Update dependency npm-check-updates to v21 #46

renovate-bot · 2026-04-15T14:01:39+02:00

renovate-bot commented

2026-04-15 14:01:39 +02:00

This PR contains the following updates:

Package	Change	Age	Confidence
npm-check-updates	`^19.6.6` → `^21.0.0`

Release Notes

raineorshine/npm-check-updates (npm-check-updates)

`v21.0.3`

Compare Source

What's Changed

fix: chmod build/cli.js executable after vite build by @raineorshine in #1678
fix: migrate from rc-config-loader to cosmiconfig for ESM config support (closes #1674) by @onemen in #1676

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3

`v21.0.2`

Compare Source

What's Changed

fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @terminalchai in #1675

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2

`v21.0.1`

Compare Source

What's Changed

fix: seeing catalog when inside workspaces by @Zamiell in #1656
Bump @types/bun from 1.3.11 to 1.3.12 by @dependabot[bot] in #1663
Bump globals from 17.4.0 to 17.5.0 by @dependabot[bot] in #1664
Bump @typescript-eslint/parser from 8.58.1 to 8.58.2 by @dependabot[bot] in #1665
Bump prettier from 3.8.1 to 3.8.2 by @dependabot[bot] in #1667
Bump verdaccio from 6.4.0 to 6.5.0 by @dependabot[bot] in #1669
Bump sinon from 21.0.3 to 21.1.2 by @dependabot[bot] in #1668
Skip CI on PRs with no file changes by @Copilot in #1672
Bump @typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 by @dependabot[bot] in #1666
Fix wrong message when all packages are within cooldown window by @Copilot in #1671

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1

`v21.0.0`

Compare Source

⚠️ Breaking Changes

This is a major breaking change with significant architectural updates.

ESM Migration & Module System

Pure ESM: Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.
Import Syntax: Programmatic usage now requires named imports or namespace imports.
- Old: import ncu from 'npm-check-updates'
- New: import * as ncu from 'npm-check-updates' or import { run } from 'npm-check-updates'
Node.js Requirements: Now requires ^20.19.0 || ^22.12.0 || >=24.0.0. This is required for native require(esm) support and the Rolldown engine.
npm Requirements: Minimum version increased to >=10.0.0.

Configuration Files (`.ncurc.js`)

Files named .ncurc.js that use module.exports will now fail in projects that are "type": "module".
Fix: Rename these files to .ncurc.cjs or convert them to use export default.

Dependency Updates (Pure ESM versions)

Package	Old Version	New Version
`camelcase`	`^6.3.0`	`^9.0.0`
`chai`	`^4.3.10`	`^6.2.2`
`chai-as-promised`	`^7.1.2`	`^8.0.2`
`find-up`	`5.0.0`	`8.0.0`
`p-map`	`^4.0.0`	`^7.0.4`
`untildify`	`^4.0.0`	`^6.0.0`

Tooling & Build Changes

Vite 8 Upgrade: Migrated to Vite 8 with the new Rust-based Rolldown bundler (10-30x faster builds).
TypeScript 6.0: Adopted latest type-system features and performance improvements.
Strip ANSI: Replaced strip-ansi with Node.js built-in util.stripVTControlCharacters.
Test Runner: Replaced vite-node with tsx for TypeScript support in ESM context.

Migration Guide

If you are upgrading to v21 from earlier versions:

1. Environment Check

Ensure you meet the new Node.js requirement: ^20.19.0 || ^22.12.0 || >=24.0.0.
Update npm to at least 10.0.0.

2. Update Configuration Files

If you have a .ncurc.js file:

Option A: Rename it to .ncurc.cjs.

Option B: Convert it to ESM:

import { defineConfig } from 'npm-check-updates'

export default defineConfig({
  upgrade: true,
  filter: name => name.startsWith('@&#8203;myorg/'),
})

3. Update Programmatic Usage

If you import npm-check-updates in your scripts:

ESM: Change import ncu from ... to import * as ncu from 'npm-check-updates'.
CommonJS: Ensure you are destructuring the named exports or using the full object:

const ncu = require('npm-check-updates')
// Use ncu.run(...)

Testing

Tests now use tsx for module loading. When running tests manually:

mocha --node-option import=tsx 'test/**/*.test.ts'

Or use the npm script:

npm test

PR 1649

`v20.0.2`

Compare Source

What's Changed

Show auto-detected cooldown source at normal log level; fix test isolation by @bayraak in #1662

New Contributors

@bayraak made their first contribution in #1662

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v20.0.1...v20.0.2

`v20.0.1`

Compare Source

What's Changed

Add CI workflow to verify build output is committed by @Copilot in #1645
Bump lodash-es from 4.17.23 to 4.18.1 by @dependabot[bot] in #1647
Add Node v24 to test workflow by @Copilot in #1608
feat: remove pre-push git hook by @Zamiell in #1658
feat: add verbose output when packages are skipped due to cooldown by @Copilot in #1659

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v20.0.1

`v20.0.0`

Compare Source

Auto Cooldown

The cooldown option is now automatically applied from the respective package manager's config:

npm - min-release-age (#1632)
yarn - npmMinimalAgeGate (excluding npmPreapprovedPackages) (#1643)
pnpm - minimumReleaseAge (excluding minimumReleaseAgeExclude) (#1639)

Why is this a breaking change?

If you use any of the above configs, npm-check-updates will automatically exclude releases that do not exceed the specified minimum age as described in https://github.com/raineorshine/npm-check-updates#cooldown.
Otherwise, you don't need to do anything.

Other changes

Bump strip-ansi from 7.1.2 to 7.2.0 by @dependabot[bot] in #1620
Bump lodash and @types/lodash by @dependabot[bot] in #1615
Bump @typescript-eslint/eslint-plugin from 8.44.1 to 8.57.2 by @dependabot[bot] in #1619
Bump hosted-git-info from 9.0.0 to 9.0.2 by @dependabot[bot] in #1622
Bump glob and markdownlint-cli by @dependabot[bot] in #1625
update dependencies; fix vulnerabilities by @onemen in #1630
Potential fix for code scanning alert no. 13: Incomplete string escaping or encoding by @raineorshine in #1640

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [npm-check-updates](https://github.com/raineorshine/npm-check-updates) | [`^19.6.6` → `^21.0.0`](https://renovatebot.com/diffs/npm/npm-check-updates/19.6.6/21.0.3) | ![age](https://developer.mend.io/api/mc/badges/age/npm/npm-check-updates/21.0.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/npm-check-updates/19.6.6/21.0.3?slim=true) | --- ### Release Notes <details> <summary>raineorshine/npm-check-updates (npm-check-updates)</summary> ### [`v21.0.3`](https://github.com/raineorshine/npm-check-updates/releases/tag/v21.0.3) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3) #### What's Changed - fix: chmod build/cli.js executable after vite build by [@raineorshine](https://github.com/raineorshine) in [#1678](https://github.com/raineorshine/npm-check-updates/pull/1678) - fix: migrate from rc-config-loader to cosmiconfig for ESM config support (closes [#1674](https://github.com/raineorshine/npm-check-updates/issues/1674)) by [@onemen](https://github.com/onemen) in [#1676](https://github.com/raineorshine/npm-check-updates/pull/1676) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3> ### [`v21.0.2`](https://github.com/raineorshine/npm-check-updates/releases/tag/v21.0.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2) #### What's Changed - fix: skip intersects() for non-semver specs like catalog: in peer dep checks by [@terminalchai](https://github.com/terminalchai) in [#1675](https://github.com/raineorshine/npm-check-updates/pull/1675) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2> ### [`v21.0.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v21.0.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1) #### What's Changed - fix: seeing catalog when inside workspaces by [@Zamiell](https://github.com/Zamiell) in [#1656](https://github.com/raineorshine/npm-check-updates/pull/1656) - Bump [@types/bun](https://github.com/types/bun) from 1.3.11 to 1.3.12 by [@dependabot](https://github.com/dependabot)\[bot] in [#1663](https://github.com/raineorshine/npm-check-updates/pull/1663) - Bump globals from 17.4.0 to 17.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1664](https://github.com/raineorshine/npm-check-updates/pull/1664) - Bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.58.1 to 8.58.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1665](https://github.com/raineorshine/npm-check-updates/pull/1665) - Bump prettier from 3.8.1 to 3.8.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1667](https://github.com/raineorshine/npm-check-updates/pull/1667) - Bump verdaccio from 6.4.0 to 6.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1669](https://github.com/raineorshine/npm-check-updates/pull/1669) - Bump sinon from 21.0.3 to 21.1.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1668](https://github.com/raineorshine/npm-check-updates/pull/1668) - Skip CI on PRs with no file changes by [@Copilot](https://github.com/Copilot) in [#1672](https://github.com/raineorshine/npm-check-updates/pull/1672) - Bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.58.1 to 8.58.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1666](https://github.com/raineorshine/npm-check-updates/pull/1666) - Fix wrong message when all packages are within cooldown window by [@Copilot](https://github.com/Copilot) in [#1671](https://github.com/raineorshine/npm-check-updates/pull/1671) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1> ### [`v21.0.0`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#2100---2026-04-14) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v20.0.2...v21.0.0) ##### ⚠️ Breaking Changes This is a **major breaking change** with significant architectural updates. ##### ESM Migration & Module System - **Pure ESM:** Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8. - **Import Syntax:** Programmatic usage now requires named imports or namespace imports. - **Old:** `import ncu from 'npm-check-updates'` - **New:** `import * as ncu from 'npm-check-updates'` or `import { run } from 'npm-check-updates'` - **Node.js Requirements:** Now requires `^20.19.0 || ^22.12.0 || >=24.0.0`. This is required for native `require(esm)` support and the Rolldown engine. - **npm Requirements:** Minimum version increased to `>=10.0.0`. ##### Configuration Files (`.ncurc.js`) - Files named `.ncurc.js` that use `module.exports` will now fail in projects that are `"type": "module"`. - **Fix:** Rename these files to `.ncurc.cjs` or convert them to use `export default`. ##### Dependency Updates (Pure ESM versions) | Package | Old Version | New Version | | :----------------- | :---------- | :---------- | | `camelcase` | `^6.3.0` | `^9.0.0` | | `chai` | `^4.3.10` | `^6.2.2` | | `chai-as-promised` | `^7.1.2` | `^8.0.2` | | `find-up` | `5.0.0` | `8.0.0` | | `p-map` | `^4.0.0` | `^7.0.4` | | `untildify` | `^4.0.0` | `^6.0.0` | ##### Tooling & Build Changes - **Vite 8 Upgrade:** Migrated to Vite 8 with the new Rust-based **Rolldown** bundler (10-30x faster builds). - **TypeScript 6.0:** Adopted latest type-system features and performance improvements. - **Strip ANSI:** Replaced `strip-ansi` with Node.js built-in `util.stripVTControlCharacters`. - **Test Runner:** Replaced `vite-node` with `tsx` for TypeScript support in ESM context. *** ##### Migration Guide If you are upgrading to v21 from earlier versions: ##### 1. Environment Check - Ensure you meet the new Node.js requirement: `^20.19.0 || ^22.12.0 || >=24.0.0`. - Update npm to at least `10.0.0`. ##### 2. Update Configuration Files If you have a `.ncurc.js` file: - **Option A:** Rename it to `.ncurc.cjs`. - **Option B:** Convert it to ESM: ```js import { defineConfig } from 'npm-check-updates' export default defineConfig({ upgrade: true, filter: name => name.startsWith('@myorg/'), }) ``` ##### 3. Update Programmatic Usage If you import `npm-check-updates` in your scripts: - **ESM:** Change `import ncu from ...` to `import * as ncu from 'npm-check-updates'`. - **CommonJS:** Ensure you are destructuring the named exports or using the full object: ```js const ncu = require('npm-check-updates') // Use ncu.run(...) ``` *** ##### Testing Tests now use `tsx` for module loading. When running tests manually: ```sh mocha --node-option import=tsx 'test/**/*.test.ts' ``` Or use the npm script: ```sh npm test ``` ##### Related Issues & PRs [PR 1649](https://github.com/raineorshine/npm-check-updates/pull/1649) *** ### [`v20.0.2`](https://github.com/raineorshine/npm-check-updates/releases/tag/v20.0.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v20.0.1...v20.0.2) #### What's Changed - Show auto-detected cooldown source at normal log level; fix test isolation by [@bayraak](https://github.com/bayraak) in [#1662](https://github.com/raineorshine/npm-check-updates/pull/1662) #### New Contributors - [@bayraak](https://github.com/bayraak) made their first contribution in [#1662](https://github.com/raineorshine/npm-check-updates/pull/1662) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v20.0.1...v20.0.2> ### [`v20.0.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v20.0.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v20.0.1) #### What's Changed - Add CI workflow to verify build output is committed by [@Copilot](https://github.com/Copilot) in [#1645](https://github.com/raineorshine/npm-check-updates/pull/1645) - Bump lodash-es from 4.17.23 to 4.18.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1647](https://github.com/raineorshine/npm-check-updates/pull/1647) - Add Node v24 to test workflow by [@Copilot](https://github.com/Copilot) in [#1608](https://github.com/raineorshine/npm-check-updates/pull/1608) - feat: remove pre-push git hook by [@Zamiell](https://github.com/Zamiell) in [#1658](https://github.com/raineorshine/npm-check-updates/pull/1658) - feat: add verbose output when packages are skipped due to cooldown by [@Copilot](https://github.com/Copilot) in [#1659](https://github.com/raineorshine/npm-check-updates/pull/1659) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v20.0.1> ### [`v20.0.0`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#2000---2026-03-31) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.6.6...v20.0.0) ##### Auto Cooldown The cooldown option is now automatically applied from the respective package manager's config: - **npm** - `min-release-age` ([#1632](https://github.com/raineorshine/npm-check-updates/issues/1632)) - **yarn** - `npmMinimalAgeGate` (excluding `npmPreapprovedPackages`) ([#1643](https://github.com/raineorshine/npm-check-updates/issues/1643)) - **pnpm** - `minimumReleaseAge` (excluding `minimumReleaseAgeExclude`) ([#1639](https://github.com/raineorshine/npm-check-updates/issues/1639)) Why is this a breaking change? - If you use any of the above configs, npm-check-updates will automatically exclude releases that do not exceed the specified minimum age as described in <https://github.com/raineorshine/npm-check-updates#cooldown>. - Otherwise, you don't need to do anything. ##### Other changes - Bump strip-ansi from 7.1.2 to 7.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1620](https://github.com/raineorshine/npm-check-updates/pull/1620) - Bump lodash and [@types/lodash](https://github.com/types/lodash) by [@dependabot](https://github.com/dependabot)\[bot] in [#1615](https://github.com/raineorshine/npm-check-updates/pull/1615) - Bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.44.1 to 8.57.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1619](https://github.com/raineorshine/npm-check-updates/pull/1619) - Bump hosted-git-info from 9.0.0 to 9.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1622](https://github.com/raineorshine/npm-check-updates/pull/1622) - Bump glob and markdownlint-cli by [@dependabot](https://github.com/dependabot)\[bot] in [#1625](https://github.com/raineorshine/npm-check-updates/pull/1625) - update dependencies; fix vulnerabilities by [@onemen](https://github.com/onemen) in [#1630](https://github.com/raineorshine/npm-check-updates/pull/1630) - Potential fix for code scanning alert no. 13: Incomplete string escaping or encoding by [@raineorshine](https://github.com/raineorshine) in [#1640](https://github.com/raineorshine/npm-check-updates/pull/1640) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Thilawyn added 1 commit 2026-04-23 10:36:34 +02:00

Update dependency npm-check-updates to v21

Lint / lint (push) Failing after 35s

Details

Test build / test-build (pull_request) Failing after 9s

Details

94bdaec04c

Thilawyn force-pushed renovate/npm-check-updates-21.x from 66fb4d5c8a to 94bdaec04c

2026-04-23 10:36:34 +02:00

Compare

Thilawyn merged commit ffa23718a8 into next

2026-04-23 10:36:41 +02:00

Thilawyn deleted branch renovate/npm-check-updates-21.x

2026-04-23 10:36:41 +02:00

Thilawyn referenced this issue from a commit

2026-04-23 10:36:41 +02:00

Update dependency npm-check-updates to v21 (#46)

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Thilawyn/effect-fc#46

Update dependency npm-check-updates to v21 #46

Release Notes

v21.0.3

What's Changed

v21.0.2

What's Changed

v21.0.1

What's Changed

v21.0.0

⚠️ Breaking Changes

ESM Migration & Module System

Configuration Files (.ncurc.js)

Dependency Updates (Pure ESM versions)

Tooling & Build Changes

Migration Guide

1. Environment Check

2. Update Configuration Files

3. Update Programmatic Usage

Testing

Related Issues & PRs

v20.0.2

What's Changed

New Contributors

v20.0.1

What's Changed

v20.0.0

Auto Cooldown

Other changes

Configuration

`v21.0.3`

`v21.0.2`

`v21.0.1`

`v21.0.0`

Configuration Files (`.ncurc.js`)

`v20.0.2`

`v20.0.1`

`v20.0.0`