Changelog

What's Changed

• Harden pnpm trust policy and minimumReleaseAge by @yusifaliyevpro in https://github.com/yusifaliyevpro/ripen/pull/18

Full Changelog: https://github.com/yusifaliyevpro/ripen/compare/v1.2.2...v1.2.3

Single update command for all dependency types

Mixed selections of regular and dev dependencies are now updated with a single add command instead of two separate ones.

• Unified install command — running pnpm add dep@x devDep@y without a -D flag is safe — package managers preserve each package's existing location in package.json . The redundant split into two commands has been removed

Removed redundant ripen link

• Fixed a minor issue in package.json

Security-First Website & SFW Firewall Setting

Introduced the SFW Firewall setting and repositioned ripen as a security-first tool, with an updated website, improved terminal demo, and new documentation.

• SFW Firewall setting — new toggle in the settings screen that prepends sfw to every generated install command. Works with all package managers. Enable it to route installs through a sandboxed environment via sfw

• Security-first homepage section — new “Security first, always” section on the website explaining ripen's clipboard-only model and Socket integration

• Age column in terminal demo — the homepage demo now shows the publish age column, matching the real ripen UI

• Single dependency group in demo — the homepage demo now reflects the default separateDevDeps: false behaviour, showing all packages under a single “All Dependencies” group

• SFW Firewall docs — added the setting to the configuration reference, example JSON, and a dedicated section explaining how it works

Global Mode Improvements & Missing Package Fix

Age indicators now work in global mode, ripen -g -a is now supported, and a bug that caused some packages to silently disappear from the list has been fixed.

• Publish age in global mode — the age column is now populated for ripen -g. Previously the column was visible but always empty because global packages come from the package manager's CLI output rather than a direct registry fetch

• ripen -g -a — combining global and show-all flags now works. Lists every globally installed package across npm, pnpm, and yarn — not just the outdated ones. Useful for browsing changelogs or picking a specific version of a global tool

• Missing package fix — packages whose registry entry lacks a dist-tags.latest field (e.g. packages published only as pre-releases or with non-standard registry entries) were silently dropped from the list. They now fall back to the last published version instead

Clipboard-first, Publish Age & Partial Version Support

ripen no longer runs update commands for you — it copies the exact command to your clipboard and exits. This release also adds publish age indicators and fixes detection of partial version ranges.

• Clipboard-first workflow — pressing Enter now copies the ready-to-run install command to your clipboard and exits. ripen never executes anything in your project — you stay in control

• Publish age column — the package list and version picker now show how long ago each version was published (e.g. 21h, 3d, 1mo). Versions published less than 24 hours ago are highlighted in yellow — a useful signal for pnpm's default minimumReleaseAge of 1 day

• No extra request for ages — publish dates are now fetched in the same registry request as the version check, so the list appears with ages already populated

• Exact versions in commands — generated install commands use pinned versions (e.g. pkg@1.2.3) rather than range-prefixed ones. Package managers already preserve the existing ^ or ~ in your package.json

• Partial version ranges — ranges like ^6 and ^6.2 are now detected and shown. Previously only full major.minor.patch ranges were recognised

• Alternate screen — ripen now renders in the terminal's alternate buffer so the package list never overwrites your scrollback history

Changelog Markdown Improvements

Significantly improved markdown rendering in the changelog panel, with smarter navigation for up-to-date packages.

• Clickable links — [text](url) links now render as blue underlined text only (no URL clutter). Clicking opens the browser via OSC 8 hyperlinks in supported terminals (Windows Terminal, iTerm2, etc.)

• @mentions — GitHub username mentions render as blue clickable links to the user's GitHub profile

• #number references — issue and PR references like #123 render as clickable links to the repository

• More inline formatting — added *italic*, ~~strikethrough~~, and inline HTML tags: <strong>, <em>, <del>, <code>, <samp>, <kbd>

• HTML entities — decoded correctly (e.g.  , —, numeric references)

• h4–h6 headings — now rendered correctly instead of appearing as raw text

• Inline markdown in headings — links inside headings like ## [1.0.0](url) (date) are now parsed and rendered

• Smarter navigation for up-to-date packages — opens at the latest release and lets you navigate ← through history. Outdated packages start at the oldest relevant change. History is filtered to the current major version, excluding unrelated patches from older version lines

Show All Packages (--all flag)

Added --all ( -a) flag — show every dependency, not just outdated ones.

• --all / -a flag — run ripen --all to list all packages regardless of their update status. Useful for browsing changelogs or picking an older version to downgrade to

• Green current version — packages that are already up to date show their current version in green instead of red, making it easy to see what needs attention at a glance

• Updated footer — in --all mode the footer shows total package count alongside the outdated count

Code Refactoring & Flicker Fix

Major codebase refactoring for better separation of concerns, plus a fix for the package list flicker on initial load.

• Package list flicker fix — eliminated a visible reorder when the package list first appears after checking for updates. Scope groups are now collapsed on the very first render instead of after a delayed effect

• Custom hooks — extracted usePackages , useTerminalOutput , useSelfUpdate , and useExitOnScreen into dedicated hook files

• PackageList split — moved display row building, filtering, and grouping logic into a dedicated package-list/ module with separate types, build-rows, and component files

• Utility modules — created lib/utils.ts and lib/versions.ts for shared helpers

Documentation Updates

Updated documentation to include the new separateDevDeps setting in both the README and the configuration docs page.

• README settings table — added the Separate dev dependencies row

• Configuration docs — added separateDevDeps to the settings table and example JSON

Grouping Fixes & Separate Dev Dependencies Setting

Fixed the groupsOnTop setting not being respected and added a new setting to merge dependency groups.

• groupsOnTop fix — scope groups now correctly appear at their natural position when the setting is turned off. Previously, frequency sorting was forcing groups to the top regardless of the groupsOnTop value

• Separate dev dependencies — new setting to merge dependencies and devDependencies into a single {'"'}All Dependencies{'"'} group. Enabled by default (separate groups), can be toggled off in settings

Add Home Page Link to package.json

Added a homepage field to the package.json metadata, linking to the ripen homepage at https://ripencli.vercel.app . This provides users with an easy way to find more information about ripen and access the documentation directly from the npm registry.

Enhanced MetaData and Website Redesign

Welcome to ripen 0.3.0! This major release includes several exciting features and improvements:

• Enhanced MetaData — Redesigned Website interface with improved usability and visual appeal

Pre-release Version Support

Fixed version comparison for pre-release versions (e.g., 3.0.0-beta.8 ). Packages with pre-release current versions were previously ignored during the outdated check.

• Version comparison fix — pre-release suffixes are now stripped before comparing semver bases, and a pre-release is correctly detected as older than its stable release

• Wider version columns — increased column width from 10 to 14 characters to prevent long version strings from wrapping to two lines

• Version sorting fix — version picker now correctly sorts pre-release versions relative to their stable counterparts

🐛 Fixes

• Scope deletion now works on all terminals — added d key as an alternative to Delete/Backspace for removing scopes in settings, fixing the issue on Windows/Git Bash where the Delete key wasn't recognized

Full Changelog: https://github.com/yusifaliyevpro/ripen/compare/v0.2.7...v0.2.8

📝 Documentation

• Added settings section to README documenting all available options
• Added s (settings) key to controls table
• Listed scope grouping and frequency sorting in features

Full Changelog: https://github.com/yusifaliyevpro/ripen/compare/v0.2.6...v0.2.7

✨ New Features

• Frequency-based sorting — ripen now tracks how often you update each package. Enable "Sort by update frequency" in settings (s) to surface your most-updated packages at the top
• Opt-in scope grouping — scope grouping is now off by default. Enable it in settings and add specific scopes (e.g. @heroui) to group only the packages you want
• Grouped scopes on top — optional setting to pin scope groups above ungrouped packages within each section

🔧 Changes

• Removed default anti-pattern scopes (@types, @react-types) — grouping is now fully user-controlled
• Settings UI shows grouping-related options as dimmed when scope grouping is disabled
• Update frequency data is stored separately in ~/.config/ripen/frequency.json

🐛 Fixes

• Fixed frequency sorting not applying when scope grouping was also enabled

Full Changelog: https://github.com/yusifaliyevpro/ripen/compare/v0.2.5...v0.2.6

✨ Smart Scope Exclusion Settings

• New "Excluded scopes from grouping" setting — scopes listed here (e.g. @types, @react-types) won't be sub-grouped, keeping them as individual items in the package list
• Defaults: @types and @react-types are excluded out of the box
• Add or remove scopes from the settings screen (s key)
• Smart config persistence — new defaults you add in future releases automatically reach existing users, while explicitly removed defaults stay removed

🐛 Fixes

• Fixed crash when ungrouped scopes were still checked against the scope map (Cannot read properties of undefined)
• Converted all interface declarations to type for codebase consistency

Full Changelog: https://github.com/yusifaliyevpro/ripen/compare/v0.2.4...v0.2.5

🎉 Bun Support

• Auto-detects bun.lock and uses bun for installing updates
• Bun is not available for global checking (ripen -g) as it doesn't provide JSON output for its outdated command

🐛 Fixes

• Ctrl+C now exits cleanly — collapses the UI and prints "Cancelled." instead of leaving the terminal in a broken state
• Fixed unintended screen changes on key inputs — pressing keys like c or v while holding Ctrl no longer triggers changelog/version picker
• Reduced flickering in package list — refactored scrolling logic and removed redundant state for smoother navigation

What's Changed

• Update version to 0.1.7 and add funding sources by @yusifaliyevpro in https://github.com/yusifaliyevpro/ripen/pull/4

Full Changelog: https://github.com/yusifaliyevpro/ripen/compare/v0.1.6...v0.1.7

What's Changed

• Fix build process by removing redundant test step by @yusifaliyevpro in https://github.com/yusifaliyevpro/ripen/pull/2
• refactor: improve code formatting and structure across multiple components by @yusifaliyevpro in https://github.com/yusifaliyevpro/ripen/pull/3

Full Changelog: https://github.com/yusifaliyevpro/ripen/compare/v0.1.5...v0.1.6

What's Changed

• Add workflows for automated testing and deployment by @yusifaliyevpro in https://github.com/yusifaliyevpro/ripen/pull/1

New Contributors

• @yusifaliyevpro made their first contribution in https://github.com/yusifaliyevpro/ripen/pull/1

Full Changelog: https://github.com/yusifaliyevpro/ripen/commits/v0.1.5