* fix(audit): fallback to quick audit endpoint
Fallback to /audits/quick when /audits fails with non-200, avoiding 5xx hard failures.
Close#10649
* refactor(audit): reuse request options for fallback
Share request options between primary and quick audit endpoints. Use POST for consistency.
* fix(audit): use quick audit endpoint as primary, full as fallback
---------
Co-authored-by: Zoltan Kochan <z@kochan.io>
* feat(audit): add --ignore-vulnerabilities flag for CVE
* fix: no need for changes
* feat: add changeset
* fix: need the GHSA id
* docs: update changeset
* test: fix
* test: fix
* feat(audit): --ignore and --ignore-unfixable
* refactor: change output
* fix: reading audit settings from pnpm-workspace.yaml
* test: ignoring a list of cves
* docs: add changeset
---------
Co-authored-by: Ian Krieger <ian.krieger@gc.com@mac.lan>
Co-authored-by: Zoltan Kochan <z@kochan.io>
* Prevent 'pnpm audit' from crashing with an OOM error by disabling the finding of dependency paths unless opted into
* feat!: remove show paths from audit output
* docs: add changeset
* fix: linting error
close#9280
---------
Co-authored-by: Zoltan Kochan <z@kochan.io>
* refactor: store link values before converting to references
* fix: use .sort() without localeCompare
https://github.com/pnpm/pnpm/pull/8128#discussion_r1614031566
> Nit, but you probably just want to call sort without a comparison
> function; these are already strings and locale compare is not a good
> comparison for anything but human readable strings since it will
> differ on different people's machines based on their language setting.
> I've hit this too many times before for code gen.
* feat: configure meta-updater to write test/tsconfig.json files
* fix: relative imports for __typings__
* chore: `pnpm run meta-updater`
* fix: explicitly use test/tsconfig.json for ts-jest
* auto-install-peers=true
* save-workspace-protocol=rolling
* publishConfig.linkDirectory true by default
* resolve-peers-from-workspace-root is true by default
* set dedupeDirectDeps to true by default in @pnpm/core.
