oeng/matrix-alertmanager

Watch

Fork 0

Update dependency npm-check-updates to v22 #15

Merged

forgejo merged 0 commits from refs/pull/15/head into main

2026-05-17 10:59:53 +00:00

forgejo commented

2026-05-17 10:57:21 +00:00

(Migrated from git.smallhack.org)

This PR contains the following updates:

Package	Change	Age	Confidence
npm-check-updates	`^16.14.20` → `^22.0.0`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

raineorshine/npm-check-updates (npm-check-updates)

`v22.2.0`

Compare Source

What's Changed

build(deps): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in #1724
feat: add cooldown format and improved visibility for skipped updates by @onemen in #1711

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v22.1.1...v22.2.0

`v22.1.1`

Compare Source

What's Changed

npm: decorateTagPackumentWithTimeAndName accepts undefined tagPackument by @SAY-5 in #1706
fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @terminalchai in #1710
Bump yaml from 2.8.3 to 2.8.4 by @dependabot[bot] in #1714
Bump @typescript-eslint/eslint-plugin from 8.59.1 to 8.59.2 by @dependabot[bot] in #1716
Bump @typescript-eslint/parser from 8.59.1 to 8.59.2 by @dependabot[bot] in #1718
build(deps-dev): bump eslint-plugin-n from 17.24.0 to 18.0.1 by @dependabot[bot] in #1715
build(deps-dev): bump zod from 4.3.6 to 4.4.3 by @dependabot[bot] in #1719
build(deps-dev): bump globals from 17.5.0 to 17.6.0 by @dependabot[bot] in #1717
build(deps-dev): bump hosted-git-info from 9.0.2 to 9.0.3 by @dependabot[bot] in #1720

New Contributors

@SAY-5 made their first contribution in #1706

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v22.1.0...v22.1.1

`v22.1.0`

Compare Source

What's Changed

fix: make --dep and --format robust to PowerShell arg rewriting (comma-or-space-delimited) by @onemen in #1694
Bump @typescript-eslint/eslint-plugin from 8.59.0 to 8.59.1 by @dependabot[bot] in #1697
Bump eslint-plugin-promise from 7.2.1 to 7.3.0 by @dependabot[bot] in #1702
Bump @types/bun from 1.3.12 to 1.3.13 by @dependabot[bot] in #1699
Bump vite-bundle-analyzer from 1.3.7 to 1.3.8 by @dependabot[bot] in #1700
Enhance --format time: consistent caching, interactive support, and human-readable timestamps by @onemen in #1693
fix: ignore .pnpm-store in glob traversal to prevent OOM with --deep by @Copilot in #1705

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v22.0.1...v22.1.0

`v22.0.1`

Compare Source

What's Changed

fix: suppress cooldown config log messages when JSON output is active by @Copilot in #1692

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v22.0.0...v22.0.1

`v21.0.3`

Compare Source

What's Changed

fix: chmod build/cli.js executable after vite build by @raineorshine in #1678
fix: migrate from rc-config-loader to cosmiconfig for ESM config support (closes #1674) by @onemen in #1676

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3

`v21.0.2`

Compare Source

What's Changed

fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @terminalchai in #1675

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2

`v21.0.1`

Compare Source

What's Changed

fix: seeing catalog when inside workspaces by @Zamiell in #1656
Bump @types/bun from 1.3.11 to 1.3.12 by @dependabot[bot] in #1663
Bump globals from 17.4.0 to 17.5.0 by @dependabot[bot] in #1664
Bump @typescript-eslint/parser from 8.58.1 to 8.58.2 by @dependabot[bot] in #1665
Bump prettier from 3.8.1 to 3.8.2 by @dependabot[bot] in #1667
Bump verdaccio from 6.4.0 to 6.5.0 by @dependabot[bot] in #1669
Bump sinon from 21.0.3 to 21.1.2 by @dependabot[bot] in #1668
Skip CI on PRs with no file changes by @Copilot in #1672
Bump @typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 by @dependabot[bot] in #1666
Fix wrong message when all packages are within cooldown window by @Copilot in #1671

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1

Package	Old Version	New Version
`camelcase`	`^6.3.0`	`^9.0.0`
`chai`	`^4.3.10`	`^6.2.2`
`chai-as-promised`	`^7.1.2`	`^8.0.2`
`find-up`	`5.0.0`	`8.0.0`
`p-map`	`^4.0.0`	`^7.0.4`
`untildify`	`^4.0.0`	`^6.0.0`

`v20.0.2`

Compare Source

What's Changed

Show auto-detected cooldown source at normal log level; fix test isolation by @bayraak in #1662

New Contributors

@bayraak made their first contribution in #1662

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v20.0.1...v20.0.2

`v20.0.1`

Compare Source

What's Changed

Add CI workflow to verify build output is committed by @Copilot in #1645
Bump lodash-es from 4.17.23 to 4.18.1 by @dependabot[bot] in #1647
Add Node v24 to test workflow by @Copilot in #1608
feat: remove pre-push git hook by @Zamiell in #1658
feat: add verbose output when packages are skipped due to cooldown by @Copilot in #1659

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v20.0.1

`v20.0.0`

Compare Source

Auto Cooldown

The cooldown option is now automatically applied from the respective package manager's config:

npm - min-release-age (#1632)
yarn - npmMinimalAgeGate (excluding npmPreapprovedPackages) (#1643)
pnpm - minimumReleaseAge (excluding minimumReleaseAgeExclude) (#1639)

Why is this a breaking change?

If you use any of the above configs, npm-check-updates will automatically exclude releases that do not exceed the specified minimum age as described in https://github.com/raineorshine/npm-check-updates#cooldown.
Otherwise, you don't need to do anything.

Other changes

Bump strip-ansi from 7.1.2 to 7.2.0 by @dependabot[bot] in #1620
Bump lodash and @types/lodash by @dependabot[bot] in #1615
Bump @typescript-eslint/eslint-plugin from 8.44.1 to 8.57.2 by @dependabot[bot] in #1619
Bump hosted-git-info from 9.0.0 to 9.0.2 by @dependabot[bot] in #1622
Bump glob and markdownlint-cli by @dependabot[bot] in #1625
update dependencies; fix vulnerabilities by @onemen in #1630
Potential fix for code scanning alert no. 13: Incomplete string escaping or encoding by @raineorshine in #1640

`v19.6.6`

Compare Source

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.6.5...v19.6.6

`v19.6.5`

Compare Source

What's Changed

fix(pnpm): fallback from pnpm.cmd to pnpm on Windows for non-standard installs by @terminalchai in #1606

New Contributors

@terminalchai made their first contribution in #1606

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.6.3...v19.6.5

`v19.6.3`

Compare Source

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.6.2...v19.6.3

`v19.6.2`

Compare Source

What's Changed

fix: fix overwrites pnpm-workspace.yaml and .yarnrc.yml into json by @MKruschke in #1589

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.6.1...v19.6.2

`v19.6.1`

Compare Source

What's Changed

Swap diff service. by @diegocr in #1603

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.6.0...v19.6.1

`v19.6.0`

Compare Source

What's Changed

Display link to compare the changes between package versions (--format diff) by @diegocr in #1602

New Contributors

@diegocr made their first contribution in #1602

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.5.0...v19.6.0

`v19.5.0`

Compare Source

What's Changed

feat(homepage): Add --format homepage option to print homepage.

e.g.

$ ncu --format homepage
...
 mocha                      ^11.7.2  →   ^11.7.5    https://mochajs.org/
 npm-registry-fetch         ^19.0.0  →   ^19.1.1
 prettier                   ^3.6.2  →    ^3.8.1     https://prettier.io
...

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.4.1...v19.5.0

`v19.4.1`

Compare Source

What's Changed

Fixed a small cooldown regression with number types in the ncurc

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.4.0...v19.4.1

`v19.4.0`

Compare Source

What's Changed

feat(cooldown): support cooldown strings like "7d", "12h", "30m" by @aversini in #1598

New Contributors

@aversini made their first contribution in #1598

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.3.2...v19.4.0

`v19.3.2`

Compare Source

What's Changed

docs: close code tag instead of reopening another one by @sod in #1588
fix(tests): resolve EBUSY errors on Windows by retrying directory removal by @Zamiell in #1590

New Contributors

@sod made their first contribution in #1588

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.3.1...v19.3.2

`v19.3.1`

Compare Source

What's Changed

fix(catalog): use the right yarn config name by @MKruschke in #1586

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.3.0...v19.3.1

`v19.3.0`

Compare Source

What's Changed

feat: support yarn catalogs by @MKruschke in #1582
Fixed default catalog behavior.
- See discussion here: #1582 (comment)
- If you think this is wrong, please open an issue.

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.2.1...v19.3.0

`v19.2.1`

Compare Source

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.2.0...v19.2.1

`v19.2.0`

Compare Source

What's Changed

Add --format dep
Add interactive mode keyboard controls to docs by @jsoref in #1577
Spelling by @jsoref in #1578

New Contributors

@jsoref made their first contribution in #1577

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.1.2...v19.2.0

`v19.1.2`

Compare Source

What's Changed

fix: support singular 'catalog' field in pnpm-workspace.yaml by @afonsojramos in #1572

New Contributors

@afonsojramos made their first contribution in #1572

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.1.1...v19.1.2

`v19.1.1`

Compare Source

What's Changed

fix(cooldown): handle CooldownFunction in config file by @SebastianSedzik in #1565

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.1.0...v19.1.1

`v19.1.0`

Compare Source

What's Changed

feat(cooldown): support for cooldown predicate function by @SebastianSedzik in #1563

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v19.0.0...v19.1.0

`v19.0.0`

Compare Source

Breaking

node >= 20 required
--workspaces (plural) short option -ws changed to -w
- Better compatibility with commander v13
- Short option should always be a single character for consistency
- Replaces the short option for --workspace (singular)
- --workspace (singular) no longer has a short option.

`v18.2.0`

Compare Source

Thanks to community members for raising awareness and to @SebastianSedzik for the implementation.

See: #1547

Feature: `--cooldown`

Usage:

ncu --cooldown [n]
ncu -c [n]

The cooldown option helps protect against supply chain attacks by requiring package versions to be published at least the given number of days before considering them for upgrade.

Note that previous stable versions will not be suggested. The package will be completely ignored if its latest published version is within the cooldown period. This is due to a limitation of the npm registry, which does not provide a way to query previous stable versions.

Example:

Let's examine how cooldown works with a package that has these versions available:

1.0.0          Released 7 days ago    (initial version)
1.1.0          Released 6 days ago    (minor update)
1.1.1          Released 5 days ago    (patch update)
1.2.0          Released 5 days ago    (minor update)
2.0.0-beta.1   Released 5 days ago    (beta release)
1.2.1          Released 4 days ago    (patch update)
1.3.0          Released 4 days ago    (minor update) [latest]
2.0.0-beta.2   Released 3 days ago    (beta release)
2.0.0-beta.3   Released 2 days ago    (beta release) [beta]

With default target (latest):

$ ncu --cooldown 5

No update will be suggested because:

Latest version (1.3.0) is only 4 days old.
Cooldown requires versions to be at least 5 days old
Use --cooldown 4 or lower to allow this update

With @beta/@tag target:

$ ncu --cooldown 3 --target @&#8203;beta

No update will be suggested because:

Current beta (2.0.0-beta.3) is only 2 days old
Cooldown requires versions to be at least 3 days old
Use --cooldown 2 or lower to allow this update

With other targets:

$ ncu --cooldown 5 --target greatest|newest|minor|patch|semver

Each target will select the best version that is at least 5 days old:

greatest → 1.2.0        (highest version number outside cooldown)
newest   → 2.0.0-beta.1 (most recently published version outside cooldown)
minor    → 1.2.0        (highest minor version outside cooldown)
patch    → 1.1.1        (highest patch version outside cooldown)

Note for latest/tag targets:

⚠️ For packages that update frequently (e.g. daily releases), using a long cooldown period (7+ days) with the default --target latest or --target @tag may prevent all updates since new versions will be published before older ones meet the cooldown requirement. Please consider this when setting your cooldown period.

Breaking

The only breaking change in v18 is with the -g/--global flag.

npm-check-updates -g will now auto-detect your package manager based on the execution path. Previously, it defaulted to npm.

yarn dlx ncu -g --packageManager yarn → yarn dlx ncu -g
pnpm dlx ncu --global --packageManager pnpm → pnpm dlx ncu -g
bunx ncu -g--packageManager pnpm → bunx ncu -g

If for some reason you were running ncu -g with an alternative package manager and relying on it checking the global npm packages, you will need to now explicitly specify npm:

ncu -g → ncu -g--packageManager npm

Thanks to @LuisFerLCC for the improvement (#1514).

https://github.com/raineorshine/npm-check-updates/compare/v17.1.18...v18.0.0

`v17.1.18`

Compare Source

Breaking

The only breaking change in v18 is with the -g/--global flag.

npm-check-updates -g will now auto-detect your package manager based on the execution path. Previously, it defaulted to npm.

yarn dlx ncu -g --packageManager yarn → yarn dlx ncu -g
pnpm dlx ncu --global --packageManager pnpm → pnpm dlx ncu -g
bunx ncu -g--packageManager pnpm → bunx ncu -g

If for some reason you were running ncu -g with an alternative package manager and relying on it checking the global npm packages, you will need to now explicitly specify npm:

ncu -g → ncu -g--packageManager npm

Thanks to @LuisFerLCC for the improvement (#1514).

https://github.com/raineorshine/npm-check-updates/compare/v17.1.18...v18.0.0

`v17.1.17`

Compare Source

`v17.1.16`

Compare Source

`v17.1.15`

Compare Source

`v17.1.14`

Compare Source

`v17.1.13`

Compare Source

`v17.1.12`

Compare Source

`v17.1.11`

Compare Source

`v17.1.10`

Compare Source

`v17.1.9`

Compare Source

`v17.1.8`

Compare Source

`v17.1.7`

Compare Source

`v17.1.6`

Compare Source

`v17.1.5`

Compare Source

`v17.1.4`

Compare Source

`v17.1.3`

Compare Source

`v17.1.2`

Compare Source

`v17.1.1`

Compare Source

Breaking

The only breaking change in v18 is with the -g/--global flag.

npm-check-updates -g will now auto-detect your package manager based on the execution path. Previously, it defaulted to npm.

yarn dlx ncu -g --packageManager yarn → yarn dlx ncu -g
pnpm dlx ncu --global --packageManager pnpm → pnpm dlx ncu -g
bunx ncu -g--packageManager pnpm → bunx ncu -g

If for some reason you were running ncu -g with an alternative package manager and relying on it checking the global npm packages, you will need to now explicitly specify npm:

ncu -g → ncu -g--packageManager npm

Thanks to @LuisFerLCC for the improvement (#1514).

https://github.com/raineorshine/npm-check-updates/compare/v17.1.18...v18.0.0

`v17.1.0`

Compare Source

`v17.0.6`

Compare Source

`v17.0.5`

Compare Source

`v17.0.4`

Compare Source

`v17.0.3`

Compare Source

`v17.0.2`

Compare Source

`v17.0.1`

Compare Source

`v17.0.0`

Compare Source

Breaking

Require node >= 18.18.0
Deprecated versions are no longer excluded by default, as it requires fetching package info for every published version, significantly slowing down upgrades.
- You can opt in with --no-deprecated in the CLI or deprecated: false in your ncurc config.
In workspaces mode, --root is now set by default (#1353)
- To not check the root package.json, use --no-root.
If you have a packageManager field in your package.json, it is now upgraded by default (#1390)
- Use --dep prod,dev,optional for the old behavior.

https://github.com/raineorshine/npm-check-updates/compare/v16.14.20...v17.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [npm-check-updates](https://github.com/raineorshine/npm-check-updates) | [`^16.14.20` → `^22.0.0`](https://renovatebot.com/diffs/npm/npm-check-updates/16.14.20/22.2.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/npm-check-updates/22.2.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/npm-check-updates/16.14.20/22.2.0?slim=true) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/3) for more information. --- ### Release Notes <details> <summary>raineorshine/npm-check-updates (npm-check-updates)</summary> ### [`v22.2.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v22.2.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v22.1.1...v22.2.0) #### What's Changed - build(deps): bump fast-uri from 3.1.0 to 3.1.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1724](https://github.com/raineorshine/npm-check-updates/pull/1724) - feat: add cooldown format and improved visibility for skipped updates by [@onemen](https://github.com/onemen) in [#1711](https://github.com/raineorshine/npm-check-updates/pull/1711) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v22.1.1...v22.2.0> ### [`v22.1.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v22.1.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v22.1.0...v22.1.1) #### What's Changed - npm: decorateTagPackumentWithTimeAndName accepts undefined tagPackument by [@SAY-5](https://github.com/SAY-5) in [#1706](https://github.com/raineorshine/npm-check-updates/pull/1706) - fix: skip intersects() for non-semver specs like catalog: in peer dep checks by [@terminalchai](https://github.com/terminalchai) in [#1710](https://github.com/raineorshine/npm-check-updates/pull/1710) - Bump yaml from 2.8.3 to 2.8.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1714](https://github.com/raineorshine/npm-check-updates/pull/1714) - Bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.59.1 to 8.59.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1716](https://github.com/raineorshine/npm-check-updates/pull/1716) - Bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.59.1 to 8.59.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1718](https://github.com/raineorshine/npm-check-updates/pull/1718) - build(deps-dev): bump eslint-plugin-n from 17.24.0 to 18.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1715](https://github.com/raineorshine/npm-check-updates/pull/1715) - build(deps-dev): bump zod from 4.3.6 to 4.4.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#1719](https://github.com/raineorshine/npm-check-updates/pull/1719) - build(deps-dev): bump globals from 17.5.0 to 17.6.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1717](https://github.com/raineorshine/npm-check-updates/pull/1717) - build(deps-dev): bump hosted-git-info from 9.0.2 to 9.0.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#1720](https://github.com/raineorshine/npm-check-updates/pull/1720) #### New Contributors - [@SAY-5](https://github.com/SAY-5) made their first contribution in [#1706](https://github.com/raineorshine/npm-check-updates/pull/1706) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v22.1.0...v22.1.1> ### [`v22.1.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v22.1.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v22.0.1...v22.1.0) #### What's Changed - fix: make --dep and --format robust to PowerShell arg rewriting (comma-or-space-delimited) by [@onemen](https://github.com/onemen) in [#1694](https://github.com/raineorshine/npm-check-updates/pull/1694) - Bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.59.0 to 8.59.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1697](https://github.com/raineorshine/npm-check-updates/pull/1697) - Bump eslint-plugin-promise from 7.2.1 to 7.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1702](https://github.com/raineorshine/npm-check-updates/pull/1702) - Bump [@types/bun](https://github.com/types/bun) from 1.3.12 to 1.3.13 by [@dependabot](https://github.com/dependabot)\[bot] in [#1699](https://github.com/raineorshine/npm-check-updates/pull/1699) - Bump vite-bundle-analyzer from 1.3.7 to 1.3.8 by [@dependabot](https://github.com/dependabot)\[bot] in [#1700](https://github.com/raineorshine/npm-check-updates/pull/1700) - Enhance `--format time`: consistent caching, interactive support, and human-readable timestamps by [@onemen](https://github.com/onemen) in [#1693](https://github.com/raineorshine/npm-check-updates/pull/1693) - fix: ignore .pnpm-store in glob traversal to prevent OOM with --deep by [@Copilot](https://github.com/Copilot) in [#1705](https://github.com/raineorshine/npm-check-updates/pull/1705) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v22.0.1...v22.1.0> ### [`v22.0.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v22.0.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v22.0.0...v22.0.1) #### What's Changed - fix: suppress cooldown config log messages when JSON output is active by [@Copilot](https://github.com/Copilot) in [#1692](https://github.com/raineorshine/npm-check-updates/pull/1692) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v22.0.0...v22.0.1> ### [`v22.0.0`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#2200---2026-04-25) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v21.0.3...v22.0.0) ### [`v21.0.3`](https://github.com/raineorshine/npm-check-updates/releases/tag/v21.0.3) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3) #### What's Changed - fix: chmod build/cli.js executable after vite build by [@raineorshine](https://github.com/raineorshine) in [#1678](https://github.com/raineorshine/npm-check-updates/pull/1678) - fix: migrate from rc-config-loader to cosmiconfig for ESM config support (closes [#1674](https://github.com/raineorshine/npm-check-updates/issues/1674)) by [@onemen](https://github.com/onemen) in [#1676](https://github.com/raineorshine/npm-check-updates/pull/1676) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3> ### [`v21.0.2`](https://github.com/raineorshine/npm-check-updates/releases/tag/v21.0.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2) #### What's Changed - fix: skip intersects() for non-semver specs like catalog: in peer dep checks by [@terminalchai](https://github.com/terminalchai) in [#1675](https://github.com/raineorshine/npm-check-updates/pull/1675) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2> ### [`v21.0.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v21.0.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1) #### What's Changed - fix: seeing catalog when inside workspaces by [@Zamiell](https://github.com/Zamiell) in [#1656](https://github.com/raineorshine/npm-check-updates/pull/1656) - Bump [@types/bun](https://github.com/types/bun) from 1.3.11 to 1.3.12 by [@dependabot](https://github.com/dependabot)\[bot] in [#1663](https://github.com/raineorshine/npm-check-updates/pull/1663) - Bump globals from 17.4.0 to 17.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1664](https://github.com/raineorshine/npm-check-updates/pull/1664) - Bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.58.1 to 8.58.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1665](https://github.com/raineorshine/npm-check-updates/pull/1665) - Bump prettier from 3.8.1 to 3.8.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1667](https://github.com/raineorshine/npm-check-updates/pull/1667) - Bump verdaccio from 6.4.0 to 6.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1669](https://github.com/raineorshine/npm-check-updates/pull/1669) - Bump sinon from 21.0.3 to 21.1.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1668](https://github.com/raineorshine/npm-check-updates/pull/1668) - Skip CI on PRs with no file changes by [@Copilot](https://github.com/Copilot) in [#1672](https://github.com/raineorshine/npm-check-updates/pull/1672) - Bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.58.1 to 8.58.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1666](https://github.com/raineorshine/npm-check-updates/pull/1666) - Fix wrong message when all packages are within cooldown window by [@Copilot](https://github.com/Copilot) in [#1671](https://github.com/raineorshine/npm-check-updates/pull/1671) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1> ### [`v21.0.0`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#2100---2026-04-14) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v20.0.2...v21.0.0) ##### ⚠️ Breaking Changes This is a **major breaking change** with significant architectural updates. ##### ESM Migration & Module System - **Pure ESM:** Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8. - **Import Syntax:** Programmatic usage now requires named imports or namespace imports. - **Old:** `import ncu from 'npm-check-updates'` - **New:** `import * as ncu from 'npm-check-updates'` or `import { run } from 'npm-check-updates'` - **Node.js Requirements:** Now requires `^20.19.0 || ^22.12.0 || >=24.0.0`. This is required for native `require(esm)` support and the Rolldown engine. - **npm Requirements:** Minimum version increased to `>=10.0.0`. ##### Configuration Files (`.ncurc.js`) - Files named `.ncurc.js` that use `module.exports` will now fail in projects that are `"type": "module"`. - **Fix:** Rename these files to `.ncurc.cjs` or convert them to use `export default`. ##### Dependency Updates (Pure ESM versions) | Package | Old Version | New Version | | :----------------- | :---------- | :---------- | | `camelcase` | `^6.3.0` | `^9.0.0` | | `chai` | `^4.3.10` | `^6.2.2` | | `chai-as-promised` | `^7.1.2` | `^8.0.2` | | `find-up` | `5.0.0` | `8.0.0` | | `p-map` | `^4.0.0` | `^7.0.4` | | `untildify` | `^4.0.0` | `^6.0.0` | ##### Tooling & Build Changes - **Vite 8 Upgrade:** Migrated to Vite 8 with the new Rust-based **Rolldown** bundler (10-30x faster builds). - **TypeScript 6.0:** Adopted latest type-system features and performance improvements. - **Strip ANSI:** Replaced `strip-ansi` with Node.js built-in `util.stripVTControlCharacters`. - **Test Runner:** Replaced `vite-node` with `tsx` for TypeScript support in ESM context. *** ##### Migration Guide If you are upgrading to v21 from earlier versions: ##### 1. Environment Check - Ensure you meet the new Node.js requirement: `^20.19.0 || ^22.12.0 || >=24.0.0`. - Update npm to at least `10.0.0`. ##### 2. Update Configuration Files If you have a `.ncurc.js` file: - **Option A:** Rename it to `.ncurc.cjs`. - **Option B:** Convert it to ESM: ```js import { defineConfig } from 'npm-check-updates' export default defineConfig({ upgrade: true, filter: name => name.startsWith('@myorg/'), }) ``` ##### 3. Update Programmatic Usage If you import `npm-check-updates` in your scripts: - **ESM:** Change `import ncu from ...` to `import * as ncu from 'npm-check-updates'`. - **CommonJS:** Ensure you are destructuring the named exports or using the full object: ```js const ncu = require('npm-check-updates') // Use ncu.run(...) ``` *** ##### Testing Tests now use `tsx` for module loading. When running tests manually: ```sh mocha --node-option import=tsx 'test/**/*.test.ts' ``` Or use the npm script: ```sh npm test ``` ##### Related Issues & PRs [PR 1649](https://github.com/raineorshine/npm-check-updates/pull/1649) *** ### [`v20.0.2`](https://github.com/raineorshine/npm-check-updates/releases/tag/v20.0.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v20.0.1...v20.0.2) #### What's Changed - Show auto-detected cooldown source at normal log level; fix test isolation by [@bayraak](https://github.com/bayraak) in [#1662](https://github.com/raineorshine/npm-check-updates/pull/1662) #### New Contributors - [@bayraak](https://github.com/bayraak) made their first contribution in [#1662](https://github.com/raineorshine/npm-check-updates/pull/1662) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v20.0.1...v20.0.2> ### [`v20.0.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v20.0.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v20.0.1) #### What's Changed - Add CI workflow to verify build output is committed by [@Copilot](https://github.com/Copilot) in [#1645](https://github.com/raineorshine/npm-check-updates/pull/1645) - Bump lodash-es from 4.17.23 to 4.18.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1647](https://github.com/raineorshine/npm-check-updates/pull/1647) - Add Node v24 to test workflow by [@Copilot](https://github.com/Copilot) in [#1608](https://github.com/raineorshine/npm-check-updates/pull/1608) - feat: remove pre-push git hook by [@Zamiell](https://github.com/Zamiell) in [#1658](https://github.com/raineorshine/npm-check-updates/pull/1658) - feat: add verbose output when packages are skipped due to cooldown by [@Copilot](https://github.com/Copilot) in [#1659](https://github.com/raineorshine/npm-check-updates/pull/1659) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v20.0.1> ### [`v20.0.0`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#2000---2026-03-31) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.6.6...v20.0.0) ##### Auto Cooldown The cooldown option is now automatically applied from the respective package manager's config: - **npm** - `min-release-age` ([#1632](https://github.com/raineorshine/npm-check-updates/issues/1632)) - **yarn** - `npmMinimalAgeGate` (excluding `npmPreapprovedPackages`) ([#1643](https://github.com/raineorshine/npm-check-updates/issues/1643)) - **pnpm** - `minimumReleaseAge` (excluding `minimumReleaseAgeExclude`) ([#1639](https://github.com/raineorshine/npm-check-updates/issues/1639)) Why is this a breaking change? - If you use any of the above configs, npm-check-updates will automatically exclude releases that do not exceed the specified minimum age as described in <https://github.com/raineorshine/npm-check-updates#cooldown>. - Otherwise, you don't need to do anything. ##### Other changes - Bump strip-ansi from 7.1.2 to 7.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1620](https://github.com/raineorshine/npm-check-updates/pull/1620) - Bump lodash and [@types/lodash](https://github.com/types/lodash) by [@dependabot](https://github.com/dependabot)\[bot] in [#1615](https://github.com/raineorshine/npm-check-updates/pull/1615) - Bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.44.1 to 8.57.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1619](https://github.com/raineorshine/npm-check-updates/pull/1619) - Bump hosted-git-info from 9.0.0 to 9.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1622](https://github.com/raineorshine/npm-check-updates/pull/1622) - Bump glob and markdownlint-cli by [@dependabot](https://github.com/dependabot)\[bot] in [#1625](https://github.com/raineorshine/npm-check-updates/pull/1625) - update dependencies; fix vulnerabilities by [@onemen](https://github.com/onemen) in [#1630](https://github.com/raineorshine/npm-check-updates/pull/1630) - Potential fix for code scanning alert no. 13: Incomplete string escaping or encoding by [@raineorshine](https://github.com/raineorshine) in [#1640](https://github.com/raineorshine/npm-check-updates/pull/1640) ### [`v19.6.6`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.6.6) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.6.5...v19.6.6) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.6.5...v19.6.6> ### [`v19.6.5`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.6.5) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.6.3...v19.6.5) #### What's Changed - fix(pnpm): fallback from pnpm.cmd to pnpm on Windows for non-standard installs by [@terminalchai](https://github.com/terminalchai) in [#1606](https://github.com/raineorshine/npm-check-updates/pull/1606) #### New Contributors - [@terminalchai](https://github.com/terminalchai) made their first contribution in [#1606](https://github.com/raineorshine/npm-check-updates/pull/1606) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.6.3...v19.6.5> ### [`v19.6.3`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.6.3) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.6.2...v19.6.3) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.6.2...v19.6.3> ### [`v19.6.2`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.6.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.6.1...v19.6.2) #### What's Changed - fix: fix overwrites pnpm-workspace.yaml and .yarnrc.yml into json by [@MKruschke](https://github.com/MKruschke) in [#1589](https://github.com/raineorshine/npm-check-updates/pull/1589) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.6.1...v19.6.2> ### [`v19.6.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.6.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.6.0...v19.6.1) #### What's Changed - Swap diff service. by [@diegocr](https://github.com/diegocr) in [#1603](https://github.com/raineorshine/npm-check-updates/pull/1603) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.6.0...v19.6.1> ### [`v19.6.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.6.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.5.0...v19.6.0) #### What's Changed - Display link to compare the changes between package versions (--format diff) by [@diegocr](https://github.com/diegocr) in [#1602](https://github.com/raineorshine/npm-check-updates/pull/1602) #### New Contributors - [@diegocr](https://github.com/diegocr) made their first contribution in [#1602](https://github.com/raineorshine/npm-check-updates/pull/1602) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.5.0...v19.6.0> ### [`v19.5.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.5.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.4.1...v19.5.0) #### What's Changed - feat(homepage): Add `--format homepage` option to print homepage. e.g. ```sh $ ncu --format homepage ... mocha ^11.7.2 → ^11.7.5 https://mochajs.org/ npm-registry-fetch ^19.0.0 → ^19.1.1 prettier ^3.6.2 → ^3.8.1 https://prettier.io ... ``` **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.4.1...v19.5.0> ### [`v19.4.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.4.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.4.0...v19.4.1) #### What's Changed - Fixed a small `cooldown` regression with number types in the ncurc **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.4.0...v19.4.1> ### [`v19.4.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.4.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.3.2...v19.4.0) #### What's Changed - feat(cooldown): support cooldown strings like "7d", "12h", "30m" by [@aversini](https://github.com/aversini) in [#1598](https://github.com/raineorshine/npm-check-updates/pull/1598) #### New Contributors - [@aversini](https://github.com/aversini) made their first contribution in [#1598](https://github.com/raineorshine/npm-check-updates/pull/1598) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.3.2...v19.4.0> ### [`v19.3.2`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.3.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.3.1...v19.3.2) #### What's Changed - docs: close code tag instead of reopening another one by [@sod](https://github.com/sod) in [#1588](https://github.com/raineorshine/npm-check-updates/pull/1588) - fix(tests): resolve EBUSY errors on Windows by retrying directory removal by [@Zamiell](https://github.com/Zamiell) in [#1590](https://github.com/raineorshine/npm-check-updates/pull/1590) #### New Contributors - [@sod](https://github.com/sod) made their first contribution in [#1588](https://github.com/raineorshine/npm-check-updates/pull/1588) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.3.1...v19.3.2> ### [`v19.3.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.3.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.3.0...v19.3.1) #### What's Changed - fix(catalog): use the right yarn config name by [@MKruschke](https://github.com/MKruschke) in [#1586](https://github.com/raineorshine/npm-check-updates/pull/1586) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.3.0...v19.3.1> ### [`v19.3.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.3.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.2.1...v19.3.0) #### What's Changed - feat: support yarn catalogs by [@MKruschke](https://github.com/MKruschke) in [#1582](https://github.com/raineorshine/npm-check-updates/pull/1582) - Fixed default catalog behavior. - See discussion here: [#1582 (comment)](https://github.com/raineorshine/npm-check-updates/pull/1582#pullrequestreview-3613957102) - If you think this is wrong, please open an issue. **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.2.1...v19.3.0> ### [`v19.2.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.2.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.2.0...v19.2.1) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.2.0...v19.2.1> ### [`v19.2.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.2.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.1.2...v19.2.0) #### What's Changed - Add [--format dep](https://github.com/raineorshine/npm-check-updates/issues/166#issuecomment-3638071061) - Add interactive mode keyboard controls to docs by [@jsoref](https://github.com/jsoref) in [#1577](https://github.com/raineorshine/npm-check-updates/pull/1577) - Spelling by [@jsoref](https://github.com/jsoref) in [#1578](https://github.com/raineorshine/npm-check-updates/pull/1578) #### New Contributors - [@jsoref](https://github.com/jsoref) made their first contribution in [#1577](https://github.com/raineorshine/npm-check-updates/pull/1577) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.1.2...v19.2.0> ### [`v19.1.2`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.1.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.1.1...v19.1.2) #### What's Changed - fix: support singular 'catalog' field in pnpm-workspace.yaml by [@afonsojramos](https://github.com/afonsojramos) in [#1572](https://github.com/raineorshine/npm-check-updates/pull/1572) #### New Contributors - [@afonsojramos](https://github.com/afonsojramos) made their first contribution in [#1572](https://github.com/raineorshine/npm-check-updates/pull/1572) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.1.1...v19.1.2> ### [`v19.1.1`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.1.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.1.0...v19.1.1) #### What's Changed - fix(cooldown): handle `CooldownFunction` in config file by [@SebastianSedzik](https://github.com/SebastianSedzik) in [#1565](https://github.com/raineorshine/npm-check-updates/pull/1565) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.1.0...v19.1.1> ### [`v19.1.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v19.1.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v19.0.0...v19.1.0) #### What's Changed - feat(cooldown): support for cooldown predicate function by [@SebastianSedzik](https://github.com/SebastianSedzik) in [#1563](https://github.com/raineorshine/npm-check-updates/pull/1563) **Full Changelog**: <https://github.com/raineorshine/npm-check-updates/compare/v19.0.0...v19.1.0> ### [`v19.0.0`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#1900---2025-09-28) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.3.1...v19.0.0) ##### Breaking - node `>= 20` required - `--workspaces` (plural) short option `-ws` changed to `-w` - Better compatibility with commander [v13](https://github.com/tj/commander.js/releases/tag/v13.0.0) - Short option should always be a single character for consistency - **Replaces the short option for `--workspace` (singular)** - **`--workspace` (singular) no longer has a short option.** *** ### [`v18.3.1`](https://github.com/raineorshine/npm-check-updates/compare/v18.3.0...v18.3.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.3.0...v18.3.1) ### [`v18.3.0`](https://github.com/raineorshine/npm-check-updates/compare/v18.2.1...v18.3.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.2.1...v18.3.0) ### [`v18.2.1`](https://github.com/raineorshine/npm-check-updates/compare/v18.2.0...v18.2.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.2.0...v18.2.1) ### [`v18.2.0`](https://github.com/raineorshine/npm-check-updates/releases/tag/v18.2.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.1.1...v18.2.0) Thanks to community members for raising awareness and to [@SebastianSedzik](https://github.com/SebastianSedzik) for the implementation. See: [#1547](https://github.com/raineorshine/npm-check-updates/issues/1547) #### Feature: `--cooldown` Usage: ``` ncu --cooldown [n] ncu -c [n] ``` The cooldown option helps protect against supply chain attacks by requiring package versions to be published at least the given number of days before considering them for upgrade. Note that previous stable versions will not be suggested. The package will be completely ignored if its latest published version is within the cooldown period. This is due to a limitation of the npm registry, which does not provide a way to query previous stable versions. Example: Let's examine how cooldown works with a package that has these versions available: ``` 1.0.0 Released 7 days ago (initial version) 1.1.0 Released 6 days ago (minor update) 1.1.1 Released 5 days ago (patch update) 1.2.0 Released 5 days ago (minor update) 2.0.0-beta.1 Released 5 days ago (beta release) 1.2.1 Released 4 days ago (patch update) 1.3.0 Released 4 days ago (minor update) [latest] 2.0.0-beta.2 Released 3 days ago (beta release) 2.0.0-beta.3 Released 2 days ago (beta release) [beta] ``` With default target (latest): ```js $ ncu --cooldown 5 ``` No update will be suggested because: - Latest version (1.3.0) is only 4 days old. - Cooldown requires versions to be at least 5 days old - Use `--cooldown 4` or lower to allow this update With `@beta`/`@tag` target: ```js $ ncu --cooldown 3 --target @beta ``` No update will be suggested because: - Current beta (2.0.0-beta.3) is only 2 days old - Cooldown requires versions to be at least 3 days old - Use `--cooldown 2` or lower to allow this update With other targets: ```js $ ncu --cooldown 5 --target greatest|newest|minor|patch|semver ``` Each target will select the best version that is at least 5 days old: ``` greatest → 1.2.0 (highest version number outside cooldown) newest → 2.0.0-beta.1 (most recently published version outside cooldown) minor → 1.2.0 (highest minor version outside cooldown) patch → 1.1.1 (highest patch version outside cooldown) ``` Note for latest/tag targets: > :warning: For packages that update frequently (e.g. daily releases), using a long cooldown period (7+ days) with the default `--target latest` or `--target @tag` may prevent all updates since new versions will be published before older ones meet the cooldown requirement. Please consider this when setting your cooldown period. ### [`v18.1.1`](https://github.com/raineorshine/npm-check-updates/compare/v18.1.0...v18.1.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.1.0...v18.1.1) ### [`v18.1.0`](https://github.com/raineorshine/npm-check-updates/compare/v18.0.3...v18.1.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.0.3...v18.1.0) ### [`v18.0.3`](https://github.com/raineorshine/npm-check-updates/compare/v18.0.2...v18.0.3) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.0.2...v18.0.3) ### [`v18.0.2`](https://github.com/raineorshine/npm-check-updates/compare/v18.0.1...v18.0.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.0.1...v18.0.2) ### [`v18.0.1`](https://github.com/raineorshine/npm-check-updates/compare/v18.0.0...v18.0.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v18.0.0...v18.0.1) ### [`v18.0.0`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#1800---2025-04-21) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.18...v18.0.0) ##### Breaking The **only** breaking change in v18 is with the `-g/--global` flag. `npm-check-updates -g` will now auto-detect your package manager based on the execution path. Previously, it defaulted to `npm`. - `yarn dlx ncu -g --packageManager yarn` → `yarn dlx ncu -g` - `pnpm dlx ncu --global --packageManager pnpm` → `pnpm dlx ncu -g` - `bunx ncu -g--packageManager pnpm` → `bunx ncu -g` If for some reason you were running `ncu -g` with an alternative package manager and relying on it checking the global `npm` packages, you will need to now explicitly specify npm: - `ncu -g` → `ncu -g--packageManager npm` Thanks to [@LuisFerLCC](https://github.com/LuisFerLCC) for the improvement ([#1514](https://github.com/raineorshine/npm-check-updates/issues/1514)). <https://github.com/raineorshine/npm-check-updates/compare/v17.1.18...v18.0.0> ### [`v17.1.18`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#1800---2025-04-21) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.17...v17.1.18) ##### Breaking The **only** breaking change in v18 is with the `-g/--global` flag. `npm-check-updates -g` will now auto-detect your package manager based on the execution path. Previously, it defaulted to `npm`. - `yarn dlx ncu -g --packageManager yarn` → `yarn dlx ncu -g` - `pnpm dlx ncu --global --packageManager pnpm` → `pnpm dlx ncu -g` - `bunx ncu -g--packageManager pnpm` → `bunx ncu -g` If for some reason you were running `ncu -g` with an alternative package manager and relying on it checking the global `npm` packages, you will need to now explicitly specify npm: - `ncu -g` → `ncu -g--packageManager npm` Thanks to [@LuisFerLCC](https://github.com/LuisFerLCC) for the improvement ([#1514](https://github.com/raineorshine/npm-check-updates/issues/1514)). <https://github.com/raineorshine/npm-check-updates/compare/v17.1.18...v18.0.0> ### [`v17.1.17`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.16...v17.1.17) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.16...v17.1.17) ### [`v17.1.16`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.15...v17.1.16) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.15...v17.1.16) ### [`v17.1.15`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.14...v17.1.15) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.14...v17.1.15) ### [`v17.1.14`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.13...v17.1.14) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.13...v17.1.14) ### [`v17.1.13`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.12...v17.1.13) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.12...v17.1.13) ### [`v17.1.12`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.11...v17.1.12) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.11...v17.1.12) ### [`v17.1.11`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.10...v17.1.11) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.10...v17.1.11) ### [`v17.1.10`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.9...v17.1.10) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.9...v17.1.10) ### [`v17.1.9`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.8...v17.1.9) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.8...v17.1.9) ### [`v17.1.8`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.7...v17.1.8) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.7...v17.1.8) ### [`v17.1.7`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.6...v17.1.7) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.6...v17.1.7) ### [`v17.1.6`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.5...v17.1.6) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.5...v17.1.6) ### [`v17.1.5`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.4...v17.1.5) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.4...v17.1.5) ### [`v17.1.4`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.3...v17.1.4) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.3...v17.1.4) ### [`v17.1.3`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.2...v17.1.3) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.2...v17.1.3) ### [`v17.1.2`](https://github.com/raineorshine/npm-check-updates/compare/v17.1.1...v17.1.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.1...v17.1.2) ### [`v17.1.1`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#1800---2025-04-21) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.1.0...v17.1.1) ##### Breaking The **only** breaking change in v18 is with the `-g/--global` flag. `npm-check-updates -g` will now auto-detect your package manager based on the execution path. Previously, it defaulted to `npm`. - `yarn dlx ncu -g --packageManager yarn` → `yarn dlx ncu -g` - `pnpm dlx ncu --global --packageManager pnpm` → `pnpm dlx ncu -g` - `bunx ncu -g--packageManager pnpm` → `bunx ncu -g` If for some reason you were running `ncu -g` with an alternative package manager and relying on it checking the global `npm` packages, you will need to now explicitly specify npm: - `ncu -g` → `ncu -g--packageManager npm` Thanks to [@LuisFerLCC](https://github.com/LuisFerLCC) for the improvement ([#1514](https://github.com/raineorshine/npm-check-updates/issues/1514)). <https://github.com/raineorshine/npm-check-updates/compare/v17.1.18...v18.0.0> ### [`v17.1.0`](https://github.com/raineorshine/npm-check-updates/compare/v17.0.6...v17.1.0) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.0.6...v17.1.0) ### [`v17.0.6`](https://github.com/raineorshine/npm-check-updates/compare/v17.0.5...v17.0.6) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.0.5...v17.0.6) ### [`v17.0.5`](https://github.com/raineorshine/npm-check-updates/compare/v17.0.4...v17.0.5) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.0.4...v17.0.5) ### [`v17.0.4`](https://github.com/raineorshine/npm-check-updates/compare/v17.0.3...v17.0.4) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.0.3...v17.0.4) ### [`v17.0.3`](https://github.com/raineorshine/npm-check-updates/compare/v17.0.2...v17.0.3) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.0.2...v17.0.3) ### [`v17.0.2`](https://github.com/raineorshine/npm-check-updates/compare/v17.0.1...v17.0.2) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.0.1...v17.0.2) ### [`v17.0.1`](https://github.com/raineorshine/npm-check-updates/compare/v17.0.0...v17.0.1) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v17.0.0...v17.0.1) ### [`v17.0.0`](https://github.com/raineorshine/npm-check-updates/blob/HEAD/CHANGELOG.md#1700---2024-07-31) [Compare Source](https://github.com/raineorshine/npm-check-updates/compare/v16.14.20...v17.0.0) ##### Breaking - Require node >= 18.18.0 - Deprecated versions are no longer excluded by default, as it requires fetching package info for every published version, significantly slowing down upgrades. - You can opt in with `--no-deprecated` in the CLI or `deprecated: false` in your `ncurc` config. - In workspaces mode, `--root` is now set by default ([#1353](https://github.com/raineorshine/npm-check-updates/issues/1353)) - To **not** check the root package.json, use `--no-root`. - If you have a [packageManager](https://nodejs.org/api/packages.html#packagemanager) field in your package.json, it is now upgraded by default ([#1390](https://github.com/raineorshine/npm-check-updates/issues/1390)) - Use `--dep prod,dev,optional` for the old behavior. <https://github.com/raineorshine/npm-check-updates/compare/v16.14.20...v17.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

jessebot (Migrated from git.smallhack.org) approved these changes

2026-05-17 10:59:48 +00:00

No reviewers

jessebot

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

oeng/matrix-alertmanager!15

No description provided.

Rows
Columns

Update dependency npm-check-updates to v22 #15

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

⚠️ Breaking Changes

ESM Migration & Module System

Configuration Files (.ncurc.js)

Dependency Updates (Pure ESM versions)

Tooling & Build Changes

Migration Guide

1. Environment Check

2. Update Configuration Files

3. Update Programmatic Usage

Testing

Related Issues & PRs

What's Changed

New Contributors

What's Changed

Auto Cooldown

Other changes

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

Breaking

Feature: --cooldown

Breaking

Breaking

Breaking

Breaking

Configuration

Configuration Files (`.ncurc.js`)

Feature: `--cooldown`