Skip to content

aube update

  • Usage: aube update [FLAGS] [PACKAGES]…

Update dependencies

Arguments

[PACKAGES]…

Package(s) to update (all if empty)

Flags

-D --dev

Update only devDependencies

-E --exact

Pin manifest specifiers to the resolved version with no range prefix.

Pair with --latest: when the rewritten specifier replaces the caret/tilde original, drop the prefix so the manifest carries an exact pin ("1.2.3") instead of "^1.2.3". Mirrors pnpm update --save-exact.

-g --global

Update globally installed packages.

Parsed for pnpm compatibility.

-i --interactive

Interactive update picker.

Parsed for pnpm compatibility.

-L --latest

Update past the manifest range.

Rewrites package.json specifiers to match the newly resolved versions (the registry's latest dist-tag, clamped by minimumReleaseAge / resolution-mode as usual).

-P --prod

Update only production dependencies

-w --workspace

Update dependencies in the current workspace package

--depth <DEPTH>

Dependency traversal depth.

Parsed for pnpm compatibility but ignored: aube only ever refreshes direct deps (pnpm's --depth 0 default). Setting the flag emits a one-line warning pointing at rm aube-lock.yaml && aube install for the --depth Infinity case.

--global-pnpmfile <PATH>

Add a global pnpmfile that runs before the local one.

Mirrors pnpm's --global-pnpmfile <path>. The global hook runs first and the local hook (if any) runs second.

--ignore-pnpmfile

Skip running .pnpmfile.mjs / .pnpmfile.cjs hooks for this update

--lockfile-only

Refresh the lockfile without populating node_modules.

Re-resolves the full graph (direct + transitive) and writes aube-lock.yaml, then skips the linker so node_modules is left untouched. Mirrors npm update --package-lock-only.

--no-optional

Skip optionalDependencies

--no-save

Refresh the lockfile without rewriting package.json ranges.

Pair with --latest to pull a newer resolved version into the lockfile while leaving the manifest's caret/tilde ranges untouched. Without --latest this flag is a no-op (plain update already doesn't touch the manifest). Mirrors pnpm update --no-save.

--pnpmfile <PATH>

Override the local pnpmfile location.

Mirrors pnpm's --pnpmfile <path>. Relative paths resolve against the project root; absolute paths are used as-is. Wins over pnpmfilePath from pnpm-workspace.yaml.

--frozen-lockfile

Error if the lockfile drifts from package.json

--no-frozen-lockfile

Always re-resolve, even if the lockfile is up to date

--prefer-frozen-lockfile

Use the lockfile when fresh, re-resolve when stale

--fetch-retries <N>

Number of retry attempts for failed registry fetches.

Overrides fetchRetries / fetch-retries from .npmrc / aube-workspace.yaml when set. Pair with --fetch-timeout to fail fast in scripted test runs.

--fetch-retry-factor <N>

Exponential backoff factor between retry attempts.

Overrides fetchRetryFactor / fetch-retry-factor from .npmrc / aube-workspace.yaml when set. Integer-only — the underlying FetchPolicy.retry_factor is u32. Fractional values like 1.5 are rejected by clap.

--fetch-retry-maxtimeout <MS>

Upper bound (ms) on the computed retry backoff.

Overrides fetchRetryMaxtimeout / fetch-retry-maxtimeout from .npmrc / aube-workspace.yaml when set.

--fetch-retry-mintimeout <MS>

Lower bound (ms) on the computed retry backoff.

Overrides fetchRetryMintimeout / fetch-retry-mintimeout from .npmrc / aube-workspace.yaml when set.

--fetch-timeout <MS>

Per-request HTTP timeout in milliseconds.

Overrides fetchTimeout / fetch-timeout from .npmrc / aube-workspace.yaml when set. Applied via reqwest's .timeout() so it covers headers + body together.

--registry <URL>

Override the default registry URL for this invocation.

Use this npm registry URL for package metadata, tarballs, audit requests, dist-tags, and registry writes.

--disable-global-virtual-store

Force the shared global virtual store off for this invocation.

Packages are materialized inside the project's virtual store instead of symlinked from ~/.cache/aube/virtual-store/.

--enable-global-virtual-store

Force the shared global virtual store on for this invocation.

Overrides CI's default per-project materialization and the disableGlobalVirtualStoreForPackages auto-disable heuristic.

MIT Licenseen.devCopyright © 2026 en.dev