roysandrew
143ca78d09
fix(npm-resolver): respect version constraints when falling back to workspace packages ( #10704 )
...
* fix(npm-resolver): respect version constraints when falling back to workspace packages
When link-workspace-packages=true, the fallback resolution paths (registry 404
and no matching registry version) pass update: Boolean(opts.update) to
tryResolveFromWorkspacePackages. On fresh installs without a lockfile entry,
opts.update is 'compatible' (truthy), which overrides the version spec to '*'
and matches any workspace package regardless of version.
Change both fallback call sites to pass update: false so version constraints
are always respected for non-workspace-protocol dependencies. The workspace:
protocol path returns before these blocks and correctly continues to use
opts.update.
Close #10173
* test: clarify npm-resolver test names for workspace version mismatch scenarios
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2026-02-28 01:52:38 +01:00
Shunta Takemoto
0625e20442
feat: treat bare workspace: protocol as workspace:* ( #10436 )
...
* feat: treat bare `workspace:` protocol as `workspace:*`
* chore: add chageset
* test(exportable-manifest): add test for `workspace` with explicit versions
* test: add tests and update changesets
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2026-01-26 07:06:01 +01:00
3w36zj6
bb8baa7cff
fix(npm-resolver): request full metadata for optional dependencies ( #10455 )
...
close #9950
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2026-01-26 01:13:06 +01:00
Zoltan Kochan
40b107efa7
perf: migrate internal cache and index files to MessagePack serialization ( #10500 )
2026-01-23 01:31:09 +01:00
Vedant Madane
29a3151b60
feat: show available workspace versions on mismatch ( #10466 )
2026-01-16 17:47:30 +01:00
Zoltan Kochan
da112f7cb2
revert: "perf: use v8 serialize/deserialize instead of JSON ( #9971 )" ( #10420 )
...
close #10409
2026-01-13 15:16:33 +01:00
Sam Chung
938ea1f18c
Revert "fix: try not to make network requests with prefer offline" ( #10423 )
...
* Revert "fix: try not to make network requests with prefer offline (#10334 )"
This reverts commit 1bc6b5ac2c .
* Add changeset
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2026-01-12 13:39:59 +01:00
Zoltan Kochan
0bcbaf9994
refactor: move out skip resolution logic from package requester ( #10439 )
2026-01-12 13:08:50 +01:00
btea
facdd717bf
feat: add trustPolicyIgnoreAfter ( #10359 )
...
* feat: add `trustPolicyIgnoreAfter`
* Update .changeset/big-lies-pump.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* refactor: npm-resolver
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-12-28 02:01:09 +01:00
月正海角
a297ebc9f6
feat: improve error message for versions not meeting minimumReleaseAge ( #10350 )
...
close #10307
2025-12-22 17:28:52 +01:00
Sam Chung
1bc6b5ac2c
fix: try not to make network requests with prefer offline ( #10334 )
2025-12-21 19:04:11 +01:00
Minijus L
3585d9a372
fix: normalize tarball URLs by removing default HTTP/HTTPS ports ( #10273 )
...
* fix: normalize tarball URLs by removing default HTTP/HTTPS ports
closes #6725
* feat: refactor, add test and changeset
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-12-11 08:04:39 +01:00
Zoltan Kochan
2cb0657599
fix: don't fail with ERR_PNPM_MISSING_TIME on packages that are excluded from trust checks ( #10292 )
...
* fix: don't fail with ERR_PNPM_MISSING_TIME on packages that are excluded from trust checks
close #10259
* test: add coverage for excluded packages missing time field (#10293 )
* Initial plan
* test: add coverage for excluded packages missing time field
Co-authored-by: zkochan <1927579+zkochan@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: zkochan <1927579+zkochan@users.noreply.github.com >
---------
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: zkochan <1927579+zkochan@users.noreply.github.com >
2025-12-08 15:21:25 +01:00
Zoltan Kochan
6f361aa3b3
fix: trustPolicy should ignore trust evidences of prerelease versions ( #10227 )
2025-11-24 14:53:47 +01:00
Ryo Matsukawa
9d3f00b09a
feat: add support for trustPolicyExclude ( #10168 )
...
close #10164
2025-11-11 13:00:20 +01:00
Ryo Matsukawa
10bc39152e
feat: add support for npm package trust evidence check via a new trustPolicy setting ( #10103 )
...
close #8889
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-11-09 23:23:58 +01:00
Zoltan Kochan
9b344c8982
perf: use v8 serialize/deserialize instead of JSON ( #9971 )
...
close #9965
2025-11-06 01:01:06 +01:00
Zoltan Kochan
66d7a9af0c
Merge remote-tracking branch 'origin/main' into v11
2025-10-28 17:24:42 +01:00
SJ Hayman
6c3dcb8bf7
fix: skip time field validation for packages excluded by minimumReleaseAgeExclude ( #10118 )
...
Co-authored-by: SJ Hayman <sj@e2.ltd >
2025-10-27 11:34:56 +01:00
Zoltan Kochan
e304d142a2
fix: compile
2025-09-24 11:37:58 +02:00
Zoltan Kochan
f307b9a130
Merge remote-tracking branch 'origin/main' into v11
2025-09-24 10:51:53 +02:00
Zoltan Kochan
702ddb9ee8
fix: prefer non-deprecated versions when resolving fallback dist-tags ( #10004 )
...
close #9987
2025-09-20 11:03:18 +02:00
Zoltan Kochan
92591a2882
fix: compile
2025-09-19 15:13:08 +02:00
Zoltan Kochan
cb0c5b94c6
Merge remote-tracking branch 'origin/main' into v11
2025-09-19 14:31:36 +02:00
Zoltan Kochan
02f8b690ad
fix: don't downgrade dist-tags to prerelease versions when minimumReleaseAge is set ( #9988 )
...
close #9979
2025-09-17 14:34:42 +02:00
Zoltan Kochan
121b44e246
fix: don't install package from store that doesn't satisfy min release age ( #9980 )
...
close #9978
2025-09-17 00:11:43 +02:00
Zoltan Kochan
6f861bccaa
Merge remote-tracking branch 'origin/main' into v11
2025-09-12 22:35:14 +02:00
Zoltan Kochan
38e2599ecd
feat: set minimumReleaseAge to delay new versions of dependencies from being installed ( #9957 )
...
close #9921
2025-09-11 17:25:11 +02:00
Zoltan Kochan
cf9f14aa9e
fix: update tempy
2025-08-28 14:00:51 +02:00
Zoltan Kochan
3df6702bcb
fix: update load-json-file, write-json-file, write-pkg
2025-08-28 11:37:38 +02:00
Zoltan Kochan
491a84fb26
feat: use ESM instead of commonjs ( #9870 )
2025-08-25 10:02:00 +02:00
Zoltan Kochan
27cbc09206
style: fix jest-related linting issues ( #9894 )
2025-08-22 21:56:49 +02:00
Zoltan Kochan
facd7656e8
refactor: always use extensions in relative imports ( #9878 )
2025-08-19 15:25:11 +02:00
Zoltan Kochan
8a9f3a4835
refactor: rename pref to bare specifier ( #9445 )
2025-04-20 22:58:08 +02:00
Khải
9c3dd03710
feat: add support for the jsr: protocol ( #9358 )
...
close #8941
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-04-20 11:51:51 +02:00
Zoltan Kochan
5b73df1eb1
refactor: resolvers should calculate the specifiers that are saved into package.json ( #9426 )
...
* refactor: resolvers should return specifier templates
* refactor: updating workspace protocol specs in package.json
* refactor: move workspace selector calculation logic to npm-resolver
* refactor: move workspace selector calculation logic to npm-resolver
* refactor: calculating range in npm-resolver
* refactor: rename normalizedPref and specifierTemplate to specifier
* refactor: specifiers creation
* refactor: npm-resolver
* refactor: remove which-version-is-pinned package
* refactor: which version is pinned
* docs: add changesets
* refactor: implement suggestions
* refactor: revert regex usage
2025-04-18 17:48:03 +02:00
Khải
72cff38486
refactor: pass whole registries to the resolver ( #9375 )
2025-04-04 01:20:16 +02:00
Brandon Cheng
f9c53da20b
feat: return workspace for resolvedVia for workspace packages ( #9293 )
...
* feat: return `workspace` for `resolvedVia`
* chore: update .changeset/shaggy-chefs-reply.md
2025-03-17 01:40:56 +01:00
Zoltan Kochan
8371664f6f
fix: add more info to the no matching version error message ( #9225 )
2025-03-06 23:56:49 +01:00
Zoltan Kochan
d2e83b0f3e
feat: bump metadata cache version
2024-12-01 10:40:09 +01:00
Zoltan Kochan
c961d48ca1
Merge commit from fork
2024-11-29 01:42:45 +01:00
Zoltan Kochan
aae0808b35
Merge remote-tracking branch 'origin/main' into v10
2024-10-05 02:24:28 +02:00
Khải
83681daf57
fix: install packages with incompatible libc ( #8569 )
...
close #7362
2024-09-27 22:46:16 +02:00
Zoltan Kochan
501c152e34
feat!: use SHA256 for hashing side effects cache keys in index files ( #8533 )
2024-09-18 10:24:03 +02:00
Khải
9b4f73caaf
chore(scripts): typecheck-only ( #8395 )
...
* chore(scripts): typecheck-only
* feat: change all configuration
* feat: include pnpm/ and pnpm/test/
* chore(deps): remove unused dependency
* refactor(typescript-only): use find-packages
* refactor(typescript-only): refactor paths
* fix: typescript-only
* fix: update compile-only
* fix: compile pnpm
* fix: windows
* fix: windows
* chore: meta-updater
* refactor(tsconfig): remove explicit composite
* fix: path in windows
* feat: don't depend on cwd
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2024-08-11 08:26:01 +02:00
Zoltan Kochan
0406d4ad3d
refactor: use a branded type for project root dir paths ( #8272 )
2024-07-04 13:13:34 +02:00
Zoltan Kochan
341656f9b3
refactor: make workspace packages a map
2024-07-02 22:49:38 +02:00
Zoltan Kochan
dd00eeb18c
refactor: normalize dir field names across project objects ( #8262 )
2024-07-01 11:27:04 +02:00
Brandon Cheng
c7e1b6fae8
chore: configure TypeScript project references for tests ( #8128 )
...
* refactor: store link values before converting to references
* fix: use .sort() without localeCompare
https://github.com/pnpm/pnpm/pull/8128#discussion_r1614031566
> Nit, but you probably just want to call sort without a comparison
> function; these are already strings and locale compare is not a good
> comparison for anything but human readable strings since it will
> differ on different people's machines based on their language setting.
> I've hit this too many times before for code gen.
* feat: configure meta-updater to write test/tsconfig.json files
* fix: relative imports for __typings__
* chore: `pnpm run meta-updater`
* fix: explicitly use test/tsconfig.json for ts-jest
2024-05-31 12:48:13 +02:00
Zoltan Kochan
0c08e1c50f
fix: clear metadata cache after resolution is finished ( #8109 )
2024-05-22 00:23:14 +02:00