Update dependency npm-check-updates to v21 - autoclosed

This MR contains the following updates:

Package	Change	Age	Confidence
npm-check-updates	20.0.0 → 21.0.3

---

Release Notes

raineorshine/npm-check-updates (npm-check-updates)

v21.0.3

Compare Source

What's Changed

• fix: chmod build/cli.js executable after vite build by @​raineorshine in #​1678
• fix: migrate from rc-config-loader to cosmiconfig for ESM config support (closes #​1674) by @​onemen in #​1676

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3

v21.0.2

Compare Source

What's Changed

• fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @​terminalchai in #​1675

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2

v21.0.1

Compare Source

What's Changed

• fix: seeing catalog when inside workspaces by @​Zamiell in #​1656
• Bump @​types/bun from 1.3.11 to 1.3.12 by @​dependabot[bot] in #​1663
• Bump globals from 17.4.0 to 17.5.0 by @​dependabot[bot] in #​1664
• Bump @​typescript-eslint/parser from 8.58.1 to 8.58.2 by @​dependabot[bot] in #​1665
• Bump prettier from 3.8.1 to 3.8.2 by @​dependabot[bot] in #​1667
• Bump verdaccio from 6.4.0 to 6.5.0 by @​dependabot[bot] in #​1669
• Bump sinon from 21.0.3 to 21.1.2 by @​dependabot[bot] in #​1668
• Skip CI on MRs with no file changes by @​Copilot in #​1672
• Bump @​typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 by @​dependabot[bot] in #​1666
• Fix wrong message when all packages are within cooldown window by @​Copilot in #​1671

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1

v21.0.0

Compare Source

⚠️ Breaking Changes

This is a major breaking change with significant architectural updates.

ESM Migration & Module System

• Pure ESM: Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.
• Import Syntax: Programmatic usage now requires named imports or namespace imports.
  • Old: import ncu from 'npm-check-updates'
  • New: import * as ncu from 'npm-check-updates' or import { run } from 'npm-check-updates'
• Node.js Requirements: Now requires ^20.19.0 || ^22.12.0 || >=24.0.0. This is required for native require(esm) support and the Rolldown engine.
• npm Requirements: Minimum version increased to >=10.0.0.

Configuration Files (.ncurc.js)

• Files named .ncurc.js that use module.exports will now fail in projects that are "type": "module".
• Fix: Rename these files to .ncurc.cjs or convert them to use export default.

Dependency Updates (Pure ESM versions)

Package	Old Version	New Version
camelcase	^6.3.0	^9.0.0
chai	^4.3.10	^6.2.2
chai-as-promised	^7.1.2	^8.0.2
find-up	5.0.0	8.0.0
p-map	^4.0.0	^7.0.4
untildify	^4.0.0	^6.0.0

Tooling & Build Changes

• Vite 8 Upgrade: Migrated to Vite 8 with the new Rust-based Rolldown bundler (10-30x faster builds).
• TypeScript 6.0: Adopted latest type-system features and performance improvements.
• Strip ANSI: Replaced strip-ansi with Node.js built-in util.stripVTControlCharacters.
• Test Runner: Replaced vite-node with tsx for TypeScript support in ESM context.

---

Migration Guide

If you are upgrading to v21 from earlier versions:

1. Environment Check

• Ensure you meet the new Node.js requirement: ^20.19.0 || ^22.12.0 || >=24.0.0.
• Update npm to at least 10.0.0.

2. Update Configuration Files

If you have a .ncurc.js file:

• Option A: Rename it to .ncurc.cjs.

• Option B: Convert it to ESM:

  import { defineConfig } from 'npm-check-updates'
  
  export default defineConfig({
    upgrade: true,
    filter: name => name.startsWith('@​myorg/'),
  })

3. Update Programmatic Usage

If you import npm-check-updates in your scripts:

• ESM: Change import ncu from ... to import * as ncu from 'npm-check-updates'.
• CommonJS: Ensure you are destructuring the named exports or using the full object:

const ncu = require('npm-check-updates')
// Use ncu.run(...)

---

Testing

Tests now use tsx for module loading. When running tests manually:

mocha --node-option import=tsx 'test/**/*.test.ts'

Or use the npm script:

npm test

Related Issues & MRs

MR 1649

---

v20.0.2

Compare Source

What's Changed

• Show auto-detected cooldown source at normal log level; fix test isolation by @​bayraak in #​1662

New Contributors

• @​bayraak made their first contribution in #​1662

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v20.0.1...v20.0.2

v20.0.1

Compare Source

What's Changed

• Add CI workflow to verify build output is committed by @​Copilot in #​1645
• Bump lodash-es from 4.17.23 to 4.18.1 by @​dependabot[bot] in #​1647
• Add Node v24 to test workflow by @​Copilot in #​1608
• feat: remove pre-push git hook by @​Zamiell in #​1658
• feat: add verbose output when packages are skipped due to cooldown by @​Copilot in #​1659

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v20.0.1

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Mend Renovate.