warn dependency changes on single-package publish

Author: sunnylqm

src/locales/en.ts

@@ -96,6 +96,7 @@ This can reduce the risk of inconsistent dependencies and supply chain attacks.
   packageIdRequired: 'Please provide packageId or packageVersion parameter',
   packageUploadSuccess:
     'Successfully uploaded new hot update package (id: {{id}})',
+  depsChangeWarningTitle: 'Dependency changes detected',
   depsChangeSummary:
     'Dependency changes: added {{added}}, removed {{removed}}, changed {{changed}}.',
   depsChangeTargetPackage:

src/locales/zh.ts

@@ -89,6 +89,7 @@ export default {
   operationSuccess: '操作成功',
   packageIdRequired: '请提供 packageId 或 packageVersion 参数',
   packageUploadSuccess: '已成功上传新热更包（id: {{id}}）',
+  depsChangeWarningTitle: '检测到依赖变化',
   depsChangeSummary:
     '依赖变化：新增 {{added}} 项，移除 {{removed}} 项，版本变更 {{changed}} 项。',
   depsChangeTargetPackage: '目标原生包：{{packageName}} (id: {{packageId}})',

src/versions.ts

@@ -25,6 +25,7 @@ interface VersionCommandOptions {
   rollout?: string;
   dryRun?: boolean;
   versionDeps?: Record<string, string>;
+  warnDepsChanges?: boolean;
 }
 
 type Deps = Record<string, string>;
@@ -193,6 +194,7 @@ function printDepsChangesForPackage({
   ]);
 
   console.log('');
+  console.log(chalk.bgYellow.black.bold(` ${t('depsChangeWarningTitle')} `));
   console.log(
     chalk.yellow(
       t('depsChangeTargetPackage', {
@@ -243,7 +245,7 @@ async function printDepsChangesForPublish({
   pkgs: Package[];
   providedVersionDeps?: Deps;
 }) {
-  if (!versionId || pkgs.length === 0) {
+  if (!versionId || pkgs.length !== 1) {
     return;
   }
 
@@ -464,13 +466,19 @@ export const versionCommands = {
           rollout,
           dryRun,
           versionDeps: depVersions,
+          warnDepsChanges: true,
         },
       });
     } else {
       const q = await question(t('updateNativePackageQuestion'));
       if (q.toLowerCase() === 'y') {
         await this.update({
-          options: { versionId: id, platform, versionDeps: depVersions },
+          options: {
+            versionId: id,
+            platform,
+            versionDeps: depVersions,
+            warnDepsChanges: true,
+          },
         });
       }
     }
@@ -570,12 +578,14 @@ export const versionCommands = {
       }
     }
 
-    await printDepsChangesForPublish({
-      appId: String(appId),
-      versionId: String(versionId),
-      pkgs: pkgsToBind,
-      providedVersionDeps: options.versionDeps,
-    });
+    if (options.warnDepsChanges) {
+      await printDepsChangesForPublish({
+        appId: String(appId),
+        versionId: String(versionId),
+        pkgs: pkgsToBind,
+        providedVersionDeps: options.versionDeps,
+      });
+    }
 
     await bindVersionToPackages({
       appId: String(appId),