From f2a4d2caef2c8ee5338232196559bfcc7d7007d1 Mon Sep 17 00:00:00 2001 From: Zoltan Kochan Date: Sun, 24 May 2026 02:23:07 +0200 Subject: [PATCH] chore(release): 11.3.0 (#11894) --- .changeset-released/new-release.txt | 10 ++++++ ...all-back-to-alias-when-manifest-missing.md | 6 ---- .changeset/fix-cyclic-peer-determinism.md | 6 ---- ...ix-unaliased-deps-dropped-from-manifest.md | 6 ---- .changeset/native-pkg-command.md | 8 ----- .changeset/native-repo-command.md | 6 ---- .changeset/native-set-script-command.md | 6 ---- ...prune-env-lockfile-on-config-dep-update.md | 6 ---- .../skip-manifest-obfuscation-opt-in.md | 8 ----- .changeset/stage-publish.md | 6 ---- .../trust-lockfile-and-verifier-memory.md | 11 ------- .meta-updater/CHANGELOG.md | 6 ++++ .meta-updater/package.json | 2 +- __utils__/scripts/CHANGELOG.md | 6 ++++ __utils__/scripts/package.json | 2 +- agent/server/CHANGELOG.md | 9 ++++++ agent/server/package.json | 2 +- auth/commands/CHANGELOG.md | 9 ++++++ auth/commands/package.json | 2 +- bins/linker/CHANGELOG.md | 7 ++++ bins/linker/package.json | 2 +- building/after-install/CHANGELOG.md | 11 +++++++ building/after-install/package.json | 2 +- building/commands/CHANGELOG.md | 12 +++++++ building/commands/package.json | 2 +- building/during-install/CHANGELOG.md | 10 ++++++ building/during-install/package.json | 2 +- cache/api/CHANGELOG.md | 9 ++++++ cache/api/package.json | 2 +- cache/commands/CHANGELOG.md | 10 ++++++ cache/commands/package.json | 2 +- cli/commands/CHANGELOG.md | 10 ++++++ cli/commands/package.json | 2 +- cli/default-reporter/CHANGELOG.md | 8 +++++ cli/default-reporter/package.json | 2 +- cli/utils/CHANGELOG.md | 7 ++++ cli/utils/package.json | 2 +- config/commands/CHANGELOG.md | 12 +++++++ config/commands/package.json | 2 +- config/reader/CHANGELOG.md | 14 ++++++++ config/reader/package.json | 2 +- deps/compliance/commands/CHANGELOG.md | 14 ++++++++ deps/compliance/commands/package.json | 2 +- deps/compliance/license-scanner/CHANGELOG.md | 6 ++++ deps/compliance/license-scanner/package.json | 2 +- deps/compliance/sbom/CHANGELOG.md | 6 ++++ deps/compliance/sbom/package.json | 2 +- deps/inspection/commands/CHANGELOG.md | 18 +++++++++++ deps/inspection/commands/package.json | 2 +- deps/inspection/list/CHANGELOG.md | 7 ++++ deps/inspection/list/package.json | 2 +- deps/inspection/outdated/CHANGELOG.md | 8 +++++ deps/inspection/outdated/package.json | 2 +- deps/status/CHANGELOG.md | 10 ++++++ deps/status/package.json | 2 +- engine/pm/commands/CHANGELOG.md | 20 ++++++++++++ engine/pm/commands/package.json | 2 +- engine/runtime/bun-resolver/CHANGELOG.md | 7 ++++ engine/runtime/bun-resolver/package.json | 2 +- engine/runtime/commands/CHANGELOG.md | 10 ++++++ engine/runtime/commands/package.json | 2 +- engine/runtime/deno-resolver/CHANGELOG.md | 7 ++++ engine/runtime/deno-resolver/package.json | 2 +- engine/runtime/node-resolver/CHANGELOG.md | 8 +++++ engine/runtime/node-resolver/package.json | 2 +- exec/commands/CHANGELOG.md | 19 +++++++++++ exec/commands/package.json | 2 +- exec/lifecycle/CHANGELOG.md | 7 ++++ exec/lifecycle/package.json | 2 +- exec/prepare-package/CHANGELOG.md | 6 ++++ exec/prepare-package/package.json | 2 +- fetching/directory-fetcher/CHANGELOG.md | 7 ++++ fetching/directory-fetcher/package.json | 2 +- fetching/git-fetcher/CHANGELOG.md | 6 ++++ fetching/git-fetcher/package.json | 2 +- fetching/tarball-fetcher/CHANGELOG.md | 6 ++++ fetching/tarball-fetcher/package.json | 2 +- global/commands/CHANGELOG.md | 13 ++++++++ global/commands/package.json | 2 +- installing/client/CHANGELOG.md | 12 +++++++ installing/client/package.json | 2 +- installing/commands/CHANGELOG.md | 32 +++++++++++++++++++ installing/commands/package.json | 2 +- installing/deps-installer/CHANGELOG.md | 23 +++++++++++++ installing/deps-installer/package.json | 2 +- installing/deps-resolver/CHANGELOG.md | 10 ++++++ installing/deps-resolver/package.json | 2 +- installing/deps-restorer/CHANGELOG.md | 12 +++++++ installing/deps-restorer/package.json | 2 +- installing/env-installer/CHANGELOG.md | 12 +++++++ installing/env-installer/package.json | 2 +- installing/linking/hoist/CHANGELOG.md | 6 ++++ installing/linking/hoist/package.json | 2 +- lockfile/make-dedicated-lockfile/CHANGELOG.md | 9 ++++++ lockfile/make-dedicated-lockfile/package.json | 2 +- modules-mounter/daemon/CHANGELOG.md | 8 +++++ modules-mounter/daemon/package.json | 2 +- object/property-path/CHANGELOG.md | 6 ++++ object/property-path/package.json | 2 +- patching/commands/CHANGELOG.md | 14 ++++++++ patching/commands/package.json | 2 +- pkg-manifest/commands/CHANGELOG.md | 17 ++++++++++ pkg-manifest/commands/package.json | 29 +++++++++++++---- pnpm/CHANGELOG.md | 20 ++++++++++++ pnpm/artifacts/darwin-arm64/package.json | 2 +- pnpm/artifacts/exe/package.json | 2 +- pnpm/artifacts/linux-arm64-musl/package.json | 2 +- pnpm/artifacts/linux-arm64/package.json | 2 +- pnpm/artifacts/linux-x64-musl/package.json | 2 +- pnpm/artifacts/linux-x64/package.json | 2 +- pnpm/artifacts/win32-arm64/package.json | 2 +- pnpm/artifacts/win32-x64/package.json | 2 +- pnpm/dev/CHANGELOG.md | 6 ++++ pnpm/dev/package.json | 2 +- pnpm/package.json | 2 +- registry-access/commands/CHANGELOG.md | 9 ++++++ registry-access/commands/package.json | 2 +- releasing/commands/CHANGELOG.md | 22 +++++++++++++ releasing/commands/package.json | 2 +- releasing/exportable-manifest/CHANGELOG.md | 11 +++++++ releasing/exportable-manifest/package.json | 2 +- resolving/default-resolver/CHANGELOG.md | 11 +++++++ resolving/default-resolver/package.json | 2 +- resolving/local-resolver/CHANGELOG.md | 7 ++++ resolving/local-resolver/package.json | 2 +- resolving/npm-resolver/CHANGELOG.md | 8 +++++ resolving/npm-resolver/package.json | 2 +- store/commands/CHANGELOG.md | 11 +++++++ store/commands/package.json | 2 +- store/connection-manager/CHANGELOG.md | 10 ++++++ store/connection-manager/package.json | 2 +- store/pkg-finder/CHANGELOG.md | 6 ++++ store/pkg-finder/package.json | 2 +- testing/temp-store/CHANGELOG.md | 7 ++++ testing/temp-store/package.json | 2 +- workspace/commands/CHANGELOG.md | 9 ++++++ workspace/commands/package.json | 2 +- workspace/injected-deps-syncer/CHANGELOG.md | 8 +++++ workspace/injected-deps-syncer/package.json | 2 +- .../project-manifest-reader/CHANGELOG.md | 6 ++++ .../project-manifest-reader/package.json | 2 +- workspace/projects-filter/CHANGELOG.md | 7 ++++ workspace/projects-filter/package.json | 2 +- workspace/projects-graph/CHANGELOG.md | 7 ++++ workspace/projects-graph/package.json | 2 +- workspace/projects-reader/CHANGELOG.md | 8 +++++ workspace/projects-reader/package.json | 2 +- workspace/state/CHANGELOG.md | 8 +++++ workspace/state/package.json | 2 +- 149 files changed, 771 insertions(+), 148 deletions(-) create mode 100644 .changeset-released/new-release.txt delete mode 100644 .changeset/dlx-fall-back-to-alias-when-manifest-missing.md delete mode 100644 .changeset/fix-cyclic-peer-determinism.md delete mode 100644 .changeset/fix-unaliased-deps-dropped-from-manifest.md delete mode 100644 .changeset/native-pkg-command.md delete mode 100644 .changeset/native-repo-command.md delete mode 100644 .changeset/native-set-script-command.md delete mode 100644 .changeset/prune-env-lockfile-on-config-dep-update.md delete mode 100644 .changeset/skip-manifest-obfuscation-opt-in.md delete mode 100644 .changeset/stage-publish.md delete mode 100644 .changeset/trust-lockfile-and-verifier-memory.md create mode 100644 pkg-manifest/commands/CHANGELOG.md diff --git a/.changeset-released/new-release.txt b/.changeset-released/new-release.txt new file mode 100644 index 0000000000..4fe1ff9cf1 --- /dev/null +++ b/.changeset-released/new-release.txt @@ -0,0 +1,10 @@ +dlx-fall-back-to-alias-when-manifest-missing +fix-cyclic-peer-determinism +fix-unaliased-deps-dropped-from-manifest +native-pkg-command +native-repo-command +native-set-script-command +prune-env-lockfile-on-config-dep-update +skip-manifest-obfuscation-opt-in +stage-publish +trust-lockfile-and-verifier-memory diff --git a/.changeset/dlx-fall-back-to-alias-when-manifest-missing.md b/.changeset/dlx-fall-back-to-alias-when-manifest-missing.md deleted file mode 100644 index bfd1965263..0000000000 --- a/.changeset/dlx-fall-back-to-alias-when-manifest-missing.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/exec.commands": patch -pnpm: patch ---- - -Fixed `pnpm dlx` failing with `ERR_PNPM_NO_IMPORTER_MANIFEST_FOUND` when the installed package's CAS slot is missing its `package.json`. Observed in the wild for `pnpm dlx node@runtime:` when the GVS slot was populated without the synthesized manifest runtime archives need (they don't ship a `package.json` of their own, so the synthesized one is the only way it gets there; an existing slot from an earlier code path that skipped the synthesis stays incomplete). The bin link itself is wired up from the resolution and remains valid, so `dlx` now falls back to the scopeless package name when the slot's manifest is unreadable — for single-bin packages (the dlx common case, including every `runtime:` spec) this matches what `manifest.bin` would have named. Multi-bin packages already require `--package= ` to disambiguate and don't enter this code path. diff --git a/.changeset/fix-cyclic-peer-determinism.md b/.changeset/fix-cyclic-peer-determinism.md deleted file mode 100644 index 76639f7621..0000000000 --- a/.changeset/fix-cyclic-peer-determinism.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/installing.deps-resolver": patch -pnpm: patch ---- - -Fixed non-determinism in `pnpm dedupe` and `pnpm install` when a dependency graph contains packages with transitive peer dependencies on each other (e.g. `@aws-sdk/client-sts` and `@aws-sdk/client-sso-oidc`) and `auto-install-peers` is enabled. The lockfile no longer flips between two equally-valid forms across consecutive runs. The root cause was that `resolveDependencies` pushed onto its `pkgAddresses` / `postponedResolutionsQueue` arrays from inside `Promise.all`-spawned callbacks, so completion-order timing leaked into the array order and downstream cyclic-peer suffix assignment. Fixes [#8155](https://github.com/pnpm/pnpm/issues/8155). diff --git a/.changeset/fix-unaliased-deps-dropped-from-manifest.md b/.changeset/fix-unaliased-deps-dropped-from-manifest.md deleted file mode 100644 index 155307ee4b..0000000000 --- a/.changeset/fix-unaliased-deps-dropped-from-manifest.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/installing.deps-resolver": patch -"pnpm": patch ---- - -Fixed a regression introduced by [#11711](https://github.com/pnpm/pnpm/pull/11711) where `pnpm add ` (and any other wanted-dependency whose alias can't be parsed from the user-supplied spec, e.g. tarball URLs or `pnpm/test-git-fetch#sha`) was silently dropped from the manifest update and from `pendingBuilds`. The alias-keyed lookup added in that PR couldn't find a `wantedDependency` whose `alias` was `undefined` at parse time but resolved to a package name only after fetching, so the entry never made it into `specsToUpsert`. Restored the original index-based pairing between `directDependencies` and `wantedDependencies`; the catalog-protocol preservation that PR was originally fixing is unaffected because it's driven by `rdd.catalogLookup.userSpecifiedBareSpecifier`, not by the lookup. Fixes the three `rebuilds dependencies` / `rebuilds specific dependencies` / `rebuild with pending option` failures in `building/commands/test/build/index.ts`. diff --git a/.changeset/native-pkg-command.md b/.changeset/native-pkg-command.md deleted file mode 100644 index 968d863a20..0000000000 --- a/.changeset/native-pkg-command.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@pnpm/object.property-path": minor -"@pnpm/pkg-manifest.commands": minor -"@pnpm/workspace.project-manifest-reader": patch -"pnpm": minor ---- - -Implement `pnpm pkg` command natively, following `npm pkg` standards. diff --git a/.changeset/native-repo-command.md b/.changeset/native-repo-command.md deleted file mode 100644 index a660e82b25..0000000000 --- a/.changeset/native-repo-command.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/deps.inspection.commands": minor -"pnpm": minor ---- - -Implement `pnpm repo` command natively, following `npm repo` standards. diff --git a/.changeset/native-set-script-command.md b/.changeset/native-set-script-command.md deleted file mode 100644 index a89833bee4..0000000000 --- a/.changeset/native-set-script-command.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/pkg-manifest.commands": minor -"pnpm": minor ---- - -Implements `pnpm set-script` (alias `ss`) natively. Adds or updates an entry in the `scripts` field of the project manifest, supporting `package.json`, `package.json5`, and `package.yaml` formats. diff --git a/.changeset/prune-env-lockfile-on-config-dep-update.md b/.changeset/prune-env-lockfile-on-config-dep-update.md deleted file mode 100644 index 5044629b5f..0000000000 --- a/.changeset/prune-env-lockfile-on-config-dep-update.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/installing.env-installer": patch -"pnpm": patch ---- - -Fixed `pnpm add --config` leaving orphan entries in `pnpm-lock.env.yaml` (the optional subdependencies of the previously resolved version of the updated config dependency). diff --git a/.changeset/skip-manifest-obfuscation-opt-in.md b/.changeset/skip-manifest-obfuscation-opt-in.md deleted file mode 100644 index 8086819734..0000000000 --- a/.changeset/skip-manifest-obfuscation-opt-in.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@pnpm/releasing.commands": minor -"@pnpm/releasing.exportable-manifest": minor -"@pnpm/config.reader": minor -"pnpm": minor ---- - -Add a `skip-manifest-obfuscation` option for `pnpm pack` and `pnpm publish`. When enabled, the original `packageManager` field and publish lifecycle scripts are kept in the packed/published manifest instead of being stripped. The pnpm-specific `pnpm` field continues to be omitted. diff --git a/.changeset/stage-publish.md b/.changeset/stage-publish.md deleted file mode 100644 index bb8ec62945..0000000000 --- a/.changeset/stage-publish.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@pnpm/releasing.commands": minor -"pnpm": minor ---- - -Added `pnpm stage` with `publish`, `list`, `view`, `approve`, `reject`, and `download` subcommands for npm staged publishing. diff --git a/.changeset/trust-lockfile-and-verifier-memory.md b/.changeset/trust-lockfile-and-verifier-memory.md deleted file mode 100644 index cb044210c9..0000000000 --- a/.changeset/trust-lockfile-and-verifier-memory.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -"@pnpm/config": minor -"@pnpm/installing.deps-installer": minor -"@pnpm/installing.commands": minor -"@pnpm/resolving.npm-resolver": patch -"pnpm": minor ---- - -Added a new setting `trustLockfile`. When `true`, `pnpm install` skips the supply-chain verification pass that re-applies `minimumReleaseAge` / `trustPolicy='no-downgrade'` to every entry in the loaded lockfile. The install treats the lockfile as already-trusted — useful for closed-source projects where every commit comes from a trusted author, or for CI runs against an already-verified lockfile. Defaults to `false`; verification stays on by default. Set in `pnpm-workspace.yaml`. - -Also cut the memory footprint of the verification pass itself: the per-(registry, name) trust-meta cache previously retained the full packument — dependency graphs, scripts, README, and per-version manifests — for the entire install. On large workspaces (`~4k` lockfile entries with `minimumReleaseAge` + `trustPolicy: no-downgrade` enabled) this could OOM CI runners with a 2GB heap cap. The cache now stores only the fields the trust check actually reads (`time`, per-version `_npmUser.trustedPublisher`, `dist.attestations.provenance`). The abbreviated-metadata cache is similarly projected to just the package-level `modified` field and the set of currently-listed version names. Fixes [#11860](https://github.com/pnpm/pnpm/issues/11860). diff --git a/.meta-updater/CHANGELOG.md b/.meta-updater/CHANGELOG.md index 7ed15feb68..5679532fac 100644 --- a/.meta-updater/CHANGELOG.md +++ b/.meta-updater/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm-private/updater +## 1100.0.14 + +### Patch Changes + +- @pnpm/workspace.projects-reader@1101.0.7 + ## 1100.0.13 ### Patch Changes diff --git a/.meta-updater/package.json b/.meta-updater/package.json index 48788e93e0..7a232a4ca8 100644 --- a/.meta-updater/package.json +++ b/.meta-updater/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm-private/updater", - "version": "1100.0.13", + "version": "1100.0.14", "private": true, "type": "module", "scripts": { diff --git a/__utils__/scripts/CHANGELOG.md b/__utils__/scripts/CHANGELOG.md index 0720c66d2e..1c4ee5692d 100644 --- a/__utils__/scripts/CHANGELOG.md +++ b/__utils__/scripts/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/scripts +## 1100.0.10 + +### Patch Changes + +- @pnpm/workspace.projects-reader@1101.0.7 + ## 1100.0.9 ### Patch Changes diff --git a/__utils__/scripts/package.json b/__utils__/scripts/package.json index 4415b52b11..db57915c9f 100644 --- a/__utils__/scripts/package.json +++ b/__utils__/scripts/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/scripts", - "version": "1100.0.9", + "version": "1100.0.10", "private": true, "type": "module", "scripts": { diff --git a/agent/server/CHANGELOG.md b/agent/server/CHANGELOG.md index 5e3b105e73..2134c97ccd 100644 --- a/agent/server/CHANGELOG.md +++ b/agent/server/CHANGELOG.md @@ -1,5 +1,14 @@ # pnpm-agent +## 0.0.18 + +### Patch Changes + +- Updated dependencies [212315d] + - @pnpm/installing.deps-installer@1101.4.0 + - @pnpm/installing.client@1100.2.2 + - @pnpm/store.controller@1101.0.8 + ## 0.0.17 ### Patch Changes diff --git a/agent/server/package.json b/agent/server/package.json index a8a4868bac..c6948f9762 100644 --- a/agent/server/package.json +++ b/agent/server/package.json @@ -1,6 +1,6 @@ { "name": "pnpm-agent", - "version": "0.0.17", + "version": "0.0.18", "description": "pnpm agent server for server-side resolution and store-aware downloads", "keywords": [ "pnpm", diff --git a/auth/commands/CHANGELOG.md b/auth/commands/CHANGELOG.md index 04d820ce48..f82b9afe3e 100644 --- a/auth/commands/CHANGELOG.md +++ b/auth/commands/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/auth.commands +## 1100.1.1 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 + ## 1100.1.0 ### Minor Changes diff --git a/auth/commands/package.json b/auth/commands/package.json index 56fb695a3d..3f4c0e8f16 100644 --- a/auth/commands/package.json +++ b/auth/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/auth.commands", - "version": "1100.1.0", + "version": "1100.1.1", "description": "Commands for authentication with npm registries", "keywords": [ "pnpm", diff --git a/bins/linker/CHANGELOG.md b/bins/linker/CHANGELOG.md index 463ed4256d..aa35cccbdd 100644 --- a/bins/linker/CHANGELOG.md +++ b/bins/linker/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/link-bins +## 1100.0.9 + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + ## 1100.0.8 ### Patch Changes diff --git a/bins/linker/package.json b/bins/linker/package.json index 217a0611f6..7bfd1a2fc3 100644 --- a/bins/linker/package.json +++ b/bins/linker/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/bins.linker", - "version": "1100.0.8", + "version": "1100.0.9", "description": "Link bins to node_modules/.bin", "keywords": [ "pnpm", diff --git a/building/after-install/CHANGELOG.md b/building/after-install/CHANGELOG.md index 8df9ddbd06..1e65383a61 100644 --- a/building/after-install/CHANGELOG.md +++ b/building/after-install/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/building.after-install +## 1101.0.16 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/bins.linker@1100.0.9 + - @pnpm/store.connection-manager@1100.2.3 + - @pnpm/exec.lifecycle@1100.0.13 + ## 1101.0.15 ### Patch Changes diff --git a/building/after-install/package.json b/building/after-install/package.json index c59c41c9ec..029425fa68 100644 --- a/building/after-install/package.json +++ b/building/after-install/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/building.after-install", - "version": "1101.0.15", + "version": "1101.0.16", "description": "Rebuild packages that are already installed by running their lifecycle scripts", "keywords": [ "pnpm", diff --git a/building/commands/CHANGELOG.md b/building/commands/CHANGELOG.md index 1b7dd6e35c..1aa8fd0a5b 100644 --- a/building/commands/CHANGELOG.md +++ b/building/commands/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/building.commands +## 1100.0.22 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/installing.commands@1100.5.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/building.after-install@1101.0.16 + - @pnpm/store.connection-manager@1100.2.3 + ## 1100.0.21 ### Patch Changes diff --git a/building/commands/package.json b/building/commands/package.json index 764302228a..4174e8b985 100644 --- a/building/commands/package.json +++ b/building/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/building.commands", - "version": "1100.0.21", + "version": "1100.0.22", "description": "Commands for rebuilding and managing dependency builds", "keywords": [ "pnpm", diff --git a/building/during-install/CHANGELOG.md b/building/during-install/CHANGELOG.md index 173a1ebc7e..d29e57ec8e 100644 --- a/building/during-install/CHANGELOG.md +++ b/building/during-install/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/building.during-install +## 1101.0.13 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/bins.linker@1100.0.9 + - @pnpm/exec.lifecycle@1100.0.13 + ## 1101.0.12 ### Patch Changes diff --git a/building/during-install/package.json b/building/during-install/package.json index bab0d98eeb..b065e74376 100644 --- a/building/during-install/package.json +++ b/building/during-install/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/building.during-install", - "version": "1101.0.12", + "version": "1101.0.13", "description": "Build packages in node_modules", "keywords": [ "pnpm", diff --git a/cache/api/CHANGELOG.md b/cache/api/CHANGELOG.md index 81ec349be4..f3b1a1a884 100644 --- a/cache/api/CHANGELOG.md +++ b/cache/api/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/cache.api +## 1100.0.16 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/resolving.npm-resolver@1101.3.2 + ## 1100.0.15 ### Patch Changes diff --git a/cache/api/package.json b/cache/api/package.json index 4fd8552b7a..46133ee6b4 100644 --- a/cache/api/package.json +++ b/cache/api/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cache.api", - "version": "1100.0.15", + "version": "1100.0.16", "description": "API for controlling the cache", "keywords": [ "pnpm", diff --git a/cache/commands/CHANGELOG.md b/cache/commands/CHANGELOG.md index 3ad6c501d5..e03a3f0e0b 100644 --- a/cache/commands/CHANGELOG.md +++ b/cache/commands/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/cache.commands +## 1100.0.17 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/cache.api@1100.0.16 + ## 1100.0.16 ### Patch Changes diff --git a/cache/commands/package.json b/cache/commands/package.json index c7418e62d9..77ff16176b 100644 --- a/cache/commands/package.json +++ b/cache/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cache.commands", - "version": "1100.0.16", + "version": "1100.0.17", "description": "Commands for controlling the cache", "keywords": [ "pnpm", diff --git a/cli/commands/CHANGELOG.md b/cli/commands/CHANGELOG.md index 8004d3e48a..4575fd97a1 100644 --- a/cli/commands/CHANGELOG.md +++ b/cli/commands/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/cli.commands +## 1100.0.15 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/workspace.projects-reader@1101.0.7 + ## 1100.0.14 ### Patch Changes diff --git a/cli/commands/package.json b/cli/commands/package.json index a9bda6466e..6332806bee 100644 --- a/cli/commands/package.json +++ b/cli/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cli.commands", - "version": "1100.0.14", + "version": "1100.0.15", "description": "Commands for pnpm CLI", "keywords": [ "pnpm", diff --git a/cli/default-reporter/CHANGELOG.md b/cli/default-reporter/CHANGELOG.md index ac2dde637e..88d6a6338f 100644 --- a/cli/default-reporter/CHANGELOG.md +++ b/cli/default-reporter/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/default-reporter +## 1100.2.2 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + ## 1100.2.1 ### Patch Changes diff --git a/cli/default-reporter/package.json b/cli/default-reporter/package.json index f6a8559727..68984690bc 100644 --- a/cli/default-reporter/package.json +++ b/cli/default-reporter/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cli.default-reporter", - "version": "1100.2.1", + "version": "1100.2.2", "description": "The default reporter of pnpm", "keywords": [ "pnpm", diff --git a/cli/utils/CHANGELOG.md b/cli/utils/CHANGELOG.md index df94de068b..57232c358f 100644 --- a/cli/utils/CHANGELOG.md +++ b/cli/utils/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/cli-utils +## 1101.0.7 + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + ## 1101.0.6 ### Patch Changes diff --git a/cli/utils/package.json b/cli/utils/package.json index e442231f12..e6ff116896 100644 --- a/cli/utils/package.json +++ b/cli/utils/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/cli.utils", - "version": "1101.0.6", + "version": "1101.0.7", "description": "Utils for pnpm commands", "keywords": [ "pnpm", diff --git a/config/commands/CHANGELOG.md b/config/commands/CHANGELOG.md index ea23c91206..78af96d2f8 100644 --- a/config/commands/CHANGELOG.md +++ b/config/commands/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/plugin-commands-config +## 1100.0.16 + +### Patch Changes + +- Updated dependencies [d7da112] +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/object.property-path@1100.1.0 + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/workspace.workspace-manifest-writer@1100.0.9 + ## 1100.0.15 ### Patch Changes diff --git a/config/commands/package.json b/config/commands/package.json index dc80a35cb2..024424d353 100644 --- a/config/commands/package.json +++ b/config/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/config.commands", - "version": "1100.0.15", + "version": "1100.0.16", "description": "Commands for reading and writing settings to/from config files", "keywords": [ "pnpm", diff --git a/config/reader/CHANGELOG.md b/config/reader/CHANGELOG.md index 331d165334..0e2110410d 100644 --- a/config/reader/CHANGELOG.md +++ b/config/reader/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/config +## 1101.4.0 + +### Minor Changes + +- 3b62f9d: Add a `skip-manifest-obfuscation` option for `pnpm pack` and `pnpm publish`. When enabled, the original `packageManager` field and publish lifecycle scripts are kept in the packed/published manifest instead of being stripped. The pnpm-specific `pnpm` field continues to be omitted. +- 212315d: Added a new setting `trustLockfile`. When `true`, `pnpm install` skips the supply-chain verification pass that re-applies `minimumReleaseAge` / `trustPolicy='no-downgrade'` to every entry in the loaded lockfile. The install treats the lockfile as already-trusted — useful for closed-source projects where every commit comes from a trusted author, or for CI runs against an already-verified lockfile. Defaults to `false`; verification stays on by default. Set in `pnpm-workspace.yaml`. + + Also cut the memory footprint of the verification pass itself: the per-(registry, name) trust-meta cache previously retained the full packument — dependency graphs, scripts, README, and per-version manifests — for the entire install. On large workspaces (`~4k` lockfile entries with `minimumReleaseAge` + `trustPolicy: no-downgrade` enabled) this could OOM CI runners with a 2GB heap cap. The cache now stores only the fields the trust check actually reads (`time`, per-version `_npmUser.trustedPublisher`, `dist.attestations.provenance`). The abbreviated-metadata cache is similarly projected to just the package-level `modified` field and the set of currently-listed version names. Fixes [#11860](https://github.com/pnpm/pnpm/issues/11860). + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + ## 1101.3.3 ### Patch Changes diff --git a/config/reader/package.json b/config/reader/package.json index 628cc025d1..90298b935c 100644 --- a/config/reader/package.json +++ b/config/reader/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/config.reader", - "version": "1101.3.3", + "version": "1101.4.0", "description": "Gets configuration options for pnpm", "keywords": [ "pnpm", diff --git a/deps/compliance/commands/CHANGELOG.md b/deps/compliance/commands/CHANGELOG.md index 78cc6c9ef6..7e0ec863bb 100644 --- a/deps/compliance/commands/CHANGELOG.md +++ b/deps/compliance/commands/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/deps.compliance.commands +## 1101.2.7 + +### Patch Changes + +- Updated dependencies [d7da112] +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/config.reader@1101.4.0 + - @pnpm/installing.commands@1100.5.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/deps.compliance.license-scanner@1100.0.14 + - @pnpm/deps.compliance.sbom@1100.1.4 + ## 1101.2.6 ### Patch Changes diff --git a/deps/compliance/commands/package.json b/deps/compliance/commands/package.json index 8d3c96da93..88613eb540 100644 --- a/deps/compliance/commands/package.json +++ b/deps/compliance/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.compliance.commands", - "version": "1101.2.6", + "version": "1101.2.7", "description": "pnpm commands for audit, licenses, and sbom", "keywords": [ "pnpm", diff --git a/deps/compliance/license-scanner/CHANGELOG.md b/deps/compliance/license-scanner/CHANGELOG.md index f5174f95b0..015a402c28 100644 --- a/deps/compliance/license-scanner/CHANGELOG.md +++ b/deps/compliance/license-scanner/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/license-scanner +## 1100.0.14 + +### Patch Changes + +- @pnpm/store.pkg-finder@1100.0.12 + ## 1100.0.13 ### Patch Changes diff --git a/deps/compliance/license-scanner/package.json b/deps/compliance/license-scanner/package.json index 4817ec6527..e0c5fb57ed 100644 --- a/deps/compliance/license-scanner/package.json +++ b/deps/compliance/license-scanner/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.compliance.license-scanner", - "version": "1100.0.13", + "version": "1100.0.14", "description": "Check for licenses packages", "keywords": [ "pnpm", diff --git a/deps/compliance/sbom/CHANGELOG.md b/deps/compliance/sbom/CHANGELOG.md index dc0f10f048..9fae183501 100644 --- a/deps/compliance/sbom/CHANGELOG.md +++ b/deps/compliance/sbom/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/deps.compliance.sbom +## 1100.1.4 + +### Patch Changes + +- @pnpm/store.pkg-finder@1100.0.12 + ## 1100.1.3 ### Patch Changes diff --git a/deps/compliance/sbom/package.json b/deps/compliance/sbom/package.json index 6ef9309a4b..559302c83f 100644 --- a/deps/compliance/sbom/package.json +++ b/deps/compliance/sbom/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.compliance.sbom", - "version": "1100.1.3", + "version": "1100.1.4", "description": "Generate SBOM from pnpm lockfile", "keywords": [ "pnpm", diff --git a/deps/inspection/commands/CHANGELOG.md b/deps/inspection/commands/CHANGELOG.md index 3c5bf164bf..153185e5c2 100644 --- a/deps/inspection/commands/CHANGELOG.md +++ b/deps/inspection/commands/CHANGELOG.md @@ -1,5 +1,23 @@ # @pnpm/deps.inspection.commands +## 1100.3.0 + +### Minor Changes + +- 22cb743: Implement `pnpm repo` command natively, following `npm repo` standards. + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/resolving.npm-resolver@1101.3.2 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/deps.inspection.list@1100.0.13 + - @pnpm/global.commands@1100.0.21 + - @pnpm/deps.inspection.outdated@1100.1.2 + - @pnpm/resolving.default-resolver@1100.3.2 + ## 1100.2.5 ### Patch Changes diff --git a/deps/inspection/commands/package.json b/deps/inspection/commands/package.json index efcd13969f..676fd6efd2 100644 --- a/deps/inspection/commands/package.json +++ b/deps/inspection/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.inspection.commands", - "version": "1100.2.5", + "version": "1100.3.0", "description": "The list, ll, why, and outdated commands of pnpm", "keywords": [ "pnpm", diff --git a/deps/inspection/list/CHANGELOG.md b/deps/inspection/list/CHANGELOG.md index ff198bb353..da0f9ae6c6 100644 --- a/deps/inspection/list/CHANGELOG.md +++ b/deps/inspection/list/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/list +## 1100.0.13 + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + ## 1100.0.12 ### Patch Changes diff --git a/deps/inspection/list/package.json b/deps/inspection/list/package.json index c82be17a8e..603bd25106 100644 --- a/deps/inspection/list/package.json +++ b/deps/inspection/list/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.inspection.list", - "version": "1100.0.12", + "version": "1100.0.13", "description": "List installed packages in a symlinked `node_modules`", "keywords": [ "pnpm", diff --git a/deps/inspection/outdated/CHANGELOG.md b/deps/inspection/outdated/CHANGELOG.md index b671f957de..2783afebb3 100644 --- a/deps/inspection/outdated/CHANGELOG.md +++ b/deps/inspection/outdated/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/outdated +## 1100.1.2 + +### Patch Changes + +- Updated dependencies [212315d] + - @pnpm/resolving.npm-resolver@1101.3.2 + - @pnpm/installing.client@1100.2.2 + ## 1100.1.1 ### Patch Changes diff --git a/deps/inspection/outdated/package.json b/deps/inspection/outdated/package.json index a66eb36fdb..468f42d0cb 100644 --- a/deps/inspection/outdated/package.json +++ b/deps/inspection/outdated/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.inspection.outdated", - "version": "1100.1.1", + "version": "1100.1.2", "description": "Check for outdated packages", "keywords": [ "pnpm", diff --git a/deps/status/CHANGELOG.md b/deps/status/CHANGELOG.md index 09f0b806f0..01cf99c47d 100644 --- a/deps/status/CHANGELOG.md +++ b/deps/status/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/deps.status +## 1100.0.18 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/workspace.projects-reader@1101.0.7 + - @pnpm/workspace.state@1100.0.15 + ## 1100.0.17 ### Patch Changes diff --git a/deps/status/package.json b/deps/status/package.json index 815dfa0450..efd0108678 100644 --- a/deps/status/package.json +++ b/deps/status/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/deps.status", - "version": "1100.0.17", + "version": "1100.0.18", "description": "Check dependencies status", "keywords": [ "pnpm", diff --git a/engine/pm/commands/CHANGELOG.md b/engine/pm/commands/CHANGELOG.md index 974d426568..17454fb75d 100644 --- a/engine/pm/commands/CHANGELOG.md +++ b/engine/pm/commands/CHANGELOG.md @@ -1,5 +1,25 @@ # @pnpm/engine.pm.commands +## 1101.1.16 + +### Patch Changes + +- Updated dependencies [d7da112] +- Updated dependencies [155af87] +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/installing.env-installer@1101.1.2 + - @pnpm/config.reader@1101.4.0 + - @pnpm/resolving.npm-resolver@1101.3.2 + - @pnpm/bins.linker@1100.0.9 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/installing.deps-restorer@1101.1.5 + - @pnpm/global.commands@1100.0.21 + - @pnpm/store.connection-manager@1100.2.3 + - @pnpm/installing.client@1100.2.2 + - @pnpm/store.controller@1101.0.8 + ## 1101.1.15 ### Patch Changes diff --git a/engine/pm/commands/package.json b/engine/pm/commands/package.json index 387908aef5..e8137617e0 100644 --- a/engine/pm/commands/package.json +++ b/engine/pm/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.pm.commands", - "version": "1101.1.15", + "version": "1101.1.16", "description": "pnpm commands for self-updating and setting up pnpm", "keywords": [ "pnpm", diff --git a/engine/runtime/bun-resolver/CHANGELOG.md b/engine/runtime/bun-resolver/CHANGELOG.md index ee16d20da1..64606770fa 100644 --- a/engine/runtime/bun-resolver/CHANGELOG.md +++ b/engine/runtime/bun-resolver/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/resolving.bun-resolver +## 1101.1.2 + +### Patch Changes + +- Updated dependencies [212315d] + - @pnpm/resolving.npm-resolver@1101.3.2 + ## 1101.1.1 ### Patch Changes diff --git a/engine/runtime/bun-resolver/package.json b/engine/runtime/bun-resolver/package.json index cd3088be38..3f1d7778da 100644 --- a/engine/runtime/bun-resolver/package.json +++ b/engine/runtime/bun-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.runtime.bun-resolver", - "version": "1101.1.1", + "version": "1101.1.2", "description": "Resolves the Bun runtime", "keywords": [ "pnpm", diff --git a/engine/runtime/commands/CHANGELOG.md b/engine/runtime/commands/CHANGELOG.md index bc8a45a3b0..03ea857194 100644 --- a/engine/runtime/commands/CHANGELOG.md +++ b/engine/runtime/commands/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/engine.runtime.commands +## 1100.0.17 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/engine.runtime.node-resolver@1101.1.1 + ## 1100.0.16 ### Patch Changes diff --git a/engine/runtime/commands/package.json b/engine/runtime/commands/package.json index b4d995bef1..56af1e7367 100644 --- a/engine/runtime/commands/package.json +++ b/engine/runtime/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.runtime.commands", - "version": "1100.0.16", + "version": "1100.0.17", "description": "pnpm commands for managing runtimes", "keywords": [ "pnpm", diff --git a/engine/runtime/deno-resolver/CHANGELOG.md b/engine/runtime/deno-resolver/CHANGELOG.md index 64f8d9cebb..3d1248456e 100644 --- a/engine/runtime/deno-resolver/CHANGELOG.md +++ b/engine/runtime/deno-resolver/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/resolving.deno-resolver +## 1101.1.2 + +### Patch Changes + +- Updated dependencies [212315d] + - @pnpm/resolving.npm-resolver@1101.3.2 + ## 1101.1.1 ### Patch Changes diff --git a/engine/runtime/deno-resolver/package.json b/engine/runtime/deno-resolver/package.json index eda18611fc..176d78f9a2 100644 --- a/engine/runtime/deno-resolver/package.json +++ b/engine/runtime/deno-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.runtime.deno-resolver", - "version": "1101.1.1", + "version": "1101.1.2", "description": "Resolves the Deno runtime", "keywords": [ "pnpm", diff --git a/engine/runtime/node-resolver/CHANGELOG.md b/engine/runtime/node-resolver/CHANGELOG.md index ea15691b63..43b3614162 100644 --- a/engine/runtime/node-resolver/CHANGELOG.md +++ b/engine/runtime/node-resolver/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/node.resolver +## 1101.1.1 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + ## 1101.1.0 ### Minor Changes diff --git a/engine/runtime/node-resolver/package.json b/engine/runtime/node-resolver/package.json index a3da034d00..236071f364 100644 --- a/engine/runtime/node-resolver/package.json +++ b/engine/runtime/node-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/engine.runtime.node-resolver", - "version": "1101.1.0", + "version": "1101.1.1", "description": "Resolves a Node.js version specifier to an exact Node.js version", "keywords": [ "pnpm", diff --git a/exec/commands/CHANGELOG.md b/exec/commands/CHANGELOG.md index df1b99bf9e..93b6e9529f 100644 --- a/exec/commands/CHANGELOG.md +++ b/exec/commands/CHANGELOG.md @@ -1,5 +1,24 @@ # @pnpm/plugin-commands-script-runners +## 1100.1.12 + +### Patch Changes + +- 3d14385: Fixed `pnpm dlx` failing with `ERR_PNPM_NO_IMPORTER_MANIFEST_FOUND` when the installed package's CAS slot is missing its `package.json`. Observed in the wild for `pnpm dlx node@runtime:` when the GVS slot was populated without the synthesized manifest runtime archives need (they don't ship a `package.json` of their own, so the synthesized one is the only way it gets there; an existing slot from an earlier code path that skipped the synthesis stays incomplete). The bin link itself is wired up from the resolution and remains valid, so `dlx` now falls back to the scopeless package name when the slot's manifest is unreadable — for single-bin packages (the dlx common case, including every `runtime:` spec) this matches what `manifest.bin` would have named. Multi-bin packages already require `--package= ` to disambiguate and don't enter this code path. +- Updated dependencies [d7da112] +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/config.reader@1101.4.0 + - @pnpm/installing.commands@1100.5.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/building.commands@1100.0.22 + - @pnpm/deps.status@1100.0.18 + - @pnpm/engine.runtime.commands@1100.0.17 + - @pnpm/installing.client@1100.2.2 + - @pnpm/exec.lifecycle@1100.0.13 + - @pnpm/workspace.injected-deps-syncer@1100.0.14 + ## 1100.1.11 ### Patch Changes diff --git a/exec/commands/package.json b/exec/commands/package.json index f97d7694dc..45d0eb4b5b 100644 --- a/exec/commands/package.json +++ b/exec/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exec.commands", - "version": "1100.1.11", + "version": "1100.1.12", "description": "Commands for running scripts", "keywords": [ "pnpm", diff --git a/exec/lifecycle/CHANGELOG.md b/exec/lifecycle/CHANGELOG.md index 7b71814553..0dc7d4bd93 100644 --- a/exec/lifecycle/CHANGELOG.md +++ b/exec/lifecycle/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/lifecycle +## 1100.0.13 + +### Patch Changes + +- @pnpm/bins.linker@1100.0.9 +- @pnpm/fetching.directory-fetcher@1100.0.12 + ## 1100.0.12 ### Patch Changes diff --git a/exec/lifecycle/package.json b/exec/lifecycle/package.json index 85d021f64b..494aa1ab28 100644 --- a/exec/lifecycle/package.json +++ b/exec/lifecycle/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exec.lifecycle", - "version": "1100.0.12", + "version": "1100.0.13", "description": "Package lifecycle hook runner", "keywords": [ "pnpm", diff --git a/exec/prepare-package/CHANGELOG.md b/exec/prepare-package/CHANGELOG.md index 52e5797e9f..4e154caad0 100644 --- a/exec/prepare-package/CHANGELOG.md +++ b/exec/prepare-package/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/prepare-package +## 1100.0.13 + +### Patch Changes + +- @pnpm/exec.lifecycle@1100.0.13 + ## 1100.0.12 ### Patch Changes diff --git a/exec/prepare-package/package.json b/exec/prepare-package/package.json index cad1f0612e..a23087d605 100644 --- a/exec/prepare-package/package.json +++ b/exec/prepare-package/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exec.prepare-package", - "version": "1100.0.12", + "version": "1100.0.13", "description": "Prepares a Git-hosted package", "keywords": [ "pnpm", diff --git a/fetching/directory-fetcher/CHANGELOG.md b/fetching/directory-fetcher/CHANGELOG.md index 43271048cc..95560a590e 100644 --- a/fetching/directory-fetcher/CHANGELOG.md +++ b/fetching/directory-fetcher/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/directory-fetcher +## 1100.0.12 + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + ## 1100.0.11 ### Patch Changes diff --git a/fetching/directory-fetcher/package.json b/fetching/directory-fetcher/package.json index 74470c4659..1b4f0e16bd 100644 --- a/fetching/directory-fetcher/package.json +++ b/fetching/directory-fetcher/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/fetching.directory-fetcher", - "version": "1100.0.11", + "version": "1100.0.12", "description": "A fetcher for local directory packages", "keywords": [ "pnpm", diff --git a/fetching/git-fetcher/CHANGELOG.md b/fetching/git-fetcher/CHANGELOG.md index b5382ab45d..6ee03618b7 100644 --- a/fetching/git-fetcher/CHANGELOG.md +++ b/fetching/git-fetcher/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/git-fetcher +## 1101.0.9 + +### Patch Changes + +- @pnpm/exec.prepare-package@1100.0.13 + ## 1101.0.8 ### Patch Changes diff --git a/fetching/git-fetcher/package.json b/fetching/git-fetcher/package.json index 45cd42ffe0..590c633467 100644 --- a/fetching/git-fetcher/package.json +++ b/fetching/git-fetcher/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/fetching.git-fetcher", - "version": "1101.0.8", + "version": "1101.0.9", "description": "A fetcher for git-hosted packages", "keywords": [ "pnpm", diff --git a/fetching/tarball-fetcher/CHANGELOG.md b/fetching/tarball-fetcher/CHANGELOG.md index a8835a8111..297053b483 100644 --- a/fetching/tarball-fetcher/CHANGELOG.md +++ b/fetching/tarball-fetcher/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/tarball-fetcher +## 1101.0.10 + +### Patch Changes + +- @pnpm/exec.prepare-package@1100.0.13 + ## 1101.0.9 ### Patch Changes diff --git a/fetching/tarball-fetcher/package.json b/fetching/tarball-fetcher/package.json index dff04deb90..c3258f2941 100644 --- a/fetching/tarball-fetcher/package.json +++ b/fetching/tarball-fetcher/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/fetching.tarball-fetcher", - "version": "1101.0.9", + "version": "1101.0.10", "description": "Fetcher for packages hosted as tarballs", "keywords": [ "pnpm", diff --git a/global/commands/CHANGELOG.md b/global/commands/CHANGELOG.md index 7237fc108c..5a29ee0866 100644 --- a/global/commands/CHANGELOG.md +++ b/global/commands/CHANGELOG.md @@ -1,5 +1,18 @@ # @pnpm/global.commands +## 1100.0.21 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/installing.deps-installer@1101.4.0 + - @pnpm/bins.linker@1100.0.9 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/deps.inspection.list@1100.0.13 + - @pnpm/store.connection-manager@1100.2.3 + ## 1100.0.20 ### Patch Changes diff --git a/global/commands/package.json b/global/commands/package.json index 595e4f38d1..dc205b2599 100644 --- a/global/commands/package.json +++ b/global/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/global.commands", - "version": "1100.0.20", + "version": "1100.0.21", "description": "Global package command handlers for pnpm", "keywords": [ "pnpm", diff --git a/installing/client/CHANGELOG.md b/installing/client/CHANGELOG.md index f4e44ad270..dbcbf25267 100644 --- a/installing/client/CHANGELOG.md +++ b/installing/client/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/client +## 1100.2.2 + +### Patch Changes + +- Updated dependencies [212315d] + - @pnpm/resolving.npm-resolver@1101.3.2 + - @pnpm/fetching.directory-fetcher@1100.0.12 + - @pnpm/engine.runtime.node-resolver@1101.1.1 + - @pnpm/resolving.default-resolver@1100.3.2 + - @pnpm/fetching.git-fetcher@1101.0.9 + - @pnpm/fetching.tarball-fetcher@1101.0.10 + ## 1100.2.1 ### Patch Changes diff --git a/installing/client/package.json b/installing/client/package.json index 2f48debe6a..001b088e4e 100644 --- a/installing/client/package.json +++ b/installing/client/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.client", - "version": "1100.2.1", + "version": "1100.2.2", "description": "Creates the package resolve and fetch functions", "keywords": [ "pnpm", diff --git a/installing/commands/CHANGELOG.md b/installing/commands/CHANGELOG.md index 52aaeeae8d..6108da329b 100644 --- a/installing/commands/CHANGELOG.md +++ b/installing/commands/CHANGELOG.md @@ -1,5 +1,37 @@ # @pnpm/plugin-commands-installation +## 1100.5.0 + +### Minor Changes + +- 212315d: Added a new setting `trustLockfile`. When `true`, `pnpm install` skips the supply-chain verification pass that re-applies `minimumReleaseAge` / `trustPolicy='no-downgrade'` to every entry in the loaded lockfile. The install treats the lockfile as already-trusted — useful for closed-source projects where every commit comes from a trusted author, or for CI runs against an already-verified lockfile. Defaults to `false`; verification stays on by default. Set in `pnpm-workspace.yaml`. + + Also cut the memory footprint of the verification pass itself: the per-(registry, name) trust-meta cache previously retained the full packument — dependency graphs, scripts, README, and per-version manifests — for the entire install. On large workspaces (`~4k` lockfile entries with `minimumReleaseAge` + `trustPolicy: no-downgrade` enabled) this could OOM CI runners with a 2GB heap cap. The cache now stores only the fields the trust check actually reads (`time`, per-version `_npmUser.trustedPublisher`, `dist.attestations.provenance`). The abbreviated-metadata cache is similarly projected to just the package-level `modified` field and the set of currently-listed version names. Fixes [#11860](https://github.com/pnpm/pnpm/issues/11860). + +### Patch Changes + +- Updated dependencies [d7da112] +- Updated dependencies [155af87] +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/installing.env-installer@1101.1.2 + - @pnpm/config.reader@1101.4.0 + - @pnpm/installing.deps-installer@1101.4.0 + - @pnpm/resolving.npm-resolver@1101.3.2 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/workspace.projects-reader@1101.0.7 + - @pnpm/building.after-install@1101.0.16 + - @pnpm/deps.status@1100.0.18 + - @pnpm/global.commands@1100.0.21 + - @pnpm/store.connection-manager@1100.2.3 + - @pnpm/workspace.state@1100.0.15 + - @pnpm/deps.inspection.outdated@1100.1.2 + - @pnpm/workspace.projects-graph@1100.0.12 + - @pnpm/workspace.projects-filter@1100.0.15 + - @pnpm/workspace.workspace-manifest-writer@1100.0.9 + - @pnpm/store.controller@1101.0.8 + ## 1100.4.2 ### Patch Changes diff --git a/installing/commands/package.json b/installing/commands/package.json index 6e2e16eba2..398e3b48ab 100644 --- a/installing/commands/package.json +++ b/installing/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.commands", - "version": "1100.4.2", + "version": "1100.5.0", "description": "Commands for installation", "keywords": [ "pnpm", diff --git a/installing/deps-installer/CHANGELOG.md b/installing/deps-installer/CHANGELOG.md index 9c38fa5418..6f808ef91c 100644 --- a/installing/deps-installer/CHANGELOG.md +++ b/installing/deps-installer/CHANGELOG.md @@ -1,5 +1,28 @@ # @pnpm/core +## 1101.4.0 + +### Minor Changes + +- 212315d: Added a new setting `trustLockfile`. When `true`, `pnpm install` skips the supply-chain verification pass that re-applies `minimumReleaseAge` / `trustPolicy='no-downgrade'` to every entry in the loaded lockfile. The install treats the lockfile as already-trusted — useful for closed-source projects where every commit comes from a trusted author, or for CI runs against an already-verified lockfile. Defaults to `false`; verification stays on by default. Set in `pnpm-workspace.yaml`. + + Also cut the memory footprint of the verification pass itself: the per-(registry, name) trust-meta cache previously retained the full packument — dependency graphs, scripts, README, and per-version manifests — for the entire install. On large workspaces (`~4k` lockfile entries with `minimumReleaseAge` + `trustPolicy: no-downgrade` enabled) this could OOM CI runners with a 2GB heap cap. The cache now stores only the fields the trust check actually reads (`time`, per-version `_npmUser.trustedPublisher`, `dist.attestations.provenance`). The abbreviated-metadata cache is similarly projected to just the package-level `modified` field and the set of currently-listed version names. Fixes [#11860](https://github.com/pnpm/pnpm/issues/11860). + +### Patch Changes + +- Updated dependencies [3422cec] +- Updated dependencies [e0bd879] +- Updated dependencies [d7da112] + - @pnpm/installing.deps-resolver@1100.1.3 + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/bins.linker@1100.0.9 + - @pnpm/installing.deps-restorer@1101.1.5 + - @pnpm/building.after-install@1101.0.16 + - @pnpm/building.during-install@1101.0.13 + - @pnpm/exec.lifecycle@1100.0.13 + - @pnpm/installing.linking.hoist@1100.0.9 + - @pnpm/installing.package-requester@1101.0.8 + ## 1101.3.1 ### Patch Changes diff --git a/installing/deps-installer/package.json b/installing/deps-installer/package.json index da8f3f7975..367a67c787 100644 --- a/installing/deps-installer/package.json +++ b/installing/deps-installer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.deps-installer", - "version": "1101.3.1", + "version": "1101.4.0", "description": "Fast, disk space efficient installation engine", "keywords": [ "pnpm", diff --git a/installing/deps-resolver/CHANGELOG.md b/installing/deps-resolver/CHANGELOG.md index c7dfd16c7e..ae2ecf05fa 100644 --- a/installing/deps-resolver/CHANGELOG.md +++ b/installing/deps-resolver/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/resolve-dependencies +## 1100.1.3 + +### Patch Changes + +- 3422cec: Fixed non-determinism in `pnpm dedupe` and `pnpm install` when a dependency graph contains packages with transitive peer dependencies on each other (e.g. `@aws-sdk/client-sts` and `@aws-sdk/client-sso-oidc`) and `auto-install-peers` is enabled. The lockfile no longer flips between two equally-valid forms across consecutive runs. The root cause was that `resolveDependencies` pushed onto its `pkgAddresses` / `postponedResolutionsQueue` arrays from inside `Promise.all`-spawned callbacks, so completion-order timing leaked into the array order and downstream cyclic-peer suffix assignment. Fixes [#8155](https://github.com/pnpm/pnpm/issues/8155). +- e0bd879: Fixed a regression introduced by [#11711](https://github.com/pnpm/pnpm/pull/11711) where `pnpm add ` (and any other wanted-dependency whose alias can't be parsed from the user-supplied spec, e.g. tarball URLs or `pnpm/test-git-fetch#sha`) was silently dropped from the manifest update and from `pendingBuilds`. The alias-keyed lookup added in that PR couldn't find a `wantedDependency` whose `alias` was `undefined` at parse time but resolved to a package name only after fetching, so the entry never made it into `specsToUpsert`. Restored the original index-based pairing between `directDependencies` and `wantedDependencies`; the catalog-protocol preservation that PR was originally fixing is unaffected because it's driven by `rdd.catalogLookup.userSpecifiedBareSpecifier`, not by the lookup. Fixes the three `rebuilds dependencies` / `rebuilds specific dependencies` / `rebuild with pending option` failures in `building/commands/test/build/index.ts`. +- Updated dependencies [212315d] + - @pnpm/resolving.npm-resolver@1101.3.2 + - @pnpm/fetching.pick-fetcher@1100.0.8 + ## 1100.1.2 ### Patch Changes diff --git a/installing/deps-resolver/package.json b/installing/deps-resolver/package.json index 33ba32197e..0b29a85eeb 100644 --- a/installing/deps-resolver/package.json +++ b/installing/deps-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.deps-resolver", - "version": "1100.1.2", + "version": "1100.1.3", "description": "Resolves dependency graph of a package", "keywords": [ "pnpm", diff --git a/installing/deps-restorer/CHANGELOG.md b/installing/deps-restorer/CHANGELOG.md index bcb6d92474..cfdd94a7d1 100644 --- a/installing/deps-restorer/CHANGELOG.md +++ b/installing/deps-restorer/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/headless +## 1101.1.5 + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/bins.linker@1100.0.9 + - @pnpm/building.during-install@1101.0.13 + - @pnpm/exec.lifecycle@1100.0.13 + - @pnpm/installing.linking.hoist@1100.0.9 + - @pnpm/installing.package-requester@1101.0.8 + ## 1101.1.4 ### Patch Changes diff --git a/installing/deps-restorer/package.json b/installing/deps-restorer/package.json index d3bfa29053..5d22756e58 100644 --- a/installing/deps-restorer/package.json +++ b/installing/deps-restorer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.deps-restorer", - "version": "1101.1.4", + "version": "1101.1.5", "description": "Fast installation using only pnpm-lock.yaml", "keywords": [ "pnpm", diff --git a/installing/env-installer/CHANGELOG.md b/installing/env-installer/CHANGELOG.md index 86eb664345..a5b1fa2a08 100644 --- a/installing/env-installer/CHANGELOG.md +++ b/installing/env-installer/CHANGELOG.md @@ -1,5 +1,17 @@ # @pnpm/config.deps-installer +## 1101.1.2 + +### Patch Changes + +- 155af87: Fixed `pnpm add --config` leaving orphan entries in `pnpm-lock.env.yaml` (the optional subdependencies of the previously resolved version of the updated config dependency). +- Updated dependencies [3422cec] +- Updated dependencies [e0bd879] +- Updated dependencies [212315d] + - @pnpm/installing.deps-resolver@1100.1.3 + - @pnpm/resolving.npm-resolver@1101.3.2 + - @pnpm/store.controller@1101.0.8 + ## 1101.1.1 ### Patch Changes diff --git a/installing/env-installer/package.json b/installing/env-installer/package.json index 0ec93620be..0a590ecbea 100644 --- a/installing/env-installer/package.json +++ b/installing/env-installer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.env-installer", - "version": "1101.1.1", + "version": "1101.1.2", "description": "Installer for configurational dependencies", "keywords": [ "pnpm", diff --git a/installing/linking/hoist/CHANGELOG.md b/installing/linking/hoist/CHANGELOG.md index d1c88ae23a..388a090c47 100644 --- a/installing/linking/hoist/CHANGELOG.md +++ b/installing/linking/hoist/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/hoist +## 1100.0.9 + +### Patch Changes + +- @pnpm/bins.linker@1100.0.9 + ## 1100.0.8 ### Patch Changes diff --git a/installing/linking/hoist/package.json b/installing/linking/hoist/package.json index 5aad67903d..69401d3fd1 100644 --- a/installing/linking/hoist/package.json +++ b/installing/linking/hoist/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/installing.linking.hoist", - "version": "1100.0.8", + "version": "1100.0.9", "description": "Hoists dependencies in a node_modules created by pnpm", "keywords": [ "pnpm", diff --git a/lockfile/make-dedicated-lockfile/CHANGELOG.md b/lockfile/make-dedicated-lockfile/CHANGELOG.md index 7bb64185ba..74a69c8a7d 100644 --- a/lockfile/make-dedicated-lockfile/CHANGELOG.md +++ b/lockfile/make-dedicated-lockfile/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/make-dedicated-lockfile +## 1100.0.13 + +### Patch Changes + +- Updated dependencies [d7da112] +- Updated dependencies [3b62f9d] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/releasing.exportable-manifest@1100.1.0 + ## 1100.0.12 ### Patch Changes diff --git a/lockfile/make-dedicated-lockfile/package.json b/lockfile/make-dedicated-lockfile/package.json index a6266b5880..5151fa1a68 100644 --- a/lockfile/make-dedicated-lockfile/package.json +++ b/lockfile/make-dedicated-lockfile/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/lockfile.make-dedicated-lockfile", - "version": "1100.0.12", + "version": "1100.0.13", "description": "Creates a dedicated lockfile for a subset of workspace projects", "keywords": [ "pnpm", diff --git a/modules-mounter/daemon/CHANGELOG.md b/modules-mounter/daemon/CHANGELOG.md index 30b7ea1181..c6eb1e8087 100644 --- a/modules-mounter/daemon/CHANGELOG.md +++ b/modules-mounter/daemon/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/mount-modules +## 1100.0.16 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + ## 1100.0.15 ### Patch Changes diff --git a/modules-mounter/daemon/package.json b/modules-mounter/daemon/package.json index 9cff37e0c3..3ac9cd7003 100644 --- a/modules-mounter/daemon/package.json +++ b/modules-mounter/daemon/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/modules-mounter.daemon", - "version": "1100.0.15", + "version": "1100.0.16", "description": "Mounts a node_modules directory with FUSE", "keywords": [ "pnpm", diff --git a/object/property-path/CHANGELOG.md b/object/property-path/CHANGELOG.md index 436d22f357..43f19b2a83 100644 --- a/object/property-path/CHANGELOG.md +++ b/object/property-path/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/object.property-path +## 1100.1.0 + +### Minor Changes + +- d7da112: Implement `pnpm pkg` command natively, following `npm pkg` standards. + ## 1001.0.0 ### Major Changes diff --git a/object/property-path/package.json b/object/property-path/package.json index 003dd14671..65ce5d0a30 100644 --- a/object/property-path/package.json +++ b/object/property-path/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/object.property-path", - "version": "1100.0.0", + "version": "1100.1.0", "description": "Basic library to manipulate object property path which includes dots and subscriptions", "keywords": [ "pnpm", diff --git a/patching/commands/CHANGELOG.md b/patching/commands/CHANGELOG.md index 3ff66dbfff..2a0dbdadb1 100644 --- a/patching/commands/CHANGELOG.md +++ b/patching/commands/CHANGELOG.md @@ -1,5 +1,19 @@ # @pnpm/plugin-commands-patching +## 1100.0.22 + +### Patch Changes + +- Updated dependencies [d7da112] +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/config.reader@1101.4.0 + - @pnpm/installing.commands@1100.5.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/store.connection-manager@1100.2.3 + - @pnpm/fetching.pick-fetcher@1100.0.8 + ## 1100.0.21 ### Patch Changes diff --git a/patching/commands/package.json b/patching/commands/package.json index 95853fd8ff..1f1595715e 100644 --- a/patching/commands/package.json +++ b/patching/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/patching.commands", - "version": "1100.0.21", + "version": "1100.0.22", "description": "Commands for creating patches", "keywords": [ "pnpm", diff --git a/pkg-manifest/commands/CHANGELOG.md b/pkg-manifest/commands/CHANGELOG.md new file mode 100644 index 0000000000..3340628d52 --- /dev/null +++ b/pkg-manifest/commands/CHANGELOG.md @@ -0,0 +1,17 @@ +# @pnpm/pkg-manifest.commands + +## 1100.1.0 + +### Minor Changes + +- d7da112: Implement `pnpm pkg` command natively, following `npm pkg` standards. +- d55263f: Implements `pnpm set-script` (alias `ss`) natively. Adds or updates an entry in the `scripts` field of the project manifest, supporting `package.json`, `package.json5`, and `package.yaml` formats. + +### Patch Changes + +- Updated dependencies [d7da112] +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/object.property-path@1100.1.0 + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 diff --git a/pkg-manifest/commands/package.json b/pkg-manifest/commands/package.json index 550d07238c..f5b550f5f4 100644 --- a/pkg-manifest/commands/package.json +++ b/pkg-manifest/commands/package.json @@ -1,18 +1,29 @@ { "name": "@pnpm/pkg-manifest.commands", - "version": "1100.0.0", + "version": "1100.1.0", "description": "Commands for managing package.json", - "keywords": ["pnpm", "pnpm11", "pkg"], + "keywords": [ + "pnpm", + "pnpm11", + "pkg" + ], "license": "MIT", "funding": "https://opencollective.com/pnpm", "repository": "https://github.com/pnpm/pnpm/tree/main/pkg-manifest/commands", "homepage": "https://github.com/pnpm/pnpm/tree/main/pkg-manifest/commands#readme", - "bugs": { "url": "https://github.com/pnpm/pnpm/issues" }, + "bugs": { + "url": "https://github.com/pnpm/pnpm/issues" + }, "type": "module", "main": "lib/index.js", "types": "lib/index.d.ts", - "exports": { ".": "./lib/index.js" }, - "files": ["lib", "!*.map"], + "exports": { + ".": "./lib/index.js" + }, + "files": [ + "lib", + "!*.map" + ], "scripts": { "compile": "tsgo --build && pn lint --fix", "lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\"", @@ -33,6 +44,10 @@ "@pnpm/pkg-manifest.commands": "workspace:*", "@pnpm/prepare": "workspace:*" }, - "engines": { "node": ">=22.13" }, - "jest": { "preset": "@pnpm/jest-config" } + "engines": { + "node": ">=22.13" + }, + "jest": { + "preset": "@pnpm/jest-config" + } } diff --git a/pnpm/CHANGELOG.md b/pnpm/CHANGELOG.md index af1406c38c..a047e890e6 100644 --- a/pnpm/CHANGELOG.md +++ b/pnpm/CHANGELOG.md @@ -1,5 +1,25 @@ # pnpm +## 11.3.0 + +### Minor Changes + +- Added `pnpm stage` with `publish`, `list`, `view`, `approve`, `reject`, and `download` subcommands for npm staged publishing. +- Added a new setting `trustLockfile`. When `true`, `pnpm install` skips the supply-chain verification pass that re-applies `minimumReleaseAge` / `trustPolicy='no-downgrade'` to every entry in the loaded lockfile. The install treats the lockfile as already-trusted — useful for closed-source projects where every commit comes from a trusted author. Defaults to `false`; verification stays on by default. Set in `pnpm-workspace.yaml`. + + Also cut the memory footprint of the verification pass itself: the per-(registry, name) trust-meta cache previously retained the full packument — dependency graphs, scripts, README, and per-version manifests — for the entire install. On large workspaces (`~4k` lockfile entries with `minimumReleaseAge` + `trustPolicy: no-downgrade` enabled) this could OOM CI runners with a 2GB heap cap. The cache now stores only the fields the trust check actually reads (`time`, per-version `_npmUser.trustedPublisher`, `dist.attestations.provenance`). The abbreviated-metadata cache is similarly projected to just the package-level `modified` field and the set of currently-listed version names. Fixes [#11860](https://github.com/pnpm/pnpm/issues/11860). +- Implemented `pnpm pkg` command natively, following `npm pkg` standards. +- Implemented `pnpm repo` command natively, following `npm repo` standards. +- Implemented `pnpm set-script` (alias `ss`) natively. Adds or updates an entry in the `scripts` field of the project manifest, supporting `package.json`, `package.json5`, and `package.yaml` formats. +- Add a `skip-manifest-obfuscation` option for `pnpm pack` and `pnpm publish`. When enabled, the original `packageManager` field and publish lifecycle scripts are kept in the packed/published manifest instead of being stripped. The pnpm-specific `pnpm` field continues to be omitted. + +### Patch Changes + +- Fixed `pnpm dlx` failing with `ERR_PNPM_NO_IMPORTER_MANIFEST_FOUND` when the installed package's CAS slot is missing its `package.json`. Observed in the wild for `pnpm dlx node@runtime:` when the GVS slot was populated without the synthesized manifest runtime archives need (they don't ship a `package.json` of their own, so the synthesized one is the only way it gets there; an existing slot from an earlier code path that skipped the synthesis stays incomplete). The bin link itself is wired up from the resolution and remains valid, so `dlx` now falls back to the scopeless package name when the slot's manifest is unreadable — for single-bin packages (the dlx common case, including every `runtime:` spec) this matches what `manifest.bin` would have named. Multi-bin packages already require `--package= ` to disambiguate and don't enter this code path. +- Fixed non-determinism in `pnpm dedupe` and `pnpm install` when a dependency graph contains packages with transitive peer dependencies on each other (e.g. `@aws-sdk/client-sts` and `@aws-sdk/client-sso-oidc`) and `auto-install-peers` is enabled. The lockfile no longer flips between two equally-valid forms across consecutive runs. The root cause was that `resolveDependencies` pushed onto its `pkgAddresses` / `postponedResolutionsQueue` arrays from inside `Promise.all`-spawned callbacks, so completion-order timing leaked into the array order and downstream cyclic-peer suffix assignment. Fixes [#8155](https://github.com/pnpm/pnpm/issues/8155). +- Fixed a regression introduced by [#11711](https://github.com/pnpm/pnpm/pull/11711) where `pnpm add ` (and any other wanted-dependency whose alias can't be parsed from the user-supplied spec, e.g. tarball URLs or `pnpm/test-git-fetch#sha`) was silently dropped from the manifest update and from `pendingBuilds`. The alias-keyed lookup added in that PR couldn't find a `wantedDependency` whose `alias` was `undefined` at parse time but resolved to a package name only after fetching, so the entry never made it into `specsToUpsert`. Restored the original index-based pairing between `directDependencies` and `wantedDependencies`; the catalog-protocol preservation that PR was originally fixing is unaffected because it's driven by `rdd.catalogLookup.userSpecifiedBareSpecifier`, not by the lookup. Fixes the three `rebuilds dependencies` / `rebuilds specific dependencies` / `rebuild with pending option` failures in `building/commands/test/build/index.ts`. +- Fixed `pnpm add --config` leaving orphan entries in `pnpm-lock.env.yaml` (the optional subdependencies of the previously resolved version of the updated config dependency). + ## 11.2.2 ### Patch Changes diff --git a/pnpm/artifacts/darwin-arm64/package.json b/pnpm/artifacts/darwin-arm64/package.json index bdd38a9fcd..5f6d9cb1ea 100644 --- a/pnpm/artifacts/darwin-arm64/package.json +++ b/pnpm/artifacts/darwin-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/macos-arm64", - "version": "11.2.2", + "version": "11.3.0", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/exe/package.json b/pnpm/artifacts/exe/package.json index 54f18bc5af..8783dcc879 100644 --- a/pnpm/artifacts/exe/package.json +++ b/pnpm/artifacts/exe/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/exe", - "version": "11.2.2", + "version": "11.3.0", "description": "Fast, disk space efficient package manager", "keywords": [ "pnpm", diff --git a/pnpm/artifacts/linux-arm64-musl/package.json b/pnpm/artifacts/linux-arm64-musl/package.json index 2df4015cc3..d1a815af9f 100644 --- a/pnpm/artifacts/linux-arm64-musl/package.json +++ b/pnpm/artifacts/linux-arm64-musl/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linuxstatic-arm64", - "version": "11.2.2", + "version": "11.3.0", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/linux-arm64/package.json b/pnpm/artifacts/linux-arm64/package.json index 496ce64095..091230b72e 100644 --- a/pnpm/artifacts/linux-arm64/package.json +++ b/pnpm/artifacts/linux-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linux-arm64", - "version": "11.2.2", + "version": "11.3.0", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/linux-x64-musl/package.json b/pnpm/artifacts/linux-x64-musl/package.json index 1a4f3a8de1..c1d9c1cad6 100644 --- a/pnpm/artifacts/linux-x64-musl/package.json +++ b/pnpm/artifacts/linux-x64-musl/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linuxstatic-x64", - "version": "11.2.2", + "version": "11.3.0", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/linux-x64/package.json b/pnpm/artifacts/linux-x64/package.json index 40e6ca3ddd..8518e6a66f 100644 --- a/pnpm/artifacts/linux-x64/package.json +++ b/pnpm/artifacts/linux-x64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/linux-x64", - "version": "11.2.2", + "version": "11.3.0", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/win32-arm64/package.json b/pnpm/artifacts/win32-arm64/package.json index cf09d7d902..4ebb3dfd7e 100644 --- a/pnpm/artifacts/win32-arm64/package.json +++ b/pnpm/artifacts/win32-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/win-arm64", - "version": "11.2.2", + "version": "11.3.0", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/artifacts/win32-x64/package.json b/pnpm/artifacts/win32-x64/package.json index 0f74e03873..abc2333ded 100644 --- a/pnpm/artifacts/win32-x64/package.json +++ b/pnpm/artifacts/win32-x64/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/win-x64", - "version": "11.2.2", + "version": "11.3.0", "keywords": [ "pnpm", "pnpm11", diff --git a/pnpm/dev/CHANGELOG.md b/pnpm/dev/CHANGELOG.md index 56c953ef6e..c3da046d4b 100644 --- a/pnpm/dev/CHANGELOG.md +++ b/pnpm/dev/CHANGELOG.md @@ -1,5 +1,11 @@ # pd +## 1100.0.10 + +### Patch Changes + +- @pnpm/workspace.projects-reader@1101.0.7 + ## 1100.0.9 ### Patch Changes diff --git a/pnpm/dev/package.json b/pnpm/dev/package.json index b26df2ba8f..8483ea8b7a 100644 --- a/pnpm/dev/package.json +++ b/pnpm/dev/package.json @@ -1,6 +1,6 @@ { "name": "pd", - "version": "1100.0.9", + "version": "1100.0.10", "bin": "pd.js", "private": true, "type": "module", diff --git a/pnpm/package.json b/pnpm/package.json index 8e0af6a5bb..942448808a 100644 --- a/pnpm/package.json +++ b/pnpm/package.json @@ -1,6 +1,6 @@ { "name": "pnpm", - "version": "11.2.2", + "version": "11.3.0", "description": "Fast, disk space efficient package manager", "keywords": [ "pnpm", diff --git a/registry-access/commands/CHANGELOG.md b/registry-access/commands/CHANGELOG.md index 95559bbe06..4178ea09ea 100644 --- a/registry-access/commands/CHANGELOG.md +++ b/registry-access/commands/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/registry-access.commands +## 1100.2.15 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 + ## 1100.2.14 ### Patch Changes diff --git a/registry-access/commands/package.json b/registry-access/commands/package.json index 4c16f6c019..52c521f272 100644 --- a/registry-access/commands/package.json +++ b/registry-access/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/registry-access.commands", - "version": "1100.2.14", + "version": "1100.2.15", "description": "Commands for managing packages on the registry", "keywords": [ "pnpm", diff --git a/releasing/commands/CHANGELOG.md b/releasing/commands/CHANGELOG.md index 509ea77680..8acb462f94 100644 --- a/releasing/commands/CHANGELOG.md +++ b/releasing/commands/CHANGELOG.md @@ -1,5 +1,27 @@ # @pnpm/releasing.commands +## 1100.3.0 + +### Minor Changes + +- 3b62f9d: Add a `skip-manifest-obfuscation` option for `pnpm pack` and `pnpm publish`. When enabled, the original `packageManager` field and publish lifecycle scripts are kept in the packed/published manifest instead of being stripped. The pnpm-specific `pnpm` field continues to be omitted. +- 508e6d8: Added `pnpm stage` with `publish`, `list`, `view`, `approve`, `reject`, and `download` subcommands for npm staged publishing. + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/releasing.exportable-manifest@1100.1.0 + - @pnpm/config.reader@1101.4.0 + - @pnpm/installing.commands@1100.5.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/fetching.directory-fetcher@1100.0.12 + - @pnpm/engine.runtime.commands@1100.0.17 + - @pnpm/engine.runtime.node-resolver@1101.1.1 + - @pnpm/installing.client@1100.2.2 + - @pnpm/exec.lifecycle@1100.0.13 + - @pnpm/workspace.projects-filter@1100.0.15 + ## 1100.2.18 ### Patch Changes diff --git a/releasing/commands/package.json b/releasing/commands/package.json index 275701c9b2..83bc8deac0 100644 --- a/releasing/commands/package.json +++ b/releasing/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/releasing.commands", - "version": "1100.2.18", + "version": "1100.3.0", "description": "Commands for deploy, pack, and publish", "keywords": [ "pnpm", diff --git a/releasing/exportable-manifest/CHANGELOG.md b/releasing/exportable-manifest/CHANGELOG.md index cf5e3c2774..d38da8ce9f 100644 --- a/releasing/exportable-manifest/CHANGELOG.md +++ b/releasing/exportable-manifest/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/exportable-manifest +## 1100.1.0 + +### Minor Changes + +- 3b62f9d: Add a `skip-manifest-obfuscation` option for `pnpm pack` and `pnpm publish`. When enabled, the original `packageManager` field and publish lifecycle scripts are kept in the packed/published manifest instead of being stripped. The pnpm-specific `pnpm` field continues to be omitted. + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + ## 1100.0.7 ### Patch Changes diff --git a/releasing/exportable-manifest/package.json b/releasing/exportable-manifest/package.json index a532ae7f25..ec2833dbd4 100644 --- a/releasing/exportable-manifest/package.json +++ b/releasing/exportable-manifest/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/releasing.exportable-manifest", - "version": "1100.0.7", + "version": "1100.1.0", "description": "Creates an exportable manifest", "keywords": [ "pnpm", diff --git a/resolving/default-resolver/CHANGELOG.md b/resolving/default-resolver/CHANGELOG.md index 0be9bdd248..47f4826054 100644 --- a/resolving/default-resolver/CHANGELOG.md +++ b/resolving/default-resolver/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/default-resolver +## 1100.3.2 + +### Patch Changes + +- Updated dependencies [212315d] + - @pnpm/resolving.npm-resolver@1101.3.2 + - @pnpm/resolving.local-resolver@1101.1.1 + - @pnpm/engine.runtime.node-resolver@1101.1.1 + - @pnpm/engine.runtime.bun-resolver@1101.1.2 + - @pnpm/engine.runtime.deno-resolver@1101.1.2 + ## 1100.3.1 ### Patch Changes diff --git a/resolving/default-resolver/package.json b/resolving/default-resolver/package.json index 431b76f62e..098f7cb103 100644 --- a/resolving/default-resolver/package.json +++ b/resolving/default-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.default-resolver", - "version": "1100.3.1", + "version": "1100.3.2", "description": "pnpm's default package resolver", "keywords": [ "pnpm", diff --git a/resolving/local-resolver/CHANGELOG.md b/resolving/local-resolver/CHANGELOG.md index 85a1765cdb..1598aced18 100644 --- a/resolving/local-resolver/CHANGELOG.md +++ b/resolving/local-resolver/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/local-resolver +## 1101.1.1 + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + ## 1101.1.0 ### Minor Changes diff --git a/resolving/local-resolver/package.json b/resolving/local-resolver/package.json index 0c9abbec15..14415e78f8 100644 --- a/resolving/local-resolver/package.json +++ b/resolving/local-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.local-resolver", - "version": "1101.1.0", + "version": "1101.1.1", "description": "Resolver for local packages", "keywords": [ "pnpm", diff --git a/resolving/npm-resolver/CHANGELOG.md b/resolving/npm-resolver/CHANGELOG.md index f7270c0c20..e5c6fcd3b6 100644 --- a/resolving/npm-resolver/CHANGELOG.md +++ b/resolving/npm-resolver/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/npm-resolver +## 1101.3.2 + +### Patch Changes + +- 212315d: Added a new setting `trustLockfile`. When `true`, `pnpm install` skips the supply-chain verification pass that re-applies `minimumReleaseAge` / `trustPolicy='no-downgrade'` to every entry in the loaded lockfile. The install treats the lockfile as already-trusted — useful for closed-source projects where every commit comes from a trusted author, or for CI runs against an already-verified lockfile. Defaults to `false`; verification stays on by default. Set in `pnpm-workspace.yaml`. + + Also cut the memory footprint of the verification pass itself: the per-(registry, name) trust-meta cache previously retained the full packument — dependency graphs, scripts, README, and per-version manifests — for the entire install. On large workspaces (`~4k` lockfile entries with `minimumReleaseAge` + `trustPolicy: no-downgrade` enabled) this could OOM CI runners with a 2GB heap cap. The cache now stores only the fields the trust check actually reads (`time`, per-version `_npmUser.trustedPublisher`, `dist.attestations.provenance`). The abbreviated-metadata cache is similarly projected to just the package-level `modified` field and the set of currently-listed version names. Fixes [#11860](https://github.com/pnpm/pnpm/issues/11860). + ## 1101.3.1 ### Patch Changes diff --git a/resolving/npm-resolver/package.json b/resolving/npm-resolver/package.json index f60f68f34b..8d764adb9a 100644 --- a/resolving/npm-resolver/package.json +++ b/resolving/npm-resolver/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/resolving.npm-resolver", - "version": "1101.3.1", + "version": "1101.3.2", "description": "Resolver for npm-hosted packages", "keywords": [ "pnpm", diff --git a/store/commands/CHANGELOG.md b/store/commands/CHANGELOG.md index 4889a1864b..3824e4bdfb 100644 --- a/store/commands/CHANGELOG.md +++ b/store/commands/CHANGELOG.md @@ -1,5 +1,16 @@ # @pnpm/store.commands +## 1100.0.20 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 + - @pnpm/store.connection-manager@1100.2.3 + - @pnpm/installing.client@1100.2.2 + ## 1100.0.19 ### Patch Changes diff --git a/store/commands/package.json b/store/commands/package.json index 860a876523..f6c07a3712 100644 --- a/store/commands/package.json +++ b/store/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.commands", - "version": "1100.0.19", + "version": "1100.0.20", "description": "Commands for controlling and inspecting the store", "keywords": [ "pnpm", diff --git a/store/connection-manager/CHANGELOG.md b/store/connection-manager/CHANGELOG.md index 7865a83a41..566ceed68a 100644 --- a/store/connection-manager/CHANGELOG.md +++ b/store/connection-manager/CHANGELOG.md @@ -1,5 +1,15 @@ # @pnpm/store-connection-manager +## 1100.2.3 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/installing.client@1100.2.2 + - @pnpm/store.controller@1101.0.8 + ## 1100.2.2 ### Patch Changes diff --git a/store/connection-manager/package.json b/store/connection-manager/package.json index 6fae3978c9..10508011ff 100644 --- a/store/connection-manager/package.json +++ b/store/connection-manager/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.connection-manager", - "version": "1100.2.2", + "version": "1100.2.3", "description": "Create a pnpm store controller", "keywords": [ "pnpm", diff --git a/store/pkg-finder/CHANGELOG.md b/store/pkg-finder/CHANGELOG.md index a2f7f0f56d..97b29b8b4f 100644 --- a/store/pkg-finder/CHANGELOG.md +++ b/store/pkg-finder/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/store.pkg-finder +## 1100.0.12 + +### Patch Changes + +- @pnpm/fetching.directory-fetcher@1100.0.12 + ## 1100.0.11 ### Patch Changes diff --git a/store/pkg-finder/package.json b/store/pkg-finder/package.json index d3a023318b..7c6351e1ce 100644 --- a/store/pkg-finder/package.json +++ b/store/pkg-finder/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/store.pkg-finder", - "version": "1100.0.11", + "version": "1100.0.12", "description": "Read a package's file map from the content-addressable store", "keywords": [ "pnpm", diff --git a/testing/temp-store/CHANGELOG.md b/testing/temp-store/CHANGELOG.md index 1e89eb0f71..1d8730efc0 100644 --- a/testing/temp-store/CHANGELOG.md +++ b/testing/temp-store/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/testing.temp-store +## 1100.1.3 + +### Patch Changes + +- @pnpm/installing.client@1100.2.2 +- @pnpm/store.controller@1101.0.8 + ## 1100.1.2 ### Patch Changes diff --git a/testing/temp-store/package.json b/testing/temp-store/package.json index 114eb39ae5..4ec2fb8e20 100644 --- a/testing/temp-store/package.json +++ b/testing/temp-store/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/testing.temp-store", - "version": "1100.1.2", + "version": "1100.1.3", "description": "A temporary store for testing purposes", "keywords": [ "pnpm", diff --git a/workspace/commands/CHANGELOG.md b/workspace/commands/CHANGELOG.md index d00c56b441..fa9f7966f9 100644 --- a/workspace/commands/CHANGELOG.md +++ b/workspace/commands/CHANGELOG.md @@ -1,5 +1,14 @@ # @pnpm/plugin-commands-init +## 1100.1.14 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + - @pnpm/cli.utils@1101.0.7 + ## 1100.1.13 ### Patch Changes diff --git a/workspace/commands/package.json b/workspace/commands/package.json index fd51d1a0bf..92ebb6e0b3 100644 --- a/workspace/commands/package.json +++ b/workspace/commands/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.commands", - "version": "1100.1.13", + "version": "1100.1.14", "description": "Create a package.json file", "keywords": [ "pnpm", diff --git a/workspace/injected-deps-syncer/CHANGELOG.md b/workspace/injected-deps-syncer/CHANGELOG.md index f57e0b4589..647430bf90 100644 --- a/workspace/injected-deps-syncer/CHANGELOG.md +++ b/workspace/injected-deps-syncer/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/workspace.injected-deps-syncer +## 1100.0.14 + +### Patch Changes + +- @pnpm/bins.linker@1100.0.9 +- @pnpm/fetching.directory-fetcher@1100.0.12 +- @pnpm/workspace.projects-reader@1101.0.7 + ## 1100.0.13 ### Patch Changes diff --git a/workspace/injected-deps-syncer/package.json b/workspace/injected-deps-syncer/package.json index 07335bcbe7..e009e8c971 100644 --- a/workspace/injected-deps-syncer/package.json +++ b/workspace/injected-deps-syncer/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.injected-deps-syncer", - "version": "1100.0.13", + "version": "1100.0.14", "description": "Update all injected replica of a workspace package", "keywords": [ "pnpm", diff --git a/workspace/project-manifest-reader/CHANGELOG.md b/workspace/project-manifest-reader/CHANGELOG.md index 98661d0691..9243883b54 100644 --- a/workspace/project-manifest-reader/CHANGELOG.md +++ b/workspace/project-manifest-reader/CHANGELOG.md @@ -1,5 +1,11 @@ # @pnpm/read-project-manifest +## 1100.0.8 + +### Patch Changes + +- d7da112: Implement `pnpm pkg` command natively, following `npm pkg` standards. + ## 1100.0.7 ### Patch Changes diff --git a/workspace/project-manifest-reader/package.json b/workspace/project-manifest-reader/package.json index 38e8694e0e..f13473d859 100644 --- a/workspace/project-manifest-reader/package.json +++ b/workspace/project-manifest-reader/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.project-manifest-reader", - "version": "1100.0.7", + "version": "1100.0.8", "description": "Read a project manifest (called package.json in most cases)", "keywords": [ "pnpm", diff --git a/workspace/projects-filter/CHANGELOG.md b/workspace/projects-filter/CHANGELOG.md index 679a7e5735..49036e7046 100644 --- a/workspace/projects-filter/CHANGELOG.md +++ b/workspace/projects-filter/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/filter-workspace-packages +## 1100.0.15 + +### Patch Changes + +- @pnpm/workspace.projects-reader@1101.0.7 +- @pnpm/workspace.projects-graph@1100.0.12 + ## 1100.0.14 ### Patch Changes diff --git a/workspace/projects-filter/package.json b/workspace/projects-filter/package.json index 25b631b299..e453c801ed 100644 --- a/workspace/projects-filter/package.json +++ b/workspace/projects-filter/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.projects-filter", - "version": "1100.0.14", + "version": "1100.0.15", "description": "Filters packages in a workspace", "keywords": [ "pnpm", diff --git a/workspace/projects-graph/CHANGELOG.md b/workspace/projects-graph/CHANGELOG.md index 70da473425..45fa06d17e 100644 --- a/workspace/projects-graph/CHANGELOG.md +++ b/workspace/projects-graph/CHANGELOG.md @@ -1,5 +1,12 @@ # @pnpm/workspace.pkgs-graph +## 1100.0.12 + +### Patch Changes + +- Updated dependencies [212315d] + - @pnpm/resolving.npm-resolver@1101.3.2 + ## 1100.0.11 ### Patch Changes diff --git a/workspace/projects-graph/package.json b/workspace/projects-graph/package.json index 93e28eeb07..fc1e608021 100644 --- a/workspace/projects-graph/package.json +++ b/workspace/projects-graph/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.projects-graph", - "version": "1100.0.11", + "version": "1100.0.12", "description": "Create a graph from an array of packages", "keywords": [ "pnpm", diff --git a/workspace/projects-reader/CHANGELOG.md b/workspace/projects-reader/CHANGELOG.md index 23cbf827e7..733d67ce36 100644 --- a/workspace/projects-reader/CHANGELOG.md +++ b/workspace/projects-reader/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/find-workspace-packages +## 1101.0.7 + +### Patch Changes + +- Updated dependencies [d7da112] + - @pnpm/workspace.project-manifest-reader@1100.0.8 + - @pnpm/cli.utils@1101.0.7 + ## 1101.0.6 ### Patch Changes diff --git a/workspace/projects-reader/package.json b/workspace/projects-reader/package.json index 17252f30de..f00eab03d9 100644 --- a/workspace/projects-reader/package.json +++ b/workspace/projects-reader/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.projects-reader", - "version": "1101.0.6", + "version": "1101.0.7", "description": "Finds packages inside a workspace", "keywords": [ "pnpm", diff --git a/workspace/state/CHANGELOG.md b/workspace/state/CHANGELOG.md index 97f2b97909..e8d761476e 100644 --- a/workspace/state/CHANGELOG.md +++ b/workspace/state/CHANGELOG.md @@ -1,5 +1,13 @@ # @pnpm/workspace.state +## 1100.0.15 + +### Patch Changes + +- Updated dependencies [3b62f9d] +- Updated dependencies [212315d] + - @pnpm/config.reader@1101.4.0 + ## 1100.0.14 ### Patch Changes diff --git a/workspace/state/package.json b/workspace/state/package.json index c1be89015b..4d7d17ab8e 100644 --- a/workspace/state/package.json +++ b/workspace/state/package.json @@ -1,6 +1,6 @@ { "name": "@pnpm/workspace.state", - "version": "1100.0.14", + "version": "1100.0.15", "description": "Track the list of actual paths of workspace packages in a cache", "keywords": [ "pnpm",