chore(deps): update dependency publint to v0.3.3 (master)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
publint (source)	devDependencies	minor	0.2.6 -> 0.3.3

---

Release Notes

publint/publint (publint)

v0.3.3

Compare Source

Patch Changes

• Rename EXPORT_TYPES_INVALID_FORMAT message to EXPORTS_TYPES_INVALID_FORMAT (#​139)

• Allow versioned types conditions (e.g. "types@>=5.2") in "exports" when checking for "types" condition ordering (#​138)

v0.3.2

Compare Source

Patch Changes

• (Potentially breaking) Disable running lifecycle scripts, such as prepare, prepack, and postpack, when running the pack command internally. This returns to the behavior in v0.2. (Note that this change does not apply to yarn as it does not support ignoring lifecycle scripts for local projects) (#​128)

  This change is made as running lifecycle scripts was an unintentional behavior during the v0.3 breaking change, which could cause the linting process to take longer than expected, or even cause infinite loops if publint is used in a lifecycle script.

• Update repository and bugs URLs to point to the new publint organization (1eda033)

• Updated dependencies [1eda033, 10e3891]:

  • @​publint/pack@​0.1.1

v0.3.1

Compare Source

Patch Changes

• Correctly process the pack option (#​124)

v0.3.0

Compare Source

Minor Changes

• The vfs option is removed in favour of an extended support of pack: { tarball: ArrayBuffer | ReadableStream } and pack: { files: PackFile[] } APIs. Now, it is even easier to use publint in the browser or against a packed .tgz file in Node.js. See the docs for more examples of how to use these new options. (#​122)

• Bump node version support to >=18 (cb2ed8b)

• publint now runs your project's package manager's pack command to get the list of packed files for linting. The previous npm-packlist dependency is now removed. (#​120)

  A new pack option is added to the node API to allow configuring this. It defaults to 'auto' and will automatically detect your project's package manager using package-manager-detector. See its JSDoc for more information of the option.

  This change is made as package managers have different behaviors for packing files, so running their pack command directly allows for more accurate linting. However, as a result of executing these commands in a child process, it may take 200-500ms longer to lint depending on the package manager used and the project size. The new handling also does not support yarn 1. See this comment for more information.

  If you use yarn 1, you should upgrade to the latest yarn version or a different package manager. Otherwise, no other changes are required for this new behavior.

Patch Changes

• Initial setup to publish with Changesets (24a62f5)

• When a dependency with the file: or link: protocol is specified in the package.json, it will now error to prevent accidentally publishing dependencies that will likely not work when installed by end-users (6e6ab33)

• Fix EXPORT_TYPES_INVALID_FORMAT linting to detect .d.mts and .d.cts files (af5e88b)

• Updated dependencies [d0b406b]:

  • @​publint/pack@​0.1.0

v0.2.12

Compare Source

Features

• If the package publishes a license file, but the "license" field is not set in package.json, a suggestion will now be shown to add the field (https://github.com/bluwy/publint/issues/111)

Bug fixes

• In the "repostory" field, string shorthands with nested paths like gitlab:org/user/repo is now considered valid (https://github.com/bluwy/publint/issues/113)

Site

• Fixed repository url link for string shorthands (https://github.com/bluwy/publint/issues/109)

Full Changelog: publint/publint@v0.2.11...v0.2.12

v0.2.11

Compare Source

Features

• Update formatMessage() utility with a new color option to force enable or disable returning color in string (https://github.com/bluwy/publint/pull/110)

New Contributors

• @​zanminkian made their first contribution in https://github.com/bluwy/publint/pull/110

Full Changelog: publint/publint@v0.2.10...v0.2.11

v0.2.10

Compare Source

Features

• Adds a new rule that validates the "repository" field (https://github.com/bluwy/publint/pull/106)
  • If "repository" is a string, it must be one of the supported shorthand strings from the docs.
  • If "repository" is an object with "type": "git", the "url" must be a valid git URL and can be parsed by npm.
  • The git:// protocol for GitHub repos should not be used due security concerns.
  • GitHub or GitLab links should be prefixed with git+ and postfixed with .git. (This is also warned by npm when publishing a package).

New Contributors

• @​Namchee made their first contribution in https://github.com/bluwy/publint/pull/106

Full Changelog: publint/publint@v0.2.9...v0.2.10

v0.2.9

Compare Source

Bug fixes

• Update message when no type field is present by @​benmccann (https://github.com/bluwy/publint/pull/104)

New Contributors

• @​benmccann made their first contribution in https://github.com/bluwy/publint/pull/104

Full Changelog: publint/publint@v0.2.8...v0.2.9

v0.2.8

Compare Source

Bug fixes

• Fix file existence check for non-js files (https://github.com/bluwy/publint/issues/96)

Full Changelog: publint/publint@v0.2.7...v0.2.8

v0.2.7

Compare Source

Features

• If the library exports from both "main"/"module" and "exports" fields, but the "exports" field doesn't export the root entrypoint, warn about the inconsistency. When "exports" is defined, it takes the highest priority, so all the library's entrypoint (root and deep) needs to be specified here. (https://github.com/bluwy/publint/issues/88)
• Suggest using the "type" field. In Node.js v20.10.0, it introduces a new --experimental-default-type flag to flip the default module system from "CJS-as-default" to "ESM-as-default". It's recommended for libraries to specify the "type" field explicitly to prevent CJS files from being incorrectly interpreted as ESM. This suggestion helps push towards a better ESM experience in the future. (https://github.com/bluwy/publint/issues/83)

Full Changelog: publint/publint@v0.2.6...v0.2.7

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (1f8cde0) to head (3f21b2a).

❗ Current head 3f21b2a differs from pull request most recent head 0816b04

Please upload reports for the commit 0816b04 to get more accurate results.

Additional details and impacted files

@@            Coverage Diff            @@
##            master      #783   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            6         6           
=========================================
  Hits             6         6           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.