Zoltan Kochan
56a59df674
perf: persist bundled manifest in store index to avoid reading package.json from CAFS ( #10473 )
...
close #10461
2026-02-17 12:03:08 +01:00
Zoltan Kochan
40b107efa7
perf: migrate internal cache and index files to MessagePack serialization ( #10500 )
2026-01-23 01:31:09 +01:00
Trevor Burnham
88263a8be7
refactor: force re-fetch when resolution integrity changes ( #10454 )
...
* fix: force re-fetch when resolution integrity changes
When a resolver returns a resolution with a different integrity than
the current package's resolution, automatically force re-fetching the
package. This allows custom resolvers to trigger re-fetches by simply
returning the updated integrity, without needing to explicitly set
a forceFetch flag.
Closes #10451
* refactor: remove forceFetch
* test: fix
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2026-01-20 01:57:16 +01:00
Zoltan Kochan
e3b35b6f37
style: update eslint to v9 ( #10474 )
2026-01-17 12:01:23 +01:00
Zoltan Kochan
0bcbaf9994
refactor: move out skip resolution logic from package requester ( #10439 )
2026-01-12 13:08:50 +01:00
Zoltan Kochan
c5d4d81f56
refactor: rename FilesIndex to FilesMap ( #10427 )
2026-01-08 18:17:57 +01:00
Zoltan Kochan
d71174a4fa
perf: calculate the package file maps in the workers ( #10422 )
2026-01-08 14:53:47 +01:00
Brandon Cheng
2b81a4f09d
feat: improve filtered install performance with an optimistic lookup of package metadata from store ( #10408 )
2026-01-08 00:36:00 +01:00
btea
facdd717bf
feat: add trustPolicyIgnoreAfter ( #10359 )
...
* feat: add `trustPolicyIgnoreAfter`
* Update .changeset/big-lies-pump.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* refactor: npm-resolver
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-12-28 02:01:09 +01:00
Zoltan Kochan
0048667db4
refactor: use Maps instead of Records ( #10312 )
2025-12-15 11:48:19 +01:00
Oren
ba065f6a8b
fix(git-fetcher): block git dependencies from running prepare scripts unless allowed ( #10288 )
...
* fix(git-fetcher): block git dependencies from running prepare scripts unless allowed
* Update exec/prepare-package/src/index.ts
Co-authored-by: Zoltan Kochan <z@kochan.io >
* Also implement in gitHostedTarballFetcher
* refactor: move allowBuild function creation to the store manager
* refactor: pass allowBuild function to fetch function directly
* refactor: revert not needed changes and update changesets
* test: fix
* fix: implemented CR suggestions
* test: fix
* test: fix
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-12-09 18:25:07 +01:00
Oren
98a0410aa1
fix(tarball-resolver): add integrity hash to HTTP tarball dependencies ( #10287 )
...
* fix(tarball-resolver): add integrity hash to HTTP tarball dependencies
* Refactor to download tarball just once
* Fix tests
* fix: only calc hash when it is not passed in to the fetcher
* docs: update changesets
2025-12-08 23:38:27 +01:00
Trevor Burnham
38b8e357b5
feat: add custom resolvers and fetchers ( #10246 )
2025-11-30 14:19:04 +01:00
Zoltan Kochan
4893853569
perf: increase the default network concurrency on machines with many CPU cores ( #10215 )
...
close #10068
2025-11-21 15:29:56 +01:00
Ryo Matsukawa
9d3f00b09a
feat: add support for trustPolicyExclude ( #10168 )
...
close #10164
2025-11-11 13:00:20 +01:00
Ryo Matsukawa
10bc39152e
feat: add support for npm package trust evidence check via a new trustPolicy setting ( #10103 )
...
close #8889
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-11-09 23:23:58 +01:00
Zoltan Kochan
dab9abef5c
Merge remote-tracking branch 'origin/main' into v11
2025-10-24 14:19:07 +02:00
Ryo Matsukawa
7c1382f7b7
feat: add support for exact versions in minimumReleaseAgeExclude ( #10059 )
...
close #9985
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-10-18 11:10:08 +02:00
Zoltan Kochan
1089a96589
fix: update dependencies ( #9899 )
2025-08-28 15:33:19 +02:00
Zoltan Kochan
491a84fb26
feat: use ESM instead of commonjs ( #9870 )
2025-08-25 10:02:00 +02:00
Zoltan Kochan
facd7656e8
refactor: always use extensions in relative imports ( #9878 )
2025-08-19 15:25:11 +02:00
Zoltan Kochan
86b33e91ea
feat: support installing Bun runtime ( #9815 )
...
* feat: support installing Bun runtime
* feat: support installing Bun runtime
* fix: cache libc resolution
* refactor: shasum file fetching
* docs: add changesets
* feat: installing the right artifact
* test: supported architectures
* test: fix on Windows
2025-07-31 13:46:13 +02:00
Zoltan Kochan
d1edf732ad
feat: support installing Deno runtime ( #9791 )
...
* feat: support installing Deno runtime
* refactor: use npm registry to resolve deno version
* feat: wip
* feat: installing deno runtime
* style: fix
* test: fix
* test: deno
* test: fix
* feat: deno
* feat: deno
* feat: create zip fetcher
* style: fix
* refactor: node fetch
* feat: support a new binary fetcher
* test: fix
* feat: rename zip-fetcher to binary-fetcher
* refactor: change naming
* fix: windows
* refactor: rename packages
* refactor: deno resolver
* refactor: runtime resolvers
* refactor: binary fetcher
* refactor: runtime resolvers
* refactor: runtime resolvers
* refactor: create SingleResolution
* refactor: remove not needed change
* refactor: package requester
* docs: add changesets
* refactor: use VariationsResolution and AtomicResolution
* refactor: implement CR suggestions
* docs: add changesets
* fix: address comment in CR
* feat: update formatting of pnpm-lock.yaml
2025-07-30 11:27:07 +02:00
Zoltan Kochan
f91922c938
fix: store every Node.js artifact's integrity separately in the lockfile ( #9798 )
...
* fix: store every Node.js artifact's integrity separately in the lockfile
* fix: store every Node.js artifact's integrity separately in the lockfile
* style: fix
* Potential fix for code scanning alert no. 76: Incomplete string escaping or encoding
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* fix: windows
* refactor: node install
* fix: test
* fix: test on Windows
---------
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-07-25 16:31:23 +02:00
Zoltan Kochan
ee795da67e
revert: there's no need to pass the packageId to the fetcher ( #9789 )
...
Reverts a change introduced via #9755
2025-07-23 14:50:36 +02:00
Zoltan Kochan
1a07b8fc7c
feat: install Node.js runtime as a dependency ( #9755 )
2025-07-19 15:11:40 +02:00
Brandon Cheng
5d904375aa
fix: --lockfile-only flag causes pnpm update to ignore matchers ( #9588 )
...
* test: add regression test for `pnpm update --lockfile-only`
* fix: --lockfile-only flag causes pnpm update to ignore matchers
2025-06-01 23:39:54 +02:00
Nicolas Le Cam
c24c66e588
fix: don't remove cpu field on subsequent install ( #9504 )
...
close #9353
2025-05-09 14:06:43 +02:00
Zoltan Kochan
8a9f3a4835
refactor: rename pref to bare specifier ( #9445 )
2025-04-20 22:58:08 +02:00
Khải
9c3dd03710
feat: add support for the jsr: protocol ( #9358 )
...
close #8941
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-04-20 11:51:51 +02:00
Zoltan Kochan
5b73df1eb1
refactor: resolvers should calculate the specifiers that are saved into package.json ( #9426 )
...
* refactor: resolvers should return specifier templates
* refactor: updating workspace protocol specs in package.json
* refactor: move workspace selector calculation logic to npm-resolver
* refactor: move workspace selector calculation logic to npm-resolver
* refactor: calculating range in npm-resolver
* refactor: rename normalizedPref and specifierTemplate to specifier
* refactor: specifiers creation
* refactor: npm-resolver
* refactor: remove which-version-is-pinned package
* refactor: which version is pinned
* docs: add changesets
* refactor: implement suggestions
* refactor: revert regex usage
2025-04-18 17:48:03 +02:00
Zoltan Kochan
81f441cd3a
refactor: updating specs in the manifest ( #9410 )
2025-04-13 21:44:35 +02:00
Khải
72cff38486
refactor: pass whole registries to the resolver ( #9375 )
2025-04-04 01:20:16 +02:00
Fotis Papadogeorgopoulos
dde650b96f
fix: ensure that recursive pnpm update --latest <pkg> updates only the specified package ( #8933 )
...
* test(pnpm): expand dedupePeers test to account for other dependencies in same package
Previously, this test only asserted that _other_ monorepo packages were unaffected,
but it did not check other dependencies of the _same_ monorepo package.
* fix: ensure that recursive update --latest only updates matched packages
* fix: move update check to resolveDependendency
* refactor: move updateToLatest conditional up in resolveDependency
* refactor: make update types mutually exclusive in resolveDependencies
* refactor: rename 'in-range' update type to 'compatible'
Co-authored-by: Zoltan Kochan <z@kochan.io >
* refactor: use update union type in package-requester and store-controller-type
* docs: add changesets
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-01-07 02:08:26 +01:00
Zoltan Kochan
6483b646fe
feat: a new setting for injecting workspace packages ( #8836 )
2024-12-05 17:37:15 +01:00
Zoltan Kochan
298e5dcafd
feat!: create a separate directory in the store for index files ( #8700 )
2024-10-27 21:00:28 +01:00
Zoltan Kochan
aae0808b35
Merge remote-tracking branch 'origin/main' into v10
2024-10-05 02:24:28 +02:00
btea
9797a1e889
refactor: remove useless parameters from the catch statement ( #8583 )
2024-09-29 12:08:48 +02:00
Zoltan Kochan
d433cb9c9f
feat: adding the package name into the index file name ( #8510 )
...
close #8204
2024-09-15 18:26:28 +02:00
Zoltan Kochan
db420ab592
refactor(cafs): create a separate function for creating index file path ( #8508 )
2024-09-08 14:43:09 +02:00
Zoltan Kochan
7c6c923a3d
feat: a new option strict-store-pkg-content-check ( #8212 )
...
ref #4724
2024-06-16 21:37:58 +02:00
Zoltan Kochan
45f4262f03
refactor: create a separate type for NodeId ( #8092 )
2024-05-17 11:23:52 +02:00
Zoltan Kochan
7a0536e23d
fix: cannot read properties of undefined (reading missingPeersOfChildren) ( #8054 )
...
close #8041
2024-05-06 09:21:08 +02:00
Zoltan Kochan
9719a42d0e
feat: configurable max length of directories inside node_modules/.pnpm ( #7994 )
...
close #7355
2024-04-28 11:07:29 +02:00
Zoltan Kochan
b7d2ed47be
fix: ignore the engines.pnpm field of dependencies ( #7968 )
...
close #7965
2024-04-19 02:49:01 +02:00
Zoltan Kochan
c9db742824
fix: update typescript to v5.4 ( #7905 )
2024-04-12 14:03:45 +02:00
Zoltan Kochan
21878e7ae4
feat(lockfile)!: change the keys format ( #7752 )
2024-03-17 23:01:39 +01:00
Zoltan Kochan
23ba228424
refactor: return manifest from package requester
2024-03-13 03:14:10 +01:00
Zoltan Kochan
0e6b757cf5
feat!: remove requiresBuild from the lockfile ( #7710 )
...
close #7707
2024-02-27 11:50:43 +01:00
Khải
0ec0a44da7
fix(update): stop downgrading prereleases ( #7466 )
...
close #7436
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2024-01-27 14:41:58 +01:00