Commit Graph

416 Commits

Author SHA1 Message Date
Johan Quan Vo
d75628a612 fix: use tarball URL returned in package metadata (#10431)
close #10254
2026-01-16 20:10:59 +01:00
Zoltan Kochan
91a241e692 chore(release): 10.28.0 2026-01-09 23:47:40 +01:00
Zoltan Kochan
f022a1b29a fix: setting requiredScripts in pnpm-workspace.yaml (#10404)
close #10261
2026-01-04 16:45:44 +01:00
Zoltan Kochan
6bdba72ad3 chore(release): 10.27.0 2025-12-30 21:49:41 +01:00
btea
3f2c5f4d39 feat: add trustPolicyIgnoreAfter (#10359)
* feat: add `trustPolicyIgnoreAfter`

* Update .changeset/big-lies-pump.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* refactor: npm-resolver

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Zoltan Kochan <z@kochan.io>
2025-12-28 02:03:56 +01:00
Zoltan Kochan
8ec7939657 chore(release): 10.26.2 2025-12-23 14:34:19 +01:00
Zoltan Kochan
4986c46b48 chore(release): 10.26.1 2025-12-19 01:48:40 +01:00
Zoltan Kochan
244e33b4e9 chore(release): 10.26.0 2025-12-15 12:10:26 +01:00
Zoltan Kochan
59a81aaa6d feat: create a new field for allowing/disallowing builds (#10311)
ref #10235
2025-12-14 22:20:39 +01:00
Oren
73cc63504d feat: support blockExoticSubdeps option to disallow non-trusted dep sources in subdeps (#10265)
* feat(core): add onlyRegistryDependencies option to disallow non-registry subdependencies

* fix: onlyRegistryDependencies=>registrySubdepsOnly

* fix: allow resolution from custom resolver

* fix: add registry-subdeps-only to types

* docs: update changesets

* refactor: registry-only

* refactor: registrySubdepsOnly=>blockExoticSubdeps

* fix: trust runtime deps

* refactor: remove comment

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
2025-12-10 12:22:37 +01:00
Zoltan Kochan
b0cd2dea48 chore(release): 10.25.0 2025-12-08 15:33:42 +01:00
Zoltan Kochan
7c15c93c26 chore(release): libs 2025-12-02 16:02:38 +01:00
Bart Riepe
b0ec709fa5 feat: allow loading certificates from scoped cert, ca and key (#10230)
* feat: allow loading certificates from `cert`, `ca` and `key`

These properties are supported in .npmrc, but get ignored by pnpm, this will make pnpm read
and use them as well.

* refactor: getNetworkConfigs.ts

* docs: update changesets

* fix: issues

* docs: update changesets

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
2025-12-02 08:17:41 +01:00
Zoltan Kochan
16d08d0cb0 chore(release): 10.24.0 2025-11-27 14:53:58 +01:00
Zoltan Kochan
603aedae0a chore(release): 10.23.0 2025-11-20 14:46:54 +01:00
Zoltan Kochan
1de6d19f59 chore(release): 10.22.0 2025-11-12 14:13:12 +01:00
Ryo Matsukawa
93d49548ca feat: add support for trustPolicyExclude (#10168)
close #10164
2025-11-11 13:01:56 +01:00
Zoltan Kochan
2e2dc27d07 chore(release): 10.21.0 2025-11-09 23:45:04 +01:00
Ryo Matsukawa
68ad0868b4 feat: add support for npm package trust evidence check via a new trustPolicy setting (#10103)
close #8889

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
2025-11-09 23:32:56 +01:00
Ryo Matsukawa
7b19077fcb feat: add support for pnpm config get globalconfig (#10090)
close #9977
2025-11-08 14:48:39 +01:00
Mike DiDomizio
36eb104e99 fix: gitBranchLockfile/mergeGitBranchLockfilesBranchPattern set in workspace file (#10139)
close #9651
2025-11-06 15:58:47 +01:00
Zoltan Kochan
49f03d14ee chore(release): 10.20.0 2025-10-28 17:35:21 +01:00
Zoltan Kochan
0cde1287c8 chore: update repository fields 2025-10-23 11:57:12 +02:00
Zoltan Kochan
43d7b18c2f chore(release): 10.19.0 2025-10-21 15:30:20 +02:00
Zoltan Kochan
dee39ecb8a feat: support allowing the build of specific versions of dependencies (#10104)
close #10076
2025-10-21 12:38:16 +02:00
Ryo Matsukawa
7c1382f7b7 feat: add support for exact versions in minimumReleaseAgeExclude (#10059)
close #9985

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
2025-10-18 11:10:08 +02:00
Zoltan Kochan
1bfc105da0 chore(release): 10.18.3 2025-10-14 11:27:45 +02:00
Ryo Matsukawa
47295e2d25 fix: handle scoped registry keys in config get (#10082)
* fix: handle scoped registry keys in config get

* Update config/plugin-commands-config/test/configGet.test.ts

Co-authored-by: Khải <hvksmr1996@gmail.com>

* Update config/plugin-commands-config/test/configGet.test.ts

Co-authored-by: Khải <hvksmr1996@gmail.com>

* Update config/plugin-commands-config/test/configGet.test.ts

Co-authored-by: Khải <hvksmr1996@gmail.com>

* chore: add a comment

---------

Co-authored-by: Khải <hvksmr1996@gmail.com>

close #9362
2025-10-14 00:23:08 +02:00
Ryo Matsukawa
587424f24f fix: config set --location=project with npm-managed settings (#10074)
close #9884
2025-10-12 18:33:23 +02:00
Ryo Matsukawa
eaaf8cb965 fix: match read/write priority when both pnpm-workspace.yaml and .npmrc exist (#10073)
* fix: match read/write priority when both pnpm-workspace.yaml and .npmrc exist

* chore: update help message

close #10072
2025-10-12 15:43:57 +02:00
sadan4
986516756c fix(config): fix infinite loop when using pre/post install scripts and verifyDepsBeforeInstall (#10062)
* fix(config): fix loop when using pre/post install scripts and verifyDepsBeforeInstall

If pre/post install scripts were used and `verifyDepsBeforeInstall` was
set to `install` and aforementioned scripts called other pnpm scripts,
pnpm would enter an infinite loop

close #10060

* fix: correct order of priority for reading verifyDepsBeforeRun

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
2025-10-10 18:32:39 +02:00
Zoltan Kochan
1b15e45ae9 chore(release): 10.18.2 2025-10-09 16:56:04 +02:00
Zoltan Kochan
6618431aee chore(release): libs 2025-09-29 11:56:00 +02:00
Zoltan Kochan
fb4da0c0ab feat: print a warning if network requests are slow (#10025)
* feat: print a warning if network requests are slow

* feat: print a warning if network requests are slow

add a new setting for fetch tarball speed

* feat: print a warning if network requests are slow

* fix: src/fetch.ts

* docs: add changeset
2025-09-28 11:19:10 +02:00
Zoltan Kochan
f6242c333b chore(release): 10.17.1 2025-09-22 15:09:34 +02:00
Zoltan Kochan
1a1a272fa4 chore(release): 10.17.0 2025-09-17 16:48:25 +02:00
Zoltan Kochan
ea44ff979f chore(release): 10.16.1 2025-09-13 19:20:27 +02:00
Zoltan Kochan
a3c1498403 chore(release): 10.16.0 2025-09-12 14:24:30 +02:00
Zoltan Kochan
e792927841 feat: support finder functions for performing complex searches with list and why commands (#9946) 2025-09-12 11:46:32 +02:00
Zoltan Kochan
38e2599ecd feat: set minimumReleaseAge to delay new versions of dependencies from being installed (#9957)
close #9921
2025-09-11 17:25:11 +02:00
Zoltan Kochan
df8d57fe0b fix: throw an error if nodeVersion is not a semver version (#9936)
ref #9934
2025-09-04 19:50:45 +02:00
Zoltan Kochan
3d1711a439 chore(release): 10.15.1 2025-09-01 11:41:05 +02:00
Khải
6aaf938edc refactor: move default registries to builtin (#9886) 2025-08-21 15:11:42 +02:00
btea
05dd45ea82 perf: replace startsWith with strict equality (#9881) 2025-08-21 14:14:26 +02:00
Zoltan Kochan
979ce80c87 chore(release): 10.15.0 2025-08-19 17:50:28 +02:00
Zoltan Kochan
facd7656e8 refactor: always use extensions in relative imports (#9878) 2025-08-19 15:25:11 +02:00
Zoltan Kochan
c89c93d59b test: use @jest/globals (#9877) 2025-08-19 00:16:25 +02:00
Zoltan Kochan
14c78e81d4 test: use jest.mocked (#9874) 2025-08-18 15:22:37 +02:00
Khải
0ecf85885b refactor: remove incorrect type variant (#9859)
`typeof npmTypes.types` is `Record<string, Constructor>` not `Record<string, value>`
2025-08-14 14:39:22 +02:00
Khải
797ce15852 refactor(test): remove deepNullProto and reuse getOutputString (#9855) 2025-08-14 12:27:23 +02:00