chore(repo): Update dependency zx to v8.4.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
zx (source)	8.3.0 -> 8.4.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

google/zx (zx)

v8.4.1: – Rusty Elbow

Compare Source

Logger enhancements are arriving in this release. #​1119 #​1122 #​1123 #​1125

• You can customize the output by defining your own formatters for each log entry kind.

$.log.formatters = {
  cmd: (entry: LogEntry) => `CMD: ${entry.cmd}`,
  fetch: (entry: LogEntry) => `FETCH: ${entry.url}`
  //...
}

• Cmd highlighter now should properly detect bins and arguments. If still not, please report it in #​1122
• Switched to TS 5.8 #​1120
• Applied zizmor to check GHA workflows #​1126
• Prettier is now enabled as a pre-commit hook #​1118

v8.4.0: – Drip Detective

Compare Source

Try the new batch of enhancements: npm i zx@8.4.0 https://www.npmjs.com/package/zx/v/8.4.0

Changes

• The CLI option --prefer-local now allows linking both external binaries and packages #​1116 #​1117

const cwd = tmpdir()
const external = tmpdir()
await fs.outputJson(path.join(external, 'node_modules/a/package.json'), {
  name: 'a',
  version: '1.0.0',
  type: 'module',
  exports: './index.js',
})
await fs.outputFile(
  path.join(external, 'node_modules/a/index.js'),
  `
export const a = 'AAA'
`
)
const script = `
import {a} from 'a'
console.log(a);
`
const out = await $`zx --cwd=${cwd} --prefer-local=${external} --test <<< ${script}`
assert.equal(out.stdout, 'AAA\n')

• The quote has been slightly changed for a conner case, when zx literal gets an array.
  #​999 #​1113

const p = $({prefix: '', postfix: ''})`echo ${[1, '', '*', '2']}`

// before
p.cmd //  `echo 1  $'*' 2`) 

// after
p.cmd //  `echo 1 $'' $'*' 2`) 

• Provided support for custom script extensions via CLI #​1104 #​1105

zx script.zx           # Unknown file extension "\.zx"
zx --ext=mjs script.zx # OK

• Enhanced nothrow option to suppress any errors #​1108 #​1109

const err = new Error('BrokenSpawn')
const o = await $({
  nothrow: true,
  spawn() {
    throw err
  },
})`echo foo`
o.ok       // false
o.exitCode // null
o.message  // BrokenSpawn...
o.cause    // err

• @types/node and @types/fs-extra deps replaced with triple-slash typing refs #​1102
• Made ProcessOutput iterable #​1101
• Handle inappropriate ProcessPromise instantiation #​1097 #​1098
• Pass origin error as ProcessOuput cause #​1110
• Separated build and release steps #​1106
• Internal improvements
  • Introduced API bus #​1083
  • Optimized ProcessOutput inners #​1096 #​1095
  • Pinned deps #​1099 #​1100
  • Switched to explicit .ts extensions for relative imports #​1111

v8.3.2: – Clogged Drain

Compare Source

Restrics unsafe vals usage on dotenv.stringify #​1093 #​1094

v8.3.1: – Perfect Seal

Compare Source

The release essence: introduced full-featured .env support #​461 → #​1060 #​1052 #​1043 #​1037 #​1032 #​1030 #​1022

API

envapi is a tiny 100 LOC dotenv-inspired parser and serializer that we've integrated into zx.

import { dotenv, fs } from 'zx'

// parse
const env = dotenv.parse('A=A\nFOO=BAR') // { A: 'A', FOO: 'BAR' }

// serialize
const raw = dotenv.stringify(env) // A=A\nFOO=BAR
await fs.writeFile('.env', raw)

// load
dotenv.load('.env') // { A: 'A', FOO: 'BAR' }

// update the process.env
dotenv.config('.env')
process.env.A // A

CLI

zx --env .env script.mjs
zx --env-file .env script.mjs

QnA

— Why not use dotenv directly?
— 1) Size does matter 2) We'd like to avoid internal vaults.

— Why not load .env by default?
— 1) Explicit is better than implicit 2) Runtime itself (like bun) may provide the feature.

Chore

• Provided stdall piping #​1033
• Exposed ProcessPromise fullCmd and unique id #​1035
• Simplified internal regexps #​1040 #​1038
• Removed zx globals from unit tests scope #​1039
• Added check if tempfile exists #​1041
• Added ts support in markdown #​1042
• Enabled CodeQL and OSV scanners #​1011
• Configured pre-push git hooks #​1044
• Explicitly declared permissions for test.yml #​1045
• Mentioned halt and run API in docs #​1046
• Fixed timeout option handling for corner cases #​1049
• Allowed killSignal setting via env vars #​1054
• Added diagnostic_channel to built-ins list #​1056
• Enhanced logger: added id field and introduced end event #​1057 #​1058
• Made nothrown() toggleable #​1066 #​1029
• Handle ZX_REPL_HISTORY envvar #​1065
• Fixed file:// protocol check #​1064
• Accept mode option for tmpdir and tmpfile #​1063
• Enhanced deno support #​1062 #​1061
• Optimized markdown parser #​1068
• Applied zizmor suggestions #​1067
• Minor code improvements #​1070 #​1069
• Optimized output buffers joining #​1072
• Fixed predefined _timeoutSignal override #​1075
• Exposed ProcessPromise stage #​1077 #​967
• Aligned script processing flows (CLI) #​1078
• Enhanced $ options tests #​1079

---

Configuration

📅 Schedule: Branch creation - "before 7am on the first day of the week" in timezone GMT, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
clerk-js-sandbox	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Mar 18, 2025 0:38am

[changeset-bot]

⚠️ No Changeset found

Latest commit: 00dcea6

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.