From 8a80235c7b087bbbfdad98594bbf02fc00eddb57 Mon Sep 17 00:00:00 2001 From: Zoltan Kochan Date: Thu, 14 May 2026 13:31:53 +0200 Subject: [PATCH] chore(release): 11.1.2 --- .changeset-released/main.txt | 7 ++++ .changeset/codeql-alert-159-followup.md | 6 ---- .changeset/codeql-security-fixes.md | 9 ----- .changeset/fix-ado-sec-fetch-headers.md | 6 ---- ...release-age-cached-abbreviated-metadata.md | 12 ------- .changeset/fix-named-catalog-upgrade.md | 6 ---- .../fix-optimistic-lockfile-conflict.md | 8 ----- .../preserve-published-at-in-fast-path.md | 9 ----- .meta-updater/CHANGELOG.md | 8 +++++ .meta-updater/package.json | 2 +- __utils__/assert-project/CHANGELOG.md | 6 ++++ __utils__/assert-project/package.json | 2 +- __utils__/assert-store/CHANGELOG.md | 6 ++++ __utils__/assert-store/package.json | 2 +- __utils__/jest-config/CHANGELOG.md | 6 ++++ __utils__/jest-config/package.json | 2 +- __utils__/prepare/CHANGELOG.md | 6 ++++ __utils__/prepare/package.json | 2 +- __utils__/scripts/CHANGELOG.md | 6 ++++ __utils__/scripts/package.json | 2 +- agent/client/CHANGELOG.md | 7 ++++ agent/client/package.json | 2 +- agent/server/CHANGELOG.md | 13 ++++++++ agent/server/package.json | 2 +- auth/commands/CHANGELOG.md | 9 +++++ auth/commands/package.json | 2 +- bins/linker/CHANGELOG.md | 9 +++++ bins/linker/package.json | 2 +- building/after-install/CHANGELOG.md | 14 ++++++++ building/after-install/package.json | 2 +- building/commands/CHANGELOG.md | 11 +++++++ building/commands/package.json | 2 +- building/during-install/CHANGELOG.md | 13 ++++++++ building/during-install/package.json | 2 +- cache/api/CHANGELOG.md | 11 +++++++ cache/api/package.json | 2 +- cache/commands/CHANGELOG.md | 8 +++++ cache/commands/package.json | 2 +- cli/commands/CHANGELOG.md | 8 +++++ cli/commands/package.json | 2 +- cli/default-reporter/CHANGELOG.md | 6 ++++ cli/default-reporter/package.json | 2 +- cli/utils/CHANGELOG.md | 9 +++++ cli/utils/package.json | 2 +- config/commands/CHANGELOG.md | 8 +++++ config/commands/package.json | 2 +- config/reader/CHANGELOG.md | 10 ++++++ config/reader/package.json | 2 +- deps/compliance/audit/CHANGELOG.md | 9 +++++ deps/compliance/audit/package.json | 2 +- deps/compliance/commands/CHANGELOG.md | 15 +++++++++ deps/compliance/commands/package.json | 2 +- deps/compliance/license-scanner/CHANGELOG.md | 8 +++++ deps/compliance/license-scanner/package.json | 2 +- deps/compliance/sbom/CHANGELOG.md | 6 ++++ deps/compliance/sbom/package.json | 2 +- deps/graph-builder/CHANGELOG.md | 9 +++++ deps/graph-builder/package.json | 2 +- deps/inspection/commands/CHANGELOG.md | 20 +++++++++++ deps/inspection/commands/package.json | 2 +- deps/inspection/list/CHANGELOG.md | 10 ++++++ deps/inspection/list/package.json | 2 +- deps/inspection/outdated/CHANGELOG.md | 14 ++++++++ deps/inspection/outdated/package.json | 2 +- deps/inspection/peers-checker/CHANGELOG.md | 7 ++++ deps/inspection/peers-checker/package.json | 2 +- deps/inspection/tree-builder/CHANGELOG.md | 8 +++++ deps/inspection/tree-builder/package.json | 2 +- deps/security/signatures/CHANGELOG.md | 7 ++++ deps/security/signatures/package.json | 2 +- deps/status/CHANGELOG.md | 14 ++++++++ deps/status/package.json | 2 +- engine/pm/commands/CHANGELOG.md | 21 ++++++++++++ engine/pm/commands/package.json | 2 +- engine/runtime/bun-resolver/CHANGELOG.md | 10 ++++++ engine/runtime/bun-resolver/package.json | 2 +- engine/runtime/commands/CHANGELOG.md | 10 ++++++ engine/runtime/commands/package.json | 2 +- engine/runtime/deno-resolver/CHANGELOG.md | 10 ++++++ engine/runtime/deno-resolver/package.json | 2 +- engine/runtime/node-resolver/CHANGELOG.md | 6 ++++ engine/runtime/node-resolver/package.json | 2 +- exec/commands/CHANGELOG.md | 17 ++++++++++ exec/commands/package.json | 2 +- exec/lifecycle/CHANGELOG.md | 9 +++++ exec/lifecycle/package.json | 2 +- exec/prepare-package/CHANGELOG.md | 6 ++++ exec/prepare-package/package.json | 2 +- fetching/directory-fetcher/CHANGELOG.md | 6 ++++ fetching/directory-fetcher/package.json | 2 +- fetching/git-fetcher/CHANGELOG.md | 7 ++++ fetching/git-fetcher/package.json | 2 +- fetching/tarball-fetcher/CHANGELOG.md | 7 ++++ fetching/tarball-fetcher/package.json | 2 +- fs/indexed-pkg-importer/CHANGELOG.md | 7 ++++ fs/indexed-pkg-importer/package.json | 2 +- global/commands/CHANGELOG.md | 13 ++++++++ global/commands/package.json | 2 +- hooks/pnpmfile/CHANGELOG.md | 8 +++++ hooks/pnpmfile/package.json | 2 +- installing/client/CHANGELOG.md | 12 +++++++ installing/client/package.json | 2 +- installing/commands/CHANGELOG.md | 29 ++++++++++++++++ installing/commands/package.json | 2 +- installing/context/CHANGELOG.md | 9 +++++ installing/context/package.json | 2 +- installing/deps-installer/CHANGELOG.md | 33 +++++++++++++++++++ installing/deps-installer/package.json | 2 +- installing/deps-resolver/CHANGELOG.md | 15 +++++++++ installing/deps-resolver/package.json | 2 +- installing/deps-restorer/CHANGELOG.md | 21 ++++++++++++ installing/deps-restorer/package.json | 2 +- installing/env-installer/CHANGELOG.md | 17 ++++++++++ installing/env-installer/package.json | 2 +- installing/linking/hoist/CHANGELOG.md | 6 ++++ installing/linking/hoist/package.json | 2 +- .../linking/modules-cleaner/CHANGELOG.md | 7 ++++ .../linking/modules-cleaner/package.json | 2 +- installing/package-requester/CHANGELOG.md | 11 +++++++ installing/package-requester/package.json | 2 +- installing/read-projects-context/CHANGELOG.md | 7 ++++ installing/read-projects-context/package.json | 2 +- lockfile/fs/CHANGELOG.md | 6 ++++ lockfile/fs/package.json | 2 +- lockfile/make-dedicated-lockfile/CHANGELOG.md | 9 +++++ lockfile/make-dedicated-lockfile/package.json | 2 +- lockfile/preferred-versions/CHANGELOG.md | 8 +++++ lockfile/preferred-versions/package.json | 2 +- lockfile/settings-checker/CHANGELOG.md | 7 ++++ lockfile/settings-checker/package.json | 2 +- lockfile/to-pnp/CHANGELOG.md | 7 ++++ lockfile/to-pnp/package.json | 2 +- lockfile/verification/CHANGELOG.md | 7 ++++ lockfile/verification/package.json | 2 +- modules-mounter/daemon/CHANGELOG.md | 9 +++++ modules-mounter/daemon/package.json | 2 +- network/fetch/CHANGELOG.md | 6 ++++ network/fetch/package.json | 2 +- patching/commands/CHANGELOG.md | 15 +++++++++ patching/commands/package.json | 2 +- pkg-manifest/utils/CHANGELOG.md | 7 ++++ pkg-manifest/utils/package.json | 2 +- pnpm/CHANGELOG.md | 19 +++++++++++ pnpm/artifacts/darwin-arm64/package.json | 2 +- pnpm/artifacts/exe/package.json | 2 +- pnpm/artifacts/linux-arm64-musl/package.json | 2 +- pnpm/artifacts/linux-arm64/package.json | 2 +- pnpm/artifacts/linux-x64-musl/package.json | 2 +- pnpm/artifacts/linux-x64/package.json | 2 +- pnpm/artifacts/win32-arm64/package.json | 2 +- pnpm/artifacts/win32-x64/package.json | 2 +- pnpm/dev/CHANGELOG.md | 6 ++++ pnpm/dev/package.json | 2 +- pnpm/package.json | 2 +- registry-access/commands/CHANGELOG.md | 9 +++++ registry-access/commands/package.json | 2 +- releasing/commands/CHANGELOG.md | 20 +++++++++++ releasing/commands/package.json | 2 +- releasing/exportable-manifest/CHANGELOG.md | 6 ++++ releasing/exportable-manifest/package.json | 2 +- resolving/default-resolver/CHANGELOG.md | 15 +++++++++ resolving/default-resolver/package.json | 2 +- resolving/git-resolver/CHANGELOG.md | 7 ++++ resolving/git-resolver/package.json | 2 +- resolving/local-resolver/CHANGELOG.md | 7 ++++ resolving/local-resolver/package.json | 2 +- resolving/npm-resolver/CHANGELOG.md | 18 ++++++++++ resolving/npm-resolver/package.json | 2 +- store/cafs/CHANGELOG.md | 7 ++++ store/cafs/package.json | 2 +- store/commands/CHANGELOG.md | 13 ++++++++ store/commands/package.json | 2 +- store/connection-manager/CHANGELOG.md | 8 +++++ store/connection-manager/package.json | 2 +- store/controller-types/CHANGELOG.md | 6 ++++ store/controller-types/package.json | 2 +- store/controller/CHANGELOG.md | 12 +++++++ store/controller/package.json | 2 +- store/create-cafs-store/CHANGELOG.md | 9 +++++ store/create-cafs-store/package.json | 2 +- store/pkg-finder/CHANGELOG.md | 7 ++++ store/pkg-finder/package.json | 2 +- testing/mock-agent/CHANGELOG.md | 7 ++++ testing/mock-agent/package.json | 2 +- testing/temp-store/CHANGELOG.md | 9 +++++ testing/temp-store/package.json | 2 +- worker/CHANGELOG.md | 9 +++++ worker/package.json | 2 +- workspace/commands/CHANGELOG.md | 7 ++++ workspace/commands/package.json | 2 +- workspace/injected-deps-syncer/CHANGELOG.md | 8 +++++ workspace/injected-deps-syncer/package.json | 2 +- .../project-manifest-reader/CHANGELOG.md | 8 +++++ .../project-manifest-reader/package.json | 2 +- workspace/projects-filter/CHANGELOG.md | 7 ++++ workspace/projects-filter/package.json | 2 +- workspace/projects-graph/CHANGELOG.md | 9 +++++ workspace/projects-graph/package.json | 2 +- workspace/projects-reader/CHANGELOG.md | 7 ++++ workspace/projects-reader/package.json | 2 +- workspace/state/CHANGELOG.md | 6 ++++ workspace/state/package.json | 2 +- 202 files changed, 1040 insertions(+), 157 deletions(-) delete mode 100644 .changeset/codeql-alert-159-followup.md delete mode 100644 .changeset/codeql-security-fixes.md delete mode 100644 .changeset/fix-ado-sec-fetch-headers.md delete mode 100644 .changeset/fix-minimum-release-age-cached-abbreviated-metadata.md delete mode 100644 .changeset/fix-named-catalog-upgrade.md delete mode 100644 .changeset/fix-optimistic-lockfile-conflict.md delete mode 100644 .changeset/preserve-published-at-in-fast-path.md diff --git a/.changeset-released/main.txt b/.changeset-released/main.txt index f3d46f228d..f8e7dcec2d 100644 --- a/.changeset-released/main.txt +++ b/.changeset-released/main.txt @@ -1,14 +1,21 @@ audit-signatures check-deps-status-skip-engine-check +codeql-alert-159-followup +codeql-security-fixes fix-11529-view-published-time fix-11561-publish-web-auth-proxy fix-11587-global-isolated-per-arg +fix-ado-sec-fetch-headers +fix-minimum-release-age-cached-abbreviated-metadata +fix-named-catalog-upgrade fix-named-registry-vs-local-resolver +fix-optimistic-lockfile-conflict gh-packages-prefix honest-moose-grin no-runtime-flag pnpm-bugs-command pnpm-owner-command +preserve-published-at-in-fast-path runtime-set-workspace-root split-local-resolver update-cmd-shim-9-0-3 diff --git a/.changeset/codeql-alert-159-followup.md b/.changeset/codeql-alert-159-followup.md deleted file mode 100644 index bb2cc4c01e..0000000000 --- a/.changeset/codeql-alert-159-followup.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/pkg-manifest.utils": patch -"pnpm": patch ---- - -`convertEnginesRuntimeToDependencies`: switch the runtime-dependency write to `Object.defineProperty` so the CodeQL `js/prototype-polluting-assignment` rule treats the assignment as safe regardless of the property name (follow-up to [#11609](https://github.com/pnpm/pnpm/pull/11609)). diff --git a/.changeset/codeql-security-fixes.md b/.changeset/codeql-security-fixes.md deleted file mode 100644 index df9ba83e80..0000000000 --- a/.changeset/codeql-security-fixes.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"@pnpm/pkg-manifest.utils": patch -"@pnpm/installing.deps-installer": patch -"@pnpm/resolving.npm-resolver": patch -"@pnpm/deps.inspection.list": patch -"pnpm": patch ---- - -Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser. diff --git a/.changeset/fix-ado-sec-fetch-headers.md b/.changeset/fix-ado-sec-fetch-headers.md deleted file mode 100644 index 8cd0477668..0000000000 --- a/.changeset/fix-ado-sec-fetch-headers.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/network.fetch": patch -"pnpm": patch ---- - -Strip `sec-fetch-*` headers from outgoing HTTP requests. These headers are automatically added by undici's `fetch()` implementation per the Fetch spec but cause Azure DevOps Artifacts to return HTTP 400 for uncached upstream packages, as ADO interprets them as browser requests [#11572](https://github.com/pnpm/pnpm/issues/11572). diff --git a/.changeset/fix-minimum-release-age-cached-abbreviated-metadata.md b/.changeset/fix-minimum-release-age-cached-abbreviated-metadata.md deleted file mode 100644 index d30b92ed21..0000000000 --- a/.changeset/fix-minimum-release-age-cached-abbreviated-metadata.md +++ /dev/null @@ -1,12 +0,0 @@ ---- -"@pnpm/resolving.npm-resolver": patch -"pnpm": patch ---- - -Fix `minimumReleaseAge` handling for cached abbreviated metadata. - -The version-spec cache fast path no longer rethrows `ERR_PNPM_MISSING_TIME` under `strictPublishedByCheck`; it now falls through to the registry-fetch path, consistent with the adjacent mtime-gated cache block. - -When the registry returns 304 Not Modified for a package whose cached metadata is abbreviated (no per-version `time`), pnpm now re-fetches with `fullMetadata: true` if `minimumReleaseAge` is active and the package was modified after the cutoff. The upgraded metadata is persisted to disk so subsequent installs don't repeat the fetch. Previously the abbreviated meta was used as-is and the maturity check fell back to its warn-and-skip path, silently bypassing the quarantine and emitting a misleading "metadata is missing the time field" warning. - -Closes #11619. diff --git a/.changeset/fix-named-catalog-upgrade.md b/.changeset/fix-named-catalog-upgrade.md deleted file mode 100644 index 3e1b0a9efa..0000000000 --- a/.changeset/fix-named-catalog-upgrade.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/installing.deps-installer": patch -"pnpm": patch ---- - -Fix `pnpm upgrade --interactive --latest -r` not respecting named catalog groups. Previously, upgrading a dependency using a named catalog (e.g. `"catalog:foo"`) would incorrectly rewrite `package.json` to `"catalog:"` and place the updated version in the default catalog instead of the named one [#10115](https://github.com/pnpm/pnpm/issues/10115). diff --git a/.changeset/fix-optimistic-lockfile-conflict.md b/.changeset/fix-optimistic-lockfile-conflict.md deleted file mode 100644 index 201ec37901..0000000000 --- a/.changeset/fix-optimistic-lockfile-conflict.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@pnpm/deps.status": patch -"@pnpm/installing.commands": patch -"@pnpm/lockfile.fs": patch -"pnpm": patch ---- - -Fixed `optimisticRepeatInstall` skipping `pnpm-lock.yaml` merge conflict resolution when the existing `node_modules` state appears up to date. diff --git a/.changeset/preserve-published-at-in-fast-path.md b/.changeset/preserve-published-at-in-fast-path.md deleted file mode 100644 index 480e5db2cc..0000000000 --- a/.changeset/preserve-published-at-in-fast-path.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"@pnpm/resolving.npm-resolver": patch -"@pnpm/installing.deps-resolver": patch -"@pnpm/installing.package-requester": patch -"@pnpm/store.controller-types": patch -"pnpm": patch ---- - -Fix `minimumReleaseAge` / `resolutionMode: time-based` installs failing on lockfiles whose `time:` block is missing entries. The npm-resolver's peek-from-store fast path now surfaces `publishedAt` from the lockfile rather than discarding it, and falls through to a registry metadata fetch when the time-based cutoff can't be computed from the data on hand. diff --git a/.meta-updater/CHANGELOG.md b/.meta-updater/CHANGELOG.md index 54f8e97889..f118548d29 100644 --- a/.meta-updater/CHANGELOG.md +++ b/.meta-updater/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm-private/updater +## 1100.0.11 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/workspace.projects-reader@1101.0.4 + ## 1100.0.10 ### Patch Changes diff --git a/.meta-updater/package.json b/.meta-updater/package.json index 12f56b2ee6..ffce5bc0fc 100644 --- a/.meta-updater/package.json +++ b/.meta-updater/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm-private/updater", - "version": "1100.0.10", + "version": "1100.0.11", "private": true, "type": "module", "scripts": { diff --git a/__utils__/assert-project/CHANGELOG.md b/__utils__/assert-project/CHANGELOG.md index 77e8b94da8..f4dbd15016 100644 --- a/__utils__/assert-project/CHANGELOG.md +++ b/__utils__/assert-project/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/assert-project +## 1100.0.8 + +### Patch Changes + +- @pnpm/assert-store@1100.0.8 + ## 1100.0.7 ### Patch Changes diff --git a/__utils__/assert-project/package.json b/__utils__/assert-project/package.json index ef622888f8..517cda1483 100644 --- a/__utils__/assert-project/package.json +++ b/__utils__/assert-project/package.json @@ -1,7 +1,7 @@ { "name": "@pnpm/assert-project", "description": "Utils for testing projects that use pnpm", - "version": "1100.0.7", + "version": "1100.0.8", "author": { "name": "Zoltan Kochan", "email": "z@kochan.io", diff --git a/__utils__/assert-store/CHANGELOG.md b/__utils__/assert-store/CHANGELOG.md index 16cc8059ec..b995eb0b31 100644 --- a/__utils__/assert-store/CHANGELOG.md +++ b/__utils__/assert-store/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/assert-store +## 1100.0.8 + +### Patch Changes + +- @pnpm/store.cafs@1100.1.4 + ## 1100.0.7 ### Patch Changes diff --git a/__utils__/assert-store/package.json b/__utils__/assert-store/package.json index 65d83977d1..836cdedf64 100644 --- a/__utils__/assert-store/package.json +++ b/__utils__/assert-store/package.json @@ -1,7 +1,7 @@ { "name": "@pnpm/assert-store", "description": "Utils for testing pnpm store", - "version": "1100.0.7", + "version": "1100.0.8", "bugs": { "url": "https://github.com/pnpm/pnpm/issues" }, diff --git a/__utils__/jest-config/CHANGELOG.md b/__utils__/jest-config/CHANGELOG.md index a873b2a078..2fa8a0a2eb 100644 --- a/__utils__/jest-config/CHANGELOG.md +++ b/__utils__/jest-config/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/jest-config +## 1100.0.8 + +### Patch Changes + +- @pnpm/worker@1100.1.5 + ## 1100.0.7 ### Patch Changes diff --git a/__utils__/jest-config/package.json b/__utils__/jest-config/package.json index 90c113c8b5..fe15dd091e 100644 --- a/__utils__/jest-config/package.json +++ b/__utils__/jest-config/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/jest-config", - "version": "1100.0.7", + "version": "1100.0.8", "private": true, "main": "jest-preset.js", "type": "module", diff --git a/__utils__/prepare/CHANGELOG.md b/__utils__/prepare/CHANGELOG.md index 0701400c2d..3b0c45c855 100644 --- a/__utils__/prepare/CHANGELOG.md +++ b/__utils__/prepare/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/prepare +## 1100.0.8 + +### Patch Changes + +- @pnpm/assert-project@1100.0.8 + ## 1100.0.7 ### Patch Changes diff --git a/__utils__/prepare/package.json b/__utils__/prepare/package.json index e14351fd1e..e279dd670e 100644 --- a/__utils__/prepare/package.json +++ b/__utils__/prepare/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/prepare", - "version": "1100.0.7", + "version": "1100.0.8", "main": "lib/index.js", "types": "lib/index.d.ts", "type": "module", diff --git a/__utils__/scripts/CHANGELOG.md b/__utils__/scripts/CHANGELOG.md index 8e59129ecf..1c15762685 100644 --- a/__utils__/scripts/CHANGELOG.md +++ b/__utils__/scripts/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/scripts +## 1100.0.7 + +### Patch Changes + +- @pnpm/workspace.projects-reader@1101.0.4 + ## 1100.0.6 ### Patch Changes diff --git a/__utils__/scripts/package.json b/__utils__/scripts/package.json index 476b15beb4..3e43c3a28c 100644 --- a/__utils__/scripts/package.json +++ b/__utils__/scripts/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/scripts", - "version": "1100.0.6", + "version": "1100.0.7", "private": true, "type": "module", "scripts": { diff --git a/agent/client/CHANGELOG.md b/agent/client/CHANGELOG.md index f7293ea2f5..1c82f05ebe 100644 --- a/agent/client/CHANGELOG.md +++ b/agent/client/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/agent.client +## 1.0.5 + +### Patch Changes + +- @pnpm/store.cafs@1100.1.4 +- @pnpm/worker@1100.1.5 + ## 1.0.4 ### Patch Changes diff --git a/agent/client/package.json b/agent/client/package.json index 030eb8393f..a8a7b54d61 100644 --- a/agent/client/package.json +++ b/agent/client/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/agent.client", - "version": "1.0.4", + "version": "1.0.5", "description": "Client for pnpm agent server — sends store state, receives resolved lockfile and missing files", "keywords": [ "pnpm", diff --git a/agent/server/CHANGELOG.md b/agent/server/CHANGELOG.md index b63fbb053e..550a7adbe3 100644 --- a/agent/server/CHANGELOG.md +++ b/agent/server/CHANGELOG.md @@ -1,5 +1,18 @@ # pnpm-agent +## 0.0.14 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [8c06d1a] +- Updated dependencies [180aee9] + - @pnpm/installing.deps-installer@1101.1.2 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/installing.client@1100.0.15 + - @pnpm/store.controller@1101.0.6 + - @pnpm/store.cafs@1100.1.4 + ## 0.0.13 ### Patch Changes diff --git a/agent/server/package.json b/agent/server/package.json index 0016ce89c0..7cd17f5eb9 100644 --- a/agent/server/package.json +++ b/agent/server/package.json @@ -1,6 +1,6 @@ { "name": "pnpm-agent", - "version": "0.0.13", + "version": "0.0.14", "description": "pnpm agent server for server-side resolution and store-aware downloads", "keywords": [ "pnpm", diff --git a/auth/commands/CHANGELOG.md b/auth/commands/CHANGELOG.md index a77b40ccc4..de005ec7e5 100644 --- a/auth/commands/CHANGELOG.md +++ b/auth/commands/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/auth.commands +## 1100.0.13 + +### Patch Changes + +- Updated dependencies [18a464f] + - @pnpm/network.fetch@1100.0.4 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + ## 1100.0.12 ### Patch Changes diff --git a/auth/commands/package.json b/auth/commands/package.json index 8de1a2ba82..2d555a739e 100644 --- a/auth/commands/package.json +++ b/auth/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/auth.commands", - "version": "1100.0.12", + "version": "1100.0.13", "description": "Commands for authentication with npm registries", "keywords": [ "pnpm", diff --git a/bins/linker/CHANGELOG.md b/bins/linker/CHANGELOG.md index 9676643d29..ed9c25bbb1 100644 --- a/bins/linker/CHANGELOG.md +++ b/bins/linker/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/link-bins +## 1100.0.6 + +### Patch Changes + +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] + - @pnpm/pkg-manifest.utils@1100.1.3 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + ## 1100.0.5 ### Patch Changes diff --git a/bins/linker/package.json b/bins/linker/package.json index 04ba80b88f..801b96618a 100644 --- a/bins/linker/package.json +++ b/bins/linker/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/bins.linker", - "version": "1100.0.5", + "version": "1100.0.6", "description": "Link bins to node_modules/.bin", "keywords": [ "pnpm", diff --git a/building/after-install/CHANGELOG.md b/building/after-install/CHANGELOG.md index 9fe865ab60..ef6a6a361f 100644 --- a/building/after-install/CHANGELOG.md +++ b/building/after-install/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/building.after-install +## 1101.0.12 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/bins.linker@1100.0.6 + - @pnpm/config.reader@1101.3.1 + - @pnpm/installing.context@1100.0.10 + - @pnpm/exec.lifecycle@1100.0.10 + - @pnpm/store.cafs@1100.1.4 + - @pnpm/store.connection-manager@1100.1.2 + - @pnpm/worker@1100.1.5 + ## 1101.0.11 ### Patch Changes diff --git a/building/after-install/package.json b/building/after-install/package.json index eeeaefc18c..63886a136a 100644 --- a/building/after-install/package.json +++ b/building/after-install/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/building.after-install", - "version": "1101.0.11", + "version": "1101.0.12", "description": "Rebuild packages that are already installed by running their lifecycle scripts", "keywords": [ "pnpm", diff --git a/building/commands/CHANGELOG.md b/building/commands/CHANGELOG.md index bec29f9439..33e34c903d 100644 --- a/building/commands/CHANGELOG.md +++ b/building/commands/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/building.commands +## 1100.0.17 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/installing.commands@1100.2.2 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/building.after-install@1101.0.12 + - @pnpm/store.connection-manager@1100.1.2 + ## 1100.0.16 ### Patch Changes diff --git a/building/commands/package.json b/building/commands/package.json index 771c74920b..33c5d08857 100644 --- a/building/commands/package.json +++ b/building/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/building.commands", - "version": "1100.0.16", + "version": "1100.0.17", "description": "Commands for rebuilding and managing dependency builds", "keywords": [ "pnpm", diff --git a/building/during-install/CHANGELOG.md b/building/during-install/CHANGELOG.md index 7dc099a9b1..4d5fc17439 100644 --- a/building/during-install/CHANGELOG.md +++ b/building/during-install/CHANGELOG.md @@ -1,5 +1,18 @@ # @pnpm/building.during-install +## 1101.0.10 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/bins.linker@1100.0.6 + - @pnpm/config.reader@1101.3.1 + - @pnpm/exec.lifecycle@1100.0.10 + - @pnpm/worker@1100.1.5 + - @pnpm/fs.hard-link-dir@1100.0.1 + - @pnpm/patching.apply-patch@1100.0.0 + ## 1101.0.9 ### Patch Changes diff --git a/building/during-install/package.json b/building/during-install/package.json index 7e5d8d2c96..f04f482ddd 100644 --- a/building/during-install/package.json +++ b/building/during-install/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/building.during-install", - "version": "1101.0.9", + "version": "1101.0.10", "description": "Build packages in node_modules", "keywords": [ "pnpm", diff --git a/cache/api/CHANGELOG.md b/cache/api/CHANGELOG.md index 45dc2b6311..b997d5b5c6 100644 --- a/cache/api/CHANGELOG.md +++ b/cache/api/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/cache.api +## 1100.0.12 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [e526f89] +- Updated dependencies [c2c2890] + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/config.reader@1101.3.1 + - @pnpm/store.cafs@1100.1.4 + ## 1100.0.11 ### Patch Changes diff --git a/cache/api/package.json b/cache/api/package.json index 743ab85b44..9b5999398e 100644 --- a/cache/api/package.json +++ b/cache/api/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cache.api", - "version": "1100.0.11", + "version": "1100.0.12", "description": "API for controlling the cache", "keywords": [ "pnpm", diff --git a/cache/commands/CHANGELOG.md b/cache/commands/CHANGELOG.md index 75fefc10d8..c46ad46eb8 100644 --- a/cache/commands/CHANGELOG.md +++ b/cache/commands/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/cache.commands +## 1100.0.13 + +### Patch Changes + +- @pnpm/cli.utils@1101.0.4 +- @pnpm/config.reader@1101.3.1 +- @pnpm/cache.api@1100.0.12 + ## 1100.0.12 ### Patch Changes diff --git a/cache/commands/package.json b/cache/commands/package.json index 7d3bdc7acd..64380a416a 100644 --- a/cache/commands/package.json +++ b/cache/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cache.commands", - "version": "1100.0.12", + "version": "1100.0.13", "description": "Commands for controlling the cache", "keywords": [ "pnpm", diff --git a/cli/commands/CHANGELOG.md b/cli/commands/CHANGELOG.md index cb1994f61c..13ecad8d56 100644 --- a/cli/commands/CHANGELOG.md +++ b/cli/commands/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/cli.commands +## 1100.0.12 + +### Patch Changes + +- @pnpm/cli.utils@1101.0.4 +- @pnpm/config.reader@1101.3.1 +- @pnpm/workspace.projects-reader@1101.0.4 + ## 1100.0.11 ### Patch Changes diff --git a/cli/commands/package.json b/cli/commands/package.json index 27d41429ac..613ac8df5e 100644 --- a/cli/commands/package.json +++ b/cli/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cli.commands", - "version": "1100.0.11", + "version": "1100.0.12", "description": "Commands for pnpm CLI", "keywords": [ "pnpm", diff --git a/cli/default-reporter/CHANGELOG.md b/cli/default-reporter/CHANGELOG.md index 7233533a54..1716ecb2aa 100644 --- a/cli/default-reporter/CHANGELOG.md +++ b/cli/default-reporter/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/default-reporter +## 1100.1.2 + +### Patch Changes + +- @pnpm/config.reader@1101.3.1 + ## 1100.1.1 ### Patch Changes diff --git a/cli/default-reporter/package.json b/cli/default-reporter/package.json index 04be1856aa..94b44452bf 100644 --- a/cli/default-reporter/package.json +++ b/cli/default-reporter/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cli.default-reporter", - "version": "1100.1.1", + "version": "1100.1.2", "description": "The default reporter of pnpm", "keywords": [ "pnpm", diff --git a/cli/utils/CHANGELOG.md b/cli/utils/CHANGELOG.md index 22f63a5cd8..354c45e026 100644 --- a/cli/utils/CHANGELOG.md +++ b/cli/utils/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/cli-utils +## 1101.0.4 + +### Patch Changes + +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] + - @pnpm/pkg-manifest.utils@1100.1.3 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + ## 1101.0.3 ### Patch Changes diff --git a/cli/utils/package.json b/cli/utils/package.json index 1bdbcf6e3e..c81373bf00 100644 --- a/cli/utils/package.json +++ b/cli/utils/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cli.utils", - "version": "1101.0.3", + "version": "1101.0.4", "description": "Utils for pnpm commands", "keywords": [ "pnpm", diff --git a/config/commands/CHANGELOG.md b/config/commands/CHANGELOG.md index a233690ea2..33dbf8ace5 100644 --- a/config/commands/CHANGELOG.md +++ b/config/commands/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/plugin-commands-config +## 1100.0.13 + +### Patch Changes + +- @pnpm/cli.utils@1101.0.4 +- @pnpm/config.reader@1101.3.1 +- @pnpm/workspace.workspace-manifest-writer@1100.0.7 + ## 1100.0.12 ### Patch Changes diff --git a/config/commands/package.json b/config/commands/package.json index 070c3518e0..95af5f0e0b 100644 --- a/config/commands/package.json +++ b/config/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/config.commands", - "version": "1100.0.12", + "version": "1100.0.13", "description": "Commands for reading and writing settings to/from config files", "keywords": [ "pnpm", diff --git a/config/reader/CHANGELOG.md b/config/reader/CHANGELOG.md index 1739fbe284..d7b6f33058 100644 --- a/config/reader/CHANGELOG.md +++ b/config/reader/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/config +## 1101.3.1 + +### Patch Changes + +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] + - @pnpm/pkg-manifest.utils@1100.1.3 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/hooks.pnpmfile@1100.0.8 + ## 1101.3.0 ### Minor Changes diff --git a/config/reader/package.json b/config/reader/package.json index dee9f5f4fd..3fb3643a0e 100644 --- a/config/reader/package.json +++ b/config/reader/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/config.reader", - "version": "1101.3.0", + "version": "1101.3.1", "description": "Gets configuration options for pnpm", "keywords": [ "pnpm", diff --git a/deps/compliance/audit/CHANGELOG.md b/deps/compliance/audit/CHANGELOG.md index fab72eed63..8983023f7f 100644 --- a/deps/compliance/audit/CHANGELOG.md +++ b/deps/compliance/audit/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/audit +## 1101.0.7 + +### Patch Changes + +- Updated dependencies [18a464f] +- Updated dependencies [180aee9] + - @pnpm/network.fetch@1100.0.4 + - @pnpm/lockfile.fs@1100.0.8 + ## 1101.0.6 ### Patch Changes diff --git a/deps/compliance/audit/package.json b/deps/compliance/audit/package.json index 538403025b..40776b1fe0 100644 --- a/deps/compliance/audit/package.json +++ b/deps/compliance/audit/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.compliance.audit", - "version": "1101.0.6", + "version": "1101.0.7", "description": "Audit a lockfile", "keywords": [ "pnpm", diff --git a/deps/compliance/commands/CHANGELOG.md b/deps/compliance/commands/CHANGELOG.md index d0615060d9..3e4ccc9de6 100644 --- a/deps/compliance/commands/CHANGELOG.md +++ b/deps/compliance/commands/CHANGELOG.md @@ -1,5 +1,20 @@ # @pnpm/deps.compliance.commands +## 1101.2.2 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/installing.commands@1100.2.2 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/deps.compliance.audit@1101.0.7 + - @pnpm/deps.security.signatures@1101.1.1 + - @pnpm/deps.compliance.license-scanner@1100.0.11 + - @pnpm/deps.compliance.sbom@1100.1.1 + ## 1101.2.1 ### Patch Changes diff --git a/deps/compliance/commands/package.json b/deps/compliance/commands/package.json index 4cdcad40cd..2c73a1bd03 100644 --- a/deps/compliance/commands/package.json +++ b/deps/compliance/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.compliance.commands", - "version": "1101.2.1", + "version": "1101.2.2", "description": "pnpm commands for audit, licenses, and sbom", "keywords": [ "pnpm", diff --git a/deps/compliance/license-scanner/CHANGELOG.md b/deps/compliance/license-scanner/CHANGELOG.md index 3f463aa00e..b51e3ff194 100644 --- a/deps/compliance/license-scanner/CHANGELOG.md +++ b/deps/compliance/license-scanner/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/license-scanner +## 1100.0.11 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/store.pkg-finder@1100.0.9 + ## 1100.0.10 ### Patch Changes diff --git a/deps/compliance/license-scanner/package.json b/deps/compliance/license-scanner/package.json index 6e049db173..b059bddeaf 100644 --- a/deps/compliance/license-scanner/package.json +++ b/deps/compliance/license-scanner/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.compliance.license-scanner", - "version": "1100.0.10", + "version": "1100.0.11", "description": "Check for licenses packages", "keywords": [ "pnpm", diff --git a/deps/compliance/sbom/CHANGELOG.md b/deps/compliance/sbom/CHANGELOG.md index 64696f3ec7..8b905ce0d4 100644 --- a/deps/compliance/sbom/CHANGELOG.md +++ b/deps/compliance/sbom/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/deps.compliance.sbom +## 1100.1.1 + +### Patch Changes + +- @pnpm/store.pkg-finder@1100.0.9 + ## 1100.1.0 ### Minor Changes diff --git a/deps/compliance/sbom/package.json b/deps/compliance/sbom/package.json index 9d6e72137f..a9c4b8b1ee 100644 --- a/deps/compliance/sbom/package.json +++ b/deps/compliance/sbom/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.compliance.sbom", - "version": "1100.1.0", + "version": "1100.1.1", "description": "Generate SBOM from pnpm lockfile", "keywords": [ "pnpm", diff --git a/deps/graph-builder/CHANGELOG.md b/deps/graph-builder/CHANGELOG.md index 7f8f5a208a..1210ab059d 100644 --- a/deps/graph-builder/CHANGELOG.md +++ b/deps/graph-builder/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/deps.graph-builder +## 1100.0.9 + +### Patch Changes + +- Updated dependencies [180aee9] +- Updated dependencies [c2c2890] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/store.controller-types@1100.0.7 + ## 1100.0.8 ### Patch Changes diff --git a/deps/graph-builder/package.json b/deps/graph-builder/package.json index 42f73f5e21..bb059fafc9 100644 --- a/deps/graph-builder/package.json +++ b/deps/graph-builder/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.graph-builder", - "version": "1100.0.8", + "version": "1100.0.9", "description": "A package for building a dependency graph from a lockfile", "keywords": [ "pnpm", diff --git a/deps/inspection/commands/CHANGELOG.md b/deps/inspection/commands/CHANGELOG.md index d04ef658f3..52af161454 100644 --- a/deps/inspection/commands/CHANGELOG.md +++ b/deps/inspection/commands/CHANGELOG.md @@ -1,5 +1,25 @@ # @pnpm/deps.inspection.commands +## 1100.2.2 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [18a464f] +- Updated dependencies [e526f89] +- Updated dependencies [180aee9] +- Updated dependencies [c2c2890] + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/deps.inspection.list@1100.0.10 + - @pnpm/network.fetch@1100.0.4 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/deps.inspection.outdated@1100.0.15 + - @pnpm/global.commands@1100.0.17 + - @pnpm/resolving.default-resolver@1100.1.2 + - @pnpm/deps.inspection.peers-checker@1100.0.8 + ## 1100.2.1 ### Patch Changes diff --git a/deps/inspection/commands/package.json b/deps/inspection/commands/package.json index 9ea0572447..3bedc47d7a 100644 --- a/deps/inspection/commands/package.json +++ b/deps/inspection/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.inspection.commands", - "version": "1100.2.1", + "version": "1100.2.2", "description": "The list, ll, why, and outdated commands of pnpm", "keywords": [ "pnpm", diff --git a/deps/inspection/list/CHANGELOG.md b/deps/inspection/list/CHANGELOG.md index aa77dd49bb..fae0feb043 100644 --- a/deps/inspection/list/CHANGELOG.md +++ b/deps/inspection/list/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/list +## 1100.0.10 + +### Patch Changes + +- 50b33c1: Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser. +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/deps.inspection.tree-builder@1100.0.9 + ## 1100.0.9 ### Patch Changes diff --git a/deps/inspection/list/package.json b/deps/inspection/list/package.json index a423e7ea64..e13ae1351c 100644 --- a/deps/inspection/list/package.json +++ b/deps/inspection/list/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.inspection.list", - "version": "1100.0.9", + "version": "1100.0.10", "description": "List installed packages in a symlinked `node_modules`", "keywords": [ "pnpm", diff --git a/deps/inspection/outdated/CHANGELOG.md b/deps/inspection/outdated/CHANGELOG.md index 72dbfd1ecc..669f203a89 100644 --- a/deps/inspection/outdated/CHANGELOG.md +++ b/deps/inspection/outdated/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/outdated +## 1100.0.15 + +### Patch Changes + +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] +- Updated dependencies [e526f89] +- Updated dependencies [180aee9] +- Updated dependencies [c2c2890] + - @pnpm/pkg-manifest.utils@1100.1.3 + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/installing.client@1100.0.15 + ## 1100.0.14 ### Patch Changes diff --git a/deps/inspection/outdated/package.json b/deps/inspection/outdated/package.json index c613d46b94..cd8fe788e6 100644 --- a/deps/inspection/outdated/package.json +++ b/deps/inspection/outdated/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.inspection.outdated", - "version": "1100.0.14", + "version": "1100.0.15", "description": "Check for outdated packages", "keywords": [ "pnpm", diff --git a/deps/inspection/peers-checker/CHANGELOG.md b/deps/inspection/peers-checker/CHANGELOG.md index c7a2c5512f..eb3d470fd2 100644 --- a/deps/inspection/peers-checker/CHANGELOG.md +++ b/deps/inspection/peers-checker/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/deps.inspection.peers-checker +## 1100.0.8 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + ## 1100.0.7 ### Patch Changes diff --git a/deps/inspection/peers-checker/package.json b/deps/inspection/peers-checker/package.json index eb53cc0010..be368c7b36 100644 --- a/deps/inspection/peers-checker/package.json +++ b/deps/inspection/peers-checker/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.inspection.peers-checker", - "version": "1100.0.7", + "version": "1100.0.8", "description": "Check for unmet and missing peer dependency issues from the lockfile", "keywords": [ "pnpm", diff --git a/deps/inspection/tree-builder/CHANGELOG.md b/deps/inspection/tree-builder/CHANGELOG.md index ebaabc23b1..2c5300edb2 100644 --- a/deps/inspection/tree-builder/CHANGELOG.md +++ b/deps/inspection/tree-builder/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/reviewing.dependencies-hierarchy +## 1100.0.9 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/store.cafs@1100.1.4 + ## 1100.0.8 ### Patch Changes diff --git a/deps/inspection/tree-builder/package.json b/deps/inspection/tree-builder/package.json index bb4eb2fd63..3a327cde37 100644 --- a/deps/inspection/tree-builder/package.json +++ b/deps/inspection/tree-builder/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.inspection.tree-builder", - "version": "1100.0.8", + "version": "1100.0.9", "description": "Creates a dependencies hierarchy for a symlinked `node_modules`", "keywords": [ "pnpm", diff --git a/deps/security/signatures/CHANGELOG.md b/deps/security/signatures/CHANGELOG.md index 1b9680bc42..28bdce64e2 100644 --- a/deps/security/signatures/CHANGELOG.md +++ b/deps/security/signatures/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/deps.security.signatures +## 1101.1.1 + +### Patch Changes + +- Updated dependencies [18a464f] + - @pnpm/network.fetch@1100.0.4 + ## 1101.1.0 ### Minor Changes diff --git a/deps/security/signatures/package.json b/deps/security/signatures/package.json index 766d9d72b8..dd0aacadf0 100644 --- a/deps/security/signatures/package.json +++ b/deps/security/signatures/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.security.signatures", - "version": "1101.1.0", + "version": "1101.1.1", "description": "Verify package signatures from npm registries", "keywords": [ "pnpm", diff --git a/deps/status/CHANGELOG.md b/deps/status/CHANGELOG.md index 2069d09b52..2e66148c13 100644 --- a/deps/status/CHANGELOG.md +++ b/deps/status/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/deps.status +## 1100.0.15 + +### Patch Changes + +- 180aee9: Fixed `optimisticRepeatInstall` skipping `pnpm-lock.yaml` merge conflict resolution when the existing `node_modules` state appears up to date. +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/config.reader@1101.3.1 + - @pnpm/installing.context@1100.0.10 + - @pnpm/workspace.projects-reader@1101.0.4 + - @pnpm/workspace.state@1100.0.12 + - @pnpm/lockfile.verification@1100.0.10 + - @pnpm/lockfile.settings-checker@1100.0.10 + ## 1100.0.14 ### Patch Changes diff --git a/deps/status/package.json b/deps/status/package.json index 9c97725c46..11e18e6211 100644 --- a/deps/status/package.json +++ b/deps/status/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.status", - "version": "1100.0.14", + "version": "1100.0.15", "description": "Check dependencies status", "keywords": [ "pnpm", diff --git a/engine/pm/commands/CHANGELOG.md b/engine/pm/commands/CHANGELOG.md index 11128ab814..97828265ca 100644 --- a/engine/pm/commands/CHANGELOG.md +++ b/engine/pm/commands/CHANGELOG.md @@ -1,5 +1,26 @@ # @pnpm/engine.pm.commands +## 1101.1.12 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [e526f89] +- Updated dependencies [180aee9] +- Updated dependencies [c2c2890] + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/bins.linker@1100.0.6 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/global.commands@1100.0.17 + - @pnpm/installing.env-installer@1101.0.9 + - @pnpm/installing.client@1100.0.15 + - @pnpm/installing.deps-restorer@1101.1.2 + - @pnpm/store.controller@1101.0.6 + - @pnpm/store.connection-manager@1100.1.2 + ## 1101.1.11 ### Patch Changes diff --git a/engine/pm/commands/package.json b/engine/pm/commands/package.json index 457c64eb41..a58d748ff8 100644 --- a/engine/pm/commands/package.json +++ b/engine/pm/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.pm.commands", - "version": "1101.1.11", + "version": "1101.1.12", "description": "pnpm commands for self-updating and setting up pnpm", "keywords": [ "pnpm", diff --git a/engine/runtime/bun-resolver/CHANGELOG.md b/engine/runtime/bun-resolver/CHANGELOG.md index 48b813c3aa..431d320bb6 100644 --- a/engine/runtime/bun-resolver/CHANGELOG.md +++ b/engine/runtime/bun-resolver/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/resolving.bun-resolver +## 1101.0.6 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [e526f89] +- Updated dependencies [c2c2890] + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/worker@1100.1.5 + ## 1101.0.5 ### Patch Changes diff --git a/engine/runtime/bun-resolver/package.json b/engine/runtime/bun-resolver/package.json index 32e60e8654..a81894ba16 100644 --- a/engine/runtime/bun-resolver/package.json +++ b/engine/runtime/bun-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.runtime.bun-resolver", - "version": "1101.0.5", + "version": "1101.0.6", "description": "Resolves the Bun runtime", "keywords": [ "pnpm", diff --git a/engine/runtime/commands/CHANGELOG.md b/engine/runtime/commands/CHANGELOG.md index af7946ef44..e67a649ae6 100644 --- a/engine/runtime/commands/CHANGELOG.md +++ b/engine/runtime/commands/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/engine.runtime.commands +## 1100.0.14 + +### Patch Changes + +- Updated dependencies [18a464f] + - @pnpm/network.fetch@1100.0.4 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/engine.runtime.node-resolver@1101.0.8 + ## 1100.0.13 ### Patch Changes diff --git a/engine/runtime/commands/package.json b/engine/runtime/commands/package.json index c5580309a6..b0aeeb54ab 100644 --- a/engine/runtime/commands/package.json +++ b/engine/runtime/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.runtime.commands", - "version": "1100.0.13", + "version": "1100.0.14", "description": "pnpm commands for managing runtimes", "keywords": [ "pnpm", diff --git a/engine/runtime/deno-resolver/CHANGELOG.md b/engine/runtime/deno-resolver/CHANGELOG.md index 8c94132f71..f398bde312 100644 --- a/engine/runtime/deno-resolver/CHANGELOG.md +++ b/engine/runtime/deno-resolver/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/resolving.deno-resolver +## 1101.0.6 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [e526f89] +- Updated dependencies [c2c2890] + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/worker@1100.1.5 + ## 1101.0.5 ### Patch Changes diff --git a/engine/runtime/deno-resolver/package.json b/engine/runtime/deno-resolver/package.json index 77b319a8c2..91c7fea836 100644 --- a/engine/runtime/deno-resolver/package.json +++ b/engine/runtime/deno-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.runtime.deno-resolver", - "version": "1101.0.5", + "version": "1101.0.6", "description": "Resolves the Deno runtime", "keywords": [ "pnpm", diff --git a/engine/runtime/node-resolver/CHANGELOG.md b/engine/runtime/node-resolver/CHANGELOG.md index 5c6ed5bd69..4e1b912c77 100644 --- a/engine/runtime/node-resolver/CHANGELOG.md +++ b/engine/runtime/node-resolver/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/node.resolver +## 1101.0.8 + +### Patch Changes + +- @pnpm/config.reader@1101.3.1 + ## 1101.0.7 ### Patch Changes diff --git a/engine/runtime/node-resolver/package.json b/engine/runtime/node-resolver/package.json index 70b0c3a84f..28424b24d9 100644 --- a/engine/runtime/node-resolver/package.json +++ b/engine/runtime/node-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.runtime.node-resolver", - "version": "1101.0.7", + "version": "1101.0.8", "description": "Resolves a Node.js version specifier to an exact Node.js version", "keywords": [ "pnpm", diff --git a/exec/commands/CHANGELOG.md b/exec/commands/CHANGELOG.md index 8a4c4b2047..d66882b764 100644 --- a/exec/commands/CHANGELOG.md +++ b/exec/commands/CHANGELOG.md @@ -1,5 +1,22 @@ # @pnpm/plugin-commands-script-runners +## 1100.1.7 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/deps.status@1100.0.15 + - @pnpm/installing.commands@1100.2.2 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/engine.runtime.commands@1100.0.14 + - @pnpm/installing.client@1100.0.15 + - @pnpm/building.commands@1100.0.17 + - @pnpm/exec.lifecycle@1100.0.10 + - @pnpm/workspace.injected-deps-syncer@1100.0.11 + - @pnpm/crypto.hash@1100.0.1 + ## 1100.1.6 ### Patch Changes diff --git a/exec/commands/package.json b/exec/commands/package.json index c569265629..7e72d75c99 100644 --- a/exec/commands/package.json +++ b/exec/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exec.commands", - "version": "1100.1.6", + "version": "1100.1.7", "description": "Commands for running scripts", "keywords": [ "pnpm", diff --git a/exec/lifecycle/CHANGELOG.md b/exec/lifecycle/CHANGELOG.md index ac8dc2365b..fc10b96db9 100644 --- a/exec/lifecycle/CHANGELOG.md +++ b/exec/lifecycle/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/lifecycle +## 1100.0.10 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/bins.linker@1100.0.6 + - @pnpm/fetching.directory-fetcher@1100.0.9 + ## 1100.0.9 ### Patch Changes diff --git a/exec/lifecycle/package.json b/exec/lifecycle/package.json index e5c615afcb..073b46707a 100644 --- a/exec/lifecycle/package.json +++ b/exec/lifecycle/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exec.lifecycle", - "version": "1100.0.9", + "version": "1100.0.10", "description": "Package lifecycle hook runner", "keywords": [ "pnpm", diff --git a/exec/prepare-package/CHANGELOG.md b/exec/prepare-package/CHANGELOG.md index 739607f7ef..ec8d0c33f9 100644 --- a/exec/prepare-package/CHANGELOG.md +++ b/exec/prepare-package/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/prepare-package +## 1100.0.10 + +### Patch Changes + +- @pnpm/exec.lifecycle@1100.0.10 + ## 1100.0.9 ### Patch Changes diff --git a/exec/prepare-package/package.json b/exec/prepare-package/package.json index 30ab2ee71c..7751530b85 100644 --- a/exec/prepare-package/package.json +++ b/exec/prepare-package/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exec.prepare-package", - "version": "1100.0.9", + "version": "1100.0.10", "description": "Prepares a Git-hosted package", "keywords": [ "pnpm", diff --git a/fetching/directory-fetcher/CHANGELOG.md b/fetching/directory-fetcher/CHANGELOG.md index 3b3d6826f1..f28b3b07aa 100644 --- a/fetching/directory-fetcher/CHANGELOG.md +++ b/fetching/directory-fetcher/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/directory-fetcher +## 1100.0.9 + +### Patch Changes + +- @pnpm/workspace.project-manifest-reader@1100.0.5 + ## 1100.0.8 ### Patch Changes diff --git a/fetching/directory-fetcher/package.json b/fetching/directory-fetcher/package.json index e1b05aed82..7c6a824b28 100644 --- a/fetching/directory-fetcher/package.json +++ b/fetching/directory-fetcher/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/fetching.directory-fetcher", - "version": "1100.0.8", + "version": "1100.0.9", "description": "A fetcher for local directory packages", "keywords": [ "pnpm", diff --git a/fetching/git-fetcher/CHANGELOG.md b/fetching/git-fetcher/CHANGELOG.md index 05aa4ec444..16e9feb106 100644 --- a/fetching/git-fetcher/CHANGELOG.md +++ b/fetching/git-fetcher/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/git-fetcher +## 1101.0.6 + +### Patch Changes + +- @pnpm/exec.prepare-package@1100.0.10 +- @pnpm/worker@1100.1.5 + ## 1101.0.5 ### Patch Changes diff --git a/fetching/git-fetcher/package.json b/fetching/git-fetcher/package.json index 939d942aa5..655b10f1e3 100644 --- a/fetching/git-fetcher/package.json +++ b/fetching/git-fetcher/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/fetching.git-fetcher", - "version": "1101.0.5", + "version": "1101.0.6", "description": "A fetcher for git-hosted packages", "keywords": [ "pnpm", diff --git a/fetching/tarball-fetcher/CHANGELOG.md b/fetching/tarball-fetcher/CHANGELOG.md index 3441501955..cb8837eed5 100644 --- a/fetching/tarball-fetcher/CHANGELOG.md +++ b/fetching/tarball-fetcher/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/tarball-fetcher +## 1101.0.7 + +### Patch Changes + +- @pnpm/exec.prepare-package@1100.0.10 +- @pnpm/worker@1100.1.5 + ## 1101.0.6 ### Patch Changes diff --git a/fetching/tarball-fetcher/package.json b/fetching/tarball-fetcher/package.json index 8301ffd4f9..f119ac7ec1 100644 --- a/fetching/tarball-fetcher/package.json +++ b/fetching/tarball-fetcher/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/fetching.tarball-fetcher", - "version": "1101.0.6", + "version": "1101.0.7", "description": "Fetcher for packages hosted as tarballs", "keywords": [ "pnpm", diff --git a/fs/indexed-pkg-importer/CHANGELOG.md b/fs/indexed-pkg-importer/CHANGELOG.md index 71fe776190..f4ff80fc8f 100644 --- a/fs/indexed-pkg-importer/CHANGELOG.md +++ b/fs/indexed-pkg-importer/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/fs.indexed-pkg-importer +## 1100.0.7 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + ## 1100.0.6 ### Patch Changes diff --git a/fs/indexed-pkg-importer/package.json b/fs/indexed-pkg-importer/package.json index d0fd7a160f..9419fb48b8 100644 --- a/fs/indexed-pkg-importer/package.json +++ b/fs/indexed-pkg-importer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/fs.indexed-pkg-importer", - "version": "1100.0.6", + "version": "1100.0.7", "description": "Replicates indexed directories using hard links, copies, or cloning", "keywords": [ "pnpm", diff --git a/global/commands/CHANGELOG.md b/global/commands/CHANGELOG.md index 736725587e..35ac0d93eb 100644 --- a/global/commands/CHANGELOG.md +++ b/global/commands/CHANGELOG.md @@ -1,5 +1,18 @@ # @pnpm/global.commands +## 1100.0.17 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [8c06d1a] + - @pnpm/installing.deps-installer@1101.1.2 + - @pnpm/deps.inspection.list@1100.0.10 + - @pnpm/bins.linker@1100.0.6 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/store.connection-manager@1100.1.2 + ## 1100.0.16 ### Patch Changes diff --git a/global/commands/package.json b/global/commands/package.json index ffc94cfd78..ca2ae9d31e 100644 --- a/global/commands/package.json +++ b/global/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/global.commands", - "version": "1100.0.16", + "version": "1100.0.17", "description": "Global package command handlers for pnpm", "keywords": [ "pnpm", diff --git a/hooks/pnpmfile/CHANGELOG.md b/hooks/pnpmfile/CHANGELOG.md index 99454a88cc..5c6f93a6e6 100644 --- a/hooks/pnpmfile/CHANGELOG.md +++ b/hooks/pnpmfile/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/pnpmfile +## 1100.0.8 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/crypto.hash@1100.0.1 + ## 1100.0.7 ### Patch Changes diff --git a/hooks/pnpmfile/package.json b/hooks/pnpmfile/package.json index 49b9a19cb1..cfef2d0bb9 100644 --- a/hooks/pnpmfile/package.json +++ b/hooks/pnpmfile/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/hooks.pnpmfile", - "version": "1100.0.7", + "version": "1100.0.8", "description": "Reading a .pnpmfile.cjs", "keywords": [ "pnpm", diff --git a/installing/client/CHANGELOG.md b/installing/client/CHANGELOG.md index 4731638005..966c91dd21 100644 --- a/installing/client/CHANGELOG.md +++ b/installing/client/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/client +## 1100.0.15 + +### Patch Changes + +- Updated dependencies [18a464f] + - @pnpm/network.fetch@1100.0.4 + - @pnpm/resolving.default-resolver@1100.1.2 + - @pnpm/engine.runtime.node-resolver@1101.0.8 + - @pnpm/fetching.tarball-fetcher@1101.0.7 + - @pnpm/fetching.directory-fetcher@1100.0.9 + - @pnpm/fetching.git-fetcher@1101.0.6 + ## 1100.0.14 ### Patch Changes diff --git a/installing/client/package.json b/installing/client/package.json index ce1f087133..96b16bec8f 100644 --- a/installing/client/package.json +++ b/installing/client/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.client", - "version": "1100.0.14", + "version": "1100.0.15", "description": "Creates the package resolve and fetch functions", "keywords": [ "pnpm", diff --git a/installing/commands/CHANGELOG.md b/installing/commands/CHANGELOG.md index 2f37d86acc..c87559231a 100644 --- a/installing/commands/CHANGELOG.md +++ b/installing/commands/CHANGELOG.md @@ -1,5 +1,34 @@ # @pnpm/plugin-commands-installation +## 1100.2.2 + +### Patch Changes + +- 180aee9: Fixed `optimisticRepeatInstall` skipping `pnpm-lock.yaml` merge conflict resolution when the existing `node_modules` state appears up to date. +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] +- Updated dependencies [8c06d1a] +- Updated dependencies [180aee9] + - @pnpm/pkg-manifest.utils@1100.1.3 + - @pnpm/installing.deps-installer@1101.1.2 + - @pnpm/deps.status@1100.0.15 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/deps.inspection.outdated@1100.0.15 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/global.commands@1100.0.17 + - @pnpm/installing.env-installer@1101.0.9 + - @pnpm/workspace.projects-graph@1100.0.8 + - @pnpm/installing.context@1100.0.10 + - @pnpm/store.controller@1101.0.6 + - @pnpm/building.after-install@1101.0.12 + - @pnpm/hooks.pnpmfile@1100.0.8 + - @pnpm/workspace.projects-reader@1101.0.4 + - @pnpm/store.connection-manager@1100.1.2 + - @pnpm/workspace.state@1100.0.12 + - @pnpm/workspace.projects-filter@1100.0.11 + - @pnpm/workspace.workspace-manifest-writer@1100.0.7 + ## 1100.2.1 ### Patch Changes diff --git a/installing/commands/package.json b/installing/commands/package.json index 9c137fd3f0..f9d418f746 100644 --- a/installing/commands/package.json +++ b/installing/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.commands", - "version": "1100.2.1", + "version": "1100.2.2", "description": "Commands for installation", "keywords": [ "pnpm", diff --git a/installing/context/CHANGELOG.md b/installing/context/CHANGELOG.md index 90f63fa143..914f757b03 100644 --- a/installing/context/CHANGELOG.md +++ b/installing/context/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/get-context +## 1100.0.10 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/installing.read-projects-context@1100.0.9 + - @pnpm/store.controller@1101.0.6 + ## 1100.0.9 ### Patch Changes diff --git a/installing/context/package.json b/installing/context/package.json index a3af36fd57..34f584d104 100644 --- a/installing/context/package.json +++ b/installing/context/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.context", - "version": "1100.0.9", + "version": "1100.0.10", "description": "Gets context information about a project", "keywords": [ "pnpm", diff --git a/installing/deps-installer/CHANGELOG.md b/installing/deps-installer/CHANGELOG.md index 21a121b8e6..8eef3f5639 100644 --- a/installing/deps-installer/CHANGELOG.md +++ b/installing/deps-installer/CHANGELOG.md @@ -1,5 +1,38 @@ # @pnpm/core +## 1101.1.2 + +### Patch Changes + +- 50b33c1: Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser. +- 8c06d1a: Fix `pnpm upgrade --interactive --latest -r` not respecting named catalog groups. Previously, upgrading a dependency using a named catalog (e.g. `"catalog:foo"`) would incorrectly rewrite `package.json` to `"catalog:"` and place the updated version in the default catalog instead of the named one [#10115](https://github.com/pnpm/pnpm/issues/10115). +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] +- Updated dependencies [180aee9] +- Updated dependencies [c2c2890] + - @pnpm/pkg-manifest.utils@1100.1.3 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/installing.deps-resolver@1100.0.10 + - @pnpm/installing.package-requester@1101.0.6 + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/bins.linker@1100.0.6 + - @pnpm/lockfile.preferred-versions@1100.0.9 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/installing.context@1100.0.10 + - @pnpm/installing.deps-restorer@1101.1.2 + - @pnpm/lockfile.to-pnp@1100.0.8 + - @pnpm/building.after-install@1101.0.12 + - @pnpm/building.during-install@1101.0.10 + - @pnpm/exec.lifecycle@1100.0.10 + - @pnpm/installing.linking.modules-cleaner@1100.1.1 + - @pnpm/installing.linking.hoist@1100.0.6 + - @pnpm/lockfile.verification@1100.0.10 + - @pnpm/agent.client@1.0.5 + - @pnpm/worker@1100.1.5 + - @pnpm/lockfile.settings-checker@1100.0.10 + - @pnpm/crypto.hash@1100.0.1 + - @pnpm/fs.symlink-dependency@1100.0.3 + ## 1101.1.1 ### Patch Changes diff --git a/installing/deps-installer/package.json b/installing/deps-installer/package.json index 9fc22d3aac..c5d5b20e90 100644 --- a/installing/deps-installer/package.json +++ b/installing/deps-installer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.deps-installer", - "version": "1101.1.1", + "version": "1101.1.2", "description": "Fast, disk space efficient installation engine", "keywords": [ "pnpm", diff --git a/installing/deps-resolver/CHANGELOG.md b/installing/deps-resolver/CHANGELOG.md index 44ea213aac..90c67d86f3 100644 --- a/installing/deps-resolver/CHANGELOG.md +++ b/installing/deps-resolver/CHANGELOG.md @@ -1,5 +1,20 @@ # @pnpm/resolve-dependencies +## 1100.0.10 + +### Patch Changes + +- c2c2890: Fix `minimumReleaseAge` / `resolutionMode: time-based` installs failing on lockfiles whose `time:` block is missing entries. The npm-resolver's peek-from-store fast path now surfaces `publishedAt` from the lockfile rather than discarding it, and falls through to a registry metadata fetch when the time-based cutoff can't be computed from the data on hand. +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] +- Updated dependencies [e526f89] +- Updated dependencies [c2c2890] + - @pnpm/pkg-manifest.utils@1100.1.3 + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/lockfile.preferred-versions@1100.0.9 + - @pnpm/fetching.pick-fetcher@1100.0.6 + ## 1100.0.9 ### Patch Changes diff --git a/installing/deps-resolver/package.json b/installing/deps-resolver/package.json index c962b3f2ef..e4ae5774b4 100644 --- a/installing/deps-resolver/package.json +++ b/installing/deps-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.deps-resolver", - "version": "1100.0.9", + "version": "1100.0.10", "description": "Resolves dependency graph of a package", "keywords": [ "pnpm", diff --git a/installing/deps-restorer/CHANGELOG.md b/installing/deps-restorer/CHANGELOG.md index b01bd99108..dad8f97b71 100644 --- a/installing/deps-restorer/CHANGELOG.md +++ b/installing/deps-restorer/CHANGELOG.md @@ -1,5 +1,26 @@ # @pnpm/headless +## 1101.1.2 + +### Patch Changes + +- Updated dependencies [180aee9] +- Updated dependencies [c2c2890] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/installing.package-requester@1101.0.6 + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/bins.linker@1100.0.6 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/deps.graph-builder@1100.0.9 + - @pnpm/installing.linking.real-hoist@1100.0.7 + - @pnpm/lockfile.to-pnp@1100.0.8 + - @pnpm/building.during-install@1101.0.10 + - @pnpm/exec.lifecycle@1100.0.10 + - @pnpm/installing.linking.modules-cleaner@1100.1.1 + - @pnpm/installing.linking.hoist@1100.0.6 + - @pnpm/worker@1100.1.5 + - @pnpm/fs.symlink-dependency@1100.0.3 + ## 1101.1.1 ### Patch Changes diff --git a/installing/deps-restorer/package.json b/installing/deps-restorer/package.json index d0d5d47a40..82f12cb173 100644 --- a/installing/deps-restorer/package.json +++ b/installing/deps-restorer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.deps-restorer", - "version": "1101.1.1", + "version": "1101.1.2", "description": "Fast installation using only pnpm-lock.yaml", "keywords": [ "pnpm", diff --git a/installing/env-installer/CHANGELOG.md b/installing/env-installer/CHANGELOG.md index cf086253c7..ef62fc9d26 100644 --- a/installing/env-installer/CHANGELOG.md +++ b/installing/env-installer/CHANGELOG.md @@ -1,5 +1,22 @@ # @pnpm/config.deps-installer +## 1101.0.9 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [18a464f] +- Updated dependencies [e526f89] +- Updated dependencies [180aee9] +- Updated dependencies [c2c2890] + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/network.fetch@1100.0.4 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/installing.deps-resolver@1100.0.10 + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/store.controller@1101.0.6 + - @pnpm/worker@1100.1.5 + ## 1101.0.8 ### Patch Changes diff --git a/installing/env-installer/package.json b/installing/env-installer/package.json index 1828e2204a..f7a29f6c29 100644 --- a/installing/env-installer/package.json +++ b/installing/env-installer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.env-installer", - "version": "1101.0.8", + "version": "1101.0.9", "description": "Installer for configurational dependencies", "keywords": [ "pnpm", diff --git a/installing/linking/hoist/CHANGELOG.md b/installing/linking/hoist/CHANGELOG.md index ab350aae9f..b50dc090ce 100644 --- a/installing/linking/hoist/CHANGELOG.md +++ b/installing/linking/hoist/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/hoist +## 1100.0.6 + +### Patch Changes + +- @pnpm/bins.linker@1100.0.6 + ## 1100.0.5 ### Patch Changes diff --git a/installing/linking/hoist/package.json b/installing/linking/hoist/package.json index c3909f6c73..8722223413 100644 --- a/installing/linking/hoist/package.json +++ b/installing/linking/hoist/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.linking.hoist", - "version": "1100.0.5", + "version": "1100.0.6", "description": "Hoists dependencies in a node_modules created by pnpm", "keywords": [ "pnpm", diff --git a/installing/linking/modules-cleaner/CHANGELOG.md b/installing/linking/modules-cleaner/CHANGELOG.md index e76dd5afbc..29286916d5 100644 --- a/installing/linking/modules-cleaner/CHANGELOG.md +++ b/installing/linking/modules-cleaner/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/modules-cleaner +## 1100.1.1 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + ## 1100.1.0 ### Minor Changes diff --git a/installing/linking/modules-cleaner/package.json b/installing/linking/modules-cleaner/package.json index d9a2f93049..b77ae55012 100644 --- a/installing/linking/modules-cleaner/package.json +++ b/installing/linking/modules-cleaner/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.linking.modules-cleaner", - "version": "1100.1.0", + "version": "1100.1.1", "description": "Exports util functions to clean up node_modules", "keywords": [ "pnpm", diff --git a/installing/package-requester/CHANGELOG.md b/installing/package-requester/CHANGELOG.md index 75a7c2e623..68ad065fe6 100644 --- a/installing/package-requester/CHANGELOG.md +++ b/installing/package-requester/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/package-requester +## 1101.0.6 + +### Patch Changes + +- c2c2890: Fix `minimumReleaseAge` / `resolutionMode: time-based` installs failing on lockfiles whose `time:` block is missing entries. The npm-resolver's peek-from-store fast path now surfaces `publishedAt` from the lockfile rather than discarding it, and falls through to a registry metadata fetch when the time-based cutoff can't be computed from the data on hand. +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/fetching.pick-fetcher@1100.0.6 + - @pnpm/store.cafs@1100.1.4 + - @pnpm/worker@1100.1.5 + ## 1101.0.5 ### Patch Changes diff --git a/installing/package-requester/package.json b/installing/package-requester/package.json index 63533e033d..d12a953906 100644 --- a/installing/package-requester/package.json +++ b/installing/package-requester/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.package-requester", - "version": "1101.0.5", + "version": "1101.0.6", "description": "Concurrent downloader of npm-compatible packages", "keywords": [ "pnpm", diff --git a/installing/read-projects-context/CHANGELOG.md b/installing/read-projects-context/CHANGELOG.md index e1e0f06f34..ddc868d0d6 100644 --- a/installing/read-projects-context/CHANGELOG.md +++ b/installing/read-projects-context/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/read-projects-context +## 1100.0.9 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + ## 1100.0.8 ### Patch Changes diff --git a/installing/read-projects-context/package.json b/installing/read-projects-context/package.json index e213516376..2c8f5a6835 100644 --- a/installing/read-projects-context/package.json +++ b/installing/read-projects-context/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.read-projects-context", - "version": "1100.0.8", + "version": "1100.0.9", "description": "Reads the current state of projects from modules manifest", "keywords": [ "pnpm", diff --git a/lockfile/fs/CHANGELOG.md b/lockfile/fs/CHANGELOG.md index 79ebe2d257..18a3c7642b 100644 --- a/lockfile/fs/CHANGELOG.md +++ b/lockfile/fs/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/lockfile-file +## 1100.0.8 + +### Patch Changes + +- 180aee9: Fixed `optimisticRepeatInstall` skipping `pnpm-lock.yaml` merge conflict resolution when the existing `node_modules` state appears up to date. + ## 1100.0.7 ### Patch Changes diff --git a/lockfile/fs/package.json b/lockfile/fs/package.json index 5173e2ca80..92a60f40ad 100644 --- a/lockfile/fs/package.json +++ b/lockfile/fs/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.fs", - "version": "1100.0.7", + "version": "1100.0.8", "description": "Read/write pnpm-lock.yaml files", "keywords": [ "pnpm", diff --git a/lockfile/make-dedicated-lockfile/CHANGELOG.md b/lockfile/make-dedicated-lockfile/CHANGELOG.md index 17820fbdeb..404176797e 100644 --- a/lockfile/make-dedicated-lockfile/CHANGELOG.md +++ b/lockfile/make-dedicated-lockfile/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/make-dedicated-lockfile +## 1100.0.10 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/releasing.exportable-manifest@1100.0.5 + ## 1100.0.9 ### Patch Changes diff --git a/lockfile/make-dedicated-lockfile/package.json b/lockfile/make-dedicated-lockfile/package.json index a5ab081400..6945cdbd75 100644 --- a/lockfile/make-dedicated-lockfile/package.json +++ b/lockfile/make-dedicated-lockfile/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.make-dedicated-lockfile", - "version": "1100.0.9", + "version": "1100.0.10", "description": "Creates a dedicated lockfile for a subset of workspace projects", "keywords": [ "pnpm", diff --git a/lockfile/preferred-versions/CHANGELOG.md b/lockfile/preferred-versions/CHANGELOG.md index 2a0fba657d..211d9679aa 100644 --- a/lockfile/preferred-versions/CHANGELOG.md +++ b/lockfile/preferred-versions/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/lockfile.preferred-versions +## 1100.0.9 + +### Patch Changes + +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] + - @pnpm/pkg-manifest.utils@1100.1.3 + ## 1100.0.8 ### Patch Changes diff --git a/lockfile/preferred-versions/package.json b/lockfile/preferred-versions/package.json index d8436ae53c..82dc16fea8 100644 --- a/lockfile/preferred-versions/package.json +++ b/lockfile/preferred-versions/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.preferred-versions", - "version": "1100.0.8", + "version": "1100.0.9", "description": "Get preferred version from lockfile", "keywords": [ "pnpm", diff --git a/lockfile/settings-checker/CHANGELOG.md b/lockfile/settings-checker/CHANGELOG.md index b3557c898c..f486928df1 100644 --- a/lockfile/settings-checker/CHANGELOG.md +++ b/lockfile/settings-checker/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/lockfile.settings-checker +## 1100.0.10 + +### Patch Changes + +- @pnpm/lockfile.verification@1100.0.10 +- @pnpm/crypto.hash@1100.0.1 + ## 1100.0.9 ### Patch Changes diff --git a/lockfile/settings-checker/package.json b/lockfile/settings-checker/package.json index 27b5a7f64d..75ab4e87c7 100644 --- a/lockfile/settings-checker/package.json +++ b/lockfile/settings-checker/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.settings-checker", - "version": "1100.0.9", + "version": "1100.0.10", "description": "Utilities to check if lockfile settings are out-of-date", "keywords": [ "pnpm", diff --git a/lockfile/to-pnp/CHANGELOG.md b/lockfile/to-pnp/CHANGELOG.md index 71fffa4bb4..9400a6d77b 100644 --- a/lockfile/to-pnp/CHANGELOG.md +++ b/lockfile/to-pnp/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/lockfile-to-pnp +## 1100.0.8 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + ## 1100.0.7 ### Patch Changes diff --git a/lockfile/to-pnp/package.json b/lockfile/to-pnp/package.json index 7c1d820948..eb5f278887 100644 --- a/lockfile/to-pnp/package.json +++ b/lockfile/to-pnp/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.to-pnp", - "version": "1100.0.7", + "version": "1100.0.8", "description": "Creates a Plug'n'Play file from a pnpm-lock.yaml", "keywords": [ "pnpm", diff --git a/lockfile/verification/CHANGELOG.md b/lockfile/verification/CHANGELOG.md index 0142434aa8..92ca527364 100644 --- a/lockfile/verification/CHANGELOG.md +++ b/lockfile/verification/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/lockfile.verification +## 1100.0.10 + +### Patch Changes + +- @pnpm/installing.context@1100.0.10 +- @pnpm/crypto.hash@1100.0.1 + ## 1100.0.9 ### Patch Changes diff --git a/lockfile/verification/package.json b/lockfile/verification/package.json index e3460eca72..3de39ec402 100644 --- a/lockfile/verification/package.json +++ b/lockfile/verification/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.verification", - "version": "1100.0.9", + "version": "1100.0.10", "description": "Checks a lockfile", "keywords": [ "pnpm", diff --git a/modules-mounter/daemon/CHANGELOG.md b/modules-mounter/daemon/CHANGELOG.md index 8cc9f385ff..04a684b67b 100644 --- a/modules-mounter/daemon/CHANGELOG.md +++ b/modules-mounter/daemon/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/mount-modules +## 1100.0.13 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/config.reader@1101.3.1 + - @pnpm/store.cafs@1100.1.4 + ## 1100.0.12 ### Patch Changes diff --git a/modules-mounter/daemon/package.json b/modules-mounter/daemon/package.json index 7773505e88..daf6cb56a6 100644 --- a/modules-mounter/daemon/package.json +++ b/modules-mounter/daemon/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/modules-mounter.daemon", - "version": "1100.0.12", + "version": "1100.0.13", "description": "Mounts a node_modules directory with FUSE", "keywords": [ "pnpm", diff --git a/network/fetch/CHANGELOG.md b/network/fetch/CHANGELOG.md index 8d15629104..bb65f304fe 100644 --- a/network/fetch/CHANGELOG.md +++ b/network/fetch/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/fetch +## 1100.0.4 + +### Patch Changes + +- 18a464f: Strip `sec-fetch-*` headers from outgoing HTTP requests. These headers are automatically added by undici's `fetch()` implementation per the Fetch spec but cause Azure DevOps Artifacts to return HTTP 400 for uncached upstream packages, as ADO interprets them as browser requests [#11572](https://github.com/pnpm/pnpm/issues/11572). + ## 1100.0.3 ### Patch Changes diff --git a/network/fetch/package.json b/network/fetch/package.json index bbc8ac9026..10f498fbbd 100644 --- a/network/fetch/package.json +++ b/network/fetch/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/network.fetch", - "version": "1100.0.3", + "version": "1100.0.4", "description": "Native fetch with retries", "keywords": [ "pnpm", diff --git a/patching/commands/CHANGELOG.md b/patching/commands/CHANGELOG.md index d76bc95b68..c6042d06ab 100644 --- a/patching/commands/CHANGELOG.md +++ b/patching/commands/CHANGELOG.md @@ -1,5 +1,20 @@ # @pnpm/plugin-commands-patching +## 1100.0.17 + +### Patch Changes + +- Updated dependencies [180aee9] + - @pnpm/installing.commands@1100.2.2 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/workspace.project-manifest-reader@1100.0.5 + - @pnpm/fetching.pick-fetcher@1100.0.6 + - @pnpm/store.connection-manager@1100.1.2 + - @pnpm/crypto.hash@1100.0.1 + - @pnpm/patching.apply-patch@1100.0.0 + ## 1100.0.16 ### Patch Changes diff --git a/patching/commands/package.json b/patching/commands/package.json index 1a2d7dc55c..e6855e211b 100644 --- a/patching/commands/package.json +++ b/patching/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/patching.commands", - "version": "1100.0.16", + "version": "1100.0.17", "description": "Commands for creating patches", "keywords": [ "pnpm", diff --git a/pkg-manifest/utils/CHANGELOG.md b/pkg-manifest/utils/CHANGELOG.md index ad1e835f19..4cbbf8397b 100644 --- a/pkg-manifest/utils/CHANGELOG.md +++ b/pkg-manifest/utils/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/manifest-utils +## 1100.1.3 + +### Patch Changes + +- 9cad827: `convertEnginesRuntimeToDependencies`: switch the runtime-dependency write to `Object.defineProperty` so the CodeQL `js/prototype-polluting-assignment` rule treats the assignment as safe regardless of the property name (follow-up to [#11609](https://github.com/pnpm/pnpm/pull/11609)). +- 50b33c1: Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser. + ## 1100.1.2 ### Patch Changes diff --git a/pkg-manifest/utils/package.json b/pkg-manifest/utils/package.json index 5b18008c60..9acadc37f2 100644 --- a/pkg-manifest/utils/package.json +++ b/pkg-manifest/utils/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/pkg-manifest.utils", - "version": "1100.1.2", + "version": "1100.1.3", "description": "Utils for dealing with package manifest", "keywords": [ "pnpm", diff --git a/pnpm/CHANGELOG.md b/pnpm/CHANGELOG.md index c7413820ff..dbc963d7c2 100644 --- a/pnpm/CHANGELOG.md +++ b/pnpm/CHANGELOG.md @@ -1,5 +1,24 @@ # pnpm +## 11.1.2 + +### Patch Changes + +- `convertEnginesRuntimeToDependencies`: switch the runtime-dependency write to `Object.defineProperty` so the CodeQL `js/prototype-polluting-assignment` rule treats the assignment as safe regardless of the property name (follow-up to [#11609](https://github.com/pnpm/pnpm/pull/11609)). +- Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser. +- Strip `sec-fetch-*` headers from outgoing HTTP requests. These headers are automatically added by undici's `fetch()` implementation per the Fetch spec but cause Azure DevOps Artifacts to return HTTP 400 for uncached upstream packages, as ADO interprets them as browser requests [#11572](https://github.com/pnpm/pnpm/issues/11572). +- Fix `minimumReleaseAge` handling for cached abbreviated metadata. + + The version-spec cache fast path no longer rethrows `ERR_PNPM_MISSING_TIME` under `strictPublishedByCheck`; it now falls through to the registry-fetch path, consistent with the adjacent mtime-gated cache block. + + When the registry returns 304 Not Modified for a package whose cached metadata is abbreviated (no per-version `time`), pnpm now re-fetches with `fullMetadata: true` if `minimumReleaseAge` is active and the package was modified after the cutoff. The upgraded metadata is persisted to disk so subsequent installs don't repeat the fetch. Previously the abbreviated meta was used as-is and the maturity check fell back to its warn-and-skip path, silently bypassing the quarantine and emitting a misleading "metadata is missing the time field" warning. + + Closes #11619. + +- Fix `pnpm upgrade --interactive --latest -r` not respecting named catalog groups. Previously, upgrading a dependency using a named catalog (e.g. `"catalog:foo"`) would incorrectly rewrite `package.json` to `"catalog:"` and place the updated version in the default catalog instead of the named one [#10115](https://github.com/pnpm/pnpm/issues/10115). +- Fixed `optimisticRepeatInstall` skipping `pnpm-lock.yaml` merge conflict resolution when the existing `node_modules` state appears up to date. +- Fix `minimumReleaseAge` / `resolutionMode: time-based` installs failing on lockfiles whose `time:` block is missing entries. The npm-resolver's peek-from-store fast path now surfaces `publishedAt` from the lockfile rather than discarding it, and falls through to a registry metadata fetch when the time-based cutoff can't be computed from the data on hand. + ## 11.1.1 ### Patch Changes diff --git a/pnpm/artifacts/darwin-arm64/package.json b/pnpm/artifacts/darwin-arm64/package.json index d516e51ac0..592575fc57 100644 --- a/pnpm/artifacts/darwin-arm64/package.json +++ b/pnpm/artifacts/darwin-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/macos-arm64", - "version": "11.1.1", + "version": "11.1.2", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/exe/package.json b/pnpm/artifacts/exe/package.json index ec47ad82a7..5870bfaf6e 100644 --- a/pnpm/artifacts/exe/package.json +++ b/pnpm/artifacts/exe/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exe", - "version": "11.1.1", + "version": "11.1.2", "description": "Fast, disk space efficient package manager", "keywords": [ "pnpm", diff --git a/pnpm/artifacts/linux-arm64-musl/package.json b/pnpm/artifacts/linux-arm64-musl/package.json index 476e088e76..9ddba1ad63 100644 --- a/pnpm/artifacts/linux-arm64-musl/package.json +++ b/pnpm/artifacts/linux-arm64-musl/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linuxstatic-arm64", - "version": "11.1.1", + "version": "11.1.2", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/linux-arm64/package.json b/pnpm/artifacts/linux-arm64/package.json index fd4a9afefe..04f2ba772f 100644 --- a/pnpm/artifacts/linux-arm64/package.json +++ b/pnpm/artifacts/linux-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linux-arm64", - "version": "11.1.1", + "version": "11.1.2", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/linux-x64-musl/package.json b/pnpm/artifacts/linux-x64-musl/package.json index 27d96356c3..da90c39948 100644 --- a/pnpm/artifacts/linux-x64-musl/package.json +++ b/pnpm/artifacts/linux-x64-musl/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linuxstatic-x64", - "version": "11.1.1", + "version": "11.1.2", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/linux-x64/package.json b/pnpm/artifacts/linux-x64/package.json index 012addb338..181bda2033 100644 --- a/pnpm/artifacts/linux-x64/package.json +++ b/pnpm/artifacts/linux-x64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linux-x64", - "version": "11.1.1", + "version": "11.1.2", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/win32-arm64/package.json b/pnpm/artifacts/win32-arm64/package.json index f17aa83bdf..22bf639e50 100644 --- a/pnpm/artifacts/win32-arm64/package.json +++ b/pnpm/artifacts/win32-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/win-arm64", - "version": "11.1.1", + "version": "11.1.2", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/win32-x64/package.json b/pnpm/artifacts/win32-x64/package.json index e5944e6219..eac1748f48 100644 --- a/pnpm/artifacts/win32-x64/package.json +++ b/pnpm/artifacts/win32-x64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/win-x64", - "version": "11.1.1", + "version": "11.1.2", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/dev/CHANGELOG.md b/pnpm/dev/CHANGELOG.md index 407a2b05f0..1a6526be11 100644 --- a/pnpm/dev/CHANGELOG.md +++ b/pnpm/dev/CHANGELOG.md @@ -1,5 +1,11 @@ # pd +## 1100.0.7 + +### Patch Changes + +- @pnpm/workspace.projects-reader@1101.0.4 + ## 1100.0.6 ### Patch Changes diff --git a/pnpm/dev/package.json b/pnpm/dev/package.json index cdd1d11ea1..9ea9d0c6ab 100644 --- a/pnpm/dev/package.json +++ b/pnpm/dev/package.json @@ -1,6 +1,6 @@ { "name": "pd", - "version": "1100.0.6", + "version": "1100.0.7", "bin": "pd.js", "private": true, "type": "module", diff --git a/pnpm/package.json b/pnpm/package.json index f05cb932ae..83e4f4a7dc 100644 --- a/pnpm/package.json +++ b/pnpm/package.json @@ -1,6 +1,6 @@ { "name": "pnpm", - "version": "11.1.1", + "version": "11.1.2", "description": "Fast, disk space efficient package manager", "keywords": [ "pnpm", diff --git a/registry-access/commands/CHANGELOG.md b/registry-access/commands/CHANGELOG.md index b58cdc4224..1e57571261 100644 --- a/registry-access/commands/CHANGELOG.md +++ b/registry-access/commands/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/registry-access.commands +## 1100.2.11 + +### Patch Changes + +- Updated dependencies [18a464f] + - @pnpm/network.fetch@1100.0.4 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + ## 1100.2.10 ### Patch Changes diff --git a/registry-access/commands/package.json b/registry-access/commands/package.json index 3fa4463ea8..b678cf1753 100644 --- a/registry-access/commands/package.json +++ b/registry-access/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/registry-access.commands", - "version": "1100.2.10", + "version": "1100.2.11", "description": "Commands for managing packages on the registry", "keywords": [ "pnpm", diff --git a/releasing/commands/CHANGELOG.md b/releasing/commands/CHANGELOG.md index 54b31eb7cb..8b4572d651 100644 --- a/releasing/commands/CHANGELOG.md +++ b/releasing/commands/CHANGELOG.md @@ -1,5 +1,25 @@ # @pnpm/releasing.commands +## 1100.2.14 + +### Patch Changes + +- Updated dependencies [18a464f] +- Updated dependencies [180aee9] + - @pnpm/network.fetch@1100.0.4 + - @pnpm/installing.commands@1100.2.2 + - @pnpm/lockfile.fs@1100.0.8 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/engine.runtime.commands@1100.0.14 + - @pnpm/engine.runtime.node-resolver@1101.0.8 + - @pnpm/installing.client@1100.0.15 + - @pnpm/exec.lifecycle@1100.0.10 + - @pnpm/fs.indexed-pkg-importer@1100.0.7 + - @pnpm/fetching.directory-fetcher@1100.0.9 + - @pnpm/releasing.exportable-manifest@1100.0.5 + - @pnpm/workspace.projects-filter@1100.0.11 + ## 1100.2.13 ### Patch Changes diff --git a/releasing/commands/package.json b/releasing/commands/package.json index 3f3d828012..7a0b7e1862 100644 --- a/releasing/commands/package.json +++ b/releasing/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/releasing.commands", - "version": "1100.2.13", + "version": "1100.2.14", "description": "Commands for deploy, pack, and publish", "keywords": [ "pnpm", diff --git a/releasing/exportable-manifest/CHANGELOG.md b/releasing/exportable-manifest/CHANGELOG.md index 2a4b5b471b..37b74943a7 100644 --- a/releasing/exportable-manifest/CHANGELOG.md +++ b/releasing/exportable-manifest/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/exportable-manifest +## 1100.0.5 + +### Patch Changes + +- @pnpm/workspace.project-manifest-reader@1100.0.5 + ## 1100.0.4 ### Patch Changes diff --git a/releasing/exportable-manifest/package.json b/releasing/exportable-manifest/package.json index ea66c5fcff..1fc2e94674 100644 --- a/releasing/exportable-manifest/package.json +++ b/releasing/exportable-manifest/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/releasing.exportable-manifest", - "version": "1100.0.4", + "version": "1100.0.5", "description": "Creates an exportable manifest", "keywords": [ "pnpm", diff --git a/resolving/default-resolver/CHANGELOG.md b/resolving/default-resolver/CHANGELOG.md index 1807b39172..6cc4587e2b 100644 --- a/resolving/default-resolver/CHANGELOG.md +++ b/resolving/default-resolver/CHANGELOG.md @@ -1,5 +1,20 @@ # @pnpm/default-resolver +## 1100.1.2 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [e526f89] +- Updated dependencies [c2c2890] + - @pnpm/resolving.npm-resolver@1101.1.1 + - @pnpm/engine.runtime.bun-resolver@1101.0.6 + - @pnpm/engine.runtime.deno-resolver@1101.0.6 + - @pnpm/engine.runtime.node-resolver@1101.0.8 + - @pnpm/resolving.git-resolver@1100.0.7 + - @pnpm/resolving.tarball-resolver@1100.0.5 + - @pnpm/resolving.local-resolver@1101.0.1 + ## 1100.1.1 ### Patch Changes diff --git a/resolving/default-resolver/package.json b/resolving/default-resolver/package.json index a15a849682..4ba0fde18c 100644 --- a/resolving/default-resolver/package.json +++ b/resolving/default-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.default-resolver", - "version": "1100.1.1", + "version": "1100.1.2", "description": "pnpm's default package resolver", "keywords": [ "pnpm", diff --git a/resolving/git-resolver/CHANGELOG.md b/resolving/git-resolver/CHANGELOG.md index 1fce2ece91..3c10840199 100644 --- a/resolving/git-resolver/CHANGELOG.md +++ b/resolving/git-resolver/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/git-resolver +## 1100.0.7 + +### Patch Changes + +- Updated dependencies [18a464f] + - @pnpm/network.fetch@1100.0.4 + ## 1100.0.6 ### Patch Changes diff --git a/resolving/git-resolver/package.json b/resolving/git-resolver/package.json index 9487642bf5..d21c70d5c4 100644 --- a/resolving/git-resolver/package.json +++ b/resolving/git-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.git-resolver", - "version": "1100.0.6", + "version": "1100.0.7", "description": "Resolver for git-hosted packages", "keywords": [ "pnpm", diff --git a/resolving/local-resolver/CHANGELOG.md b/resolving/local-resolver/CHANGELOG.md index 2a121d8bca..04e75d1d5a 100644 --- a/resolving/local-resolver/CHANGELOG.md +++ b/resolving/local-resolver/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/local-resolver +## 1101.0.1 + +### Patch Changes + +- @pnpm/workspace.project-manifest-reader@1100.0.5 +- @pnpm/crypto.hash@1100.0.1 + ## 1101.0.0 ### Major Changes diff --git a/resolving/local-resolver/package.json b/resolving/local-resolver/package.json index 265241158c..6ff13416a9 100644 --- a/resolving/local-resolver/package.json +++ b/resolving/local-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.local-resolver", - "version": "1101.0.0", + "version": "1101.0.1", "description": "Resolver for local packages", "keywords": [ "pnpm", diff --git a/resolving/npm-resolver/CHANGELOG.md b/resolving/npm-resolver/CHANGELOG.md index 0193ed0170..bdc6344401 100644 --- a/resolving/npm-resolver/CHANGELOG.md +++ b/resolving/npm-resolver/CHANGELOG.md @@ -1,5 +1,23 @@ # @pnpm/npm-resolver +## 1101.1.1 + +### Patch Changes + +- 50b33c1: Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser. +- e526f89: Fix `minimumReleaseAge` handling for cached abbreviated metadata. + + The version-spec cache fast path no longer rethrows `ERR_PNPM_MISSING_TIME` under `strictPublishedByCheck`; it now falls through to the registry-fetch path, consistent with the adjacent mtime-gated cache block. + + When the registry returns 304 Not Modified for a package whose cached metadata is abbreviated (no per-version `time`), pnpm now re-fetches with `fullMetadata: true` if `minimumReleaseAge` is active and the package was modified after the cutoff. The upgraded metadata is persisted to disk so subsequent installs don't repeat the fetch. Previously the abbreviated meta was used as-is and the maturity check fell back to its warn-and-skip path, silently bypassing the quarantine and emitting a misleading "metadata is missing the time field" warning. + + Closes #11619. + +- c2c2890: Fix `minimumReleaseAge` / `resolutionMode: time-based` installs failing on lockfiles whose `time:` block is missing entries. The npm-resolver's peek-from-store fast path now surfaces `publishedAt` from the lockfile rather than discarding it, and falls through to a registry metadata fetch when the time-based cutoff can't be computed from the data on hand. + - @pnpm/store.cafs@1100.1.4 + - @pnpm/worker@1100.1.5 + - @pnpm/crypto.hash@1100.0.1 + ## 1101.1.0 ### Minor Changes diff --git a/resolving/npm-resolver/package.json b/resolving/npm-resolver/package.json index 59aec3a4e1..684a50ef92 100644 --- a/resolving/npm-resolver/package.json +++ b/resolving/npm-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.npm-resolver", - "version": "1101.1.0", + "version": "1101.1.1", "description": "Resolver for npm-hosted packages", "keywords": [ "pnpm", diff --git a/store/cafs/CHANGELOG.md b/store/cafs/CHANGELOG.md index f19c6f68ab..d175e7a638 100644 --- a/store/cafs/CHANGELOG.md +++ b/store/cafs/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/store.cafs +## 1100.1.4 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + ## 1100.1.3 ### Patch Changes diff --git a/store/cafs/package.json b/store/cafs/package.json index 24a3e38984..98d382cccb 100644 --- a/store/cafs/package.json +++ b/store/cafs/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.cafs", - "version": "1100.1.3", + "version": "1100.1.4", "description": "A content-addressable filesystem for the packages storage", "keywords": [ "pnpm", diff --git a/store/commands/CHANGELOG.md b/store/commands/CHANGELOG.md index 5d8f7c8496..3ae78be009 100644 --- a/store/commands/CHANGELOG.md +++ b/store/commands/CHANGELOG.md @@ -1,5 +1,18 @@ # @pnpm/store.commands +## 1100.0.16 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/cli.utils@1101.0.4 + - @pnpm/config.reader@1101.3.1 + - @pnpm/installing.client@1100.0.15 + - @pnpm/installing.context@1100.0.10 + - @pnpm/store.cafs@1100.1.4 + - @pnpm/store.connection-manager@1100.1.2 + ## 1100.0.15 ### Patch Changes diff --git a/store/commands/package.json b/store/commands/package.json index 464d5ecbd8..15b9bc88ea 100644 --- a/store/commands/package.json +++ b/store/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.commands", - "version": "1100.0.15", + "version": "1100.0.16", "description": "Commands for controlling and inspecting the store", "keywords": [ "pnpm", diff --git a/store/connection-manager/CHANGELOG.md b/store/connection-manager/CHANGELOG.md index 7cd2ab1487..cfaaa13a8e 100644 --- a/store/connection-manager/CHANGELOG.md +++ b/store/connection-manager/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/store-connection-manager +## 1100.1.2 + +### Patch Changes + +- @pnpm/config.reader@1101.3.1 +- @pnpm/installing.client@1100.0.15 +- @pnpm/store.controller@1101.0.6 + ## 1100.1.1 ### Patch Changes diff --git a/store/connection-manager/package.json b/store/connection-manager/package.json index 67f719598d..9501ce27b5 100644 --- a/store/connection-manager/package.json +++ b/store/connection-manager/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.connection-manager", - "version": "1100.1.1", + "version": "1100.1.2", "description": "Create a pnpm store controller", "keywords": [ "pnpm", diff --git a/store/controller-types/CHANGELOG.md b/store/controller-types/CHANGELOG.md index 4699d436da..91c35edb01 100644 --- a/store/controller-types/CHANGELOG.md +++ b/store/controller-types/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/store-controller-types +## 1100.0.7 + +### Patch Changes + +- c2c2890: Fix `minimumReleaseAge` / `resolutionMode: time-based` installs failing on lockfiles whose `time:` block is missing entries. The npm-resolver's peek-from-store fast path now surfaces `publishedAt` from the lockfile rather than discarding it, and falls through to a registry metadata fetch when the time-based cutoff can't be computed from the data on hand. + ## 1100.0.6 ### Patch Changes diff --git a/store/controller-types/package.json b/store/controller-types/package.json index e4ac1ae71f..9f0d84f8f1 100644 --- a/store/controller-types/package.json +++ b/store/controller-types/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.controller-types", - "version": "1100.0.6", + "version": "1100.0.7", "description": "Types for the store controller", "keywords": [ "pnpm", diff --git a/store/controller/CHANGELOG.md b/store/controller/CHANGELOG.md index 4a6b4e851c..28b9c5450b 100644 --- a/store/controller/CHANGELOG.md +++ b/store/controller/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/package-store +## 1101.0.6 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/installing.package-requester@1101.0.6 + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/store.cafs@1100.1.4 + - @pnpm/store.create-cafs-store@1100.0.7 + - @pnpm/worker@1100.1.5 + - @pnpm/crypto.hash@1100.0.1 + ## 1101.0.5 ### Patch Changes diff --git a/store/controller/package.json b/store/controller/package.json index 88bd7d5460..3277d19283 100644 --- a/store/controller/package.json +++ b/store/controller/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.controller", - "version": "1101.0.5", + "version": "1101.0.6", "description": "A storage for packages", "keywords": [ "pnpm", diff --git a/store/create-cafs-store/CHANGELOG.md b/store/create-cafs-store/CHANGELOG.md index 8aad534445..0198bb53c1 100644 --- a/store/create-cafs-store/CHANGELOG.md +++ b/store/create-cafs-store/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/create-cafs-store +## 1100.0.7 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/fs.indexed-pkg-importer@1100.0.7 + - @pnpm/store.cafs@1100.1.4 + ## 1100.0.6 ### Patch Changes diff --git a/store/create-cafs-store/package.json b/store/create-cafs-store/package.json index 567abf8e44..00099f286e 100644 --- a/store/create-cafs-store/package.json +++ b/store/create-cafs-store/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.create-cafs-store", - "version": "1100.0.6", + "version": "1100.0.7", "description": "Create a CAFS store controller", "keywords": [ "pnpm", diff --git a/store/pkg-finder/CHANGELOG.md b/store/pkg-finder/CHANGELOG.md index f2b8ed26f1..454b571ba9 100644 --- a/store/pkg-finder/CHANGELOG.md +++ b/store/pkg-finder/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/store.pkg-finder +## 1100.0.9 + +### Patch Changes + +- @pnpm/store.cafs@1100.1.4 +- @pnpm/fetching.directory-fetcher@1100.0.9 + ## 1100.0.8 ### Patch Changes diff --git a/store/pkg-finder/package.json b/store/pkg-finder/package.json index 40aa668999..61612d25e6 100644 --- a/store/pkg-finder/package.json +++ b/store/pkg-finder/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.pkg-finder", - "version": "1100.0.8", + "version": "1100.0.9", "description": "Read a package's file map from the content-addressable store", "keywords": [ "pnpm", diff --git a/testing/mock-agent/CHANGELOG.md b/testing/mock-agent/CHANGELOG.md index d32734165d..94a243d061 100644 --- a/testing/mock-agent/CHANGELOG.md +++ b/testing/mock-agent/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/testing.mock-agent +## 1100.0.4 + +### Patch Changes + +- Updated dependencies [18a464f] + - @pnpm/network.fetch@1100.0.4 + ## 1100.0.3 ### Patch Changes diff --git a/testing/mock-agent/package.json b/testing/mock-agent/package.json index 78cf21a97f..18f3a63eb8 100644 --- a/testing/mock-agent/package.json +++ b/testing/mock-agent/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/testing.mock-agent", - "version": "1100.0.3", + "version": "1100.0.4", "private": true, "description": "Shared undici MockAgent helpers for pnpm tests", "keywords": [ diff --git a/testing/temp-store/CHANGELOG.md b/testing/temp-store/CHANGELOG.md index ab40e0c613..1e1e27eda8 100644 --- a/testing/temp-store/CHANGELOG.md +++ b/testing/temp-store/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/testing.temp-store +## 1100.0.16 + +### Patch Changes + +- Updated dependencies [c2c2890] + - @pnpm/store.controller-types@1100.0.7 + - @pnpm/installing.client@1100.0.15 + - @pnpm/store.controller@1101.0.6 + ## 1100.0.15 ### Patch Changes diff --git a/testing/temp-store/package.json b/testing/temp-store/package.json index eb3e602d18..a48487f87e 100644 --- a/testing/temp-store/package.json +++ b/testing/temp-store/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/testing.temp-store", - "version": "1100.0.15", + "version": "1100.0.16", "description": "A temporary store for testing purposes", "keywords": [ "pnpm", diff --git a/worker/CHANGELOG.md b/worker/CHANGELOG.md index 94015437f0..4c103a2f02 100644 --- a/worker/CHANGELOG.md +++ b/worker/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/worker +## 1100.1.5 + +### Patch Changes + +- @pnpm/store.cafs@1100.1.4 +- @pnpm/store.create-cafs-store@1100.0.7 +- @pnpm/fs.hard-link-dir@1100.0.1 +- @pnpm/fs.symlink-dependency@1100.0.3 + ## 1100.1.4 ### Patch Changes diff --git a/worker/package.json b/worker/package.json index 791c21fefa..1bca4f7575 100644 --- a/worker/package.json +++ b/worker/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/worker", - "version": "1100.1.4", + "version": "1100.1.5", "description": "A worker for extracting package taralls to the store", "keywords": [ "pnpm", diff --git a/workspace/commands/CHANGELOG.md b/workspace/commands/CHANGELOG.md index 1f960b523f..53c7e3e8bd 100644 --- a/workspace/commands/CHANGELOG.md +++ b/workspace/commands/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/plugin-commands-init +## 1100.1.11 + +### Patch Changes + +- @pnpm/cli.utils@1101.0.4 +- @pnpm/config.reader@1101.3.1 + ## 1100.1.10 ### Patch Changes diff --git a/workspace/commands/package.json b/workspace/commands/package.json index 9eadbf9cec..1ac37d62a4 100644 --- a/workspace/commands/package.json +++ b/workspace/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.commands", - "version": "1100.1.10", + "version": "1100.1.11", "description": "Create a package.json file", "keywords": [ "pnpm", diff --git a/workspace/injected-deps-syncer/CHANGELOG.md b/workspace/injected-deps-syncer/CHANGELOG.md index 228a3d5b23..b1f61b173a 100644 --- a/workspace/injected-deps-syncer/CHANGELOG.md +++ b/workspace/injected-deps-syncer/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/workspace.injected-deps-syncer +## 1100.0.11 + +### Patch Changes + +- @pnpm/bins.linker@1100.0.6 +- @pnpm/workspace.projects-reader@1101.0.4 +- @pnpm/fetching.directory-fetcher@1100.0.9 + ## 1100.0.10 ### Patch Changes diff --git a/workspace/injected-deps-syncer/package.json b/workspace/injected-deps-syncer/package.json index 6e18d059f3..f6d1416a0b 100644 --- a/workspace/injected-deps-syncer/package.json +++ b/workspace/injected-deps-syncer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.injected-deps-syncer", - "version": "1100.0.10", + "version": "1100.0.11", "description": "Update all injected replica of a workspace package", "keywords": [ "pnpm", diff --git a/workspace/project-manifest-reader/CHANGELOG.md b/workspace/project-manifest-reader/CHANGELOG.md index b72bd6501b..4f24153728 100644 --- a/workspace/project-manifest-reader/CHANGELOG.md +++ b/workspace/project-manifest-reader/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/read-project-manifest +## 1100.0.5 + +### Patch Changes + +- Updated dependencies [9cad827] +- Updated dependencies [50b33c1] + - @pnpm/pkg-manifest.utils@1100.1.3 + ## 1100.0.4 ### Patch Changes diff --git a/workspace/project-manifest-reader/package.json b/workspace/project-manifest-reader/package.json index 4ba0b92e1a..5d54d1c6be 100644 --- a/workspace/project-manifest-reader/package.json +++ b/workspace/project-manifest-reader/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.project-manifest-reader", - "version": "1100.0.4", + "version": "1100.0.5", "description": "Read a project manifest (called package.json in most cases)", "keywords": [ "pnpm", diff --git a/workspace/projects-filter/CHANGELOG.md b/workspace/projects-filter/CHANGELOG.md index 5c895c6ca8..2f3d473533 100644 --- a/workspace/projects-filter/CHANGELOG.md +++ b/workspace/projects-filter/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/filter-workspace-packages +## 1100.0.11 + +### Patch Changes + +- @pnpm/workspace.projects-graph@1100.0.8 +- @pnpm/workspace.projects-reader@1101.0.4 + ## 1100.0.10 ### Patch Changes diff --git a/workspace/projects-filter/package.json b/workspace/projects-filter/package.json index 320be5b0b3..6f1bc9cddf 100644 --- a/workspace/projects-filter/package.json +++ b/workspace/projects-filter/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.projects-filter", - "version": "1100.0.10", + "version": "1100.0.11", "description": "Filters packages in a workspace", "keywords": [ "pnpm", diff --git a/workspace/projects-graph/CHANGELOG.md b/workspace/projects-graph/CHANGELOG.md index 7ab98058ac..05c8722704 100644 --- a/workspace/projects-graph/CHANGELOG.md +++ b/workspace/projects-graph/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/workspace.pkgs-graph +## 1100.0.8 + +### Patch Changes + +- Updated dependencies [50b33c1] +- Updated dependencies [e526f89] +- Updated dependencies [c2c2890] + - @pnpm/resolving.npm-resolver@1101.1.1 + ## 1100.0.7 ### Patch Changes diff --git a/workspace/projects-graph/package.json b/workspace/projects-graph/package.json index abd79c6a03..e5e140f5de 100644 --- a/workspace/projects-graph/package.json +++ b/workspace/projects-graph/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.projects-graph", - "version": "1100.0.7", + "version": "1100.0.8", "description": "Create a graph from an array of packages", "keywords": [ "pnpm", diff --git a/workspace/projects-reader/CHANGELOG.md b/workspace/projects-reader/CHANGELOG.md index 5e849c6de3..e70b6c0f5a 100644 --- a/workspace/projects-reader/CHANGELOG.md +++ b/workspace/projects-reader/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/find-workspace-packages +## 1101.0.4 + +### Patch Changes + +- @pnpm/cli.utils@1101.0.4 +- @pnpm/workspace.project-manifest-reader@1100.0.5 + ## 1101.0.3 ### Patch Changes diff --git a/workspace/projects-reader/package.json b/workspace/projects-reader/package.json index 4820dbd1a4..b4fd0a2e07 100644 --- a/workspace/projects-reader/package.json +++ b/workspace/projects-reader/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.projects-reader", - "version": "1101.0.3", + "version": "1101.0.4", "description": "Finds packages inside a workspace", "keywords": [ "pnpm", diff --git a/workspace/state/CHANGELOG.md b/workspace/state/CHANGELOG.md index fca5cadab9..b889371389 100644 --- a/workspace/state/CHANGELOG.md +++ b/workspace/state/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/workspace.state +## 1100.0.12 + +### Patch Changes + +- @pnpm/config.reader@1101.3.1 + ## 1100.0.11 ### Patch Changes diff --git a/workspace/state/package.json b/workspace/state/package.json index c5ce9b35bc..a26dfa812e 100644 --- a/workspace/state/package.json +++ b/workspace/state/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.state", - "version": "1100.0.11", + "version": "1100.0.12", "description": "Track the list of actual paths of workspace packages in a cache", "keywords": [ "pnpm",