Skip to content

fix: pin @zuke/core ^1.25.0 across wrappers so fromNodeModules resolves#213

Merged
totollygeek merged 1 commit into
masterfrom
fix/wrapper-core-dep-floor
Jul 19, 2026
Merged

fix: pin @zuke/core ^1.25.0 across wrappers so fromNodeModules resolves#213
totollygeek merged 1 commit into
masterfrom
fix/wrapper-core-dep-floor

Conversation

@totollygeek

Copy link
Copy Markdown
Contributor

Problem

.fromNodeModules() fails at runtime (s.fromNodeModules is not a function) on six published wrappers — oxlint, dprint, cspell, vitest, dpdm, vite.

Verified against JSR: those six are published with @zuke/core@^0 (excludes 1.x), while tsc/nest/npm ship @zuke/core@^1. The method lives on core's ToolSettings and landed in core 1.25.0, so a wrapper resolving pre-1.x core simply doesn't have it.

Root cause

PR #93 tightened the local dep to ^1, but as a chore: commit — release-please never bumped those package versions, so JSR keeps serving the old ^0 range under the current version (JSR versions are immutable).

Fix

Bump the core dependency floor to ^1.25.0 for all 53 core-dependent packages. This:

  • guarantees fromNodeModules (and every other ToolSettings chainer) exists at runtime, even under a consumer lockfile / minimumDependencyAge that would otherwise resolve pre-1.25 core;
  • gives release-please a fix: to attribute to every package, re-releasing them with a correct range.

Consumers importing wrappers at @^0 will pick up the patched versions automatically once released.

Verification

deno task ci green: check, test, coverage (98.3% lines / 95.2% branches) all pass.

Every tool wrapper inherits fromNodeModules from core's ToolSettings, added
in core 1.25.0. Six wrappers were still published against an older core range
that excludes 1.x, so calling the method at runtime failed with
"s.fromNodeModules is not a function".

PR #93 tightened the local dep to ^1 but landed as a chore, so those versions
were never re-released and JSR keeps serving the old dependency. Bumping the
floor to ^1.25.0 gives release-please a fix to cut for every core-dependent
package, republishing them with a range that guarantees the method exists.
@github-actions

Copy link
Copy Markdown
Contributor

🤖 Zuke AI review

🔎 security review — review

Score: 0/10 · Severity: none · 0 finding(s)

Tokens: 7655 in · 46 out · 7701 total

The diff only tightens the @zuke/core dependency version across package manifests and does not introduce any discernible security risk.

@github-actions

Copy link
Copy Markdown
Contributor

🤖 Zuke AI review

🔎 generic review — review

Score: 0/10 · Severity: none · 0 finding(s)

Tokens: 9151 in · 33 out · 9497 total

Safe and consistent dependency version updates for @zuke/core across monorepo packages.

@totollygeek
totollygeek merged commit ef9baa5 into master Jul 19, 2026
9 checks passed
@totollygeek
totollygeek deleted the fix/wrapper-core-dep-floor branch July 19, 2026 20:51
@github-actions github-actions Bot mentioned this pull request Jul 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant