From 9287c31cea69206c4eeca7f21cd21df81d0b93e7 Mon Sep 17 00:00:00 2001 From: Zoltan Kochan Date: Mon, 28 Sep 2026 20:12:12 +0200 Subject: [PATCH] chore(release): 10.34.6 (#16340) Co-authored-by: github-actions[bot] --- .changeset/calm-lions-trust.md | 8 ------- .changeset/hip-jokes-shave.md | 11 ---------- .changeset/olive-donkeys-repeat.md | 6 ----- .changeset/update-node-release-keys.md | 6 ----- .meta-updater/CHANGELOG.md | 6 +++++ .meta-updater/package.json | 2 +- cache/api/CHANGELOG.md | 7 ++++++ cache/api/package.json | 2 +- cache/commands/CHANGELOG.md | 9 ++++++++ cache/commands/package.json | 2 +- cli/cli-meta/CHANGELOG.md | 9 ++++++++ cli/cli-meta/package.json | 2 +- cli/cli-utils/CHANGELOG.md | 14 ++++++++++++ cli/cli-utils/package.json | 2 +- cli/default-reporter/CHANGELOG.md | 14 ++++++++++++ cli/default-reporter/package.json | 2 +- config/config/CHANGELOG.md | 6 +++++ config/config/package.json | 2 +- config/deps-installer/CHANGELOG.md | 6 +++++ config/deps-installer/package.json | 2 +- config/package-is-installable/CHANGELOG.md | 8 +++++++ config/package-is-installable/package.json | 2 +- config/plugin-commands-config/CHANGELOG.md | 8 +++++++ config/plugin-commands-config/package.json | 2 +- crypto/shasums-file/CHANGELOG.md | 7 ++++++ crypto/shasums-file/package.json | 2 +- crypto/shasums-file/src/nodeReleaseKeys.ts | 2 +- deps/graph-builder/CHANGELOG.md | 6 +++++ deps/graph-builder/package.json | 2 +- deps/status/CHANGELOG.md | 12 ++++++++++ deps/status/package.json | 2 +- env/node.fetcher/CHANGELOG.md | 11 ++++++++++ env/node.fetcher/package.json | 2 +- env/node.resolver/CHANGELOG.md | 10 +++++++++ env/node.resolver/package.json | 2 +- env/plugin-commands-env/CHANGELOG.md | 11 ++++++++++ env/plugin-commands-env/package.json | 2 +- env/system-node-version/CHANGELOG.md | 7 ++++++ env/system-node-version/package.json | 2 +- exec/build-commands/CHANGELOG.md | 8 +++++++ exec/build-commands/package.json | 2 +- exec/build-modules/CHANGELOG.md | 7 ++++++ exec/build-modules/package.json | 2 +- exec/plugin-commands-rebuild/CHANGELOG.md | 11 ++++++++++ exec/plugin-commands-rebuild/package.json | 2 +- .../CHANGELOG.md | 13 +++++++++++ .../package.json | 2 +- fetching/binary-fetcher/CHANGELOG.md | 6 +++++ fetching/binary-fetcher/package.json | 2 +- lockfile/filtering/CHANGELOG.md | 6 +++++ lockfile/filtering/package.json | 2 +- lockfile/plugin-commands-audit/CHANGELOG.md | 8 +++++++ lockfile/plugin-commands-audit/package.json | 2 +- lockfile/settings-checker/CHANGELOG.md | 6 +++++ lockfile/settings-checker/package.json | 2 +- lockfile/verification/CHANGELOG.md | 6 +++++ lockfile/verification/package.json | 2 +- modules-mounter/daemon/CHANGELOG.md | 7 ++++++ modules-mounter/daemon/package.json | 2 +- packages/plugin-commands-doctor/CHANGELOG.md | 8 +++++++ packages/plugin-commands-doctor/package.json | 2 +- packages/plugin-commands-init/CHANGELOG.md | 10 +++++++++ packages/plugin-commands-init/package.json | 2 +- packages/plugin-commands-setup/CHANGELOG.md | 9 ++++++++ packages/plugin-commands-setup/package.json | 2 +- .../plugin-commands-patching/CHANGELOG.md | 10 +++++++++ .../plugin-commands-patching/package.json | 2 +- pkg-manager/client/CHANGELOG.md | 9 ++++++++ pkg-manager/client/package.json | 2 +- pkg-manager/core/CHANGELOG.md | 14 ++++++++++++ pkg-manager/core/package.json | 2 +- pkg-manager/get-context/CHANGELOG.md | 6 +++++ pkg-manager/get-context/package.json | 2 +- pkg-manager/headless/CHANGELOG.md | 11 ++++++++++ pkg-manager/headless/package.json | 2 +- pkg-manager/modules-cleaner/CHANGELOG.md | 6 +++++ pkg-manager/modules-cleaner/package.json | 2 +- pkg-manager/package-requester/CHANGELOG.md | 6 +++++ pkg-manager/package-requester/package.json | 2 +- .../plugin-commands-installation/CHANGELOG.md | 22 +++++++++++++++++++ .../plugin-commands-installation/package.json | 2 +- pnpm/CHANGELOG.md | 15 +++++++++++++ pnpm/artifacts/exe/package.json | 2 +- pnpm/artifacts/linux-arm64/package.json | 2 +- pnpm/artifacts/linux-x64/package.json | 2 +- pnpm/artifacts/macos-arm64/package.json | 2 +- pnpm/artifacts/macos-x64/package.json | 2 +- pnpm/artifacts/win-arm64/package.json | 2 +- pnpm/artifacts/win-x64/package.json | 2 +- pnpm/dev/CHANGELOG.md | 6 +++++ pnpm/dev/package.json | 2 +- pnpm/package.json | 2 +- releasing/plugin-commands-deploy/CHANGELOG.md | 9 ++++++++ releasing/plugin-commands-deploy/package.json | 2 +- .../plugin-commands-publishing/CHANGELOG.md | 10 +++++++++ .../plugin-commands-publishing/package.json | 2 +- resolving/bun-resolver/CHANGELOG.md | 11 ++++++++++ resolving/bun-resolver/package.json | 2 +- resolving/default-resolver/CHANGELOG.md | 8 +++++++ resolving/default-resolver/package.json | 2 +- resolving/deno-resolver/CHANGELOG.md | 11 ++++++++++ resolving/deno-resolver/package.json | 2 +- reviewing/license-scanner/CHANGELOG.md | 6 +++++ reviewing/license-scanner/package.json | 2 +- reviewing/outdated/CHANGELOG.md | 6 +++++ reviewing/outdated/package.json | 2 +- .../plugin-commands-licenses/CHANGELOG.md | 9 ++++++++ .../plugin-commands-licenses/package.json | 2 +- .../plugin-commands-listing/CHANGELOG.md | 8 +++++++ .../plugin-commands-listing/package.json | 2 +- .../plugin-commands-outdated/CHANGELOG.md | 10 +++++++++ .../plugin-commands-outdated/package.json | 2 +- store/package-store/CHANGELOG.md | 6 +++++ store/package-store/package.json | 2 +- store/plugin-commands-server/CHANGELOG.md | 12 ++++++++++ store/plugin-commands-server/package.json | 2 +- .../CHANGELOG.md | 8 +++++++ .../package.json | 2 +- store/plugin-commands-store/CHANGELOG.md | 10 +++++++++ store/plugin-commands-store/package.json | 2 +- store/store-connection-manager/CHANGELOG.md | 12 ++++++++++ store/store-connection-manager/package.json | 2 +- testing/temp-store/CHANGELOG.md | 7 ++++++ testing/temp-store/package.json | 2 +- .../plugin-commands-self-updater/CHANGELOG.md | 18 +++++++++++++++ .../plugin-commands-self-updater/package.json | 2 +- .../src/npmSigningKeys.ts | 2 +- .../filter-packages-from-dir/CHANGELOG.md | 7 ++++++ .../filter-packages-from-dir/package.json | 2 +- .../filter-workspace-packages/CHANGELOG.md | 6 +++++ .../filter-workspace-packages/package.json | 2 +- workspace/find-packages/CHANGELOG.md | 7 ++++++ workspace/find-packages/package.json | 2 +- workspace/injected-deps-syncer/CHANGELOG.md | 6 +++++ workspace/injected-deps-syncer/package.json | 2 +- workspace/state/CHANGELOG.md | 7 ++++++ workspace/state/package.json | 2 +- 137 files changed, 626 insertions(+), 102 deletions(-) delete mode 100644 .changeset/calm-lions-trust.md delete mode 100644 .changeset/hip-jokes-shave.md delete mode 100644 .changeset/olive-donkeys-repeat.md delete mode 100644 .changeset/update-node-release-keys.md diff --git a/.changeset/calm-lions-trust.md b/.changeset/calm-lions-trust.md deleted file mode 100644 index 453d1c7978..0000000000 --- a/.changeset/calm-lions-trust.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@pnpm/cli-utils": patch -"@pnpm/config": patch -"@pnpm/tools.plugin-commands-self-updater": patch -"pnpm": patch ---- - -`pnpm self-update` now resolves and verifies pnpm through registry, authentication, proxy, and TLS settings from trusted non-project configuration. Project configuration and the default project pnpmfile can no longer redirect the pnpm download or disable engine identity verification. diff --git a/.changeset/hip-jokes-shave.md b/.changeset/hip-jokes-shave.md deleted file mode 100644 index ee8a803ab1..0000000000 --- a/.changeset/hip-jokes-shave.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -"@pnpm/tools.plugin-commands-self-updater": patch -"@pnpm/default-reporter": patch -"@pnpm/cli-meta": patch -"pnpm": patch ---- - -pnpm no longer tells you to update itself with Corepack or with `pnpm add -g`: - -* The update notification now suggests `pnpm self-update`, or the [standalone install script](https://pnpm.io/installation) when pnpm is running under Corepack. It used to suggest `corepack use pnpm@`, or `pnpm add -g pnpm` / `pnpm add -g @pnpm/exe` when pnpm was not installed by the standalone script — but `pnpm add -g` refuses to install pnpm and points at `pnpm self-update` anyway, and `@pnpm/exe` is not published for pnpm v12 or newer, where the unscoped `pnpm` package is itself the native executable. -* `pnpm self-update` under Corepack now points at the standalone install script too, instead of telling you to update pnpm with Corepack. diff --git a/.changeset/olive-donkeys-repeat.md b/.changeset/olive-donkeys-repeat.md deleted file mode 100644 index 04ac892a21..0000000000 --- a/.changeset/olive-donkeys-repeat.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/fetching.binary-fetcher": patch -"pnpm": patch ---- - -Updated `adm-zip` to v0.6.0, which fixes [a memory-exhaustion vulnerability](https://github.com/advisories/GHSA-xcpc-8h2w-3j85) where a crafted ZIP file could make it allocate 4 GB of memory. `adm-zip` is used to extract the Node.js, Bun, and Deno archives that pnpm downloads on Windows. diff --git a/.changeset/update-node-release-keys.md b/.changeset/update-node-release-keys.md deleted file mode 100644 index a4a5d98de7..0000000000 --- a/.changeset/update-node-release-keys.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/crypto.shasums-file": patch -"pnpm": patch ---- - -Update the embedded Node.js release keys with the new key added to [nodejs/release-keys](https://github.com/nodejs/release-keys) (Stewart X Addison, `655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD`). diff --git a/.meta-updater/CHANGELOG.md b/.meta-updater/CHANGELOG.md index ebe26bac79..54ce77b026 100644 --- a/.meta-updater/CHANGELOG.md +++ b/.meta-updater/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm-private/updater +## 1000.0.31 + +### Patch Changes + +- @pnpm/workspace.find-packages@1000.0.72 + ## 1000.0.30 ### Patch Changes diff --git a/.meta-updater/package.json b/.meta-updater/package.json index 219f432378..5b565814c2 100644 --- a/.meta-updater/package.json +++ b/.meta-updater/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm-private/updater", - "version": "1000.0.30", + "version": "1000.0.31", "private": true, "type": "module", "scripts": { diff --git a/cache/api/CHANGELOG.md b/cache/api/CHANGELOG.md index 2ac9c07968..3510982f0c 100644 --- a/cache/api/CHANGELOG.md +++ b/cache/api/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/cache.api +## 1000.0.61 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/config@1004.11.7 + ## 1000.0.60 ### Patch Changes diff --git a/cache/api/package.json b/cache/api/package.json index 8b78900ea3..90ee9b7ffb 100644 --- a/cache/api/package.json +++ b/cache/api/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cache.api", - "version": "1000.0.60", + "version": "1000.0.61", "description": "API for controlling the cache", "keywords": [ "pnpm", diff --git a/cache/commands/CHANGELOG.md b/cache/commands/CHANGELOG.md index ba41023a78..b10954fc4d 100644 --- a/cache/commands/CHANGELOG.md +++ b/cache/commands/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/cache.commands +## 1000.0.72 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/cache.api@1000.0.61 + ## 1000.0.71 ### Patch Changes diff --git a/cache/commands/package.json b/cache/commands/package.json index ce4dd4756e..6fbd211e1c 100644 --- a/cache/commands/package.json +++ b/cache/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cache.commands", - "version": "1000.0.71", + "version": "1000.0.72", "description": "Commands for controlling the cache", "keywords": [ "pnpm", diff --git a/cli/cli-meta/CHANGELOG.md b/cli/cli-meta/CHANGELOG.md index 63a2c48c1a..63afe97cdc 100644 --- a/cli/cli-meta/CHANGELOG.md +++ b/cli/cli-meta/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/cli-meta +## 1000.0.18 + +### Patch Changes + +- 46bc7c9: pnpm no longer tells you to update itself with Corepack or with `pnpm add -g`: + + - The update notification now suggests `pnpm self-update`, or the [standalone install script](https://pnpm.io/installation) when pnpm is running under Corepack. It used to suggest `corepack use pnpm@`, or `pnpm add -g pnpm` / `pnpm add -g @pnpm/exe` when pnpm was not installed by the standalone script — but `pnpm add -g` refuses to install pnpm and points at `pnpm self-update` anyway, and `@pnpm/exe` is not published for pnpm v12 or newer, where the unscoped `pnpm` package is itself the native executable. + - `pnpm self-update` under Corepack now points at the standalone install script too, instead of telling you to update pnpm with Corepack. + ## 1000.0.17 ### Patch Changes diff --git a/cli/cli-meta/package.json b/cli/cli-meta/package.json index 3db3ae5e34..032acf9714 100644 --- a/cli/cli-meta/package.json +++ b/cli/cli-meta/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cli-meta", - "version": "1000.0.17", + "version": "1000.0.18", "description": "Reads the metainfo of the currently running pnpm instance", "keywords": [ "pnpm", diff --git a/cli/cli-utils/CHANGELOG.md b/cli/cli-utils/CHANGELOG.md index 14696f1989..33a8d01381 100644 --- a/cli/cli-utils/CHANGELOG.md +++ b/cli/cli-utils/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/cli-utils +## 1001.3.17 + +### Patch Changes + +- e7888e5: `pnpm self-update` now resolves and verifies pnpm through registry, authentication, proxy, and TLS settings from trusted non-project configuration. Project configuration and the default project pnpmfile can no longer redirect the pnpm download or disable engine identity verification. +- Updated dependencies [e7888e5] +- Updated dependencies [46bc7c9] + - @pnpm/config@1004.11.7 + - @pnpm/default-reporter@1002.1.21 + - @pnpm/cli-meta@1000.0.18 + - @pnpm/store-connection-manager@1002.3.26 + - @pnpm/package-is-installable@1000.0.23 + - @pnpm/config.deps-installer@1000.1.10 + ## 1001.3.16 ### Patch Changes diff --git a/cli/cli-utils/package.json b/cli/cli-utils/package.json index 20fe673c8c..05ddb7b7cd 100644 --- a/cli/cli-utils/package.json +++ b/cli/cli-utils/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cli-utils", - "version": "1001.3.16", + "version": "1001.3.17", "description": "Utils for pnpm commands", "keywords": [ "pnpm", diff --git a/cli/default-reporter/CHANGELOG.md b/cli/default-reporter/CHANGELOG.md index 62813ff615..41b63a9991 100644 --- a/cli/default-reporter/CHANGELOG.md +++ b/cli/default-reporter/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/default-reporter +## 1002.1.21 + +### Patch Changes + +- 46bc7c9: pnpm no longer tells you to update itself with Corepack or with `pnpm add -g`: + + - The update notification now suggests `pnpm self-update`, or the [standalone install script](https://pnpm.io/installation) when pnpm is running under Corepack. It used to suggest `corepack use pnpm@`, or `pnpm add -g pnpm` / `pnpm add -g @pnpm/exe` when pnpm was not installed by the standalone script — but `pnpm add -g` refuses to install pnpm and points at `pnpm self-update` anyway, and `@pnpm/exe` is not published for pnpm v12 or newer, where the unscoped `pnpm` package is itself the native executable. + - `pnpm self-update` under Corepack now points at the standalone install script too, instead of telling you to update pnpm with Corepack. + +- Updated dependencies [e7888e5] +- Updated dependencies [46bc7c9] + - @pnpm/config@1004.11.7 + - @pnpm/cli-meta@1000.0.18 + ## 1002.1.20 ### Patch Changes diff --git a/cli/default-reporter/package.json b/cli/default-reporter/package.json index 67e8bf2a26..56933df68a 100644 --- a/cli/default-reporter/package.json +++ b/cli/default-reporter/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/default-reporter", - "version": "1002.1.20", + "version": "1002.1.21", "description": "The default reporter of pnpm", "keywords": [ "pnpm", diff --git a/config/config/CHANGELOG.md b/config/config/CHANGELOG.md index 6541710128..33cc33340b 100644 --- a/config/config/CHANGELOG.md +++ b/config/config/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/config +## 1004.11.7 + +### Patch Changes + +- e7888e5: `pnpm self-update` now resolves and verifies pnpm through registry, authentication, proxy, and TLS settings from trusted non-project configuration. Project configuration and the default project pnpmfile can no longer redirect the pnpm download or disable engine identity verification. + ## 1004.11.6 ### Patch Changes diff --git a/config/config/package.json b/config/config/package.json index 1002520ace..d887cf0b01 100644 --- a/config/config/package.json +++ b/config/config/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/config", - "version": "1004.11.6", + "version": "1004.11.7", "description": "Gets configuration options for pnpm", "keywords": [ "pnpm", diff --git a/config/deps-installer/CHANGELOG.md b/config/deps-installer/CHANGELOG.md index f17ded14bf..1fcaeb07b1 100644 --- a/config/deps-installer/CHANGELOG.md +++ b/config/deps-installer/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/config.deps-installer +## 1000.1.10 + +### Patch Changes + +- @pnpm/package-store@1007.1.9 + ## 1000.1.9 ### Patch Changes diff --git a/config/deps-installer/package.json b/config/deps-installer/package.json index e72e6df0e6..67e5f6a7c7 100644 --- a/config/deps-installer/package.json +++ b/config/deps-installer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/config.deps-installer", - "version": "1000.1.9", + "version": "1000.1.10", "description": "Installer for configurational dependencies", "keywords": [ "pnpm", diff --git a/config/package-is-installable/CHANGELOG.md b/config/package-is-installable/CHANGELOG.md index e837d65809..8153e8d3ce 100644 --- a/config/package-is-installable/CHANGELOG.md +++ b/config/package-is-installable/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/package-is-installable +## 1000.0.23 + +### Patch Changes + +- Updated dependencies [46bc7c9] + - @pnpm/cli-meta@1000.0.18 + - @pnpm/env.system-node-version@1000.0.18 + ## 1000.0.22 ### Patch Changes diff --git a/config/package-is-installable/package.json b/config/package-is-installable/package.json index 31076d886c..c486fd26fa 100644 --- a/config/package-is-installable/package.json +++ b/config/package-is-installable/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/package-is-installable", - "version": "1000.0.22", + "version": "1000.0.23", "description": "Checks if a package is installable on the current system", "keywords": [ "pnpm", diff --git a/config/plugin-commands-config/CHANGELOG.md b/config/plugin-commands-config/CHANGELOG.md index 2ef60a9b69..bd2c105bb2 100644 --- a/config/plugin-commands-config/CHANGELOG.md +++ b/config/plugin-commands-config/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/plugin-commands-config +## 1000.3.29 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + ## 1000.3.28 ### Patch Changes diff --git a/config/plugin-commands-config/package.json b/config/plugin-commands-config/package.json index 986e6777a9..4d8449df77 100644 --- a/config/plugin-commands-config/package.json +++ b/config/plugin-commands-config/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-config", - "version": "1000.3.28", + "version": "1000.3.29", "description": "Commands for reading and writing settings to/from config files", "keywords": [ "pnpm", diff --git a/crypto/shasums-file/CHANGELOG.md b/crypto/shasums-file/CHANGELOG.md index 53c2b02741..13dfe25c0a 100644 --- a/crypto/shasums-file/CHANGELOG.md +++ b/crypto/shasums-file/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/crypto.shasums-file +## 1001.0.7 + +### Patch Changes + +- Updated the embedded Node.js release keys to the current canonical `nodejs/release-keys` list. +- 702ad5f: Update the embedded Node.js release keys with the new key added to [nodejs/release-keys](https://github.com/nodejs/release-keys) (Stewart X Addison, `655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD`). + ## 1001.0.6 ### Patch Changes diff --git a/crypto/shasums-file/package.json b/crypto/shasums-file/package.json index efd67914a8..267131f619 100644 --- a/crypto/shasums-file/package.json +++ b/crypto/shasums-file/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/crypto.shasums-file", - "version": "1001.0.6", + "version": "1001.0.7", "description": "Utils for working with shasums files", "keywords": [ "pnpm", diff --git a/crypto/shasums-file/src/nodeReleaseKeys.ts b/crypto/shasums-file/src/nodeReleaseKeys.ts index 524d15dc4d..eec66a3778 100644 --- a/crypto/shasums-file/src/nodeReleaseKeys.ts +++ b/crypto/shasums-file/src/nodeReleaseKeys.ts @@ -49,7 +49,7 @@ export const NODE_RELEASE_KEYS = [ }, { fingerprint: '890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4', - armoredKey: "-----BEGIN PGP PUBLIC KEY BLOCK-----\n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\nH9y08K6zB4JFN7saJiCj2Q7W2nXuEUhRVs2K\n=L7AX\n-----END PGP PUBLIC KEY BLOCK-----\n", + armoredKey: "-----BEGIN PGP PUBLIC KEY BLOCK-----\n\nmQGNBGKD3OQBDAC3ESxNd7dHfM7Hl3sE7Xn2osS4UZkJtmXA7hdbfybzf164wCbL\ncYECq0GrGfgdnKEMWNzr2S08KkUWQwJZd70Jt1voVpqWVXdtBH/KxGwifixMkTEy\nlu0ePvJM7L5HNOIZP5njcAU03hKgIibYQW+SWj/G37yfdyNprN2uX8p4CUyJbnBc\nYOZ2W1tUzNsddvTV03JlDmfR5kwHoi5sTCqvQWTzsIQn/vGHxMqa3XjabfSvim1A\nytE1J7VIiu7P9hW1prEfUVY5+ggswUCfJl4A4WcCwFLIaIdOreiakAix7Hn5AD4D\nlyskTzDy6QRpzFVm6YyrKzUzggqa+bQ5/9aq8LdKVim/f/LmEuSQdwkEt0rOWhAX\nYJQrnJT8IFLqmgnJEygGkwcdXOBGRERRB8Mes0rfrgYHYW0WqGI5fMxyL1Ti9w+0\nAH6QFq1IoWZY8bzGk1bJe57lgJrshavpSc1ftKTqsFAoLYDsMF6lxkNyS7+OZMIx\nU9hbvuJgdPj7/lUAEQEAAbQjUmFmYWVsR1NTIDxyYWZhZWwubnVudUBob3RtYWls\nLmNvbT6JAdQEEwEKAD4CGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AWIQSJDAjb\nhXkWL+4N+duL6rTfz1Ve9AUCaEBt/gUJCX74GgAKCRCL6rTfz1Ve9NZ9C/9KrvxJ\nAYDlKVlfrr3o9PXwWD17Z0m3XMGBPj98DJw11/YPNtwjdCWwo3mA5zZM7jsLDYCg\nHwZ+hzi9mRBDoQSrFfZlazLkWbtSZhre0tzMaVdIUo0JfkBYNwlO6JH+AhzfEVxm\nHrWASaiBQlbe0Mxj4ru1+Td9E0g8JtEr6n3WxtIvVN+r3RzKX6HK9nMRvQz7sw6G\n4DWEe4JxZRtkIf2ypsmuCYvz9SXF13YKmpFM5gEBC3AfKjZwnVYJlmvsq6/V1roP\nNu/Z+blgS7GTRKV3ZoFsV2q4K1fcHbAKsLltc1aZgI06DpghYosE98Gp96jJvKU8\nYbtWhcMuoDHA5UIuZP8jiP699GVYJR17Q0YPqpwy5/gvXg9pqr/TMdePMr5DeU3W\n/AaPQT8tn2pxTe7ha1F1kBEOFt8aTKTPuxYZhQjbXxENOGOApWTKHQGaxmJsPwHg\ncDaPvpUzdi/jAsqJiqR1Yuu/vo03GBiPoM+Y/w+mNw0QcDh6H/Hh7AiLsxa5AY0E\nYoPc5AEMAN+Z6DX1O0fLkt0lq+N70gmO+AlFI9l4L2HKBiPCMMPCXP/iX/04zVzm\n6n3rl5ypNo+Q4um6eGwL9UGrzUJSwcD0nsvK8U+SVyDpp8e3i4+ph2XRiC5Bkktf\ngye2vTAgE9clqnDpQGnaQ689gOd9nPQAUqNXnibuZsnETusbu/+HQDqM4wdSxTGX\nQ4PaqjmyATeUcTVwh8bzdBOLZ8O2eilFgNhY30cycxevI68SnLzPz7riXTQo0pKb\nf6hvK5kn3nULn5l7b+QFtuVbffe9vo3J3OT8lEX9Cvd73y01fgDRXs5j1Zbg5OaO\nMXqMthbndq+enlhkD4vyCF07LkuHBk8lMX1yUVysMx/iqN7YS/2ZEMkJt095Q/6D\ncNigEUpTvgtPJYxHam1uXQb3Ellhap/YeCkkgOs2FOeytaIR8na/A7TjPwOM6v/t\nar+ENQDF1nChrqhlLin9j+kyiwkTypWJ0kmyU58fZGvlSh1JfjVNaMuM4f6xoFQF\nb88Au4p8swARAQABiQG8BBgBCgAmAhsMFiEEiQwI24V5Fi/uDfnbi+q0389VXvQF\nAmqVl58FCQl+6YwACgkQi+q0389VXvTjBgv/dLhxfrDi2GlSTzn7oXtbs1mljgJ1\ncIAM7In20k1zWQ5v8cO93PDYknWQ82kWfYmUsq64XlnC2DVKTzpiGSOo7OHXyZG6\nYZb/uY7uVy/Hn36aD82fNu0fARhQGTmImn5XlKg8pTMhYMNVYisg8p4kYr4WQLt8\nJZojjtOBaXJ2Z936F7BbECEvnYIbwwSRLYIfzPG47sznkp9SdVcvtvu78gYRh2ij\nwP8Y/kPAmcIIL0daHIYmQAhd/vjt1bQbPi5SDIuGuGhgmKz/BZk0n0QFD0uxQB+T\n3lzuCktZwHguHwBCFlN3CRsy27UBTq6Pd/yeDAtMztG/VeHDH1VRcfIiEC3XfN3d\nFxy5A0CLjT6i5uZHbU+ntoCV/gAsTa4QLN34vrjpoqTmp0PYywJOGuriuI0N0vT5\nYw1RweAUlXiymdEhfWs4H4HGIFTXyrtqVz+gRIRKIHmaY35ohQqmSk6E0wCZWpFS\nkyhCnmG3aood+dXxtUzOGMIzRSJmgHQi5S2d\n=YZnA\n-----END PGP PUBLIC KEY BLOCK-----\n", }, { fingerprint: 'C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C', diff --git a/deps/graph-builder/CHANGELOG.md b/deps/graph-builder/CHANGELOG.md index aabdb585d1..b622f4633e 100644 --- a/deps/graph-builder/CHANGELOG.md +++ b/deps/graph-builder/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/deps.graph-builder +## 1002.3.18 + +### Patch Changes + +- @pnpm/package-is-installable@1000.0.23 + ## 1002.3.17 ### Patch Changes diff --git a/deps/graph-builder/package.json b/deps/graph-builder/package.json index fb3e24f9d3..dc1364268e 100644 --- a/deps/graph-builder/package.json +++ b/deps/graph-builder/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.graph-builder", - "version": "1002.3.17", + "version": "1002.3.18", "description": "A package for building a dependency graph from a lockfile", "keywords": [ "pnpm", diff --git a/deps/status/CHANGELOG.md b/deps/status/CHANGELOG.md index b940f45ac5..1a9fa1053a 100644 --- a/deps/status/CHANGELOG.md +++ b/deps/status/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/deps.status +## 1003.0.45 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/config@1004.11.7 + - @pnpm/workspace.find-packages@1000.0.72 + - @pnpm/workspace.state@1002.1.13 + - @pnpm/get-context@1001.2.12 + - @pnpm/lockfile.verification@1001.2.28 + - @pnpm/lockfile.settings-checker@1001.1.4 + ## 1003.0.44 ### Patch Changes diff --git a/deps/status/package.json b/deps/status/package.json index b118497e66..3afa598102 100644 --- a/deps/status/package.json +++ b/deps/status/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.status", - "version": "1003.0.44", + "version": "1003.0.45", "description": "Check dependencies status", "keywords": [ "pnpm", diff --git a/env/node.fetcher/CHANGELOG.md b/env/node.fetcher/CHANGELOG.md index 61f627be56..0867e4acd2 100644 --- a/env/node.fetcher/CHANGELOG.md +++ b/env/node.fetcher/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/node.fetcher +## 1001.0.34 + +### Patch Changes + +- Updated dependencies [46bc7c9] +- Updated dependencies +- Updated dependencies [702ad5f] + - @pnpm/fetching.binary-fetcher@1005.0.7 + - @pnpm/crypto.shasums-file@1001.0.7 + - @pnpm/node.resolver@1001.0.30 + ## 1001.0.33 ### Patch Changes diff --git a/env/node.fetcher/package.json b/env/node.fetcher/package.json index c8dd3c89ec..0cf154a5b3 100644 --- a/env/node.fetcher/package.json +++ b/env/node.fetcher/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/node.fetcher", - "version": "1001.0.33", + "version": "1001.0.34", "description": "Node.js artifacts fetcher", "keywords": [ "pnpm", diff --git a/env/node.resolver/CHANGELOG.md b/env/node.resolver/CHANGELOG.md index 0dedd4d475..e7b5e0050a 100644 --- a/env/node.resolver/CHANGELOG.md +++ b/env/node.resolver/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/node.resolver +## 1001.0.30 + +### Patch Changes + +- Updated dependencies [e7888e5] +- Updated dependencies +- Updated dependencies [702ad5f] + - @pnpm/config@1004.11.7 + - @pnpm/crypto.shasums-file@1001.0.7 + ## 1001.0.29 ### Patch Changes diff --git a/env/node.resolver/package.json b/env/node.resolver/package.json index d088eb4b10..1cf54ca92c 100644 --- a/env/node.resolver/package.json +++ b/env/node.resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/node.resolver", - "version": "1001.0.29", + "version": "1001.0.30", "description": "Resolves a Node.js version specifier to an exact Node.js version", "keywords": [ "pnpm", diff --git a/env/plugin-commands-env/CHANGELOG.md b/env/plugin-commands-env/CHANGELOG.md index 141d0e7053..482a246e6c 100644 --- a/env/plugin-commands-env/CHANGELOG.md +++ b/env/plugin-commands-env/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/plugin-commands-env +## 1000.0.73 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/node.resolver@1001.0.30 + - @pnpm/env.system-node-version@1000.0.18 + - @pnpm/node.fetcher@1001.0.34 + ## 1000.0.72 ### Patch Changes diff --git a/env/plugin-commands-env/package.json b/env/plugin-commands-env/package.json index bc349107fb..4b1e75c911 100644 --- a/env/plugin-commands-env/package.json +++ b/env/plugin-commands-env/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-env", - "version": "1000.0.72", + "version": "1000.0.73", "description": "pnpm commands for managing Node.js", "keywords": [ "pnpm", diff --git a/env/system-node-version/CHANGELOG.md b/env/system-node-version/CHANGELOG.md index c70099afb5..de41fef95a 100644 --- a/env/system-node-version/CHANGELOG.md +++ b/env/system-node-version/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/env.system-node-version +## 1000.0.18 + +### Patch Changes + +- Updated dependencies [46bc7c9] + - @pnpm/cli-meta@1000.0.18 + ## 1000.0.17 ### Patch Changes diff --git a/env/system-node-version/package.json b/env/system-node-version/package.json index 45da77b4dd..dc87d24ea9 100644 --- a/env/system-node-version/package.json +++ b/env/system-node-version/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/env.system-node-version", - "version": "1000.0.17", + "version": "1000.0.18", "description": "Detects the current system node version", "keywords": [ "pnpm", diff --git a/exec/build-commands/CHANGELOG.md b/exec/build-commands/CHANGELOG.md index d6eb429b76..d0529f55fd 100644 --- a/exec/build-commands/CHANGELOG.md +++ b/exec/build-commands/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/exec.build-commands +## 1002.1.10 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/config@1004.11.7 + - @pnpm/plugin-commands-rebuild@1008.0.21 + ## 1002.1.9 ### Patch Changes diff --git a/exec/build-commands/package.json b/exec/build-commands/package.json index 8451e9e076..7dd1f28a07 100644 --- a/exec/build-commands/package.json +++ b/exec/build-commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exec.build-commands", - "version": "1002.1.9", + "version": "1002.1.10", "description": "Commands for managing dependency builds", "keywords": [ "pnpm", diff --git a/exec/build-modules/CHANGELOG.md b/exec/build-modules/CHANGELOG.md index 99aeb1fca0..64b93605a5 100644 --- a/exec/build-modules/CHANGELOG.md +++ b/exec/build-modules/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/build-modules +## 1007.0.19 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/config@1004.11.7 + ## 1007.0.18 ### Patch Changes diff --git a/exec/build-modules/package.json b/exec/build-modules/package.json index 5cd806c134..1aef3409f2 100644 --- a/exec/build-modules/package.json +++ b/exec/build-modules/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/build-modules", - "version": "1007.0.18", + "version": "1007.0.19", "description": "Build packages in node_modules", "keywords": [ "pnpm", diff --git a/exec/plugin-commands-rebuild/CHANGELOG.md b/exec/plugin-commands-rebuild/CHANGELOG.md index 3f84b4d2e1..d62e243ab7 100644 --- a/exec/plugin-commands-rebuild/CHANGELOG.md +++ b/exec/plugin-commands-rebuild/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/plugin-commands-rebuild +## 1008.0.21 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/workspace.find-packages@1000.0.72 + - @pnpm/store-connection-manager@1002.3.26 + - @pnpm/get-context@1001.2.12 + ## 1008.0.20 ### Patch Changes diff --git a/exec/plugin-commands-rebuild/package.json b/exec/plugin-commands-rebuild/package.json index adb77ffbf2..f4db144669 100644 --- a/exec/plugin-commands-rebuild/package.json +++ b/exec/plugin-commands-rebuild/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-rebuild", - "version": "1008.0.20", + "version": "1008.0.21", "description": "Commands for rebuilding dependencies", "keywords": [ "pnpm", diff --git a/exec/plugin-commands-script-runners/CHANGELOG.md b/exec/plugin-commands-script-runners/CHANGELOG.md index 267d7543b6..0ef570b9ea 100644 --- a/exec/plugin-commands-script-runners/CHANGELOG.md +++ b/exec/plugin-commands-script-runners/CHANGELOG.md @@ -1,5 +1,18 @@ # @pnpm/plugin-commands-script-runners +## 1001.2.19 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/plugin-commands-env@1000.0.73 + - @pnpm/plugin-commands-installation@1004.10.6 + - @pnpm/deps.status@1003.0.45 + - @pnpm/client@1001.1.31 + - @pnpm/workspace.injected-deps-syncer@1000.0.46 + ## 1001.2.18 ### Patch Changes diff --git a/exec/plugin-commands-script-runners/package.json b/exec/plugin-commands-script-runners/package.json index 63f46b7c1e..b8bf3d4944 100644 --- a/exec/plugin-commands-script-runners/package.json +++ b/exec/plugin-commands-script-runners/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-script-runners", - "version": "1001.2.18", + "version": "1001.2.19", "description": "Commands for running scripts", "keywords": [ "pnpm", diff --git a/fetching/binary-fetcher/CHANGELOG.md b/fetching/binary-fetcher/CHANGELOG.md index 8480a76762..7154ce3e28 100644 --- a/fetching/binary-fetcher/CHANGELOG.md +++ b/fetching/binary-fetcher/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/fetching.binary-fetcher +## 1005.0.7 + +### Patch Changes + +- 46bc7c9: Updated `adm-zip` to v0.6.0, which fixes [a memory-exhaustion vulnerability](https://github.com/advisories/GHSA-xcpc-8h2w-3j85) where a crafted ZIP file could make it allocate 4 GB of memory. `adm-zip` is used to extract the Node.js, Bun, and Deno archives that pnpm downloads on Windows. + ## 1005.0.6 ### Patch Changes diff --git a/fetching/binary-fetcher/package.json b/fetching/binary-fetcher/package.json index bcda849e15..780910c583 100644 --- a/fetching/binary-fetcher/package.json +++ b/fetching/binary-fetcher/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/fetching.binary-fetcher", - "version": "1005.0.6", + "version": "1005.0.7", "description": "A fetcher for binary archives", "keywords": [ "pnpm", diff --git a/lockfile/filtering/CHANGELOG.md b/lockfile/filtering/CHANGELOG.md index af02e93723..3453722667 100644 --- a/lockfile/filtering/CHANGELOG.md +++ b/lockfile/filtering/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/filter-lockfile +## 1001.0.35 + +### Patch Changes + +- @pnpm/package-is-installable@1000.0.23 + ## 1001.0.34 ### Patch Changes diff --git a/lockfile/filtering/package.json b/lockfile/filtering/package.json index a6c66571e7..fcadd13073 100644 --- a/lockfile/filtering/package.json +++ b/lockfile/filtering/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.filtering", - "version": "1001.0.34", + "version": "1001.0.35", "description": "Filters a lockfile", "keywords": [ "pnpm", diff --git a/lockfile/plugin-commands-audit/CHANGELOG.md b/lockfile/plugin-commands-audit/CHANGELOG.md index 0afcf13ce3..ff4e28728c 100644 --- a/lockfile/plugin-commands-audit/CHANGELOG.md +++ b/lockfile/plugin-commands-audit/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/plugin-commands-audit +## 1002.2.17 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + ## 1002.2.16 ### Patch Changes diff --git a/lockfile/plugin-commands-audit/package.json b/lockfile/plugin-commands-audit/package.json index c8bf656079..08de794836 100644 --- a/lockfile/plugin-commands-audit/package.json +++ b/lockfile/plugin-commands-audit/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-audit", - "version": "1002.2.16", + "version": "1002.2.17", "description": "pnpm commands for dependencies audit", "keywords": [ "pnpm", diff --git a/lockfile/settings-checker/CHANGELOG.md b/lockfile/settings-checker/CHANGELOG.md index c4c2738d8b..12341e6e6b 100644 --- a/lockfile/settings-checker/CHANGELOG.md +++ b/lockfile/settings-checker/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/lockfile.settings-checker +## 1001.1.4 + +### Patch Changes + +- @pnpm/lockfile.verification@1001.2.28 + ## 1001.1.3 ### Patch Changes diff --git a/lockfile/settings-checker/package.json b/lockfile/settings-checker/package.json index 770af9e251..9ea9942079 100644 --- a/lockfile/settings-checker/package.json +++ b/lockfile/settings-checker/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.settings-checker", - "version": "1001.1.3", + "version": "1001.1.4", "description": "Utilities to check if lockfile settings are out-of-date", "keywords": [ "pnpm", diff --git a/lockfile/verification/CHANGELOG.md b/lockfile/verification/CHANGELOG.md index a74236063e..ed389cecde 100644 --- a/lockfile/verification/CHANGELOG.md +++ b/lockfile/verification/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/lockfile.verification +## 1001.2.28 + +### Patch Changes + +- @pnpm/get-context@1001.2.12 + ## 1001.2.27 ### Patch Changes diff --git a/lockfile/verification/package.json b/lockfile/verification/package.json index 4a9731c876..4aedb02618 100644 --- a/lockfile/verification/package.json +++ b/lockfile/verification/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.verification", - "version": "1001.2.27", + "version": "1001.2.28", "description": "Checks a lockfile", "keywords": [ "pnpm", diff --git a/modules-mounter/daemon/CHANGELOG.md b/modules-mounter/daemon/CHANGELOG.md index c857e8305a..44601750d9 100644 --- a/modules-mounter/daemon/CHANGELOG.md +++ b/modules-mounter/daemon/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/mount-modules +## 1001.0.61 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/config@1004.11.7 + ## 1001.0.60 ### Patch Changes diff --git a/modules-mounter/daemon/package.json b/modules-mounter/daemon/package.json index fd1f1e6ce4..bb24ca3ed1 100644 --- a/modules-mounter/daemon/package.json +++ b/modules-mounter/daemon/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/mount-modules", - "version": "1001.0.60", + "version": "1001.0.61", "description": "Mounts a node_modules directory with FUSE", "keywords": [ "pnpm", diff --git a/packages/plugin-commands-doctor/CHANGELOG.md b/packages/plugin-commands-doctor/CHANGELOG.md index 51f3add7a6..d6d13eaff2 100644 --- a/packages/plugin-commands-doctor/CHANGELOG.md +++ b/packages/plugin-commands-doctor/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/plugin-commands-doctor +## 1000.1.71 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + ## 1000.1.70 ### Patch Changes diff --git a/packages/plugin-commands-doctor/package.json b/packages/plugin-commands-doctor/package.json index 1130b6ebf7..350c11aaf8 100644 --- a/packages/plugin-commands-doctor/package.json +++ b/packages/plugin-commands-doctor/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-doctor", - "version": "1000.1.70", + "version": "1000.1.71", "description": "Commands for checks of known common issues ", "keywords": [ "pnpm", diff --git a/packages/plugin-commands-init/CHANGELOG.md b/packages/plugin-commands-init/CHANGELOG.md index 0fb8acd375..7f999983f1 100644 --- a/packages/plugin-commands-init/CHANGELOG.md +++ b/packages/plugin-commands-init/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/plugin-commands-init +## 1000.3.24 + +### Patch Changes + +- Updated dependencies [e7888e5] +- Updated dependencies [46bc7c9] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/cli-meta@1000.0.18 + ## 1000.3.23 ### Patch Changes diff --git a/packages/plugin-commands-init/package.json b/packages/plugin-commands-init/package.json index 569875e503..66f5d73879 100644 --- a/packages/plugin-commands-init/package.json +++ b/packages/plugin-commands-init/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-init", - "version": "1000.3.23", + "version": "1000.3.24", "description": "Create a package.json file", "keywords": [ "pnpm", diff --git a/packages/plugin-commands-setup/CHANGELOG.md b/packages/plugin-commands-setup/CHANGELOG.md index 6a95e5efa2..720605a84c 100644 --- a/packages/plugin-commands-setup/CHANGELOG.md +++ b/packages/plugin-commands-setup/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/plugin-commands-setup +## 1000.1.49 + +### Patch Changes + +- Updated dependencies [e7888e5] +- Updated dependencies [46bc7c9] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/cli-meta@1000.0.18 + ## 1000.1.48 ### Patch Changes diff --git a/packages/plugin-commands-setup/package.json b/packages/plugin-commands-setup/package.json index a0a60eedda..3522a82ae4 100644 --- a/packages/plugin-commands-setup/package.json +++ b/packages/plugin-commands-setup/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-setup", - "version": "1000.1.48", + "version": "1000.1.49", "description": "pnpm commands for setting up pnpm", "keywords": [ "pnpm", diff --git a/patching/plugin-commands-patching/CHANGELOG.md b/patching/plugin-commands-patching/CHANGELOG.md index 7d0c85d6ce..b21967c2e7 100644 --- a/patching/plugin-commands-patching/CHANGELOG.md +++ b/patching/plugin-commands-patching/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/plugin-commands-patching +## 1000.3.54 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/plugin-commands-installation@1004.10.6 + - @pnpm/store-connection-manager@1002.3.26 + ## 1000.3.53 ### Patch Changes diff --git a/patching/plugin-commands-patching/package.json b/patching/plugin-commands-patching/package.json index 56a8200f4d..aaba639a2c 100644 --- a/patching/plugin-commands-patching/package.json +++ b/patching/plugin-commands-patching/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-patching", - "version": "1000.3.53", + "version": "1000.3.54", "description": "Commands for creating patches", "keywords": [ "pnpm", diff --git a/pkg-manager/client/CHANGELOG.md b/pkg-manager/client/CHANGELOG.md index 2f66e268ae..c2ae2aad4d 100644 --- a/pkg-manager/client/CHANGELOG.md +++ b/pkg-manager/client/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/client +## 1001.1.31 + +### Patch Changes + +- Updated dependencies [46bc7c9] + - @pnpm/fetching.binary-fetcher@1005.0.7 + - @pnpm/node.fetcher@1001.0.34 + - @pnpm/default-resolver@1002.3.15 + ## 1001.1.30 ### Patch Changes diff --git a/pkg-manager/client/package.json b/pkg-manager/client/package.json index 352044b69c..9c801fe386 100644 --- a/pkg-manager/client/package.json +++ b/pkg-manager/client/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/client", - "version": "1001.1.30", + "version": "1001.1.31", "description": "Creates the package resolve and fetch functions", "keywords": [ "pnpm", diff --git a/pkg-manager/core/CHANGELOG.md b/pkg-manager/core/CHANGELOG.md index 64f2ad0fc3..2b9a267612 100644 --- a/pkg-manager/core/CHANGELOG.md +++ b/pkg-manager/core/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/core +## 1016.4.6 + +### Patch Changes + +- @pnpm/plugin-commands-rebuild@1008.0.21 +- @pnpm/build-modules@1007.0.19 +- @pnpm/headless@1010.1.18 +- @pnpm/lockfile.filtering@1001.0.35 +- @pnpm/package-requester@1011.2.7 +- @pnpm/modules-cleaner@1001.0.39 +- @pnpm/get-context@1001.2.12 +- @pnpm/lockfile.verification@1001.2.28 +- @pnpm/lockfile.settings-checker@1001.1.4 + ## 1016.4.5 ### Patch Changes diff --git a/pkg-manager/core/package.json b/pkg-manager/core/package.json index 6781714e8d..6bd766139a 100644 --- a/pkg-manager/core/package.json +++ b/pkg-manager/core/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/core", - "version": "1016.4.5", + "version": "1016.4.6", "description": "Fast, disk space efficient installation engine", "keywords": [ "pnpm", diff --git a/pkg-manager/get-context/CHANGELOG.md b/pkg-manager/get-context/CHANGELOG.md index b9e5d90a31..32824786d6 100644 --- a/pkg-manager/get-context/CHANGELOG.md +++ b/pkg-manager/get-context/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/get-context +## 1001.2.12 + +### Patch Changes + +- @pnpm/package-store@1007.1.9 + ## 1001.2.11 ### Patch Changes diff --git a/pkg-manager/get-context/package.json b/pkg-manager/get-context/package.json index 962c1a03a2..16f130b198 100644 --- a/pkg-manager/get-context/package.json +++ b/pkg-manager/get-context/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/get-context", - "version": "1001.2.11", + "version": "1001.2.12", "description": "Gets context information about a project", "keywords": [ "pnpm", diff --git a/pkg-manager/headless/CHANGELOG.md b/pkg-manager/headless/CHANGELOG.md index 97256237b9..f02a2ed653 100644 --- a/pkg-manager/headless/CHANGELOG.md +++ b/pkg-manager/headless/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/headless +## 1010.1.18 + +### Patch Changes + +- @pnpm/build-modules@1007.0.19 +- @pnpm/package-is-installable@1000.0.23 +- @pnpm/deps.graph-builder@1002.3.18 +- @pnpm/lockfile.filtering@1001.0.35 +- @pnpm/package-requester@1011.2.7 +- @pnpm/modules-cleaner@1001.0.39 + ## 1010.1.17 ### Patch Changes diff --git a/pkg-manager/headless/package.json b/pkg-manager/headless/package.json index a82875b9be..7dc26de16f 100644 --- a/pkg-manager/headless/package.json +++ b/pkg-manager/headless/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/headless", - "version": "1010.1.17", + "version": "1010.1.18", "description": "Fast installation using only pnpm-lock.yaml", "keywords": [ "pnpm", diff --git a/pkg-manager/modules-cleaner/CHANGELOG.md b/pkg-manager/modules-cleaner/CHANGELOG.md index 7d604a0e42..3838bfc85a 100644 --- a/pkg-manager/modules-cleaner/CHANGELOG.md +++ b/pkg-manager/modules-cleaner/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/modules-cleaner +## 1001.0.39 + +### Patch Changes + +- @pnpm/lockfile.filtering@1001.0.35 + ## 1001.0.38 ### Patch Changes diff --git a/pkg-manager/modules-cleaner/package.json b/pkg-manager/modules-cleaner/package.json index 6aec507546..73d181439c 100644 --- a/pkg-manager/modules-cleaner/package.json +++ b/pkg-manager/modules-cleaner/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/modules-cleaner", - "version": "1001.0.38", + "version": "1001.0.39", "description": "Exports util functions to clean up node_modules", "keywords": [ "pnpm", diff --git a/pkg-manager/package-requester/CHANGELOG.md b/pkg-manager/package-requester/CHANGELOG.md index 416c4bf535..1f7e5ba36e 100644 --- a/pkg-manager/package-requester/CHANGELOG.md +++ b/pkg-manager/package-requester/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/package-requester +## 1011.2.7 + +### Patch Changes + +- @pnpm/package-is-installable@1000.0.23 + ## 1011.2.6 ### Patch Changes diff --git a/pkg-manager/package-requester/package.json b/pkg-manager/package-requester/package.json index 0c679969b8..6f81591739 100644 --- a/pkg-manager/package-requester/package.json +++ b/pkg-manager/package-requester/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/package-requester", - "version": "1011.2.6", + "version": "1011.2.7", "description": "Concurrent downloader of npm-compatible packages", "keywords": [ "pnpm", diff --git a/pkg-manager/plugin-commands-installation/CHANGELOG.md b/pkg-manager/plugin-commands-installation/CHANGELOG.md index 9a8b998e86..8e06869b71 100644 --- a/pkg-manager/plugin-commands-installation/CHANGELOG.md +++ b/pkg-manager/plugin-commands-installation/CHANGELOG.md @@ -1,5 +1,27 @@ # @pnpm/plugin-commands-installation +## 1004.10.6 + +### Patch Changes + +- Updated dependencies [e7888e5] +- Updated dependencies [46bc7c9] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/cli-meta@1000.0.18 + - @pnpm/plugin-commands-env@1000.0.73 + - @pnpm/plugin-commands-rebuild@1008.0.21 + - @pnpm/workspace.find-packages@1000.0.72 + - @pnpm/deps.status@1003.0.45 + - @pnpm/store-connection-manager@1002.3.26 + - @pnpm/workspace.state@1002.1.13 + - @pnpm/core@1016.4.6 + - @pnpm/filter-workspace-packages@1000.1.13 + - @pnpm/outdated@1001.1.29 + - @pnpm/package-store@1007.1.9 + - @pnpm/config.deps-installer@1000.1.10 + - @pnpm/get-context@1001.2.12 + ## 1004.10.5 ### Patch Changes diff --git a/pkg-manager/plugin-commands-installation/package.json b/pkg-manager/plugin-commands-installation/package.json index 87e9e01167..a2ae9c1507 100644 --- a/pkg-manager/plugin-commands-installation/package.json +++ b/pkg-manager/plugin-commands-installation/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-installation", - "version": "1004.10.5", + "version": "1004.10.6", "description": "Commands for installation", "keywords": [ "pnpm", diff --git a/pnpm/CHANGELOG.md b/pnpm/CHANGELOG.md index e662c3bd67..eb9a3254d6 100644 --- a/pnpm/CHANGELOG.md +++ b/pnpm/CHANGELOG.md @@ -1,5 +1,20 @@ # pnpm +## 10.34.6 + +### Patch Changes + +- e7888e5: `pnpm self-update` now resolves and verifies pnpm through registry, authentication, proxy, and TLS settings from trusted non-project configuration. Project configuration and the default project pnpmfile can no longer redirect the pnpm download or disable engine identity verification. +- 46bc7c9: pnpm no longer tells you to update itself with Corepack or with `pnpm add -g`: + + - The update notification now suggests `pnpm self-update`, or the [standalone install script](https://pnpm.io/installation) when pnpm is running under Corepack. It used to suggest `corepack use pnpm@`, or `pnpm add -g pnpm` / `pnpm add -g @pnpm/exe` when pnpm was not installed by the standalone script — but `pnpm add -g` refuses to install pnpm and points at `pnpm self-update` anyway, and `@pnpm/exe` is not published for pnpm v12 or newer, where the unscoped `pnpm` package is itself the native executable. + - `pnpm self-update` under Corepack now points at the standalone install script too, instead of telling you to update pnpm with Corepack. + +- 46bc7c9: Updated `adm-zip` to v0.6.0, which fixes [a memory-exhaustion vulnerability](https://github.com/advisories/GHSA-xcpc-8h2w-3j85) where a crafted ZIP file could make it allocate 4 GB of memory. `adm-zip` is used to extract the Node.js, Bun, and Deno archives that pnpm downloads on Windows. +- Updated the embedded Node.js release keys to the current canonical `nodejs/release-keys` list. +- Updated the embedded npm registry signing keys to the set currently advertised by npm. +- 702ad5f: Update the embedded Node.js release keys with the new key added to [nodejs/release-keys](https://github.com/nodejs/release-keys) (Stewart X Addison, `655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD`). + ## 10.34.5 ### Patch Changes diff --git a/pnpm/artifacts/exe/package.json b/pnpm/artifacts/exe/package.json index 416b9ff71b..189237c2af 100644 --- a/pnpm/artifacts/exe/package.json +++ b/pnpm/artifacts/exe/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exe", - "version": "10.34.5", + "version": "10.34.6", "description": "Fast, disk space efficient package manager", "keywords": [ "pnpm", diff --git a/pnpm/artifacts/linux-arm64/package.json b/pnpm/artifacts/linux-arm64/package.json index 2e695de61e..7955506be5 100644 --- a/pnpm/artifacts/linux-arm64/package.json +++ b/pnpm/artifacts/linux-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linux-arm64", - "version": "10.34.5", + "version": "10.34.6", "keywords": [ "pnpm", "pnpm10", diff --git a/pnpm/artifacts/linux-x64/package.json b/pnpm/artifacts/linux-x64/package.json index 1c6983d0db..164373a75e 100644 --- a/pnpm/artifacts/linux-x64/package.json +++ b/pnpm/artifacts/linux-x64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linux-x64", - "version": "10.34.5", + "version": "10.34.6", "keywords": [ "pnpm", "pnpm10", diff --git a/pnpm/artifacts/macos-arm64/package.json b/pnpm/artifacts/macos-arm64/package.json index 7aea30aa07..31ceed99cc 100644 --- a/pnpm/artifacts/macos-arm64/package.json +++ b/pnpm/artifacts/macos-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/macos-arm64", - "version": "10.34.5", + "version": "10.34.6", "keywords": [ "pnpm", "pnpm10", diff --git a/pnpm/artifacts/macos-x64/package.json b/pnpm/artifacts/macos-x64/package.json index 762389beb8..70ca2c334b 100644 --- a/pnpm/artifacts/macos-x64/package.json +++ b/pnpm/artifacts/macos-x64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/macos-x64", - "version": "10.34.5", + "version": "10.34.6", "keywords": [ "pnpm", "pnpm10", diff --git a/pnpm/artifacts/win-arm64/package.json b/pnpm/artifacts/win-arm64/package.json index 6dbddcacbd..03112a2628 100644 --- a/pnpm/artifacts/win-arm64/package.json +++ b/pnpm/artifacts/win-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/win-arm64", - "version": "10.34.5", + "version": "10.34.6", "keywords": [ "pnpm", "pnpm10", diff --git a/pnpm/artifacts/win-x64/package.json b/pnpm/artifacts/win-x64/package.json index 5573085e80..dd3c15747a 100644 --- a/pnpm/artifacts/win-x64/package.json +++ b/pnpm/artifacts/win-x64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/win-x64", - "version": "10.34.5", + "version": "10.34.6", "keywords": [ "pnpm", "pnpm10", diff --git a/pnpm/dev/CHANGELOG.md b/pnpm/dev/CHANGELOG.md index 5e1756e1fa..b56c02afcf 100644 --- a/pnpm/dev/CHANGELOG.md +++ b/pnpm/dev/CHANGELOG.md @@ -1,5 +1,11 @@ # pd +## 1000.0.40 + +### Patch Changes + +- @pnpm/workspace.find-packages@1000.0.72 + ## 1000.0.39 ### Patch Changes diff --git a/pnpm/dev/package.json b/pnpm/dev/package.json index e58e17ed42..d8b1521161 100644 --- a/pnpm/dev/package.json +++ b/pnpm/dev/package.json @@ -1,6 +1,6 @@ { "name": "pd", - "version": "1000.0.39", + "version": "1000.0.40", "bin": "pd.js", "private": true, "scripts": { diff --git a/pnpm/package.json b/pnpm/package.json index 156f25a219..70b5cb2776 100644 --- a/pnpm/package.json +++ b/pnpm/package.json @@ -1,6 +1,6 @@ { "name": "pnpm", - "version": "10.34.5", + "version": "10.34.6", "description": "Fast, disk space efficient package manager", "keywords": [ "pnpm", diff --git a/releasing/plugin-commands-deploy/CHANGELOG.md b/releasing/plugin-commands-deploy/CHANGELOG.md index c33e352253..6c21c00b1b 100644 --- a/releasing/plugin-commands-deploy/CHANGELOG.md +++ b/releasing/plugin-commands-deploy/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/plugin-commands-deploy +## 1002.0.47 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/plugin-commands-installation@1004.10.6 + ## 1002.0.46 ### Patch Changes diff --git a/releasing/plugin-commands-deploy/package.json b/releasing/plugin-commands-deploy/package.json index 9d325f0806..f52a0dafbf 100644 --- a/releasing/plugin-commands-deploy/package.json +++ b/releasing/plugin-commands-deploy/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-deploy", - "version": "1002.0.46", + "version": "1002.0.47", "description": "Commands for deploy", "keywords": [ "pnpm", diff --git a/releasing/plugin-commands-publishing/CHANGELOG.md b/releasing/plugin-commands-publishing/CHANGELOG.md index 235f9ce381..2d23a96ef4 100644 --- a/releasing/plugin-commands-publishing/CHANGELOG.md +++ b/releasing/plugin-commands-publishing/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/plugin-commands-publishing +## 1000.3.23 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/plugin-commands-env@1000.0.73 + - @pnpm/client@1001.1.31 + ## 1000.3.22 ### Patch Changes diff --git a/releasing/plugin-commands-publishing/package.json b/releasing/plugin-commands-publishing/package.json index 4d7d984973..435ed246b2 100644 --- a/releasing/plugin-commands-publishing/package.json +++ b/releasing/plugin-commands-publishing/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-publishing", - "version": "1000.3.22", + "version": "1000.3.23", "description": "The pack and publish commands of pnpm", "keywords": [ "pnpm", diff --git a/resolving/bun-resolver/CHANGELOG.md b/resolving/bun-resolver/CHANGELOG.md index 7725a641b8..d895e8dc14 100644 --- a/resolving/bun-resolver/CHANGELOG.md +++ b/resolving/bun-resolver/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/resolving.bun-resolver +## 1005.0.18 + +### Patch Changes + +- Updated dependencies [46bc7c9] +- Updated dependencies +- Updated dependencies [702ad5f] + - @pnpm/fetching.binary-fetcher@1005.0.7 + - @pnpm/crypto.shasums-file@1001.0.7 + - @pnpm/node.fetcher@1001.0.34 + ## 1005.0.17 ### Patch Changes diff --git a/resolving/bun-resolver/package.json b/resolving/bun-resolver/package.json index 6cebaae291..5b9e44e275 100644 --- a/resolving/bun-resolver/package.json +++ b/resolving/bun-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.bun-resolver", - "version": "1005.0.17", + "version": "1005.0.18", "description": "Resolves the Bun runtime", "keywords": [ "pnpm", diff --git a/resolving/default-resolver/CHANGELOG.md b/resolving/default-resolver/CHANGELOG.md index 09fa3092df..e734cf4574 100644 --- a/resolving/default-resolver/CHANGELOG.md +++ b/resolving/default-resolver/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/default-resolver +## 1002.3.15 + +### Patch Changes + +- @pnpm/node.resolver@1001.0.30 +- @pnpm/resolving.bun-resolver@1005.0.18 +- @pnpm/resolving.deno-resolver@1005.0.18 + ## 1002.3.14 ### Patch Changes diff --git a/resolving/default-resolver/package.json b/resolving/default-resolver/package.json index e31948f54e..7f09ea095d 100644 --- a/resolving/default-resolver/package.json +++ b/resolving/default-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/default-resolver", - "version": "1002.3.14", + "version": "1002.3.15", "description": "pnpm's default package resolver", "keywords": [ "pnpm", diff --git a/resolving/deno-resolver/CHANGELOG.md b/resolving/deno-resolver/CHANGELOG.md index a6fbc82a40..78abe38ae1 100644 --- a/resolving/deno-resolver/CHANGELOG.md +++ b/resolving/deno-resolver/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/resolving.deno-resolver +## 1005.0.18 + +### Patch Changes + +- Updated dependencies [46bc7c9] +- Updated dependencies +- Updated dependencies [702ad5f] + - @pnpm/fetching.binary-fetcher@1005.0.7 + - @pnpm/crypto.shasums-file@1001.0.7 + - @pnpm/node.fetcher@1001.0.34 + ## 1005.0.17 ### Patch Changes diff --git a/resolving/deno-resolver/package.json b/resolving/deno-resolver/package.json index 78d63c3eef..144c63ca15 100644 --- a/resolving/deno-resolver/package.json +++ b/resolving/deno-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.deno-resolver", - "version": "1005.0.17", + "version": "1005.0.18", "description": "Resolves the Deno runtime", "keywords": [ "pnpm", diff --git a/reviewing/license-scanner/CHANGELOG.md b/reviewing/license-scanner/CHANGELOG.md index 81d330cba8..fd65d58781 100644 --- a/reviewing/license-scanner/CHANGELOG.md +++ b/reviewing/license-scanner/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/license-scanner +## 1001.0.44 + +### Patch Changes + +- @pnpm/package-is-installable@1000.0.23 + ## 1001.0.43 ### Patch Changes diff --git a/reviewing/license-scanner/package.json b/reviewing/license-scanner/package.json index 107578336d..58bf68670b 100644 --- a/reviewing/license-scanner/package.json +++ b/reviewing/license-scanner/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/license-scanner", - "version": "1001.0.43", + "version": "1001.0.44", "description": "Check for licenses packages", "keywords": [ "pnpm", diff --git a/reviewing/outdated/CHANGELOG.md b/reviewing/outdated/CHANGELOG.md index a8249f4282..80139999e2 100644 --- a/reviewing/outdated/CHANGELOG.md +++ b/reviewing/outdated/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/outdated +## 1001.1.29 + +### Patch Changes + +- @pnpm/client@1001.1.31 + ## 1001.1.28 ### Patch Changes diff --git a/reviewing/outdated/package.json b/reviewing/outdated/package.json index cbc11b0817..07573210a5 100644 --- a/reviewing/outdated/package.json +++ b/reviewing/outdated/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/outdated", - "version": "1001.1.28", + "version": "1001.1.29", "description": "Check for outdated packages", "keywords": [ "pnpm", diff --git a/reviewing/plugin-commands-licenses/CHANGELOG.md b/reviewing/plugin-commands-licenses/CHANGELOG.md index 50335b5706..94df5b82a5 100644 --- a/reviewing/plugin-commands-licenses/CHANGELOG.md +++ b/reviewing/plugin-commands-licenses/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/plugin-commands-licenses +## 1000.0.75 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/license-scanner@1001.0.44 + ## 1000.0.74 ### Patch Changes diff --git a/reviewing/plugin-commands-licenses/package.json b/reviewing/plugin-commands-licenses/package.json index 844c0407a3..b09932cbf1 100644 --- a/reviewing/plugin-commands-licenses/package.json +++ b/reviewing/plugin-commands-licenses/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-licenses", - "version": "1000.0.74", + "version": "1000.0.75", "description": "The licenses command of pnpm", "keywords": [ "pnpm", diff --git a/reviewing/plugin-commands-listing/CHANGELOG.md b/reviewing/plugin-commands-listing/CHANGELOG.md index 60a942ad2a..74adcab353 100644 --- a/reviewing/plugin-commands-listing/CHANGELOG.md +++ b/reviewing/plugin-commands-listing/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/plugin-commands-listing +## 1000.3.13 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + ## 1000.3.12 ### Patch Changes diff --git a/reviewing/plugin-commands-listing/package.json b/reviewing/plugin-commands-listing/package.json index 9dbc8e578e..f33dbf160d 100644 --- a/reviewing/plugin-commands-listing/package.json +++ b/reviewing/plugin-commands-listing/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-listing", - "version": "1000.3.12", + "version": "1000.3.13", "description": "The list and why commands of pnpm", "keywords": [ "pnpm", diff --git a/reviewing/plugin-commands-outdated/CHANGELOG.md b/reviewing/plugin-commands-outdated/CHANGELOG.md index 212e32ccba..25293cb8e2 100644 --- a/reviewing/plugin-commands-outdated/CHANGELOG.md +++ b/reviewing/plugin-commands-outdated/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/plugin-commands-outdated +## 1000.0.76 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/default-resolver@1002.3.15 + - @pnpm/outdated@1001.1.29 + ## 1000.0.75 ### Patch Changes diff --git a/reviewing/plugin-commands-outdated/package.json b/reviewing/plugin-commands-outdated/package.json index 22fdc590c8..9cb6f0e50c 100644 --- a/reviewing/plugin-commands-outdated/package.json +++ b/reviewing/plugin-commands-outdated/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-outdated", - "version": "1000.0.75", + "version": "1000.0.76", "description": "The outdated command of pnpm", "keywords": [ "pnpm", diff --git a/store/package-store/CHANGELOG.md b/store/package-store/CHANGELOG.md index 64e943b74d..cf803e9876 100644 --- a/store/package-store/CHANGELOG.md +++ b/store/package-store/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/package-store +## 1007.1.9 + +### Patch Changes + +- @pnpm/package-requester@1011.2.7 + ## 1007.1.8 ### Patch Changes diff --git a/store/package-store/package.json b/store/package-store/package.json index 58ad7c25d6..a8af69a211 100644 --- a/store/package-store/package.json +++ b/store/package-store/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/package-store", - "version": "1007.1.8", + "version": "1007.1.9", "description": "A storage for packages", "keywords": [ "pnpm", diff --git a/store/plugin-commands-server/CHANGELOG.md b/store/plugin-commands-server/CHANGELOG.md index d46b760bc0..354af24098 100644 --- a/store/plugin-commands-server/CHANGELOG.md +++ b/store/plugin-commands-server/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/plugin-commands-server +## 1000.0.73 + +### Patch Changes + +- Updated dependencies [e7888e5] +- Updated dependencies [46bc7c9] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/cli-meta@1000.0.18 + - @pnpm/store-connection-manager@1002.3.26 + - @pnpm/server@1001.0.22 + ## 1000.0.72 ### Patch Changes diff --git a/store/plugin-commands-server/package.json b/store/plugin-commands-server/package.json index 4541e070e0..946d9213af 100644 --- a/store/plugin-commands-server/package.json +++ b/store/plugin-commands-server/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-server", - "version": "1000.0.72", + "version": "1000.0.73", "description": "Commands for controlling the store server", "keywords": [ "pnpm", diff --git a/store/plugin-commands-store-inspecting/CHANGELOG.md b/store/plugin-commands-store-inspecting/CHANGELOG.md index 363bd646ad..1353f3faca 100644 --- a/store/plugin-commands-store-inspecting/CHANGELOG.md +++ b/store/plugin-commands-store-inspecting/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/plugin-commands-store-inspecting +## 1000.0.68 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/config@1004.11.7 + - @pnpm/client@1001.1.31 + ## 1000.0.67 ### Patch Changes diff --git a/store/plugin-commands-store-inspecting/package.json b/store/plugin-commands-store-inspecting/package.json index c0faec2751..19441ab75c 100644 --- a/store/plugin-commands-store-inspecting/package.json +++ b/store/plugin-commands-store-inspecting/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-store-inspecting", - "version": "1000.0.67", + "version": "1000.0.68", "description": "The inspecting store commands of pnpm", "keywords": [ "pnpm", diff --git a/store/plugin-commands-store/CHANGELOG.md b/store/plugin-commands-store/CHANGELOG.md index c41f0b5a97..c56fbdcd0b 100644 --- a/store/plugin-commands-store/CHANGELOG.md +++ b/store/plugin-commands-store/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/plugin-commands-store +## 1000.0.75 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/store-connection-manager@1002.3.26 + - @pnpm/get-context@1001.2.12 + ## 1000.0.74 ### Patch Changes diff --git a/store/plugin-commands-store/package.json b/store/plugin-commands-store/package.json index e744f01199..50f91ab211 100644 --- a/store/plugin-commands-store/package.json +++ b/store/plugin-commands-store/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/plugin-commands-store", - "version": "1000.0.74", + "version": "1000.0.75", "description": "Commands for controlling the store", "keywords": [ "pnpm", diff --git a/store/store-connection-manager/CHANGELOG.md b/store/store-connection-manager/CHANGELOG.md index 850609c405..0f7b6e2003 100644 --- a/store/store-connection-manager/CHANGELOG.md +++ b/store/store-connection-manager/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/store-connection-manager +## 1002.3.26 + +### Patch Changes + +- Updated dependencies [e7888e5] +- Updated dependencies [46bc7c9] + - @pnpm/config@1004.11.7 + - @pnpm/cli-meta@1000.0.18 + - @pnpm/client@1001.1.31 + - @pnpm/package-store@1007.1.9 + - @pnpm/server@1001.0.22 + ## 1002.3.25 ### Patch Changes diff --git a/store/store-connection-manager/package.json b/store/store-connection-manager/package.json index ad704f4b98..84307a7c78 100644 --- a/store/store-connection-manager/package.json +++ b/store/store-connection-manager/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store-connection-manager", - "version": "1002.3.25", + "version": "1002.3.26", "description": "Create a direct pnpm store controller or connect to a running store server", "keywords": [ "pnpm", diff --git a/testing/temp-store/CHANGELOG.md b/testing/temp-store/CHANGELOG.md index f5207e0e28..72c0b8b338 100644 --- a/testing/temp-store/CHANGELOG.md +++ b/testing/temp-store/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/testing.temp-store +## 1000.0.50 + +### Patch Changes + +- @pnpm/client@1001.1.31 +- @pnpm/package-store@1007.1.9 + ## 1000.0.49 ### Patch Changes diff --git a/testing/temp-store/package.json b/testing/temp-store/package.json index 18d48fda97..f295391532 100644 --- a/testing/temp-store/package.json +++ b/testing/temp-store/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/testing.temp-store", - "version": "1000.0.49", + "version": "1000.0.50", "description": "A temporary store for testing purposes", "keywords": [ "pnpm", diff --git a/tools/plugin-commands-self-updater/CHANGELOG.md b/tools/plugin-commands-self-updater/CHANGELOG.md index 3bfeeae928..0f1ad3f2e3 100644 --- a/tools/plugin-commands-self-updater/CHANGELOG.md +++ b/tools/plugin-commands-self-updater/CHANGELOG.md @@ -1,5 +1,23 @@ # @pnpm/tools.plugin-commands-self-updater +## 1000.1.63 + +### Patch Changes + +- e7888e5: `pnpm self-update` now resolves and verifies pnpm through registry, authentication, proxy, and TLS settings from trusted non-project configuration. Project configuration and the default project pnpmfile can no longer redirect the pnpm download or disable engine identity verification. +- 46bc7c9: pnpm no longer tells you to update itself with Corepack or with `pnpm add -g`: + + - The update notification now suggests `pnpm self-update`, or the [standalone install script](https://pnpm.io/installation) when pnpm is running under Corepack. It used to suggest `corepack use pnpm@`, or `pnpm add -g pnpm` / `pnpm add -g @pnpm/exe` when pnpm was not installed by the standalone script — but `pnpm add -g` refuses to install pnpm and points at `pnpm self-update` anyway, and `@pnpm/exe` is not published for pnpm v12 or newer, where the unscoped `pnpm` package is itself the native executable. + - `pnpm self-update` under Corepack now points at the standalone install script too, instead of telling you to update pnpm with Corepack. + +- Updated the embedded npm registry signing keys to the set currently advertised by npm. +- Updated dependencies [e7888e5] +- Updated dependencies [46bc7c9] + - @pnpm/cli-utils@1001.3.17 + - @pnpm/config@1004.11.7 + - @pnpm/cli-meta@1000.0.18 + - @pnpm/client@1001.1.31 + ## 1000.1.62 ### Patch Changes diff --git a/tools/plugin-commands-self-updater/package.json b/tools/plugin-commands-self-updater/package.json index 81561c2ab2..e7e50a3a05 100644 --- a/tools/plugin-commands-self-updater/package.json +++ b/tools/plugin-commands-self-updater/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/tools.plugin-commands-self-updater", - "version": "1000.1.62", + "version": "1000.1.63", "description": "A command for updating pnpm itself", "keywords": [ "pnpm", diff --git a/tools/plugin-commands-self-updater/src/npmSigningKeys.ts b/tools/plugin-commands-self-updater/src/npmSigningKeys.ts index c3a645e0e3..9a2f8632e3 100644 --- a/tools/plugin-commands-self-updater/src/npmSigningKeys.ts +++ b/tools/plugin-commands-self-updater/src/npmSigningKeys.ts @@ -2,7 +2,7 @@ // GENERATED — npm's public registry signing keys, mirrored from // https://registry.npmjs.org/-/npm/v1/keys // -// Refresh with: node tools/plugin-commands-self-updater/scripts/update-npm-signing-keys.mjs --update +// Refresh with: node deps/security/signatures/scripts/update-npm-signing-keys.mjs --update // The release workflow runs `--check` and fails if these drift from npm, so a // rotated key cannot silently break (or weaken) signature verification. export const NPM_SIGNING_KEYS = [ diff --git a/workspace/filter-packages-from-dir/CHANGELOG.md b/workspace/filter-packages-from-dir/CHANGELOG.md index 234d4b6f81..8013207e6f 100644 --- a/workspace/filter-packages-from-dir/CHANGELOG.md +++ b/workspace/filter-packages-from-dir/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/workspace.filter-packages-from-dir +## 1000.0.72 + +### Patch Changes + +- @pnpm/workspace.find-packages@1000.0.72 +- @pnpm/filter-workspace-packages@1000.1.13 + ## 1000.0.71 ### Patch Changes diff --git a/workspace/filter-packages-from-dir/package.json b/workspace/filter-packages-from-dir/package.json index 73c3fefddf..f83dd4cdf0 100644 --- a/workspace/filter-packages-from-dir/package.json +++ b/workspace/filter-packages-from-dir/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.filter-packages-from-dir", - "version": "1000.0.71", + "version": "1000.0.72", "description": "Filters packages in a directory", "keywords": [ "pnpm", diff --git a/workspace/filter-workspace-packages/CHANGELOG.md b/workspace/filter-workspace-packages/CHANGELOG.md index ae5fff6a39..5c0d3e461c 100644 --- a/workspace/filter-workspace-packages/CHANGELOG.md +++ b/workspace/filter-workspace-packages/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/filter-workspace-packages +## 1000.1.13 + +### Patch Changes + +- @pnpm/workspace.find-packages@1000.0.72 + ## 1000.1.12 ### Patch Changes diff --git a/workspace/filter-workspace-packages/package.json b/workspace/filter-workspace-packages/package.json index 8da3fc9c21..94dfa13dec 100644 --- a/workspace/filter-workspace-packages/package.json +++ b/workspace/filter-workspace-packages/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/filter-workspace-packages", - "version": "1000.1.12", + "version": "1000.1.13", "description": "Filters packages in a workspace", "keywords": [ "pnpm", diff --git a/workspace/find-packages/CHANGELOG.md b/workspace/find-packages/CHANGELOG.md index 6024a7bfe0..1237207fac 100644 --- a/workspace/find-packages/CHANGELOG.md +++ b/workspace/find-packages/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/find-workspace-packages +## 1000.0.72 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/cli-utils@1001.3.17 + ## 1000.0.71 ### Patch Changes diff --git a/workspace/find-packages/package.json b/workspace/find-packages/package.json index a655d364ed..44c13a8478 100644 --- a/workspace/find-packages/package.json +++ b/workspace/find-packages/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.find-packages", - "version": "1000.0.71", + "version": "1000.0.72", "description": "Finds packages inside a workspace", "keywords": [ "pnpm", diff --git a/workspace/injected-deps-syncer/CHANGELOG.md b/workspace/injected-deps-syncer/CHANGELOG.md index 9e146e0c33..883a6993da 100644 --- a/workspace/injected-deps-syncer/CHANGELOG.md +++ b/workspace/injected-deps-syncer/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/workspace.injected-deps-syncer +## 1000.0.46 + +### Patch Changes + +- @pnpm/workspace.find-packages@1000.0.72 + ## 1000.0.45 ### Patch Changes diff --git a/workspace/injected-deps-syncer/package.json b/workspace/injected-deps-syncer/package.json index 12a02a6a62..de23bc9a98 100644 --- a/workspace/injected-deps-syncer/package.json +++ b/workspace/injected-deps-syncer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.injected-deps-syncer", - "version": "1000.0.45", + "version": "1000.0.46", "description": "Update all injected replica of a workspace package", "keywords": [ "pnpm", diff --git a/workspace/state/CHANGELOG.md b/workspace/state/CHANGELOG.md index d007d799f2..2afbf54c76 100644 --- a/workspace/state/CHANGELOG.md +++ b/workspace/state/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/workspace.state +## 1002.1.13 + +### Patch Changes + +- Updated dependencies [e7888e5] + - @pnpm/config@1004.11.7 + ## 1002.1.12 ### Patch Changes diff --git a/workspace/state/package.json b/workspace/state/package.json index fe285de649..139f2d44a3 100644 --- a/workspace/state/package.json +++ b/workspace/state/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.state", - "version": "1002.1.12", + "version": "1002.1.13", "description": "Track the list of actual paths of workspace packages in a cache", "keywords": [ "pnpm",