Uh oh!
There was an error while loading. Please reload this page.
chore(deps): update dependency jscpd to v4.3.0 - #229
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
Contributor
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Up to standards ✅🟢 Issues |
| Metric | Results |
|---|---|
| Complexity | 0 |
| Duplication | 0 |
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewerTIP This summary will be updated as you push new changes.
renovateBotforce-pushed
the
renovate/jscpd-4.x-lockfile
branch
from
May 12, 2026 08:40
0886e4a to
612af4cComparerenovateBotforce-pushed
the
renovate/jscpd-4.x-lockfile
branch
2 times, most recently
from
May 15, 2026 17:43
12e0d4f to
0b3832dComparerenovateBotforce-pushed
the
renovate/jscpd-4.x-lockfile
branch
from
May 15, 2026 21:00
0b3832d to
90f5afbComparerenovateBotforce-pushed
the
renovate/jscpd-4.x-lockfile
branch
from
May 17, 2026 12:56
90f5afb to
398abebComparerenovateBotforce-pushed
the
renovate/jscpd-4.x-lockfile
branch
from
May 25, 2026 18:45
398abeb to
e743d77ComparerenovateBotforce-pushed
the
renovate/jscpd-4.x-lockfile
branch
from
June 7, 2026 17:50
e743d77 to
ece9b15ComparerenovateBotforce-pushed
the
renovate/jscpd-4.x-lockfile
branch
from
August 11, 2026 22:33
ece9b15 to
0c388fbComparerenovateBotforce-pushed
the
renovate/jscpd-4.x-lockfile
branch
from
August 13, 2026 17:56
0c388fb to
92c33f1Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.0.9→4.3.0Release Notes
kucherenko/jscpd (jscpd)
v4.3.0Compare Source
New Features
--colors/--no-colorsflags and acolorsconfig key to override. Precedence: explicit flag/config →FORCE_COLOR→NO_COLOR→ TTY detection. The statistics table is covered too. (#893, #899)--allowed-origin/--allowed-host) on both/mcpand the REST API, a loopback default bind (127.0.0.1), and a hardened start/stop lifecycle. (#902)Bug Fixes
ai,consoleFull); jscpd-server shares the same wiring. (#900)NO_COLOR/FORCE_COLORand TTY detection like the CLI.Security
pnpm-workspace.yaml, where pnpm 10 actually reads them. CI installs use--frozen-lockfileso lockfile drift fails loudly.Thank You ❤️
This release was shaped by community contributions — huge thanks to:
v4.2.5Compare Source
Bug Fixes
tokenswas always reported as0in JSON output; now computed from token positions (end.position - start.position) (#801)..gitignorefiles in parent directories up to the repo root are now read and combined with scan-directory.gitignorefiles. Also reads.git/info/excludeand the globalcore.excludesFilefor full parity with Git's ignore resolution (#741).cli.minTokens, etc.) to thecli.opts()API required by Commander v8+. The--no-gitignore/--gitignoreflag handling was rewritten to use Commander's native negation support instead ofrawArgsinspection.v4.2.4Compare Source
v4.2.3Compare Source
v4.2.2Compare Source
v4.2.1Compare Source
v4.2.0Compare Source
Breaking Changes
.vuefiles are no longer tokenized asmarkup. Each block is now dispatched to its own sub-format:<script>→javascript,<script lang="ts">→typescript,<template>→markup,<style>→css,<style lang="scss">→scss,<style lang="less">→less. Clone reports for.vuefiles now appear under these resolved sub-format names. Any tooling or configuration that relied on.vueclones being reported undermarkupmust be updated.--formatsExtsusers — custom mappings that pointed.vuetomarkup(e.g."formatsExts": { "markup": ["vue"] }) will no longer take effect because.vueis handled by the dedicatedvueformat processor. Remove or update such mappings.New Features
prismjsnpm package with a self-contained reprism-based grammar engine. ~11.5% faster tokenization on real projects (avg 1126 ms → 997 ms on a 548-file, 223-format scan)..vue), Svelte (.svelte), Astro (.astro), and Markdown files are now tokenized per-block/per-section. A<script>block in a.vuefile can match a.tsfile; a fenced code block in Markdown can match a.pyfile./usr/bin/env python3) are auto-detected by their#!shebang line and tokenized in the correct language.--store-path— configure a custom directory for the LevelDB cache, eliminating collisions when multiple jscpd processes run in parallel on the same machine.--skipComments— shorthand flag for--mode weak, which strips comments before detection.--formats-names— map specific filenames (e.g.Makefile,Dockerfile) to a detection format.Bug Fixes
@jscpd/core#728) — RabinKarp flushed the pending clone on a store hit at end-of-file instead of on a miss. Files that are complete copies of each other were undetected. Fixed.@jscpd/tokenizer#737) — the Lisp string regex/"(?:[^"\\]*|\\.)*"/could catastrophically backtrack (O(2ⁿ)) on unterminated strings. Replaced with a linear/"(?:[^"\\]|\\[\s\S])*"/pattern.package.json(#739) —readJSONSyncthrew an unhandledSyntaxErrorwhenpackage.jsoncontained invalid JSON, killing the process. Now emits a warning and continues with an empty config.vue) as the store namespace for all SFC blocks, preventing a<script>block in one.vuefile from ever matching a<script>block in another. The namespace now reflects each block's resolved sub-format.@jscpd/tokenizer.Known Limitations
v4.1.1Compare Source
v4.1.0Compare Source
New Features
aireporter that produces compact, token-efficient clone output specifically designed for feeding results into language models and AI tooling. Use--reporters aito activate it.jscpd://statisticsresource and supports a recheck endpoint so AI agents can trigger a rescan without restarting the process.--noTipsflag — suppress the usage-tip messages that appear after a detection run.Performance
spark-md5dependency has been removed in favour of a lighter built-in implementation. Startup time and memory usage are noticeably reduced on large codebases.reprismsyntax library with the officialprismjsnpm package, shrinking the installed footprint.Bug Fixes
start.lineexpectation for weak-mode clone detection.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.