Skip to content

Upgrading release-it 19 to 20

Review needed19.2.4 → 20.2.1Security2New2Changed9Fixed10Other10

Full comparisonBack to release-it
Review neededUpgrade verdict

9 behavior changes and 2 security fixes.

In plain terms
  • Updates dependencies to fix known security vulnerabilities.
  • Updates an internal networking library to a newer version that fixes known security problems.
Must act 2 items need code or config changes

Node.js requirement changed in 20.0.0-0: ^20.12.0 || >=22.0.0 → ^20.19.0 || ^22.13.0 || >=24.0.0.

Adds @inquirer/prompts 8.4.2, defu ^6.1.7.

Drops @nodeutils/defaults-deep, inquirer.

Installs 157 packages in all (was 182).

Also installs fast-string-truncated-width, fast-string-width, fast-wrap-ansi, is-in-ssh, powershell-utils, quickjs-wasi.

No longer installs @tootallnate/quickjs-emscripten, ansi-styles, color-convert, color-name, cross-spawn, emoji-regex, execa, get-stream, human-signals, is-fullwidth-code-point, is-stream, isexe, lodash, merge-stream, mimic-fn and 10 more.

Moves @inquirer/ansi 1.0.2 → 2.0.10, @inquirer/checkbox 4.3.2 → 5.2.8, @inquirer/confirm 5.1.21 → 6.3.5, @inquirer/core 10.3.2 → 12.0.6, @inquirer/editor 4.2.23 → 5.3.6, @inquirer/expand 4.0.23 → 5.1.8, @inquirer/external-editor 1.0.3 → 3.0.7, @inquirer/figures 1.0.15 → 2.0.10, @inquirer/input 4.3.1 → 5.1.9, @inquirer/number 3.0.23 → 4.2.6, @inquirer/password 4.0.23 → 5.2.5, @inquirer/prompts 7.10.1 → 8.4.2, @inquirer/rawlist 4.1.11 → 5.3.8, @inquirer/search 3.2.2 → 4.3.6, @inquirer/select 4.4.2 → 5.2.8 and 26 more. Your build may pick other versions.

What you must change

Security2
Resolves dependency security alerts.
20.2.1GitHub ReleaseSummarizedView source
Upgrades undici from 6.23.0 to 7.24.3 to resolve security vulnerabilities.
undici
20.0.0-0GitHub ReleaseSummarizedView source

API changes

Generated by DepDelta from published .d.ts files. Not mixed with prose notes.

  • changed: property Config.npm?: { publish?: boolean; publishPath?: string; publishArgs?: Array<any>; publishPackageManager?: 'npm' | 'pnpm' | 'bun'; tag?: any; otp?: any; ignoreVersion?: boolean; allowSameVersion?: boolean; versionArgs?: Array<any>; skipChecks?: boolean; timeout?: number } → property Config.npm?: { publish?: boolean; publishPath?: string; publishArgs?: Array<any>; publishPackageManager?: 'npm' | 'pnpm' | 'bun'; tag?: any; stage?: boolean; otp?: any; ignoreVersion?: boolean; allowSameVersion?: boolean; versionArgs?: Array<any>; skipChecks?: boolean; timeout?: number } | false
  • added: property Config.quiet?: boolean