chore(release): 11.1.2

.changeset-released/main.txt

@@ -1,14 +1,21 @@
 audit-signatures
 check-deps-status-skip-engine-check
+codeql-alert-159-followup
+codeql-security-fixes
 fix-11529-view-published-time
 fix-11561-publish-web-auth-proxy
 fix-11587-global-isolated-per-arg
+fix-ado-sec-fetch-headers
+fix-minimum-release-age-cached-abbreviated-metadata
+fix-named-catalog-upgrade
 fix-named-registry-vs-local-resolver
+fix-optimistic-lockfile-conflict
 gh-packages-prefix
 honest-moose-grin
 no-runtime-flag
 pnpm-bugs-command
 pnpm-owner-command
+preserve-published-at-in-fast-path
 runtime-set-workspace-root
 split-local-resolver
 update-cmd-shim-9-0-3

.changeset/codeql-alert-159-followup.md

@@ -1,6 +0,0 @@
----
-"@pnpm/pkg-manifest.utils": patch
-"pnpm": patch
----
-
-`convertEnginesRuntimeToDependencies`: switch the runtime-dependency write to `Object.defineProperty` so the CodeQL `js/prototype-polluting-assignment` rule treats the assignment as safe regardless of the property name (follow-up to [#11609](https://github.com/pnpm/pnpm/pull/11609)).

.changeset/codeql-security-fixes.md

@@ -1,9 +0,0 @@
----
-"@pnpm/pkg-manifest.utils": patch
-"@pnpm/installing.deps-installer": patch
-"@pnpm/resolving.npm-resolver": patch
-"@pnpm/deps.inspection.list": patch
-"pnpm": patch
----
-
-Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser.

.changeset/fix-ado-sec-fetch-headers.md

@@ -1,6 +0,0 @@
----
-"@pnpm/network.fetch": patch
-"pnpm": patch
----
-
-Strip `sec-fetch-*` headers from outgoing HTTP requests. These headers are automatically added by undici's `fetch()` implementation per the Fetch spec but cause Azure DevOps Artifacts to return HTTP 400 for uncached upstream packages, as ADO interprets them as browser requests [#11572](https://github.com/pnpm/pnpm/issues/11572).

.changeset/fix-minimum-release-age-cached-abbreviated-metadata.md

@@ -1,12 +0,0 @@
----
-"@pnpm/resolving.npm-resolver": patch
-"pnpm": patch
----
-
-Fix `minimumReleaseAge` handling for cached abbreviated metadata.
-
-The version-spec cache fast path no longer rethrows `ERR_PNPM_MISSING_TIME` under `strictPublishedByCheck`; it now falls through to the registry-fetch path, consistent with the adjacent mtime-gated cache block.
-
-When the registry returns 304 Not Modified for a package whose cached metadata is abbreviated (no per-version `time`), pnpm now re-fetches with `fullMetadata: true` if `minimumReleaseAge` is active and the package was modified after the cutoff. The upgraded metadata is persisted to disk so subsequent installs don't repeat the fetch. Previously the abbreviated meta was used as-is and the maturity check fell back to its warn-and-skip path, silently bypassing the quarantine and emitting a misleading "metadata is missing the time field" warning.
-
-Closes #11619.

.changeset/fix-named-catalog-upgrade.md

@@ -1,6 +0,0 @@
----
-"@pnpm/installing.deps-installer": patch
-"pnpm": patch
----
-
-Fix `pnpm upgrade --interactive --latest -r` not respecting named catalog groups. Previously, upgrading a dependency using a named catalog (e.g. `"catalog:foo"`) would incorrectly rewrite `package.json` to `"catalog:"` and place the updated version in the default catalog instead of the named one [#10115](https://github.com/pnpm/pnpm/issues/10115).

.changeset/fix-optimistic-lockfile-conflict.md

@@ -1,8 +0,0 @@
----
-"@pnpm/deps.status": patch
-"@pnpm/installing.commands": patch
-"@pnpm/lockfile.fs": patch
-"pnpm": patch
----
-
-Fixed `optimisticRepeatInstall` skipping `pnpm-lock.yaml` merge conflict resolution when the existing `node_modules` state appears up to date.

.changeset/preserve-published-at-in-fast-path.md

@@ -1,9 +0,0 @@
----
-"@pnpm/resolving.npm-resolver": patch
-"@pnpm/installing.deps-resolver": patch
-"@pnpm/installing.package-requester": patch
-"@pnpm/store.controller-types": patch
-"pnpm": patch
----
-
-Fix `minimumReleaseAge` / `resolutionMode: time-based` installs failing on lockfiles whose `time:` block is missing entries. The npm-resolver's peek-from-store fast path now surfaces `publishedAt` from the lockfile rather than discarding it, and falls through to a registry metadata fetch when the time-based cutoff can't be computed from the data on hand.

.meta-updater/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm-private/updater
 
+## 1100.0.11
+
+### Patch Changes
+
+- Updated dependencies [180aee9]
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/workspace.projects-reader@1101.0.4
+
 ## 1100.0.10
 
 ### Patch Changes

.meta-updater/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm-private/updater",
-  "version": "1100.0.10",
+  "version": "1100.0.11",
   "private": true,
   "type": "module",
   "scripts": {

__utils__/assert-project/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/assert-project
 
+## 1100.0.8
+
+### Patch Changes
+
+- @pnpm/assert-store@1100.0.8
+
 ## 1100.0.7
 
 ### Patch Changes

__utils__/assert-project/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pnpm/assert-project",
   "description": "Utils for testing projects that use pnpm",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "author": {
     "name": "Zoltan Kochan",
     "email": "z@kochan.io",

__utils__/assert-store/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/assert-store
 
+## 1100.0.8
+
+### Patch Changes
+
+- @pnpm/store.cafs@1100.1.4
+
 ## 1100.0.7
 
 ### Patch Changes

__utils__/assert-store/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pnpm/assert-store",
   "description": "Utils for testing pnpm store",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "bugs": {
     "url": "https://github.com/pnpm/pnpm/issues"
   },

__utils__/jest-config/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/jest-config
 
+## 1100.0.8
+
+### Patch Changes
+
+- @pnpm/worker@1100.1.5
+
 ## 1100.0.7
 
 ### Patch Changes

__utils__/jest-config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/jest-config",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "private": true,
   "main": "jest-preset.js",
   "type": "module",

__utils__/prepare/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/prepare
 
+## 1100.0.8
+
+### Patch Changes
+
+- @pnpm/assert-project@1100.0.8
+
 ## 1100.0.7
 
 ### Patch Changes

__utils__/prepare/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/prepare",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "type": "module",

__utils__/scripts/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/scripts
 
+## 1100.0.7
+
+### Patch Changes
+
+- @pnpm/workspace.projects-reader@1101.0.4
+
 ## 1100.0.6
 
 ### Patch Changes

__utils__/scripts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/scripts",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "private": true,
   "type": "module",
   "scripts": {

agent/client/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/agent.client
 
+## 1.0.5
+
+### Patch Changes
+
+- @pnpm/store.cafs@1100.1.4
+- @pnpm/worker@1100.1.5
+
 ## 1.0.4
 
 ### Patch Changes

agent/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/agent.client",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Client for pnpm agent server — sends store state, receives resolved lockfile and missing files",
   "keywords": [
     "pnpm",

agent/server/CHANGELOG.md

@@ -1,5 +1,18 @@
 # pnpm-agent
 
+## 0.0.14
+
+### Patch Changes
+
+- Updated dependencies [50b33c1]
+- Updated dependencies [8c06d1a]
+- Updated dependencies [180aee9]
+  - @pnpm/installing.deps-installer@1101.1.2
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/installing.client@1100.0.15
+  - @pnpm/store.controller@1101.0.6
+  - @pnpm/store.cafs@1100.1.4
+
 ## 0.0.13
 
 ### Patch Changes

agent/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pnpm-agent",
-  "version": "0.0.13",
+  "version": "0.0.14",
   "description": "pnpm agent server for server-side resolution and store-aware downloads",
   "keywords": [
     "pnpm",

auth/commands/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/auth.commands
 
+## 1100.0.13
+
+### Patch Changes
+
+- Updated dependencies [18a464f]
+  - @pnpm/network.fetch@1100.0.4
+  - @pnpm/cli.utils@1101.0.4
+  - @pnpm/config.reader@1101.3.1
+
 ## 1100.0.12
 
 ### Patch Changes

auth/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/auth.commands",
-  "version": "1100.0.12",
+  "version": "1100.0.13",
   "description": "Commands for authentication with npm registries",
   "keywords": [
     "pnpm",

bins/linker/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/link-bins
 
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies [9cad827]
+- Updated dependencies [50b33c1]
+  - @pnpm/pkg-manifest.utils@1100.1.3
+  - @pnpm/workspace.project-manifest-reader@1100.0.5
+
 ## 1100.0.5
 
 ### Patch Changes

bins/linker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/bins.linker",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "description": "Link bins to node_modules/.bin",
   "keywords": [
     "pnpm",

building/after-install/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @pnpm/building.after-install
 
+## 1101.0.12
+
+### Patch Changes
+
+- Updated dependencies [c2c2890]
+  - @pnpm/store.controller-types@1100.0.7
+  - @pnpm/bins.linker@1100.0.6
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/installing.context@1100.0.10
+  - @pnpm/exec.lifecycle@1100.0.10
+  - @pnpm/store.cafs@1100.1.4
+  - @pnpm/store.connection-manager@1100.1.2
+  - @pnpm/worker@1100.1.5
+
 ## 1101.0.11
 
 ### Patch Changes

building/after-install/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.after-install",
-  "version": "1101.0.11",
+  "version": "1101.0.12",
   "description": "Rebuild packages that are already installed by running their lifecycle scripts",
   "keywords": [
     "pnpm",

building/commands/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/building.commands
 
+## 1100.0.17
+
+### Patch Changes
+
+- Updated dependencies [180aee9]
+  - @pnpm/installing.commands@1100.2.2
+  - @pnpm/cli.utils@1101.0.4
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/building.after-install@1101.0.12
+  - @pnpm/store.connection-manager@1100.1.2
+
 ## 1100.0.16
 
 ### Patch Changes

building/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.commands",
-  "version": "1100.0.16",
+  "version": "1100.0.17",
   "description": "Commands for rebuilding and managing dependency builds",
   "keywords": [
     "pnpm",

building/during-install/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @pnpm/building.during-install
 
+## 1101.0.10
+
+### Patch Changes
+
+- Updated dependencies [c2c2890]
+  - @pnpm/store.controller-types@1100.0.7
+  - @pnpm/bins.linker@1100.0.6
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/exec.lifecycle@1100.0.10
+  - @pnpm/worker@1100.1.5
+  - @pnpm/fs.hard-link-dir@1100.0.1
+  - @pnpm/patching.apply-patch@1100.0.0
+
 ## 1101.0.9
 
 ### Patch Changes

building/during-install/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.during-install",
-  "version": "1101.0.9",
+  "version": "1101.0.10",
   "description": "Build packages in node_modules",
   "keywords": [
     "pnpm",

cache/api/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/cache.api
 
+## 1100.0.12
+
+### Patch Changes
+
+- Updated dependencies [50b33c1]
+- Updated dependencies [e526f89]
+- Updated dependencies [c2c2890]
+  - @pnpm/resolving.npm-resolver@1101.1.1
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/store.cafs@1100.1.4
+
 ## 1100.0.11
 
 ### Patch Changes

cache/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cache.api",
-  "version": "1100.0.11",
+  "version": "1100.0.12",
   "description": "API for controlling the cache",
   "keywords": [
     "pnpm",

cache/commands/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/cache.commands
 
+## 1100.0.13
+
+### Patch Changes
+
+- @pnpm/cli.utils@1101.0.4
+- @pnpm/config.reader@1101.3.1
+- @pnpm/cache.api@1100.0.12
+
 ## 1100.0.12
 
 ### Patch Changes

cache/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cache.commands",
-  "version": "1100.0.12",
+  "version": "1100.0.13",
   "description": "Commands for controlling the cache",
   "keywords": [
     "pnpm",

cli/commands/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/cli.commands
 
+## 1100.0.12
+
+### Patch Changes
+
+- @pnpm/cli.utils@1101.0.4
+- @pnpm/config.reader@1101.3.1
+- @pnpm/workspace.projects-reader@1101.0.4
+
 ## 1100.0.11
 
 ### Patch Changes

cli/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cli.commands",
-  "version": "1100.0.11",
+  "version": "1100.0.12",
   "description": "Commands for pnpm CLI",
   "keywords": [
     "pnpm",

cli/default-reporter/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/default-reporter
 
+## 1100.1.2
+
+### Patch Changes
+
+- @pnpm/config.reader@1101.3.1
+
 ## 1100.1.1
 
 ### Patch Changes

cli/default-reporter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cli.default-reporter",
-  "version": "1100.1.1",
+  "version": "1100.1.2",
   "description": "The default reporter of pnpm",
   "keywords": [
     "pnpm",

cli/utils/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/cli-utils
 
+## 1101.0.4
+
+### Patch Changes
+
+- Updated dependencies [9cad827]
+- Updated dependencies [50b33c1]
+  - @pnpm/pkg-manifest.utils@1100.1.3
+  - @pnpm/workspace.project-manifest-reader@1100.0.5
+
 ## 1101.0.3
 
 ### Patch Changes

cli/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cli.utils",
-  "version": "1101.0.3",
+  "version": "1101.0.4",
   "description": "Utils for pnpm commands",
   "keywords": [
     "pnpm",

config/commands/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/plugin-commands-config
 
+## 1100.0.13
+
+### Patch Changes
+
+- @pnpm/cli.utils@1101.0.4
+- @pnpm/config.reader@1101.3.1
+- @pnpm/workspace.workspace-manifest-writer@1100.0.7
+
 ## 1100.0.12
 
 ### Patch Changes

config/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/config.commands",
-  "version": "1100.0.12",
+  "version": "1100.0.13",
   "description": "Commands for reading and writing settings to/from config files",
   "keywords": [
     "pnpm",

config/reader/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/config
 
+## 1101.3.1
+
+### Patch Changes
+
+- Updated dependencies [9cad827]
+- Updated dependencies [50b33c1]
+  - @pnpm/pkg-manifest.utils@1100.1.3
+  - @pnpm/workspace.project-manifest-reader@1100.0.5
+  - @pnpm/hooks.pnpmfile@1100.0.8
+
 ## 1101.3.0
 
 ### Minor Changes

config/reader/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/config.reader",
-  "version": "1101.3.0",
+  "version": "1101.3.1",
   "description": "Gets configuration options for pnpm",
   "keywords": [
     "pnpm",

deps/compliance/audit/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/audit
 
+## 1101.0.7
+
+### Patch Changes
+
+- Updated dependencies [18a464f]
+- Updated dependencies [180aee9]
+  - @pnpm/network.fetch@1100.0.4
+  - @pnpm/lockfile.fs@1100.0.8
+
 ## 1101.0.6
 
 ### Patch Changes

deps/compliance/audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.audit",
-  "version": "1101.0.6",
+  "version": "1101.0.7",
   "description": "Audit a lockfile",
   "keywords": [
     "pnpm",

deps/compliance/commands/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @pnpm/deps.compliance.commands
 
+## 1101.2.2
+
+### Patch Changes
+
+- Updated dependencies [180aee9]
+  - @pnpm/installing.commands@1100.2.2
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/cli.utils@1101.0.4
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/workspace.project-manifest-reader@1100.0.5
+  - @pnpm/deps.compliance.audit@1101.0.7
+  - @pnpm/deps.security.signatures@1101.1.1
+  - @pnpm/deps.compliance.license-scanner@1100.0.11
+  - @pnpm/deps.compliance.sbom@1100.1.1
+
 ## 1101.2.1
 
 ### Patch Changes

deps/compliance/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.commands",
-  "version": "1101.2.1",
+  "version": "1101.2.2",
   "description": "pnpm commands for audit, licenses, and sbom",
   "keywords": [
     "pnpm",

deps/compliance/license-scanner/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/license-scanner
 
+## 1100.0.11
+
+### Patch Changes
+
+- Updated dependencies [180aee9]
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/store.pkg-finder@1100.0.9
+
 ## 1100.0.10
 
 ### Patch Changes

deps/compliance/license-scanner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.license-scanner",
-  "version": "1100.0.10",
+  "version": "1100.0.11",
   "description": "Check for licenses packages",
   "keywords": [
     "pnpm",

deps/compliance/sbom/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/deps.compliance.sbom
 
+## 1100.1.1
+
+### Patch Changes
+
+- @pnpm/store.pkg-finder@1100.0.9
+
 ## 1100.1.0
 
 ### Minor Changes

deps/compliance/sbom/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.sbom",
-  "version": "1100.1.0",
+  "version": "1100.1.1",
   "description": "Generate SBOM from pnpm lockfile",
   "keywords": [
     "pnpm",

deps/graph-builder/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/deps.graph-builder
 
+## 1100.0.9
+
+### Patch Changes
+
+- Updated dependencies [180aee9]
+- Updated dependencies [c2c2890]
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/store.controller-types@1100.0.7
+
 ## 1100.0.8
 
 ### Patch Changes

deps/graph-builder/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.graph-builder",
-  "version": "1100.0.8",
+  "version": "1100.0.9",
   "description": "A package for building a dependency graph from a lockfile",
   "keywords": [
     "pnpm",

deps/inspection/commands/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @pnpm/deps.inspection.commands
 
+## 1100.2.2
+
+### Patch Changes
+
+- Updated dependencies [50b33c1]
+- Updated dependencies [18a464f]
+- Updated dependencies [e526f89]
+- Updated dependencies [180aee9]
+- Updated dependencies [c2c2890]
+  - @pnpm/resolving.npm-resolver@1101.1.1
+  - @pnpm/deps.inspection.list@1100.0.10
+  - @pnpm/network.fetch@1100.0.4
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/cli.utils@1101.0.4
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/deps.inspection.outdated@1100.0.15
+  - @pnpm/global.commands@1100.0.17
+  - @pnpm/resolving.default-resolver@1100.1.2
+  - @pnpm/deps.inspection.peers-checker@1100.0.8
+
 ## 1100.2.1
 
 ### Patch Changes

deps/inspection/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.commands",
-  "version": "1100.2.1",
+  "version": "1100.2.2",
   "description": "The list, ll, why, and outdated commands of pnpm",
   "keywords": [
     "pnpm",

deps/inspection/list/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/list
 
+## 1100.0.10
+
+### Patch Changes
+
+- 50b33c1: Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser.
+- Updated dependencies [180aee9]
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/workspace.project-manifest-reader@1100.0.5
+  - @pnpm/deps.inspection.tree-builder@1100.0.9
+
 ## 1100.0.9
 
 ### Patch Changes

deps/inspection/list/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.list",
-  "version": "1100.0.9",
+  "version": "1100.0.10",
   "description": "List installed packages in a symlinked `node_modules`",
   "keywords": [
     "pnpm",

deps/inspection/outdated/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @pnpm/outdated
 
+## 1100.0.15
+
+### Patch Changes
+
+- Updated dependencies [9cad827]
+- Updated dependencies [50b33c1]
+- Updated dependencies [e526f89]
+- Updated dependencies [180aee9]
+- Updated dependencies [c2c2890]
+  - @pnpm/pkg-manifest.utils@1100.1.3
+  - @pnpm/resolving.npm-resolver@1101.1.1
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/installing.client@1100.0.15
+
 ## 1100.0.14
 
 ### Patch Changes

deps/inspection/outdated/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.outdated",
-  "version": "1100.0.14",
+  "version": "1100.0.15",
   "description": "Check for outdated packages",
   "keywords": [
     "pnpm",

deps/inspection/peers-checker/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/deps.inspection.peers-checker
 
+## 1100.0.8
+
+### Patch Changes
+
+- Updated dependencies [180aee9]
+  - @pnpm/lockfile.fs@1100.0.8
+
 ## 1100.0.7
 
 ### Patch Changes

deps/inspection/peers-checker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.peers-checker",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "description": "Check for unmet and missing peer dependency issues from the lockfile",
   "keywords": [
     "pnpm",

deps/inspection/tree-builder/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/reviewing.dependencies-hierarchy
 
+## 1100.0.9
+
+### Patch Changes
+
+- Updated dependencies [180aee9]
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/store.cafs@1100.1.4
+
 ## 1100.0.8
 
 ### Patch Changes

deps/inspection/tree-builder/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.tree-builder",
-  "version": "1100.0.8",
+  "version": "1100.0.9",
   "description": "Creates a dependencies hierarchy for a symlinked `node_modules`",
   "keywords": [
     "pnpm",

deps/security/signatures/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/deps.security.signatures
 
+## 1101.1.1
+
+### Patch Changes
+
+- Updated dependencies [18a464f]
+  - @pnpm/network.fetch@1100.0.4
+
 ## 1101.1.0
 
 ### Minor Changes

deps/security/signatures/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.security.signatures",
-  "version": "1101.1.0",
+  "version": "1101.1.1",
   "description": "Verify package signatures from npm registries",
   "keywords": [
     "pnpm",

deps/status/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @pnpm/deps.status
 
+## 1100.0.15
+
+### Patch Changes
+
+- 180aee9: Fixed `optimisticRepeatInstall` skipping `pnpm-lock.yaml` merge conflict resolution when the existing `node_modules` state appears up to date.
+- Updated dependencies [180aee9]
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/installing.context@1100.0.10
+  - @pnpm/workspace.projects-reader@1101.0.4
+  - @pnpm/workspace.state@1100.0.12
+  - @pnpm/lockfile.verification@1100.0.10
+  - @pnpm/lockfile.settings-checker@1100.0.10
+
 ## 1100.0.14
 
 ### Patch Changes

deps/status/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.status",
-  "version": "1100.0.14",
+  "version": "1100.0.15",
   "description": "Check dependencies status",
   "keywords": [
     "pnpm",

engine/pm/commands/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @pnpm/engine.pm.commands
 
+## 1101.1.12
+
+### Patch Changes
+
+- Updated dependencies [50b33c1]
+- Updated dependencies [e526f89]
+- Updated dependencies [180aee9]
+- Updated dependencies [c2c2890]
+  - @pnpm/resolving.npm-resolver@1101.1.1
+  - @pnpm/lockfile.fs@1100.0.8
+  - @pnpm/bins.linker@1100.0.6
+  - @pnpm/cli.utils@1101.0.4
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/workspace.project-manifest-reader@1100.0.5
+  - @pnpm/global.commands@1100.0.17
+  - @pnpm/installing.env-installer@1101.0.9
+  - @pnpm/installing.client@1100.0.15
+  - @pnpm/installing.deps-restorer@1101.1.2
+  - @pnpm/store.controller@1101.0.6
+  - @pnpm/store.connection-manager@1100.1.2
+
 ## 1101.1.11
 
 ### Patch Changes

engine/pm/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.pm.commands",
-  "version": "1101.1.11",
+  "version": "1101.1.12",
   "description": "pnpm commands for self-updating and setting up pnpm",
   "keywords": [
     "pnpm",

engine/runtime/bun-resolver/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/resolving.bun-resolver
 
+## 1101.0.6
+
+### Patch Changes
+
+- Updated dependencies [50b33c1]
+- Updated dependencies [e526f89]
+- Updated dependencies [c2c2890]
+  - @pnpm/resolving.npm-resolver@1101.1.1
+  - @pnpm/worker@1100.1.5
+
 ## 1101.0.5
 
 ### Patch Changes

engine/runtime/bun-resolver/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.runtime.bun-resolver",
-  "version": "1101.0.5",
+  "version": "1101.0.6",
   "description": "Resolves the Bun runtime",
   "keywords": [
     "pnpm",

engine/runtime/commands/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/engine.runtime.commands
 
+## 1100.0.14
+
+### Patch Changes
+
+- Updated dependencies [18a464f]
+  - @pnpm/network.fetch@1100.0.4
+  - @pnpm/cli.utils@1101.0.4
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/engine.runtime.node-resolver@1101.0.8
+
 ## 1100.0.13
 
 ### Patch Changes

engine/runtime/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.runtime.commands",
-  "version": "1100.0.13",
+  "version": "1100.0.14",
   "description": "pnpm commands for managing runtimes",
   "keywords": [
     "pnpm",

engine/runtime/deno-resolver/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/resolving.deno-resolver
 
+## 1101.0.6
+
+### Patch Changes
+
+- Updated dependencies [50b33c1]
+- Updated dependencies [e526f89]
+- Updated dependencies [c2c2890]
+  - @pnpm/resolving.npm-resolver@1101.1.1
+  - @pnpm/worker@1100.1.5
+
 ## 1101.0.5
 
 ### Patch Changes

engine/runtime/deno-resolver/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.runtime.deno-resolver",
-  "version": "1101.0.5",
+  "version": "1101.0.6",
   "description": "Resolves the Deno runtime",
   "keywords": [
     "pnpm",

engine/runtime/node-resolver/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/node.resolver
 
+## 1101.0.8
+
+### Patch Changes
+
+- @pnpm/config.reader@1101.3.1
+
 ## 1101.0.7
 
 ### Patch Changes

engine/runtime/node-resolver/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.runtime.node-resolver",
-  "version": "1101.0.7",
+  "version": "1101.0.8",
   "description": "Resolves a Node.js version specifier to an exact Node.js version",
   "keywords": [
     "pnpm",

exec/commands/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @pnpm/plugin-commands-script-runners
 
+## 1100.1.7
+
+### Patch Changes
+
+- Updated dependencies [180aee9]
+  - @pnpm/deps.status@1100.0.15
+  - @pnpm/installing.commands@1100.2.2
+  - @pnpm/cli.utils@1101.0.4
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/workspace.project-manifest-reader@1100.0.5
+  - @pnpm/engine.runtime.commands@1100.0.14
+  - @pnpm/installing.client@1100.0.15
+  - @pnpm/building.commands@1100.0.17
+  - @pnpm/exec.lifecycle@1100.0.10
+  - @pnpm/workspace.injected-deps-syncer@1100.0.11
+  - @pnpm/crypto.hash@1100.0.1
+
 ## 1100.1.6
 
 ### Patch Changes

exec/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/exec.commands",
-  "version": "1100.1.6",
+  "version": "1100.1.7",
   "description": "Commands for running scripts",
   "keywords": [
     "pnpm",

exec/lifecycle/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/lifecycle
 
+## 1100.0.10
+
+### Patch Changes
+
+- Updated dependencies [c2c2890]
+  - @pnpm/store.controller-types@1100.0.7
+  - @pnpm/bins.linker@1100.0.6
+  - @pnpm/fetching.directory-fetcher@1100.0.9
+
 ## 1100.0.9
 
 ### Patch Changes

exec/lifecycle/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/exec.lifecycle",
-  "version": "1100.0.9",
+  "version": "1100.0.10",
   "description": "Package lifecycle hook runner",
   "keywords": [
     "pnpm",

exec/prepare-package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/prepare-package
 
+## 1100.0.10
+
+### Patch Changes
+
+- @pnpm/exec.lifecycle@1100.0.10
+
 ## 1100.0.9
 
 ### Patch Changes

exec/prepare-package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/exec.prepare-package",
-  "version": "1100.0.9",
+  "version": "1100.0.10",
   "description": "Prepares a Git-hosted package",
   "keywords": [
     "pnpm",

fetching/directory-fetcher/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/directory-fetcher
 
+## 1100.0.9
+
+### Patch Changes
+
+- @pnpm/workspace.project-manifest-reader@1100.0.5
+
 ## 1100.0.8
 
 ### Patch Changes

fetching/directory-fetcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.directory-fetcher",
-  "version": "1100.0.8",
+  "version": "1100.0.9",
   "description": "A fetcher for local directory packages",
   "keywords": [
     "pnpm",

fetching/git-fetcher/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/git-fetcher
 
+## 1101.0.6
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.10
+- @pnpm/worker@1100.1.5
+
 ## 1101.0.5
 
 ### Patch Changes

fetching/git-fetcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.git-fetcher",
-  "version": "1101.0.5",
+  "version": "1101.0.6",
   "description": "A fetcher for git-hosted packages",
   "keywords": [
     "pnpm",

fetching/tarball-fetcher/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/tarball-fetcher
 
+## 1101.0.7
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.10
+- @pnpm/worker@1100.1.5
+
 ## 1101.0.6
 
 ### Patch Changes

fetching/tarball-fetcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.tarball-fetcher",
-  "version": "1101.0.6",
+  "version": "1101.0.7",
   "description": "Fetcher for packages hosted as tarballs",
   "keywords": [
     "pnpm",

fs/indexed-pkg-importer/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/fs.indexed-pkg-importer
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [c2c2890]
+  - @pnpm/store.controller-types@1100.0.7
+
 ## 1100.0.6
 
 ### Patch Changes

fs/indexed-pkg-importer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fs.indexed-pkg-importer",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Replicates indexed directories using hard links, copies, or cloning",
   "keywords": [
     "pnpm",

global/commands/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @pnpm/global.commands
 
+## 1100.0.17
+
+### Patch Changes
+
+- Updated dependencies [50b33c1]
+- Updated dependencies [8c06d1a]
+  - @pnpm/installing.deps-installer@1101.1.2
+  - @pnpm/deps.inspection.list@1100.0.10
+  - @pnpm/bins.linker@1100.0.6
+  - @pnpm/cli.utils@1101.0.4
+  - @pnpm/config.reader@1101.3.1
+  - @pnpm/store.connection-manager@1100.1.2
+
 ## 1100.0.16
 
 ### Patch Changes

global/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/global.commands",
-  "version": "1100.0.16",
+  "version": "1100.0.17",
   "description": "Global package command handlers for pnpm",
   "keywords": [
     "pnpm",

hooks/pnpmfile/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/pnpmfile
 
+## 1100.0.8
+
+### Patch Changes
+
+- Updated dependencies [c2c2890]
+  - @pnpm/store.controller-types@1100.0.7
+  - @pnpm/crypto.hash@1100.0.1
+
 ## 1100.0.7
 
 ### Patch Changes

hooks/pnpmfile/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/hooks.pnpmfile",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "description": "Reading a .pnpmfile.cjs",
   "keywords": [
     "pnpm",