fix(cli): report the real version instead of a hardcoded 0.1.0

Found by installing the published package and running it: iobroker-sync@1.0.0
printed 0.1.0 for --version. The version was a string literal in cli.ts, and
release-please bumps package.json — it has no way to reach a literal in the
source, so every release since 0.1.0 would have lied.

It is now read from package.json at runtime via createRequire. dist/cli.js
sits one level below package.json both in the repository and in the
installed package, so the relative path holds in both; verified by dropping
the built file into the package installed from npm.

The cli test now compares --version against package.json rather than a
regex, so the two cannot drift again.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: mschmicking

src/cli.ts

@@ -6,6 +6,7 @@
  * to the requested command, and guarantees the socket is closed afterwards.
  */
 
+import { createRequire } from 'node:module';
 import * as path from 'node:path';
 import { Command } from 'commander';
 
@@ -33,6 +34,15 @@ import { remove } from './commands/remove';
 import { login, logout } from './commands/login';
 import { setupTypes } from './commands/types';
 
+/**
+ * Read at runtime rather than hardcoded. The literal that used to live here said
+ * 0.1.0 while the published package was 1.0.0 — release-please bumps package.json
+ * and had no way to reach a string in the source, so `--version` lied to every
+ * user. dist/cli.js sits one level below package.json in both the repository and
+ * the installed package, so the relative path holds in both.
+ */
+const { version } = createRequire(__filename)('../package.json') as { version: string };
+
 const program = new Command();
 
 let verbose = false;
@@ -171,7 +181,7 @@ function action(fn: () => Promise<void>): () => Promise<void> {
 program
   .name('iob-sync')
   .description('Sync ioBroker scripts with a local folder')
-  .version('0.1.0')
+  .version(version)
   .option('-n, --dry-run', 'show what would happen without changing anything')
   .option('-v, --verbose', 'verbose output')
   .option('-C, --cwd <dir>', 'run as if started in <dir>')

test/cli.test.ts

@@ -204,10 +204,17 @@ describe('cli argv handling', () => {
     }
   });
 
-  it('prints the version', async () => {
+  it('prints the version from package.json, not a hardcoded literal', async () => {
+    // It used to be a string in cli.ts. release-please bumps package.json and
+    // cannot reach that string, so the published 1.0.0 reported 0.1.0 to every
+    // user who ran --version.
+    const pkg = JSON.parse(
+      await fs.readFile(path.resolve(process.cwd(), 'package.json'), 'utf8'),
+    ) as { version: string };
+
     const { stdout, code } = await runCli(['--version']);
 
     assert.equal(code, 0);
-    assert.match(stdout, /\d+\.\d+\.\d+/);
+    assert.equal(stdout.trim(), pkg.version);
   });
 });