 (2020-09-02)

Performance Improvements

• package: up npm (da01817)

2.2.1 (2020-09-01)

Bug Fixes

• package: up deps (c3dfa88), closes #22

2.2.0 (2020-08-27)

Features

• enable package-lock-only by default (d927735), closes #23

2.1.1 (2020-08-25)

Performance Improvements

• package: up deps (8da9fec)

2.1.0 (2020-08-22)

Features

• introduce --inherit-npm flag (b54ded4)

2.0.5 (2020-08-22)

Performance Improvements

• rm npm bins before semrel start, tech release (3ce0106)

2.0.4 (2020-08-22)

Bug Fixes

• fix workspaces detection (f766f5d)

2.0.3 (2020-08-22)

Performance Improvements

• add manifest to cxt (b8761e7)

2.0.1 (2020-08-22)

Performance Improvements

• tech release (9cbdbe8)

2.0.0 (2020-08-22)

Bug Fixes

• adapt yarn cmd invocation to win runtime (d02d69f)
• fix checksums (d2a280d)

Features

• cli: let --package-lock-only be configurable (c457a18)
• provide workspaces deps update (a64fc95), closes #16
• support custom workspace paths (96bde5d)

Performance Improvements

• deps revision (c35b253)
• tweak up npm audit invoker (197ca96)

BREAKING CHANGES

• --package-lock-only is disabled by default

1.6.1 (2020-08-17)

Performance Improvements

• package: tech release (1243032)

1.6.0 (2020-08-10)

Bug Fixes

• discard flags after -- break (4ee89e0)
• cli: handle silent flag at the top level promise (08534ed)

Features

• cli: add symlink type customization (bfb2747), closes #13
• cli: pass optional flags to npm/yarn invocations (cd2efab), closes #12
• cli: provide silent flag support (2a646bc)

1.5.1 (2020-08-07)

Bug Fixes

• readme: update usage example (8d25680)
• print invoke cmd before its output (dfe82fb)

1.5.0 (2020-08-07)

Features

• highlight steps in the output for better readability (7abff28)

1.4.1 (2020-08-06)

Bug Fixes

• exit with non-zero if anything fails (#11) (3e7eb93), closes #10

1.4.0 (2020-08-03)

Features

• add async handlers support (71eab4e)
• perform most operations on temporary entities (213b4f5), closes #6

1.3.0 (2020-07-13)

Features

• print invocation details to stdout (f92b18a)

1.2.2 (2020-07-10)

Bug Fixes

• fix worlspaces issue (221f17b), closes #2 #3

1.2.1 (2020-07-09)

Bug Fixes

• raplace yarm import to synp converter to handle workspaces issue (c921179)

1.2.0 (2020-07-09)

Features

• use yarn import for package-lock converting (e9fccd8)

1.1.1 (2020-07-09)

Bug Fixes

• fix synp source arg, apply audit fix to lockfile only (#1) (c2bd0fc)

1.1.0 (2020-07-08)

Features

• replace npm i with synp convertion (7272a9c)

1.0.0 (2020-07-08)

Bug Fixes

• fix rimraf bin path (69df2aa)

Features

• add audit fix cmd queue (7fc519d)
• replace rm with rimraf (67d9d16)