From 6acd28124e9d1104e56df20d24d15e4ba16c24e4 Mon Sep 17 00:00:00 2001 From: Arno V Date: Wed, 29 Jul 2026 18:53:18 -0400 Subject: [PATCH] build: gate ncu at 7h, not 24h, to match minimumReleaseAge MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `cooldown` returned the bare number 1. ncu reads a bare number as DAYS, so this repo has been asking for 24 hours while its own pnpm-workspace.yaml asks for 7 (`minimumReleaseAge: 420`) and every other repo in the fleet returns the string "7h". The effect is a silent no-op rather than an error: anything published 7-24h ago is invisible here but visible everywhere else, so the deps-train reports "no non-major updates" for node-cli while bumping the same package next door. Today that hid two updates — pnpm 11.18.0 (15h old) and better-sqlite3 13.0.2 (20h old). This looks like a missed migration: the other seven repos moved from `1` to "7h" and kept the old "1 day" prose in their comments, which is still there. node-cli kept the old value too. Audited all eight repos across 495 dependency names — every cooldown now resolves to 0h (in-house scopes) or 7h, and node-cli was the only outlier. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01Pm4oPDceHFw3DN6MQG8wbz --- .ncurc.cjs | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/.ncurc.cjs b/.ncurc.cjs index 64ccdb4e..d1c9a110 100644 --- a/.ncurc.cjs +++ b/.ncurc.cjs @@ -6,7 +6,7 @@ const { defineConfig } = require("npm-check-updates"); * * This configuration file is used by the `ncu` command to check for package updates. * It enables interactive mode, workspace support, and root package updates for - * major and minor versions that have been released at least 1 day ago. + * major and minor versions that have been released at least 7 hours ago. * */ module.exports = defineConfig({ @@ -27,15 +27,17 @@ module.exports = defineConfig({ }, /** - * Set cooldown to 1 day but skip it for our packages. + * Mirror pnpm-workspace.yaml's `minimumReleaseAge: 420` (7 hours), skipping it + * for our own packages. Keep this a duration STRING: ncu reads a bare number + * as days, so `1` here would silently gate at 24h instead of 7h. * @param packageName The name of the dependency. - * @returns Cooldown days restriction for given package. + * @returns Cooldown restriction for given package. */ cooldown: (packageName) => { return packageName.startsWith("@versini") || packageName.startsWith("@node-cli") || packageName.startsWith("@sassysaint") ? 0 - : 1; + : "7h"; }, });