Update dependency @yao-pkg/pkg to v6.22.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@yao-pkg/pkg	6.5.1 → 6.22.0

---

Release Notes

yao-pkg/pkg (@​yao-pkg/pkg)

v6.22.0

Compare Source

Features

• bump fetch 3.6.5 with nodejs 22.23.2, 24.18.1, 26.5.1 (#​291) (e1a96ae)

Bug Fixes

• prelude: throw instead of crashing on Intl.Segmenter with small-icu (#​290) (cbc7629)

Chores

• ci: use node 24.x for release, drop npm upgrade step (c1e10f5)

v6.21.0

Compare Source

Features

• build hooks (preBuild, postBuild, per-file transform) (#​273) (3667383), closes package.json#pkg
• bump fetch 3.6.3 with node 22.22.3, 24.15.0 and 26.2.0 (#​277) (546bbf0)
• bump fetch 3.6.4 with nodejs 22.23.1, 24.18.0, 26.4.0 (#​288) (3520d26)

Bug Fixes

• detector: pick up six more silent-drop shapes (re-exports, new URL, multi-arg path.join, path.resolve(__dirname,…), createRequire aliases, import.meta.resolve) (#​272) (ea66111), closes #​269
• sea: set process.pkg in worker threads (#​270) (376e2a4)

Test added

• fetch-all: track supported node majors, drop node20 (#​286) (1b0002f)
• split unit tests into node:test suite, add c8 coverage (#​271) (26f10a3), closes #​267 #​267

Chores

• add worktrees to gitignore (d585e27)
• deps: bump esbuild to >=0.28.1 to fix security vuln (#​282) (#​284) (68f41d5)

v6.20.0

Compare Source

v6.19.0

Compare Source

Features

• config: accept CLI-only build flags in pkg config (#​263) (a8e91df)

Bug Fixes

• deps: update @​roberts_lando/vfs to version 0.3.3 (#​266) (d155e24)
• detector: stop silent dependency drops in SEA mode (ESM parse, dynamic import, decorators) (#​268) (81c6c88)
• sea: silence benign LIEF warnings during postject injection (#​265) (974df53)

v6.18.2

Compare Source

Bug Fixes

• sea: match blob generator to target Node version (#​247) (ad2a336), closes #​236 #​236 #​236 #​236 #​236 #​236 #​236
• sea: strip trailing slashes in manifest key lookup (#​261) (af0c086)

v6.18.1

Compare Source

Bug Fixes

• pkg: ship all .d.ts files in npm package (#​258) (7e10ce2)

v6.18.0

Compare Source

Features

• api: typed options object for exec() (#​253) (f061f72), closes #​242
• auto-discover .pkgrc / pkg.config.{js,cjs,mjs} (#​254) (53ce68b), closes #​238

Documentation

• tighten guide pages — remove AI-slop headings and verbose framing (cc331fa)

v6.17.0

Compare Source

Features

• sea: add per-file compression to SEA archive (closes #​250) (#​251) (fdf8046)

Documentation

• add in-depth comparison vs Bun and Deno (#​249) (0cf75a8)

v6.16.0

Compare Source

Features

• add --fallback-to-source flag for bytecode failures (#​246) (5eb4681), closes #​87 #​181

Bug Fixes

• docs: repair migration link and mermaid label clipping (#​237) (7a97430)
• fall back to source on bytecode fabrication failure (46a7f8e), closes #​87 #​181
• sea: prevent sentinel duplication when pkg is in dependencies (#​243) (79f3f2d)

Documentation

• add dotenvx sponsor logo to README (d315eaa)
• host documentation on GitHub Pages with VitePress (#​234) (22fc2ed), closes #​231 #​231 #​87 #​181 #​229

v6.15.0

Compare Source

Features

• enhanced SEA mode with walker integration and VFS (#​229) (daf76c5), closes #​204 #​204 #​1492 #​1611 nodejs/node#62726 nodejs/node#62726

Bug Fixes

• update default release type to empty in workflow inputs (073bc88)

Chores

• update Node.js version in release workflow to 22.22.1 (985fbc7)

Documentation

• update README with new npm badges and correct target node versions (95f4f63)

v6.14.2

Compare Source

Features

• add workflow to bump pkg-fetch dependency automatically (7450d31)
• bump fetch 3.5.33 with nodejs 20.20.2, 22.22.2, 24.14.1 (#​226) (439c64e)

Bug Fixes

• improve formatting of pull request title for pkg-fetch version bump (022f69d)

Chores

• switch to npm trusted publisher with OIDC provenance (#​225) (b9fd3fd)

v6.14.1

Compare Source

Bug Fixes

• MODULE_NOT_FOUND for ESM internal .mjs imports at runtime (#​218) (290d9ba)

Chores

• add CLAUDE.md referencing shared copilot instructions (#​216) (2bd6e47)

v6.14.0

Compare Source

Features

• bump eslint and its deps to latest (#​212) (9fee672)

Bug Fixes

• remove downlevelIteration option from tsconfig.json (#​210) (1737d03)
• resolve security vulnerabilities in dependencies (#​211) (1715693)

Chores

• update dependencies, drop Node.js 18, add Node.js 22/24 support, and fix test compatibility (#​214) (0f43831)

v6.13.1

Compare Source

Features

• comprehensive ESM support with top-level await and import.meta polyfills (#​206) (332c188), closes #​208 #​208 #​208 #​208

Bug Fixes

• add import.meta polyfill for ESM to CJS transformation (#​208) (731b014)

v6.13.0

Compare Source

Features

• detect and warn about unsupported ESM features (#​202) (40e71c6)
• esm support (#​192) (45cbc2c)

Bug Fixes

• bump tar to 7.5.6 to fix security vulnerabilities (#​200) (1f160ac)

Chores

• change tsconfig target to es2022 (#​198) (b72fee9)

v6.12.0

Compare Source

Features

• bump fetch with node 22.20.0 22.22.0 24.13.0 (#​199) (5807ed2)

v6.11.0

Compare Source

Features

• add PKG_NATIVE_CACHE_PATH environment variable (#​190) (528f997)
• update @​yao-pkg/pkg-fetch to version 3.5.31 with node 24.12.0 and 20.19.6 (6fe9259)

v6.10.1

Compare Source

Bug Fixes

• avoid EEXIST on race condition in createDirRecursively and copyFolderRecursiveSync (#​154) (36ea8b1)

v6.10.0

Compare Source

Features

• automatically create output directory with --sea option (#​182) (68b19ec)
• bump fetch 3.5.30 with node 24.11.0 and 22.21.1 (1853549)

v6.9.0

Compare Source

Features

• bump fetch with node 22.20.0 and 24.10.0 support (73fcf64)

v6.8.0: Release 6.8.0

Compare Source

Features

• update @​yao-pkg/pkg-fetch to version 3.5.28 and tar-fs to version 3.1.1 (b994c6e)

Bug Fixes

• audit (47f662d)

v6.7.0

Compare Source

Features

• bump fetch v3.5.25 with node 20.19.5, 22.19.0, and 24.8.0, special thanks to @​faulpeltz (7ce1085)

Documentation

• behavior of ignore on dotfiles (#​170) (de1e819)
• instructions for injecting Windows exe metadata (#​174) (14e7df0)

v6.6.0

Compare Source

Features

• pkg-fetch@​3.5.24 with Node.js versions 20.19.4 and 22.17.1 (6a04030)

Documentation

• add guidance on unsupported architectures to README.md (#​160) (c22e442)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.