panates / rman / 39327011481

95%

main: 95%

push

github

feat(deps): hold back the upgrade npm refuses, keep the rest

`deps -u` used to put every manifest back when `npm install --dry-run`
answered ERESOLVE, so one release npm cannot install cost every other
upgrade. Measured on panates/syncbridge-cloud: @hookform/resolvers@6.0.0
installs nowhere with npm - its own optional peers want effect ^4 and,
through @typeschema/main, effect ^3 - and the run failed over it.

DependencyUpdater grows an optional `blame(refusal, plan)`. npm's answer
is the line under "Could not resolve dependency:"; an upgrade it names at
the version this run moved it to is marked held with that line as the
reason, and the rest are written and verified again. With no verdict line,
every upgrade the output names at its new version is held; with none at
all, everything is put back as before. `verify` now keeps every error line
- the verdict sat past the 20 it kept - and the command prints at most 40.

Under -u --json the document is printed after the resolver, so a held
upgrade reads `held`.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

4524 of 4946 branches covered (91.47%)

Branch coverage included in aggregate %.

92 of 94 new or added lines in 3 files covered. (97.87%)

24286 of 25427 relevant lines covered (95.51%)

258.55 hits per line