chore: bump dependencies

.github/workflows/badges.yml

@@ -12,56 +12,56 @@ jobs:
     env:
       YARN_NODE_LINKER: node-modules
     steps:
-      - uses: actions/checkout@v3.0.2
+      - uses: actions/checkout@v4.1.7
       - name: Use Node.js
-        uses: actions/setup-node@v3.2.0
+        uses: actions/setup-node@v4.0.2
         with:
-          node-version: 16
+          node-version: 22
       - run: corepack enable
       - run: yarn install
         env:
           YARN_ENABLE_IMMUTABLE_INSTALLS: false
       - id: libyear
         uses: s0/libyear-node-action@v0.1.2
       - run: mkdir badges
-      - uses: emibcn/badge-action@v1.2.4
+      - uses: emibcn/badge-action@v2.0.3
         with:
           label: "libyear drift"
           status: ${{ steps.libyear.outputs.drift }} year(s) behind
           color: "blue"
           path: "badges/drift.svg"
-      - uses: emibcn/badge-action@v1.2.4
+      - uses: emibcn/badge-action@v2.0.3
         with:
           label: "libyear pulse"
           status: ${{ steps.libyear.outputs.pulse }} year(s) behind
           color: "blue"
           path: "badges/pulse.svg"
-      - uses: emibcn/badge-action@v1.2.4
+      - uses: emibcn/badge-action@v2.0.3
         with:
           label: "libyear"
           status: ${{ steps.libyear.outputs.releases }} release(s) behind
           color: "blue"
           path: "badges/releases.svg"
-      - uses: emibcn/badge-action@v1.2.4
+      - uses: emibcn/badge-action@v2.0.3
         with:
           label: "libyear"
           status: ${{ steps.libyear.outputs.major }} major release(s) behind
           color: "blue"
           path: "badges/major.svg"
-      - uses: emibcn/badge-action@v1.2.4
+      - uses: emibcn/badge-action@v2.0.3
         with:
           label: "libyear"
           status: ${{ steps.libyear.outputs.minor }} minor release(s) behind
           color: "blue"
           path: "badges/minor.svg"
-      - uses: emibcn/badge-action@v1.2.4
+      - uses: emibcn/badge-action@v2.0.3
         with:
           label: "libyear"
           status: ${{ steps.libyear.outputs.patch }} patch release(s) behind
           color: "blue"
           path: "badges/patch.svg"
       - name: Push badges to gh-badges directory
-        uses: s0/git-publish-subdir-action@v2.5.1
+        uses: s0/git-publish-subdir-action@v2.6.0
         env:
           REPO: self
           BRANCH: gh-badges

.github/workflows/ci.yml

@@ -10,18 +10,18 @@ jobs:
     strategy:
       matrix:
         node:
-          - 14
-          - 16
           - 18
+          - 20
+          - 22
         os:
           - macos-latest
           - ubuntu-latest
           - windows-latest
     env:
       YARN_NODE_LINKER: node-modules
     steps:
-      - uses: actions/checkout@v3.0.2
-      - uses: actions/setup-node@v3.2.0
+      - uses: actions/checkout@v4.1.7
+      - uses: actions/setup-node@v4.0.2
         with:
           node-version: ${{matrix.node}}
       - run: corepack enable

.github/workflows/cron.yml

@@ -9,15 +9,15 @@ jobs:
     env:
       YARN_NODE_LINKER: node-modules
     steps:
-      - uses: actions/checkout@v3.0.2
-      - uses: actions/setup-node@v3.2.0
+      - uses: actions/checkout@v4.1.7
+      - uses: actions/setup-node@v4.0.2
         with:
-          node-version: 16
+          node-version: 22
       - run: corepack enable
       - run: yarn install
         env:
           YARN_ENABLE_IMMUTABLE_INSTALLS: false
-      - run: yarn audit-ci
+      - run: yarn npm audit --severity moderate
       - run: yarn libyear
         continue-on-error: true
       - run: npm run libyear

.github/workflows/pull-request.yml

@@ -10,21 +10,21 @@ jobs:
     strategy:
       matrix:
         node:
-          - 14
-          - 16
           - 18
+          - 20
+          - 22
         os:
           - macos-latest
           - ubuntu-latest
           - windows-latest
     env:
       YARN_NODE_LINKER: node-modules
     steps:
-      - uses: actions/checkout@v3.0.2
+      - uses: actions/checkout@v4.1.7
         with:
           # awaiting https://github.com/facebook/jest/issues/11271
           fetch-depth: 0
-      - uses: actions/setup-node@v3.2.0
+      - uses: actions/setup-node@v4.0.2
         with:
           node-version: ${{matrix.node}}
       # awaiting https://github.com/actions/checkout/pull/155

.gitignore

@@ -17,6 +17,7 @@ coverage/
 .pnp.js
 .yarn/build-state.yml
 .yarn/cache/
+.yarn/install-state.gz
 .yarn/unplugged/
 package-lock.json
 node_modules/

.husky/commit-msg

@@ -1,4 +1 @@
-#!/usr/bin/env sh
-. "$(dirname -- "$0")/_/husky.sh"
-
 yarn commitlint --edit $1

.husky/pre-commit

@@ -1,4 +1 @@
-#!/usr/bin/env sh
-. "$(dirname -- "$0")/_/husky.sh"
-
 yarn lint-staged

.jestrc.json

@@ -2,5 +2,5 @@
   "coverageProvider": "v8",
   "coverageReporters": ["lcov", "text"],
   "injectGlobals": false,
-  "preset": "ts-jest"
+  "preset": "ts-jest/presets/default-esm"
 }

.libyearrc.json

@@ -1,28 +1,22 @@
 {
   "$schema": "./schema.json",
   "overrides": {
-    "^@types/mri$": {
-      "pulse": 5
-    },
-    "^lodash-es$": {
+    "^chalk$": {
       "pulse": 2
     },
-    "^mri$": {
-      "pulse": 2
+    "^lodash-es$": {
+      "pulse": 5
     }
   },
   "threshold": {
     "drift": {
-      "collective": 1,
+      "collective": 5,
       "individual": 1
     },
     "pulse": {
-      "collective": 15,
+      "collective": 25,
       "individual": 1
     },
-    "releases": {
-      "individual": 10
-    },
     "major": {
       "individual": 1
     }

.prettierignore

@@ -6,22 +6,14 @@
 # eslint
 .eslintignore
 
-# git
-.gitignore
-
 # husky
 .husky/
 
-# prettier
-.prettierignore
-
-# typescript
-*.tsbuildinfo
-
 # yarn
 .pnp.js
 .yarn/build-state.yml
 .yarn/cache/
+.yarn/install-state.gz
 .yarn/releases/
 .yarn/unplugged/
 package-lock.json

CHANGELOG.md

@@ -3,6 +3,24 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 0.9.0 (Unreleased)
+
+### Bug Fixes
+
+- remove unnecessary semver option
+- expose libyear in package.json exports
+
+### Features
+
+- upgrade `cosmiconfig` to support `.config` directory and `.mjs` and `.ts` configuration files
+- add help option
+- add quiet option
+- sort results by column
+
+### BREAKING CHANGES
+
+- drop support for node <18.19, 19, 21
+
 # 0.8.0 (2022-05-31)
 
 ### Bug Fixes

README.md

@@ -75,36 +75,51 @@ yarn add --dev libyear
 yarn libyear
 ```
 
-### `yarn@2` (`yarn berry`)
+### `yarn@>=2` (`yarn berry`)
 
 ```bash
 yarn dlx libyear
 ```
 
 ## CLI
 
+### `--all`
+
+Include dependencies from the whole project.
+Default `false`.
+
+_Note: This option is only supported when using `berry` or `pnpm` package managers._
+
 ### `--config=<path>`
 
 Path to a libyear configuration file.
 Default is automatically resolved by [cosmiconfig](https://github.com/davidtheclark/cosmiconfig).
 See [configuration](#configuration).
 
+### `--help` (`-h`)
+
+Show help.
+Default `false`.
+
+### `--json`
+
+Outputs the report to the console as valid JSON.
+Default `false`.
+
 ### `--package-manager`
 
 Accepts `berry`, `npm`, `pnpm`, `yarn`.
 Default is inferred.
 
-### `--all`
+### `--quiet` (`-q`)
 
-Include dependencies from the whole project.
+Exclude up-to-date dependencies from results.
 Default `false`.
 
-_Note: This option is only supported when using `berry` or `pnpm` package managers._
+### `--sort=<drift|pulse|releases|major|minor|patch>`
 
-### `--json`
-
-Outputs the report to the console as valid JSON.
-Default `false`.
+Column to sort individual results by.
+Default `null`.
 
 ### `--threshold-drift-collective=<libyears>` (`-D=<libyears>`)
 
@@ -199,10 +214,14 @@ Throws an error if any individual patch metric surpasses the threshold.
 - `.libyearrc.cjs`
 - `.libyearrc.js`
 - `.libyearrc.json`
+- `.libyearrc.mjs`
+- `.libyearrc.ts`
 - `.libyearrc.yaml`
 - `.libyearrc.yml`
 - `libyear.config.cjs`
 - `libyear.config.js`
+- `libyear.config.mjs`
+- `libyear.config.ts`
 
 Custom configuration files can be provided via the [`--config`](#--configpath) CLI option.
 
@@ -301,26 +320,27 @@ Dependencies cannot be ignored from threshold checks by design.
 If a package cannot be upgraded at a particular point in time, then it should be re-reviewed at a later date.
 Packages can be temporarily excused from complying to thresholds by setting a date to "defer" enforcement until in the configuration file.
 
-## To Do
+## Roadmap
 
-### Now
+### Next
 
 - ci semantic release
-- unit tests
 
-### Next
+### RFC
 
-- rfc
-  - batch queries / use npm REST API instead of cli (for release times)
-  - audit vulnerabilities
-  - include resolutions
-  - programmatic use
-  - include collective metrics in JSON report
-  - include violations in JSON report
+- batch queries / use npm REST API instead of cli (for release times)
+- audit vulnerabilities
+- include resolutions
+- programmatic use
+- include collective metrics in JSON report
+- include violations in JSON report
 
-### Later
+## Contributing
 
-- extend linting when eslint@7 is released and supports plugins loaded from config file directory
+```
+corepack enable
+yarn install
+```
 
 ## Acknowledgements