Zoltan Kochan and github-actions[bot]
41de0d1c75
chore(release): 10.34.8 ( #17242 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-10-22 22:11:15 +02:00
Zoltan Kochan and github-actions[bot]
f2c3feb5e3
chore(release): 10.34.7 ( #16860 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-10-12 00:03:43 +02:00
Zoltan Kochan and github-actions[bot]
9287c31cea
chore(release): 10.34.6 ( #16340 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-09-28 20:12:12 +02:00
Zoltan Kochan
e5dce41eab
chore(release): 10.34.5 ( #12900 )
2026-07-10 12:26:37 +02:00
Zoltan Kochan
e28b9cb47d
chore(release): 10.34.4 ( #12511 )
2026-06-19 00:16:04 +02:00
Zoltan Kochan
352ae489f1
fix(security): backport path-traversal and containment fixes to v10 ( #12504 )
...
Backports three merged security fixes from main to release/10:
- Contain hoisted dependency aliases so a crafted lockfile alias cannot
escape node_modules or overwrite pnpm-owned layout. The hoisted graph
builder now validates each alias at the safeJoinModulesDir sink.
(GHSA-fr4h-3cph-29xv, #12343 )
- Contain pnpm patch-remove deletions to the configured patches
directory. (#12341 )
- Reject path-traversal config dependency names and versions from
pnpm-workspace.yaml before they are used to build filesystem paths.
(GHSA-qrv3-253h-g69c, #12470 )
Written by an agent (Claude Code, claude-opus-4-8).
2026-06-18 21:54:19 +02:00
Zoltan Kochan
c7c97c30df
chore(release): 10.34.3 ( #12332 )
2026-06-11 18:45:16 +02:00
Zoltan Kochan
343441ca62
chore(release): 10.34.2 ( #12311 )
2026-06-10 15:40:37 +02:00
Zoltan Kochan
3937b441cb
chore(release): 10.34.1 ( #12008 )
2026-05-28 00:51:17 +02:00
Zoltan Kochan
1de167838c
chore(release): 10.34.0 ( #11988 )
2026-05-27 14:58:46 +02:00
Zoltan Kochan
ff3304fcb3
chore(release): 10.33.4
2026-05-06 15:00:18 +02:00
Zoltan Kochan
2a1ffe1956
chore(release): 10.33.2
2026-04-23 13:39:20 +02:00
Zoltan Kochan
948bd8c7c5
chore(release): libs
2026-04-14 10:48:26 +02:00
Zoltan Kochan
be07631710
chore(release): 10.33.0
2026-03-24 17:15:56 +01:00
Zoltan Kochan
eaae772717
chore(release): 10.32.1
2026-03-11 02:25:40 +01:00
Zoltan Kochan
49d249bf7f
chore(release): 10.32.0
2026-03-09 22:43:09 +01:00
Zoltan Kochan
229c244e64
chore(release): 10.31.0
2026-03-08 00:30:23 +01:00
Zoltan Kochan and Claude Opus 4.6
0ae33cc01a
fix(patch): use '/dev/null' instead of os.devNull for GIT_CONFIG_GLOBAL ( #10757 )
...
Git on Windows (Git for Windows / MSYS2) understands Unix-style
'/dev/null' but cannot access the native Windows null device '\\.\nul'
as a file path, causing "fatal: unable to access '\\.\nul'" errors.
This is a manual backport of the fix from #10757 on main.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-07 23:02:51 +01:00
Umesh More
982c99944d
fix(patch): prevent git config path errors in patch-commit ( #10640 )
...
* fix(patch): prevent git config path errors in patch-commit
Replace HOME='' with GIT_CONFIG_GLOBAL to bypass user config
without breaking home directory resolution in restricted environments.
Fixes #6537
* fix(patch): prevent git config path errors in patch-commit
Use GIT_CONFIG_NOSYSTEM and GIT_CONFIG_GLOBAL to bypass git config
without breaking HOME path resolution in restricted environments.
Fixes #6537
2026-03-07 23:02:51 +01:00
Zoltan Kochan
2a56acc1b2
chore(release): 10.30.2
2026-02-24 00:36:58 +01:00
Zoltan Kochan
958ab703d1
chore(release): libs
2026-02-17 16:44:04 +01:00
Zoltan Kochan
d12c9028ec
chore(release): 10.30.0
2026-02-17 15:49:12 +01:00
Zoltan Kochan
f001ab770f
chore(release): 10.29.3
2026-02-11 13:07:10 +01:00
Zoltan Kochan
ea870c786f
chore(release): 10.29.2
2026-02-09 02:22:45 +01:00
Zoltan Kochan
11202fc1ed
chore(release): 10.29.0
2026-02-07 17:51:43 +01:00
Zoltan Kochan
89a2c4ec38
chore(release): 10.28.2
2026-01-26 15:17:27 +01:00
Zoltan Kochan
0b5a56aaec
chore(release): 10.28.1
2026-01-19 12:12:58 +01:00
Zoltan Kochan
91a241e692
chore(release): 10.28.0
2026-01-09 23:47:40 +01:00
Zoltan Kochan
6bdba72ad3
chore(release): 10.27.0
2025-12-30 21:49:41 +01:00
Zoltan Kochan
8ec7939657
chore(release): 10.26.2
2025-12-23 14:34:19 +01:00
Zoltan Kochan
4986c46b48
chore(release): 10.26.1
2025-12-19 01:48:40 +01:00
Zoltan Kochan
244e33b4e9
chore(release): 10.26.0
2025-12-15 12:10:26 +01:00
Zoltan Kochan
b0cd2dea48
chore(release): 10.25.0
2025-12-08 15:33:42 +01:00
Zoltan Kochan
7c15c93c26
chore(release): libs
2025-12-02 16:02:38 +01:00
Zoltan Kochan
16d08d0cb0
chore(release): 10.24.0
2025-11-27 14:53:58 +01:00
Zoltan Kochan
603aedae0a
chore(release): 10.23.0
2025-11-20 14:46:54 +01:00
Zoltan Kochan
1de6d19f59
chore(release): 10.22.0
2025-11-12 14:13:12 +01:00
Zoltan Kochan
2e2dc27d07
chore(release): 10.21.0
2025-11-09 23:45:04 +01:00
Zoltan Kochan
49f03d14ee
chore(release): 10.20.0
2025-10-28 17:35:21 +01:00
Zoltan Kochan
0cde1287c8
chore: update repository fields
2025-10-23 11:57:12 +02:00
Zoltan Kochan
43d7b18c2f
chore(release): 10.19.0
2025-10-21 15:30:20 +02:00
Zoltan Kochan
1bfc105da0
chore(release): 10.18.3
2025-10-14 11:27:45 +02:00
Zoltan Kochan
1b15e45ae9
chore(release): 10.18.2
2025-10-09 16:56:04 +02:00
Zoltan Kochan
651a27aea4
chore(release): 10.18.1
2025-10-06 14:13:59 +02:00
Zoltan Kochan
bdbd31aa4f
chore(release): 10.18.0
2025-10-02 16:36:27 +02:00
Zoltan Kochan
6618431aee
chore(release): libs
2025-09-29 11:56:00 +02:00
Zoltan Kochan
f6242c333b
chore(release): 10.17.1
2025-09-22 15:09:34 +02:00
xiaoliyooo and Zoltan Kochan
6633eb3eb0
fix: fix the state.json creation path when execute pnpm patch in sub package ( #9733 )
...
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-09-20 02:51:23 +02:00
Zoltan Kochan
1a1a272fa4
chore(release): 10.17.0
2025-09-17 16:48:25 +02:00
Zoltan Kochan
ea44ff979f
chore(release): 10.16.1
2025-09-13 19:20:27 +02:00
