chore: release main

.release-please-manifest.json

@@ -1,12 +1,12 @@
 {
-  "packages/aa": "4.1.0",
-  "packages/allow-scripts": "3.0.3",
-  "packages/webpack": "0.2.1-beta.0",
-  "packages/browserify": "17.0.6",
-  "packages/core": "15.2.1",
-  "packages/lavapack": "6.1.2",
-  "packages/laverna": "1.0.0",
-  "packages/node": "8.0.5",
+  "packages/aa": "4.2.0",
+  "packages/allow-scripts": "3.0.4",
+  "packages/webpack": "0.3.0-beta.0",
+  "packages/browserify": "17.0.7",
+  "packages/core": "15.3.0",
+  "packages/lavapack": "6.1.3",
+  "packages/laverna": "1.1.0",
+  "packages/node": "8.0.6",
   "packages/preinstall-always-fail": "2.0.0",
-  "packages/tofu": "7.2.2"
+  "packages/tofu": "7.2.3"
 }

packages/aa/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [4.2.0](https://github.com/LavaMoat/LavaMoat/compare/aa-v4.1.0...aa-v4.2.0) (2024-03-26)
+
+
+### Features
+
+* **aa:** Log unknown package dirs in error message ([0fa3283](https://github.com/LavaMoat/LavaMoat/commit/0fa32832a1022c160a8685d56683bac652ce67a5))
+
+
+### Bug Fixes
+
+* **test/aa:** platform-agnostic path separator ([f4b6eaf](https://github.com/LavaMoat/LavaMoat/commit/f4b6eaf302bc80b017362901a7237e542d143280))
+
 ## [4.1.0](https://github.com/LavaMoat/LavaMoat/compare/aa-v4.0.1...aa-v4.1.0) (2024-02-29)
 
 

packages/aa/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lavamoat/aa",
-  "version": "4.1.0",
+  "version": "4.2.0",
   "description": "LavaMoat's secure package naming convention",
   "author": "kumavis",
   "license": "MIT",

packages/allow-scripts/CHANGELOG.md

@@ -6,6 +6,15 @@
   * dependencies
     * @lavamoat/aa bumped from ^4.0.1 to ^4.1.0
 
+## [3.0.4](https://github.com/LavaMoat/LavaMoat/compare/allow-scripts-v3.0.3...allow-scripts-v3.0.4) (2024-03-26)
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @lavamoat/aa bumped from ^4.1.0 to ^4.2.0
+
 ## [3.0.2](https://github.com/LavaMoat/LavaMoat/compare/allow-scripts-v3.0.1...allow-scripts-v3.0.2) (2024-02-07)
 
 

packages/allow-scripts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lavamoat/allow-scripts",
-  "version": "3.0.3",
+  "version": "3.0.4",
   "description": "A tool for running only the dependency lifecycle hooks specified in an allowlist.",
   "repository": {
     "type": "git",
@@ -39,7 +39,7 @@
     "test:run": "ava"
   },
   "dependencies": {
-    "@lavamoat/aa": "^4.1.0",
+    "@lavamoat/aa": "^4.2.0",
     "@npmcli/run-script": "7.0.4",
     "bin-links": "4.0.3",
     "npm-normalize-package-bin": "3.0.1",

packages/browserify/CHANGELOG.md

@@ -33,6 +33,23 @@
     * @lavamoat/lavapack bumped from ^6.1.1 to ^6.1.2
     * lavamoat-core bumped from ^15.2.0 to ^15.2.1
 
+## [17.0.7](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-browserify-v17.0.6...lavamoat-browserify-v17.0.7) (2024-03-26)
+
+
+### Bug Fixes
+
+* **deps:** update dependency duplexify to v4.1.3 ([c7afaf4](https://github.com/LavaMoat/LavaMoat/commit/c7afaf4a2eecb16784fb5185ee9d69f696034e4d))
+* **deps:** update dependency readable-stream to v4 ([2a2c624](https://github.com/LavaMoat/LavaMoat/commit/2a2c624866cb7699ca3c1cf765f44118d2b88f1f))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @lavamoat/aa bumped from ^4.1.0 to ^4.2.0
+    * @lavamoat/lavapack bumped from ^6.1.2 to ^6.1.3
+    * lavamoat-core bumped from ^15.2.1 to ^15.3.0
+
 ## [17.0.5](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-browserify-v17.0.4...lavamoat-browserify-v17.0.5) (2024-02-29)
 
 

packages/browserify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lavamoat-browserify",
-  "version": "17.0.6",
+  "version": "17.0.7",
   "description": "browserify plugin for sandboxing dependencies with LavaMoat",
   "repository": {
     "type": "git",
@@ -24,19 +24,19 @@
   "scripts": {
     "build:ses": "(cd ./node_modules/ses && npm install && npm run build && cp ./dist/ses.umd.js ../../lib/)",
     "lint:deps": "depcheck",
-    "test": "npm run test:ava",
+    "test": "npm run test:prep && npm run test:ava",
     "test:ava": "ava",
     "test:prep": "cross-env WRITE_AUTO_POLICY=1 node ./test/fixtures/secureBundling/run.js && cross-env WRITE_AUTO_POLICY=1 node ./test/fixtures/secureBundling/build.js >/dev/null"
   },
   "dependencies": {
-    "@lavamoat/aa": "^4.1.0",
-    "@lavamoat/lavapack": "^6.1.2",
+    "@lavamoat/aa": "^4.2.0",
+    "@lavamoat/lavapack": "^6.1.3",
     "browser-resolve": "2.0.0",
     "concat-stream": "2.0.0",
     "convert-source-map": "2.0.0",
     "duplexify": "4.1.3",
     "json-stable-stringify": "1.1.1",
-    "lavamoat-core": "^15.2.1",
+    "lavamoat-core": "^15.3.0",
     "pify": "5.0.0",
     "readable-stream": "4.5.2",
     "source-map": "0.7.4",

packages/core/CHANGELOG.md

@@ -6,6 +6,30 @@
   * dependencies
     * lavamoat-tofu bumped from ^7.2.1 to ^7.2.2
 
+## [15.3.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-core-v15.2.1...lavamoat-core-v15.3.0) (2024-03-26)
+
+
+### Features
+
+* **core:** add external package name fallback function to options in generatePolicy, use it in webpack ([8a3a0a6](https://github.com/LavaMoat/LavaMoat/commit/8a3a0a621eba439d028a5c185f898441a7888695))
+
+
+### Bug Fixes
+
+* **core:** remove circular ref to ambient.ts ([b370419](https://github.com/LavaMoat/LavaMoat/commit/b3704195a8a85aa88a2057dc5381cd9d297689cb))
+* **core:** update LavamoatModuleRecord to use default initializer args ([ff3991c](https://github.com/LavaMoat/LavaMoat/commit/ff3991cce7962bd9d004024c7bb7306288882f62))
+* **core:** update vendored lockdown.umd.js ([6a062e6](https://github.com/LavaMoat/LavaMoat/commit/6a062e6521ec28f876742bc723869b5782756f7f))
+* **deps:** update dependency type-fest to v4.10.3 ([95c0ae3](https://github.com/LavaMoat/LavaMoat/commit/95c0ae39d39fd75c4f5b487f5a5bcfdc78bf046e))
+* **deps:** update dependency type-fest to v4.12.0 ([29d157c](https://github.com/LavaMoat/LavaMoat/commit/29d157cea5885ad3a3b919a305fd63a6a216508f))
+* **deps:** update dependency type-fest to v4.13.1 ([ec89820](https://github.com/LavaMoat/LavaMoat/commit/ec898201439590242b27ff0c122369a9044386bf))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * lavamoat-tofu bumped from ^7.2.2 to ^7.2.3
+
 ## [15.2.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-core-v15.1.2...lavamoat-core-v15.2.0) (2024-02-29)
 
 

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lavamoat-core",
-  "version": "15.2.1",
+  "version": "15.3.0",
   "description": "LavaMoat kernel and utils",
   "repository": {
     "type": "git",
@@ -37,7 +37,7 @@
   "dependencies": {
     "@babel/types": "7.24.0",
     "json-stable-stringify": "1.1.1",
-    "lavamoat-tofu": "^7.2.2",
+    "lavamoat-tofu": "^7.2.3",
     "merge-deep": "3.0.3",
     "type-fest": "4.13.1"
   },

packages/lavapack/CHANGELOG.md

@@ -24,6 +24,20 @@
   * dependencies
     * lavamoat-core bumped from ^15.2.0 to ^15.2.1
 
+## [6.1.3](https://github.com/LavaMoat/LavaMoat/compare/lavapack-v6.1.2...lavapack-v6.1.3) (2024-03-26)
+
+
+### Bug Fixes
+
+* **deps:** update dependency readable-stream to v4 ([2a2c624](https://github.com/LavaMoat/LavaMoat/commit/2a2c624866cb7699ca3c1cf765f44118d2b88f1f))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * lavamoat-core bumped from ^15.2.1 to ^15.3.0
+
 ## [6.1.0](https://github.com/LavaMoat/LavaMoat/compare/lavapack-v6.0.3...lavapack-v6.1.0) (2024-02-07)
 
 

packages/lavapack/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lavamoat/lavapack",
-  "version": "6.1.2",
+  "version": "6.1.3",
   "description": "LavaMoat packer",
   "repository": {
     "type": "git",
@@ -33,7 +33,7 @@
     "convert-source-map": "2.0.0",
     "espree": "9.6.1",
     "json-stable-stringify": "1.1.1",
-    "lavamoat-core": "^15.2.1",
+    "lavamoat-core": "^15.3.0",
     "readable-stream": "4.5.2",
     "through2": "4.0.2",
     "umd": "3.0.3"

packages/laverna/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [1.1.0](https://github.com/LavaMoat/LavaMoat/compare/laverna-v1.0.0...laverna-v1.1.0) (2024-03-26)
+
+
+### Features
+
+* **laverna:** automatic support for CI ([7358d2a](https://github.com/LavaMoat/LavaMoat/commit/7358d2acca2a54df603c98df5f96a09447e883bf))
+
+
+### Bug Fixes
+
+* **deps:** update dependency type-fest to v4.10.3 ([95c0ae3](https://github.com/LavaMoat/LavaMoat/commit/95c0ae39d39fd75c4f5b487f5a5bcfdc78bf046e))
+* **deps:** update dependency type-fest to v4.12.0 ([29d157c](https://github.com/LavaMoat/LavaMoat/commit/29d157cea5885ad3a3b919a305fd63a6a216508f))
+* **deps:** update dependency type-fest to v4.13.1 ([ec89820](https://github.com/LavaMoat/LavaMoat/commit/ec898201439590242b27ff0c122369a9044386bf))
+* **laverna:** fix cycle in type declarations ([8847688](https://github.com/LavaMoat/LavaMoat/commit/88476886a4130ce2898df7b95821991713726043))
+* **laverna:** understands bad npm API ([bdcaa1a](https://github.com/LavaMoat/LavaMoat/commit/bdcaa1a944de6d56cf6e30646aed7f577a5d6620))
+
 ## 1.0.0 (2024-02-07)
 
 

packages/laverna/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lavamoat/laverna",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Publish multiple workspaces (that's all)",
   "repository": {
     "type": "git",