chore: template-oss@4.3.2

25 files changed, 385 insertions, 60 deletions

diff --git a/DEPENDENCIES.md b/DEPENDENCIES.md
index 105761dcb..e14cecf0d 100644
--- a/DEPENDENCIES.md
+++ b/DEPENDENCIES.md
@@ -523,6 +523,7 @@ graph LR;
   npm-->npmcli-run-script["@npmcli/run-script"];
   npm-->npmcli-template-oss["@npmcli/template-oss"];
   npm-->npmlog;
+  npm-->octokit-rest["@octokit/rest"];
   npm-->opener;
   npm-->p-map;
   npm-->pacote;
diff --git a/docs/package.json b/docs/package.json
index 74c575337..7e9c4038c 100644
--- a/docs/package.json
+++ b/docs/package.json
@@ -22,7 +22,7 @@
     "@npmcli/eslint-config": "^3.1.0",
     "@npmcli/fs": "^2.1.0",
     "@npmcli/promise-spawn": "^3.0.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "cmark-gfm": "^0.9.0",
     "jsdom": "^18.1.0",
     "marked-man": "^0.7.0",
@@ -51,14 +51,15 @@
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
     "distPaths": [
-      "bin/",
-      "lib/",
       "content/",
       "nav.yml"
     ],
-    "ciVersions": [
-      "16"
+    "allowPaths": [
+      "/content/",
+      "/nav.yml"
     ],
-    "version": "4.1.2"
+    "ciVersions": "latest",
+    "version": "4.3.2",
+    "content": "../scripts/template-oss/index.js"
   }
 }
diff --git a/node_modules/.gitignore b/node_modules/.gitignore
index ce939861b..37530342b 100644
--- a/node_modules/.gitignore
+++ b/node_modules/.gitignore
@@ -379,6 +379,7 @@ __pycache__
 /jsonpath
 /JSONStream
 /jsprim
+/just-deep-map-values
 /kind-of
 /lcov-parse
 /levn
diff --git a/package-lock.json b/package-lock.json
index 0cb2bb110..ecf6ac604 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -169,7 +169,8 @@
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
         "@npmcli/promise-spawn": "^3.0.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
+        "@octokit/rest": "^19.0.4",
         "fs-minipass": "^2.1.0",
         "licensee": "^8.2.0",
         "minimatch": "^5.1.0",
@@ -189,7 +190,7 @@
         "@npmcli/eslint-config": "^3.1.0",
         "@npmcli/fs": "^2.1.0",
         "@npmcli/promise-spawn": "^3.0.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "cmark-gfm": "^0.9.0",
         "jsdom": "^18.1.0",
         "marked-man": "^0.7.0",
@@ -2362,9 +2363,9 @@
       }
     },
     "node_modules/@npmcli/template-oss": {
-      "version": "4.1.2",
-      "resolved": "https://registry.npmjs.org/@npmcli/template-oss/-/template-oss-4.1.2.tgz",
-      "integrity": "sha512-BS9YZeRtLsZ+lnCcQV3tZQa25K+MbUz/MgX5ZFzRmU+gTgCGthfajXZ7r8jJTjSiNgrElS0Ty/+x6Ds6B7oFdw==",
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@npmcli/template-oss/-/template-oss-4.3.2.tgz",
+      "integrity": "sha512-4sVkA9hvoRlGDxZ+UtiE5YEvJWAFUiY3tzi2N8zAxsgf1qS0HkrVBqRJikBRzleUBjmYLrxAI1qqY8Lz/ubupg==",
       "dev": true,
       "hasInstallScript": true,
       "dependencies": {
@@ -2381,6 +2382,7 @@
         "handlebars": "^4.7.7",
         "hosted-git-info": "^5.0.0",
         "json-parse-even-better-errors": "^2.3.1",
+        "just-deep-map-values": "^1.1.1",
         "just-diff": "^5.0.1",
         "lodash": "^4.17.21",
         "npm-package-arg": "^9.0.1",
@@ -6959,6 +6961,12 @@
         "node": ">=0.6.0"
       }
     },
+    "node_modules/just-deep-map-values": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/just-deep-map-values/-/just-deep-map-values-1.1.1.tgz",
+      "integrity": "sha512-hCMqPI0FjM2wpOWBYgvrdZlmFZF+7PeC/IzBxvt7dgUsK/OFeFOwJ1kv40Vx5I3RJiWv7ninPUxjk2Af0YiDAw==",
+      "dev": true
+    },
     "node_modules/just-diff": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/just-diff/-/just-diff-5.1.1.tgz",
@@ -13844,7 +13852,7 @@
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
         "@npmcli/promise-spawn": "^3.0.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "minify-registry-metadata": "^2.2.0",
         "rimraf": "^3.0.2",
         "tap": "^16.0.1",
@@ -13901,7 +13909,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "benchmark": "^2.1.4",
         "chalk": "^4.1.0",
         "minify-registry-metadata": "^2.1.0",
@@ -13922,7 +13930,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "nock": "^13.2.4",
         "tap": "^16.0.1"
       },
@@ -13945,7 +13953,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "tap": "^16.0.1"
       },
       "engines": {
@@ -13973,7 +13981,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "bin-links": "^3.0.3",
         "minify-registry-metadata": "^2.2.0",
         "mkdirp": "^1.0.4",
@@ -13991,7 +13999,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "tap": "^16.0.1"
       },
       "engines": {
@@ -14007,7 +14015,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "nock": "^13.2.4",
         "tap": "^16.0.1"
       },
@@ -14024,7 +14032,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "minipass": "^3.1.1",
         "nock": "^13.2.4",
         "tap": "^16.0.1"
@@ -14043,7 +14051,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "nock": "^13.0.7",
         "tap": "^16.0.1"
       },
@@ -14063,7 +14071,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "libnpmpack": "^5.0.0-pre.0",
         "lodash.clonedeep": "^4.5.0",
         "nock": "^13.2.4",
@@ -14081,7 +14089,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "nock": "^13.2.4",
         "tap": "^16.0.1"
       },
@@ -14098,7 +14106,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "nock": "^13.2.4",
         "tap": "^16.0.1"
       },
@@ -14118,7 +14126,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^3.1.0",
-        "@npmcli/template-oss": "4.1.2",
+        "@npmcli/template-oss": "4.3.2",
         "require-inject": "^1.4.4",
         "tap": "^16.0.1"
       },
diff --git a/package.json b/package.json
index 048ec7ee9..f5441bea2 100644
--- a/package.json
+++ b/package.json
@@ -206,7 +206,8 @@
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
     "@npmcli/promise-spawn": "^3.0.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
+    "@octokit/rest": "^19.0.4",
     "fs-minipass": "^2.1.0",
     "licensee": "^8.2.0",
     "minimatch": "^5.1.0",
@@ -223,16 +224,18 @@
     "test-all": "npm run test --if-present --workspaces --include-workspace-root",
     "snap": "tap",
     "postsnap": "make -s docs",
-    "test:nocleanup": "NO_TEST_CLEANUP=1 npm run test --",
-    "sudotest": "sudo npm run test --",
-    "sudotest:nocleanup": "sudo NO_TEST_CLEANUP=1 npm run test --",
+    "test:nocleanup": "NO_TEST_CLEANUP=1 node . run test --",
+    "sudotest": "sudo node . run test --",
+    "sudotest:nocleanup": "sudo NO_TEST_CLEANUP=1 node . run test --",
     "posttest": "npm run lint",
     "lint": "eslint \"**/*.js\"",
     "lintfix": "npm run lint -- --fix",
     "lint-all": "npm run lint --if-present --workspaces --include-workspace-root",
     "prelint": "rimraf test/npm_cache*",
     "resetdeps": "bash scripts/resetdeps.sh",
-    "rp-pull-request": "npm run resetdeps && npm run authors"
+    "rp-pull-request": "node . run authors && node scripts/release-manager.js",
+    "postlint": "template-oss-check",
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "test-env": [
@@ -249,10 +252,8 @@
     ]
   },
   "templateOSS": {
-    "rootRepo": false,
-    "rootModule": false,
-    "version": "4.1.2",
-    "releaseTest": "release.yml"
+    "version": "4.3.2",
+    "content": "./scripts/template-oss/root.js"
   },
   "license": "Artistic-2.0",
   "engines": {
diff --git a/scripts/release-manager.js b/scripts/release-manager.js
new file mode 100644
index 000000000..27968e80b
--- /dev/null
+++ b/scripts/release-manager.js
@@ -0,0 +1,189 @@
+#!/usr/bin/env node
+
+const { Octokit } = require('@octokit/rest')
+const semver = require('semver')
+
+const log = (...logs) => console.error('LOG', ...logs)
+
+const getReleaseProcess = async () => {
+  // XXX: the release steps need to always be the last thing in the doc for this to work
+  const RELEASE_PROCESS_SECTION = '### Release the CLI and workspaces'
+  const RELEASE_PROCESS_WIKI = 'https://raw.githubusercontent.com/wiki/npm/cli/Release-Process.md'
+  const RELEASE_LIST_ITEM = /^\d+\.\s/gm
+
+  log(`Fetching release process from:`, RELEASE_PROCESS_WIKI)
+
+  const releaseProcess = await new Promise((resolve, reject) => {
+    require('https')
+      .get(RELEASE_PROCESS_WIKI, resp => {
+        let d = ''
+        resp.on('data', c => (d += c))
+        resp.on('end', () => resolve(d))
+      })
+      .on('error', reject)
+  })
+
+  const section = releaseProcess.split(RELEASE_PROCESS_SECTION)[1]
+
+  if (!section) {
+    throw new Error('Could not find release process section:', RELEASE_PROCESS_SECTION)
+  }
+
+  return section.split({
+    [Symbol.split] (str) {
+      const [, ...matches] = str.split(RELEASE_LIST_ITEM)
+      log(`Found ${matches.length} release items`)
+      return matches.map((m, i) => `- [ ] <STEP_INDEX>. ${m}`.trim())
+    },
+  })
+}
+
+const getPrReleases = async (pr) => {
+  const RELEASE_SEPARATOR = /<details><summary>.*<\/summary>/g
+  const MONO_VERSIONS = /<details><summary>(?:(.*?):\s)?(.*?)<\/summary>/
+  const ROOT_VERSION = /\n##\s\[(.*?)\]/
+
+  const getReleaseInfo = ({ name, version: rawVersion }) => {
+    const version = semver.parse(rawVersion)
+    const prerelease = !!version.prerelease.length
+    const tag = `${name ? `${name}-` : ''}v${rawVersion}`
+    return {
+      name,
+      tag,
+      prerelease,
+      version: rawVersion,
+      major: version.major,
+      url: `https://github.com/${pr.base.repo.full_name}/releases/tag/${tag}`,
+      flags: name ? `-w ${name} ${prerelease ? `--tag prerelease` : ''}`.trim() : '',
+    }
+  }
+
+  const releases = pr.body.match(RELEASE_SEPARATOR)
+
+  if (!releases) {
+    log('Found no monorepo, checking for single root version')
+    const [, version] = pr.body.match(ROOT_VERSION) || []
+
+    if (!version) {
+      throw new Error('Could not find version with:', ROOT_VERSION)
+    }
+
+    log('Found version', version)
+    return [getReleaseInfo({ version })]
+  }
+
+  log(`Found ${releases.length} releases`)
+
+  return releases.reduce((acc, r) => {
+    const [, name, version] = r.match(MONO_VERSIONS)
+    const release = getReleaseInfo({ name, version })
+
+    if (!name) {
+      log('Found root', release.tag)
+      acc[0] = release
+    } else {
+      log('Found workspace', release.tag)
+      acc[1].push(release)
+    }
+
+    return acc
+  }, [null, []])
+}
+
+const appendToComment = async ({ github, commentId, title, body }) => {
+  if (!commentId) {
+    log(`No comment id, skipping append to comment`)
+    return
+  }
+
+  const { data: comment } = await github.rest.issues.getComment({
+    ...github.repo,
+    comment_id: commentId,
+  })
+
+  const hasAppended = comment.body.includes(title)
+
+  log('Found comment with id:', commentId)
+  log(hasAppended ? 'Comment has aready been appended, replacing' : 'Appending to comment')
+
+  const prefix = hasAppended
+    ? comment.body.split(title)[0]
+    : comment.body
+
+  return github.rest.issues.updateComment({
+    ...github.repo,
+    comment_id: commentId,
+    body: [prefix, title, body].join('\n\n'),
+  })
+}
+
+const main = async (env) => {
+  // These env vars are set by the release.yml workflow from template-oss
+  const {
+    CI,
+    GITHUB_TOKEN,
+    GITHUB_REPOSITORY,
+    RELEASE_PR_NUMBER,
+    RELEASE_COMMENT_ID, // comment is optional for testing
+  } = env
+
+  if (!CI || !GITHUB_TOKEN || !GITHUB_REPOSITORY || !RELEASE_PR_NUMBER) {
+    throw new Error('This script is designed to run in CI. If you want to test it, set the ' +
+      `following env vars: \`CI, GITHUB_TOKEN, GITHUB_REPOSITORY, RELEASE_PR_NUMBER\``)
+  }
+
+  const github = new Octokit({ auth: GITHUB_TOKEN })
+  github.repo = { owner: GITHUB_REPOSITORY.split('/')[0], repo: GITHUB_REPOSITORY.split('/')[1] }
+
+  const { data: pr } = await github.rest.pulls.get({
+    ...github.repo,
+    pull_number: RELEASE_PR_NUMBER,
+  })
+
+  const [release, workspaces = []] = await getPrReleases(pr)
+
+  const RELEASE_OMIT_PRERELEASE = '> NOT FOR PRERELEASE'
+  const RELEASE_OMIT_WORKSPACES = 'Publish workspaces'
+  const releaseItems = (await getReleaseProcess())
+    .filter((item) => {
+      if (release.prerelease && item.includes(RELEASE_OMIT_PRERELEASE)) {
+        return false
+      }
+
+      if (!workspaces.length && item.includes(RELEASE_OMIT_WORKSPACES)) {
+        return false
+      }
+
+      return true
+    })
+    .map((item, index) => item.replace('<STEP_INDEX>', index + 1))
+
+  log(
+    `Filtered ${releaseItems.length} release process items:\n`,
+    releaseItems.map(r => r.split('\n')[0]).join('\n')
+  )
+
+  const releaseTitle = `### Release Checklist for ${release.tag}`
+  const releaseChecklist = releaseItems
+    .join('\n\n')
+    .replace(/<RELEASE-BRANCH>/g, pr.head.ref)
+    .replace(/<BASE-BRANCH>/g, pr.base.ref)
+    .replace(/<MAJOR>/g, release.major)
+    .replace(/<X\.Y\.Z>/g, release.version)
+    .replace(/<GITHUB-RELEASE-LINK>/g, release.url)
+    .replace(/(\s+node \. publish )-w <WS-PKG-N>/g, workspaces.map(w => `$1${w.flags}`).join(''))
+    .trim()
+
+  await appendToComment({
+    github,
+    commentId: RELEASE_COMMENT_ID,
+    title: releaseTitle,
+    body: releaseChecklist,
+  })
+}
+
+main(process.env)
+  // This is part of the release CI and is for posting a release manager
+  // comment to the issue but we dont want it to ever fail the workflow so
+  // just log but dont set the error code
+  .catch(err => console.error(err))
diff --git a/scripts/template-oss/_step-deps.yml b/scripts/template-oss/_step-deps.yml
new file mode 100644
index 000000000..2f77eabdc
--- /dev/null
+++ b/scripts/template-oss/_step-deps.yml
@@ -0,0 +1,2 @@
+- name: Reset Deps
+  run: {{rootNpmPath}} run resetdeps
diff --git a/scripts/template-oss/branch-specific-config.js b/scripts/template-oss/branch-specific-config.js
new file mode 100644
index 000000000..9dfbedd7d
--- /dev/null
+++ b/scripts/template-oss/branch-specific-config.js
@@ -0,0 +1,5 @@
+// Leave this empty to use the default ciVersions from template-oss
+// This file is kept here to make it easier to apply template-oss
+// changes to other branches which might have different ciVersions
+// or other conifg options
+module.exports = {}
diff --git a/scripts/template-oss/ci-release.yml b/scripts/template-oss/ci-release.yml
new file mode 100644
index 000000000..93dd4f1ed
--- /dev/null
+++ b/scripts/template-oss/ci-release.yml
@@ -0,0 +1,23 @@
+{{> ciRelease}}
+
+  smoke-publish:
+    {{> jobMatrix
+      jobName="Smoke Publish"
+      jobCheck=(obj sha="${{ inputs.check-sha }}")
+      jobCheckout=(obj ref="${{ inputs.ref }}")
+    }}
+      - name: Pack
+        run: |
+          NPM_VERSION="$({{ rootNpmPath }} --version)-$GITHUB_SHA.0"
+          {{ rootNpmPath }} version $NPM_VERSION --ignore-scripts
+          {{ rootNpmPath }} run resetdeps
+          git clean -fd
+          {{ rootNpmPath }} ls --production >/dev/null
+          {{ rootNpmPath }} prune --production --no-save --no-audit --no-fund
+          node scripts/git-dirty.js
+          {{ rootNpmPath }} pack --pack-destination=$RUNNER_TEMP
+          {{ rootNpmPath }} install -g $RUNNER_TEMP/npm-$NPM_VERSION.tgz
+          {{ rootNpmPath }} install -w smoke-tests --ignore-scripts --no-audit --no-fund
+          rm -rf {lib,bin,index.js}
+          SMOKE_PUBLISH_NPM=1 {{ rootNpmPath }} test -w smoke-tests --ignore-scripts
+      {{> stepChecks jobCheck=true }}
diff --git a/scripts/template-oss/ci.yml b/scripts/template-oss/ci.yml
new file mode 100644
index 000000000..0ddffde96
--- /dev/null
+++ b/scripts/template-oss/ci.yml
@@ -0,0 +1,35 @@
+name: CI - cli
+
+on:
+  {{> onCi }}
+
+jobs:
+  lint:
+    {{> job jobName="Lint" }}
+      {{> stepLint jobRunFlags=pkgFlags }}
+
+  check-docs:
+    {{> job jobName="Check Docs" }}
+      - name: Make Docs
+        run: make freshdocs
+      - name: Check Git Status
+        run: node scripts/git-dirty.js
+
+  licenses:
+    {{> job jobName="Check Licenses" }}
+      - name: Check Licenses
+        run: {{rootNpmPath}} run licenses
+
+  smoke-tests:
+    {{> job jobName="Smoke Tests" }}
+      - name: Run Smoke Tests
+        run: {{rootNpmPath}} test -w smoke-tests --ignore-scripts
+      - name: Check Git Status
+        run: node scripts/git-dirty.js
+
+  test:
+    {{> jobMatrix jobName="Test" }}
+      {{> stepTest jobRunFlags=pkgFlags }}
+      - name: Check Git Status
+        if: matrix.platform.os != 'windows-latest'
+        run: node scripts/git-dirty.js
diff --git a/scripts/template-oss/index.js b/scripts/template-oss/index.js
new file mode 100644
index 000000000..f18acc210
--- /dev/null
+++ b/scripts/template-oss/index.js
@@ -0,0 +1,3 @@
+module.exports = {
+  ...require('./branch-specific-config.js'),
+}
diff --git a/scripts/template-oss/root.js b/scripts/template-oss/root.js
new file mode 100644
index 000000000..fdcdd6b66
--- /dev/null
+++ b/scripts/template-oss/root.js
@@ -0,0 +1,44 @@
+module.exports = {
+  rootRepo: {
+    add: {
+      '.github/ISSUE_TEMPLATE/config.yml': false,
+      '.github/ISSUE_TEMPLATE/bug.yml': false,
+      '.github/workflows/ci.yml': 'ci.yml',
+      '.github/workflows/ci-release.yml': 'ci-release.yml',
+    },
+  },
+  workspaceRepo: {
+    add: {
+      '.github/workflows/release.yml': false,
+      '.github/workflows/ci-release.yml': false,
+    },
+  },
+  lockfile: true,
+  npm: '.',
+  defaultBranch: 'latest',
+  distPaths: [
+    'index.js',
+    'docs/content/**/*.md',
+    'docs/output/**/*.html',
+    'man',
+  ],
+  allowPaths: [
+    '/node_modules/',
+    '/index.js',
+    '/Makefile',
+    '/make.bat',
+    '/DEPENDENCIES.md',
+    '/CONTRIBUTING.md',
+    '/configure',
+    '/changelogs/',
+    '/AUTHORS',
+    '/.mailmap',
+    '/.licensee.json',
+    '/.gitattributes',
+  ],
+  ignorePaths: [
+    '/node_modules/.bin/',
+    '/node_modules/.cache/',
+  ],
+  ...require('./branch-specific-config.js'),
+}
diff --git a/smoke-tests/package.json b/smoke-tests/package.json
index 73ffde991..59f78602a 100644
--- a/smoke-tests/package.json
+++ b/smoke-tests/package.json
@@ -20,7 +20,7 @@
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
     "@npmcli/promise-spawn": "^3.0.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "minify-registry-metadata": "^2.2.0",
     "rimraf": "^3.0.2",
     "tap": "^16.0.1",
@@ -30,8 +30,8 @@
   "license": "ISC",
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2",
-    "workspaceRepo": false
+    "version": "4.3.2",
+    "content": "../scripts/template-oss/index.js"
   },
   "tap": {
     "no-coverage": true,
diff --git a/workspaces/arborist/package.json b/workspaces/arborist/package.json
index 9c58bff58..b9c3d4320 100644
--- a/workspaces/arborist/package.json
+++ b/workspaces/arborist/package.json
@@ -42,7 +42,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "benchmark": "^2.1.4",
     "chalk": "^4.1.0",
     "minify-registry-metadata": "^2.1.0",
@@ -100,6 +100,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmaccess/package.json b/workspaces/libnpmaccess/package.json
index 93fa3bb97..faafec2f2 100644
--- a/workspaces/libnpmaccess/package.json
+++ b/workspaces/libnpmaccess/package.json
@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "nock": "^13.2.4",
     "tap": "^16.0.1"
   },
@@ -40,6 +40,7 @@
   ],
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmdiff/package.json b/workspaces/libnpmdiff/package.json
index c1665390b..80f020ccf 100644
--- a/workspaces/libnpmdiff/package.json
+++ b/workspaces/libnpmdiff/package.json
@@ -43,7 +43,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "tap": "^16.0.1"
   },
   "dependencies": {
@@ -58,6 +58,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmexec/package.json b/workspaces/libnpmexec/package.json
index 39c185ee4..01cf52895 100644
--- a/workspaces/libnpmexec/package.json
+++ b/workspaces/libnpmexec/package.json
@@ -47,7 +47,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "bin-links": "^3.0.3",
     "minify-registry-metadata": "^2.2.0",
     "mkdirp": "^1.0.4",
@@ -71,6 +71,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmfund/package.json b/workspaces/libnpmfund/package.json
index 271be4e68..98f6acda1 100644
--- a/workspaces/libnpmfund/package.json
+++ b/workspaces/libnpmfund/package.json
@@ -42,7 +42,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "tap": "^16.0.1"
   },
   "dependencies": {
@@ -53,6 +53,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmhook/package.json b/workspaces/libnpmhook/package.json
index a4f42a83e..a2bc28ad4 100644
--- a/workspaces/libnpmhook/package.json
+++ b/workspaces/libnpmhook/package.json
@@ -37,7 +37,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "nock": "^13.2.4",
     "tap": "^16.0.1"
   },
@@ -46,6 +46,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmorg/package.json b/workspaces/libnpmorg/package.json
index 748dd83f0..f63ab47e8 100644
--- a/workspaces/libnpmorg/package.json
+++ b/workspaces/libnpmorg/package.json
@@ -28,7 +28,7 @@
   ],
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "minipass": "^3.1.1",
     "nock": "^13.2.4",
     "tap": "^16.0.1"
@@ -49,6 +49,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmpack/package.json b/workspaces/libnpmpack/package.json
index f7d8fcfe2..5cd9deb9b 100644
--- a/workspaces/libnpmpack/package.json
+++ b/workspaces/libnpmpack/package.json
@@ -23,7 +23,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "nock": "^13.0.7",
     "tap": "^16.0.1"
   },
@@ -44,6 +44,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmpublish/package.json b/workspaces/libnpmpublish/package.json
index 6959a8bd9..6bd608a55 100644
--- a/workspaces/libnpmpublish/package.json
+++ b/workspaces/libnpmpublish/package.json
@@ -25,7 +25,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "libnpmpack": "^5.0.0-pre.0",
     "lodash.clonedeep": "^4.5.0",
     "nock": "^13.2.4",
@@ -50,6 +50,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmsearch/package.json b/workspaces/libnpmsearch/package.json
index 3581ecc31..d90d7beac 100644
--- a/workspaces/libnpmsearch/package.json
+++ b/workspaces/libnpmsearch/package.json
@@ -26,7 +26,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "nock": "^13.2.4",
     "tap": "^16.0.1"
   },
@@ -45,6 +45,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmteam/package.json b/workspaces/libnpmteam/package.json
index d9efe7019..ef1e78fc2 100644
--- a/workspaces/libnpmteam/package.json
+++ b/workspaces/libnpmteam/package.json
@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "nock": "^13.2.4",
     "tap": "^16.0.1"
   },
@@ -39,6 +39,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }
diff --git a/workspaces/libnpmversion/package.json b/workspaces/libnpmversion/package.json
index ec4e4bc8a..ed3082b91 100644
--- a/workspaces/libnpmversion/package.json
+++ b/workspaces/libnpmversion/package.json
@@ -28,7 +28,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.1.0",
-    "@npmcli/template-oss": "4.1.2",
+    "@npmcli/template-oss": "4.3.2",
     "require-inject": "^1.4.4",
     "tap": "^16.0.1"
   },
@@ -44,6 +44,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.1.2"
+    "version": "4.3.2",
+    "content": "../../scripts/template-oss/index.js"
   }
 }