fix(deps): skip node: protocol imports in --install

[AnnasMazhar]

Fixes #1462

import fs from "node:fs"
import path from "node:path"
// zx --install no longer tries to install `node@latest`

parsePackageName() now returns early when the import specifier contains :, since npm package names cannot contain colons. This skips all protocol imports (node:, npm:, jsr:, file:) without being affected by the build pipeline's replaceAll("node:", "") post-processing step.

• Setup Set the latest Node.js LTS version.
• Build: I've run npm build before committing and verified the bundle updates correctly.
• Tests: I've run test and confirmed all tests succeed. Added tests to cover my changes if needed.
• Docs: I've added or updated relevant documentation as needed.
• Sign Commits have verified signatures and follow conventional commits spec
• CoC: My changes follow the project's coding guidelines and Code of Conduct.
• Review: This PR represents original work and is not solely generated by AI tools.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[AnnasMazhar]

I have signed the Google CLA.

[kowanietz]

Nice fix. I think this might be a little too broad though, since it’d skip any import with a : in it, not just protocol imports like node:. Maybe worth checking for an actual protocol prefix instead?

[AnnasMazhar]

Thanks for reviewing. On it now.

[AnnasMazhar]

Good catch — updated to use /^[a-z]+:/i.test(path) instead. This only matches actual protocol prefixes (a word followed by colon at the start of the specifier), so it won't false-positive on anything that isn't a protocol import.

[antongolub]

I'd suggest even shorter: if (!path || path.includes(':')) return

[AnnasMazhar]

Yes Sir 👍

[AnnasMazhar]

Thanks for the suggestion. Applied. Is there anything else I can do to improve my contribution?

[antongolub]

1. Do not revert the upstream changes (deps, types, etc). Rebase and rebuild is required.
2. I'm afraid, unverified commits cannot be landed here
3. Omit test/export.test.js changes

[AnnasMazhar]

Thanks for your patience @antongolub. Applied the change. Please review.

[antongolub]

https://docs.github.com/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification/about-commit-signature-verification

[AnnasMazhar]

Apologies for being dim. Thank you for handholding 👍 @antongolub

[antongolub]

lgtm. Thanks for the fix.