List of small issues I've come across in my monorepo

[hilja]

aube outdated

1. The -r --recursive flag doesn't include the project root, and you can't pass -w --workspace
2. Nit: line break between the tables would be nice :)
3. Nit: pnpm uses @pnpm/colorize-semver-diff to colorize the version number depending on its semver scope

$ aube outdated -r
Importer  Package      Current     Wanted      Latest
core      drizzle-orm  1.0.0-rc.1  1.0.0-rc.1  0.45.2
core      lighthouse   13.2.0      13.2.0      13.3.0
core      zod          4.4.2       4.4.2       4.4.3
Importer  Package      Current     Wanted      Latest
db        drizzle-kit  1.0.0-rc.1  1.0.0-rc.1  0.31.10
db        drizzle-orm  1.0.0-rc.1  1.0.0-rc.1  0.45.2
db        zod          4.4.2       4.4.2       4.4.3
Importer  Package         Current     Wanted      Latest
lgh       drizzle-kit     1.0.0-rc.1  1.0.0-rc.1  0.31.10
lgh       drizzle-orm     1.0.0-rc.1  1.0.0-rc.1  0.45.2
lgh       lighthouse      13.2.0      13.2.0      13.3.0
lgh       msw             2.14.4      2.14.4      2.14.6
lgh       puppeteer-core  24.42.0     24.42.0     24.43.1
lgh       zod             4.4.2       4.4.2       4.4.3
Importer  Package            Current     Wanted      Latest
psl       @hono/node-server  1.19.14     1.19.14     2.0.2
psl       @tailwindcss/vite  4.2.4       4.2.4       4.3.0
psl       drizzle-kit        1.0.0-rc.1  1.0.0-rc.1  0.31.10
psl       drizzle-orm        1.0.0-rc.1  1.0.0-rc.1  0.45.2
psl       esbuild            0.25.12     0.28.0      0.28.0
psl       lighthouse         13.2.0      13.2.0      13.3.0
psl       msw                2.14.4      2.14.4      2.14.6
psl       tailwind-merge     3.5.0       3.5.0       3.6.0
psl       tailwindcss        4.2.4       4.2.4       4.3.0
psl       vite               8.0.11      8.0.11      8.0.12
psl       zod                4.4.2       4.4.2       4.4.3

aube update

1. Update command shows every package, not just the ones which are out-of-date. pnpm shows the current version and what it's going to upda to, latest in the case of -L
2. It shows internal workspace deps
3. -r doesn't include root
4. updateConfig.ignoreDependencies should also exclude the package from this list

   updateConfig:
     ignoreDependencies:
       - puppeteer-core
       - zod

$ aube update -L -i -r
Choose which dependencies to update
Space to toggle, Enter to confirm
 > • devDependencies @electric-sql/pglite catalog: (0.4.5)
   • dependencies core workspace:* (not locked)
   • devDependencies drizzle-kit catalog: (1.0.0-rc.1)
   • dependencies drizzle-orm catalog: (1.0.0-rc.1)
   • dependencies nanoid catalog: (3.3.12)
   • devDependencies serialize-error catalog: (13.0.1)
   • devDependencies stripe catalog: (22.1.1)
   • dependencies zod catalog: (3.25.76)

The update command in pnpm is pretty borken too (but in different ways), has been for years :)

Lockfile not updated when package.json updated manually

In a workspace package.json, if I move package from dependencies:

{
  "dependencies": {
    "source-map-support": "catalog:",
    "msw": "catalog:"
  },
  "devDependencies": {
    "@types/source-map-support": "catalog:",
  }
}

To devDependencies:

{
  "dependencies": {
    "source-map-support": "catalog:",
  },
  "devDependencies": {
    "@types/source-map-support": "catalog:",
    "msw": "catalog:"
  }
}

And hit aube i, aube-lock.yaml was not updated. I had to do a full nuke: aube clean -l && aube i. Is this a feature? pnpm updates lock file.

Install progress tracker looks broken on Mac

Shell: fish, terminal: ghostty.

On docker it looks more like it should (I think) local run of BUILDKIT_PROGRESS=plain docker compose -f docker-lgh.yml up -d --build (on slow 4g connection):

For completeness, in GitHub Actions looks like it should:

Thanks for all the fast fixes so far!

[jdx]

Thanks for the consolidated bug list — opened https://github.com/endevco/aube/pull/610 with fixes for everything except the screenshot. Quick map:

Lockfile not updated when a dep moves between sections — root cause: LockfileGraph::check_drift_for_importer only compared specifiers per name, so a same-spec move from dependencies → devDependencies reported Fresh and prefer-frozen mode skipped the resolver. The drift check now also compares the importer dep's dep_type against the manifest's effective section (resolver priority: prod > dev > optional). Bats regression added.

aube outdated

1. -r now includes the workspace root by default, and -w/--workspace is accepted as the explicit opt-in spelling. (pnpm parity here is strict — root needs include-workspace-root: true in yaml — but for read-only audits the surprise of "where are my root deps?" felt worse than the parity divergence.)
2. Blank line between per-importer tables.
3. Colorized Wanted/Latest columns mirroring @pnpm/colorize-semver-diff: red major / cyan minor / green patch / magenta prerelease. Width math runs on raw strings so column alignment stays correct under ANSI escapes.

aube update

1. The -i picker now pre-fetches packuments, drops deps with no drift, hides workspace:/link:/file: specifiers, and renders rows as bucket name current → target so each toggle is self-explanatory.
2. Internal workspace deps are filtered out (same predicate).
3. -r includes the workspace root.
4. updateConfig.ignoreDependencies was being read from cwd/pnpm-workspace.yaml, but update -r retargets cwd to each sub-package — the unwalked load returned an empty yaml and silently dropped every entry. That's why zod showed up in your picker. The settings load now walks up to the workspace root first.

Progress UI on Mac/fish/Ghostty — your screenshot was a font-rendering trap: █ (FULL BLOCK) fills its cell top-to-bottom, so consecutive heartbeat lines stacked into one solid block. Switched to heavy/light box-drawing horizontals (━/─); they sit mid-cell so stacked ticks read as separate progress lines instead of a blob. The Docker BUILDKIT_PROGRESS=plain and GitHub Actions screenshots looked OK because they emit fewer heartbeat ticks during their fast wall-clock window — same code path, just less stacking.

Will land on merge. Thanks for the careful repro!

This comment was generated by Claude.

[jdx]

Quick correction on the progress-UI bit: I dropped that change from #610 after looking at your Docker screenshot side-by-side with the Mac one. Docker uses the same █/░ chars and stacks them edge-to-edge the same way — it just looks "right" because every tick has a slightly different fill so you see a staircase. Your Mac install was fast enough that only ~4 ticks landed and several had identical fill, so they merged into 2 dim blocks + 2 green blocks. That's █ working as designed, not a font-rendering bug.

The real fix is heartbeat-layer dedupe (don't emit a tick that's a near-duplicate of the previous one), which I'll do as a follow-up. The other four fixes from #610 are unaffected.

This comment was generated by Claude.