diff --git a/.changeset/lucky-bikes-nail.md b/.changeset/lucky-bikes-nail.md new file mode 100644 index 0000000000..21dc8493e8 --- /dev/null +++ b/.changeset/lucky-bikes-nail.md @@ -0,0 +1,7 @@ +--- +"@pnpm/plugin-commands-audit": minor +"@pnpm/config": minor +"pnpm": minor +--- + +Support configuring `auditLevel` in the `pnpm-workspace.yaml` file [#10540](https://github.com/pnpm/pnpm/issues/10540). diff --git a/config/config/src/Config.ts b/config/config/src/Config.ts index d6d489dc22..5827ce531a 100644 --- a/config/config/src/Config.ts +++ b/config/config/src/Config.ts @@ -238,6 +238,7 @@ export interface Config extends AuthInfo, OptionsFromRootManifest { trustPolicy?: TrustPolicy trustPolicyExclude?: string[] trustPolicyIgnoreAfter?: number + auditLevel?: 'low' | 'moderate' | 'high' | 'critical' packageConfigs?: ProjectConfigSet } diff --git a/config/config/src/configFileKey.ts b/config/config/src/configFileKey.ts index a679af7ae1..e4f455cc45 100644 --- a/config/config/src/configFileKey.ts +++ b/config/config/src/configFileKey.ts @@ -153,6 +153,7 @@ export const excludedPnpmKeys = [ 'cpu', 'libc', 'os', + 'audit-level', ] as const satisfies ReadonlyArray> export type ExcludedPnpmKey = typeof excludedPnpmKeys[number] diff --git a/config/config/src/types.ts b/config/config/src/types.ts index 1b9375e561..961e8e7274 100644 --- a/config/config/src/types.ts +++ b/config/config/src/types.ts @@ -139,6 +139,7 @@ export const pnpmTypes = { cpu: [String, Array], libc: [String, Array], os: [String, Array], + 'audit-level': ['low', 'moderate', 'high', 'critical'], } // NOTE: There is an oversight I just now notice thanks to a test failure: pnpmTypes (which used to be the object literal inside `Object.assign`) diff --git a/lockfile/plugin-commands-audit/src/audit.ts b/lockfile/plugin-commands-audit/src/audit.ts index 6018d0f62d..0975a12dc2 100644 --- a/lockfile/plugin-commands-audit/src/audit.ts +++ b/lockfile/plugin-commands-audit/src/audit.ts @@ -123,7 +123,6 @@ export function help (): string { } export type AuditOptions = Pick & { - auditLevel?: 'low' | 'moderate' | 'high' | 'critical' fix?: boolean ignoreRegistryErrors?: boolean json?: boolean @@ -132,6 +131,7 @@ export type AuditOptions = Pick & { ignore?: string[] ignoreUnfixable?: boolean } & Pick