Skip to content

aube update

  • Usage: aube update [FLAGS] [PACKAGES]…
  • Aliases: up, upgrade
  • Effect: modifies state

Update dependencies

Arguments

  • [PACKAGES]… — Package(s) to update (all if empty)

Flags

  • -D --dev — Update only devDependencies.

  • -E --exact — Pin manifest specifiers to the resolved version with no range prefix.

    Pair with --latest: when the rewritten specifier replaces the caret/tilde original, drop the prefix so the manifest carries an exact pin ("1.2.3") instead of "^1.2.3". Mirrors pnpm update --save-exact.

    Aliases: --save-exact

  • -g --global — Update globally installed packages.

    Parsed for pnpm compatibility.

  • -i --interactive — Interactive update picker.

    Parsed for pnpm compatibility.

  • -L --latest — Update past the manifest range unless paired with --no-save.

    Rewrites package.json specifiers to match the newly resolved versions (the registry's latest dist-tag, clamped by minimumReleaseAge / resolution-mode as usual). With --no-save, leaves the manifest range unchanged and resolves only to the newest version that range allows.

  • -P --prod — Update only production dependencies.

    Aliases: --production

  • -w --workspace — Update dependencies in the current workspace package.

  • --depth <DEPTH> — Dependency traversal depth.

    Parsed for pnpm compatibility but ignored: aube only ever refreshes direct deps (pnpm's --depth 0 default). Setting the flag emits a one-line warning pointing at rm aube-lock.yaml && aube install for the --depth Infinity case.

  • --global-pnpmfile <PATH> — Add a global pnpmfile that runs before the local one.

    Mirrors pnpm's --global-pnpmfile <path>. The global hook runs first and the local hook (if any) runs second.

  • --ignore-pnpmfile — Skip running .pnpmfile.mjs / .pnpmfile.cjs hooks for this update.

  • --lockfile-only — Refresh the lockfile without populating node_modules.

    Re-resolves the full graph (direct + transitive) and writes aube-lock.yaml, then skips the linker so node_modules is left untouched. Mirrors npm update --package-lock-only.

  • --no-optional — Skip optionalDependencies.

  • --no-save — Refresh the lockfile without rewriting package.json ranges.

    Pair with --latest to refresh the lockfile to the newest version allowed by the unchanged manifest range. Without --latest, it still suppresses manifest range rewrites enabled by updateRewritesSpecifier. Mirrors pnpm update --no-save.

  • --pnpmfile <PATH> — Override the local pnpmfile location.

    Mirrors pnpm's --pnpmfile <path>. Relative paths resolve against the project root; absolute paths are used as-is. Wins over pnpmfilePath from pnpm-workspace.yaml.

  • -h --help — Print help

Lockfile

  • --frozen-lockfile — Error if the lockfile drifts from package.json.
  • --no-frozen-lockfile — Always re-resolve, even if the lockfile is up to date.
  • --prefer-frozen-lockfile — Use the lockfile when fresh, re-resolve when stale.

Network

  • --fetch-retries <N> — Number of retry attempts for failed registry fetches.

    Overrides fetchRetries / fetch-retries from .npmrc / aube-workspace.yaml when set. Pair with --fetch-timeout to fail fast in scripted test runs.

  • --fetch-retry-factor <N> — Exponential backoff factor between retry attempts.

    Overrides fetchRetryFactor / fetch-retry-factor from .npmrc / aube-workspace.yaml when set. Integer-only; fractional values like 1.5 are rejected.

  • --fetch-retry-maxtimeout <MS> — Upper bound (ms) on the computed retry backoff.

    Overrides fetchRetryMaxtimeout / fetch-retry-maxtimeout from .npmrc / aube-workspace.yaml when set.

  • --fetch-retry-mintimeout <MS> — Lower bound (ms) on the computed retry backoff.

    Overrides fetchRetryMintimeout / fetch-retry-mintimeout from .npmrc / aube-workspace.yaml when set.

  • --fetch-timeout <MS> — Per-request HTTP timeout in milliseconds.

    Overrides fetchTimeout / fetch-timeout from .npmrc / aube-workspace.yaml when set. Covers the whole request (headers and body together).

  • --registry <URL> — Override the default registry URL for this invocation.

    Use this npm registry URL for package metadata, tarballs, audit requests, dist-tags, and registry writes.

Virtual store

  • --disable-global-virtual-store — Force the shared global virtual store off for this invocation.

    Packages are materialized inside the project's virtual store instead of symlinked from the shared tree under <cacheDir>/virtual-store/v1/ (by default ~/.cache/aube/virtual-store/v1/).

    Aliases: --disable-gvs

  • --enable-global-virtual-store — Force the shared global virtual store on for this invocation.

    Overrides CI's default per-project materialization and the disableGlobalVirtualStoreForPackages auto-disable heuristic.

    Aliases: --enable-gvs

MIT LicensejdxCopyright © 2026 jdx.dev