Merge pull request #8 from dev-five-git/support-wildcard

Support wildcard

Author: owjs3901

.changepacks/changepack_log_ypcnmAz12xgWbGpDQsrwa.json

@@ -0,0 +1 @@
+{"changes":{"bridge/node/package.json":"Patch","bridge/python/pyproject.toml":"Patch","crates/core/Cargo.toml":"Patch","crates/node/Cargo.toml":"Patch","crates/python/Cargo.toml":"Patch","crates/rust/Cargo.toml":"Patch","crates/cli/Cargo.toml":"Patch"},"note":"Support wildcard","date":"2026-04-08T11:47:50.105992Z"}

Cargo.lock

@@ -71,8 +71,14 @@ impl PackageJsonManifest {
 /// Check if a dependency value is a resolvable version spec.
 ///
 /// Filters out non-semver specifiers like workspace protocols, npm aliases,
-/// git URLs, file paths, and link protocols.
+/// git URLs, file paths, and link protocols. Also filters out unresolvable
+/// "always-newest" specifiers like `latest`, `*`, `x`, and `X`, since
+/// updating those would be a no-op (they already mean "the latest version").
 fn is_version_spec(value: &str) -> bool {
+    let trimmed = value.trim();
+    if matches!(trimmed, "latest" | "*" | "x" | "X" | "") {
+        return false;
+    }
     !value.starts_with("workspace:")
         && !value.starts_with("npm:")
         && !value.starts_with("git+")
@@ -298,7 +304,31 @@ mod tests {
   }
 }"#;
         let manifest = PackageJsonManifest::parse(json).unwrap();
-        assert_eq!(manifest.dependencies.len(), 8);
+        // `*` and `latest` are filtered out as unresolvable always-newest specs.
+        assert_eq!(manifest.dependencies.len(), 6);
+        let names: Vec<_> = manifest
+            .dependencies
+            .iter()
+            .map(|d| d.name.as_str())
+            .collect();
+        assert!(!names.contains(&"d"));
+        assert!(!names.contains(&"e"));
+    }
+
+    #[test]
+    fn test_latest_and_wildcard_skipped() {
+        let json = r#"{
+  "dependencies": {
+    "always-new": "latest",
+    "any": "*",
+    "x-any": "x",
+    "X-any": "X",
+    "react": "^18.0.0"
+  }
+}"#;
+        let manifest = PackageJsonManifest::parse(json).unwrap();
+        assert_eq!(manifest.dependencies.len(), 1);
+        assert_eq!(manifest.dependencies[0].name, "react");
     }
 
     #[test]

crates/node/src/parser.rs

@@ -87,23 +87,27 @@ impl PyProjectManifest {
                             continue; // Skip python version constraint
                         }
                         if let Some(version) = extract_poetry_version(item) {
-                            deps.push(DependencySpec {
-                                name: name.to_owned(),
-                                current_req: version,
-                                section: DependencySection::Dependencies,
-                            });
+                            if !is_wildcard_req(&version) {
+                                deps.push(DependencySpec {
+                                    name: name.to_owned(),
+                                    current_req: version,
+                                    section: DependencySection::Dependencies,
+                                });
+                            }
                         }
                     }
                 }
                 // Poetry dev-dependencies
                 if let Some(dev_deps) = poetry.get("dev-dependencies").and_then(Item::as_table) {
                     for (name, item) in dev_deps {
                         if let Some(version) = extract_poetry_version(item) {
-                            deps.push(DependencySpec {
-                                name: name.to_owned(),
-                                current_req: version,
-                                section: DependencySection::DevDependencies,
-                            });
+                            if !is_wildcard_req(&version) {
+                                deps.push(DependencySpec {
+                                    name: name.to_owned(),
+                                    current_req: version,
+                                    section: DependencySection::DevDependencies,
+                                });
+                            }
                         }
                     }
                 }
@@ -210,6 +214,10 @@ fn parse_pep508_spec(spec: &str, section: DependencySection) -> Option<Dependenc
         return None; // No version constraint
     }
 
+    if is_wildcard_req(rest) {
+        return None; // `*`, `==*`, etc. already mean "any version"
+    }
+
     Some(DependencySpec {
         name: name.to_owned(),
         current_req: rest.to_owned(),
@@ -257,6 +265,18 @@ fn replace_version_in_pep508(spec: &str, new_version: &str) -> String {
     format!("{name}{extras}{new_version}{marker}")
 }
 
+/// Check if a version requirement is an unresolvable wildcard like `*` or `==*`.
+///
+/// Such requirements already mean "any/latest version", so updating them
+/// would be a meaningless no-op and we filter them out at parse time.
+fn is_wildcard_req(req: &str) -> bool {
+    let stripped = req
+        .trim()
+        .trim_start_matches(['=', '~', '^', '>', '<'])
+        .trim();
+    matches!(stripped, "" | "*")
+}
+
 /// Extract a version string from a Poetry dependency value.
 fn extract_poetry_version(item: &Item) -> Option<String> {
     match item {

crates/python/src/parser.rs

@@ -71,8 +71,10 @@ impl CargoTomlManifest {
     ) {
         for (name, item) in table {
             if let Some(version) = Self::extract_version(item) {
-                // Skip path/git dependencies without a version
-                if !version.is_empty() {
+                // Skip path/git dependencies without a version, and skip
+                // wildcard-only requirements like `*` which already mean
+                // "any version" — updating them would be a meaningless no-op.
+                if !version.is_empty() && version.trim() != "*" {
                     deps.push(DependencySpec {
                         name: name.to_owned(),
                         current_req: version,