btea
6e4b09415f
fix: make catalog protocol matching error messages clearer ( #10052 )
...
* fix: verify in advance whether the specifier that the catalog pkg is valid
* fix: update error message
* test: update
* Update resolving/default-resolver/src/index.ts
Co-authored-by: Brandon Cheng <gluxon@users.noreply.github.com >
---------
Co-authored-by: Brandon Cheng <gluxon@users.noreply.github.com >
2026-01-16 01:53:08 +01:00
Zoltan Kochan
91a241e692
chore(release): 10.28.0
2026-01-09 23:47:40 +01:00
Zoltan Kochan
6bdba72ad3
chore(release): 10.27.0
2025-12-30 21:49:41 +01:00
Brandon Cheng
6eb43b356c
fix: pnpm add incorrectly modifies a catalog entry in pnpm-workspace.yaml to its exact version ( #10370 )
...
* refactor: factor out a `getRealNameAndSpec` function
* test: `pnpm add` does not modify existing catalog entries
* fix: resolve preferred version without mutating bare specifier
close #9759
2025-12-29 02:07:59 +01:00
btea
3f2c5f4d39
feat: add trustPolicyIgnoreAfter ( #10359 )
...
* feat: add `trustPolicyIgnoreAfter`
* Update .changeset/big-lies-pump.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* refactor: npm-resolver
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-12-28 02:03:56 +01:00
Zoltan Kochan
9a2393f67e
feat: enable injected local packages to work with global virtual store ( #10366 )
...
* feat: enable injected local packages to work with global virtual store
by leveraging `pkgLocationsByDepPath` for `file:` dependencies.
* fix: populate `pkgLocationsByDepPath` directly for directory dependencies in the graph builder
* refactor: store directory dependencies as a Map instead of an object
* refactor: improve file: dependency target directory resolution
by prioritizing `directoryDepsByDepPath` and providing a lockfile fallback.
* refactor: remove `pkgLocationsByDepPath` from hoisted dependency graph generation parameters
* test: fix
* test: fix
* refactor: simplify directory lookup for injected workspace packages
by directly using the dependency graph
* refactor: move extendProjectsWithTargetDirs to headless module and update imports
* refactor: make `directoryDepsByDepPath` required
in `LockfileToDepGraphOptions` and remove its nullish coalescing in headless
* refactor: directory dependency tracking
by renaming `directoryDepsByDepPath` to `injectionTargetsByDepPath`
and extracting related logic, and remove an unused export.
* docs: add changesets
* fix: implemented CR suggestions
2025-12-27 12:28:09 +01:00
Zoltan Kochan
8ec7939657
chore(release): 10.26.2
2025-12-23 14:34:19 +01:00
Zoltan Kochan
f9d53286e5
fix: compile
2025-12-23 12:45:14 +01:00
Zoltan Kochan
914f2e5e3e
fix: linking commands of engines ( #10354 )
...
close #10244
2025-12-23 12:31:42 +01:00
Zoltan Kochan
cdd1fcd1fc
fix(git-resolver): installing git-hosted dependency using annotated tags ( #10349 )
...
close #10335
2025-12-23 12:31:19 +01:00
Zoltan Kochan
4986c46b48
chore(release): 10.26.1
2025-12-19 01:48:40 +01:00
Zoltan Kochan
244e33b4e9
chore(release): 10.26.0
2025-12-15 12:10:26 +01:00
Oren
73cc63504d
feat: support blockExoticSubdeps option to disallow non-trusted dep sources in subdeps ( #10265 )
...
* feat(core): add onlyRegistryDependencies option to disallow non-registry subdependencies
* fix: onlyRegistryDependencies=>registrySubdepsOnly
* fix: allow resolution from custom resolver
* fix: add registry-subdeps-only to types
* docs: update changesets
* refactor: registry-only
* refactor: registrySubdepsOnly=>blockExoticSubdeps
* fix: trust runtime deps
* refactor: remove comment
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-12-10 12:22:37 +01:00
Oren
40775391d5
fix(git-fetcher): block git dependencies from running prepare scripts unless allowed ( #10288 )
...
* fix(git-fetcher): block git dependencies from running prepare scripts unless allowed
* Update exec/prepare-package/src/index.ts
Co-authored-by: Zoltan Kochan <z@kochan.io >
* Also implement in gitHostedTarballFetcher
* refactor: move allowBuild function creation to the store manager
* refactor: pass allowBuild function to fetch function directly
* refactor: revert not needed changes and update changesets
* test: fix
* fix: implemented CR suggestions
* test: fix
* test: fix
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-12-10 00:51:43 +01:00
Oren
b7d3ec65b1
fix(tarball-resolver): add integrity hash to HTTP tarball dependencies ( #10287 )
...
* fix(tarball-resolver): add integrity hash to HTTP tarball dependencies
* Refactor to download tarball just once
* Fix tests
* fix: only calc hash when it is not passed in to the fetcher
* docs: update changesets
2025-12-10 00:49:50 +01:00
Zoltan Kochan
b0cd2dea48
chore(release): 10.25.0
2025-12-08 15:33:42 +01:00
Zoltan Kochan
9b05bdd7e1
fix: reporting ignored dependency builds ( #10276 )
2025-12-06 16:43:42 +01:00
Zoltan Kochan
7c15c93c26
chore(release): libs
2025-12-02 16:02:38 +01:00
Zoltan Kochan
033a2561eb
fix: dependencies that were added to onlyBuiltDependencies should be built on install ( #10256 )
2025-12-02 15:36:29 +01:00
Zoltan Kochan
16d08d0cb0
chore(release): 10.24.0
2025-11-27 14:53:58 +01:00
Brandon Cheng
3631b01697
fix: throw a frozen lockfile error when catalogs change ( #10231 )
...
close #9369
2025-11-26 01:13:54 +01:00
Zoltan Kochan
603aedae0a
chore(release): 10.23.0
2025-11-20 14:46:54 +01:00
Zoltan Kochan
1de6d19f59
chore(release): 10.22.0
2025-11-12 14:13:12 +01:00
Ryo Matsukawa
93d49548ca
feat: add support for trustPolicyExclude ( #10168 )
...
close #10164
2025-11-11 13:01:56 +01:00
Zoltan Kochan
2e2dc27d07
chore(release): 10.21.0
2025-11-09 23:45:04 +01:00
Ryo Matsukawa
68ad0868b4
feat: add support for npm package trust evidence check via a new trustPolicy setting ( #10103 )
...
close #8889
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-11-09 23:32:56 +01:00
Zoltan Kochan
5847af412b
feat: install js runtime as prod dependency ( #10141 )
2025-10-31 17:15:38 +01:00
Zoltan Kochan
49f03d14ee
chore(release): 10.20.0
2025-10-28 17:35:21 +01:00
Zoltan Kochan
0cde1287c8
chore: update repository fields
2025-10-23 11:57:12 +02:00
Zoltan Kochan
43d7b18c2f
chore(release): 10.19.0
2025-10-21 15:30:20 +02:00
Zoltan Kochan
dee39ecb8a
feat: support allowing the build of specific versions of dependencies ( #10104 )
...
close #10076
2025-10-21 12:38:16 +02:00
Ryo Matsukawa
7c1382f7b7
feat: add support for exact versions in minimumReleaseAgeExclude ( #10059 )
...
close #9985
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-10-18 11:10:08 +02:00
Zoltan Kochan
1bfc105da0
chore(release): 10.18.3
2025-10-14 11:27:45 +02:00
Zoltan Kochan
1b15e45ae9
chore(release): 10.18.2
2025-10-09 16:56:04 +02:00
Zoltan Kochan
651a27aea4
chore(release): 10.18.1
2025-10-06 14:13:59 +02:00
Zoltan Kochan
c5e895f657
fix: don't print a warning when --lockfile-only is used ( #10044 )
...
close #8320
2025-10-05 02:28:26 +02:00
Zoltan Kochan
6618431aee
chore(release): libs
2025-09-29 11:56:00 +02:00
Zoltan Kochan
f6242c333b
chore(release): 10.17.1
2025-09-22 15:09:34 +02:00
Zoltan Kochan
1a1a272fa4
chore(release): 10.17.0
2025-09-17 16:48:25 +02:00
btea
3a58aaa3e3
feat: minimumReleaseAgeExclude support patterns ( #9984 )
...
close #9983
---------
Co-authored-by: Zoltan Kochan <z@kochan.io >
2025-09-17 16:45:01 +02:00
Zoltan Kochan
ea44ff979f
chore(release): 10.16.1
2025-09-13 19:20:27 +02:00
Zoltan Kochan
a3c1498403
chore(release): 10.16.0
2025-09-12 14:24:30 +02:00
Tom Jenkinson
2ebd45a7f2
fix: throw error if no TTY instead of terminating with 0 exit code ( #9960 )
...
close #9744
2025-09-12 12:07:01 +02:00
Zoltan Kochan
38e2599ecd
feat: set minimumReleaseAge to delay new versions of dependencies from being installed ( #9957 )
...
close #9921
2025-09-11 17:25:11 +02:00
Zoltan Kochan
3d1711a439
chore(release): 10.15.1
2025-09-01 11:41:05 +02:00
Zoltan Kochan
3482fe17d1
fix: pick package by real name to resolve a peer dependency ( #9919 )
...
* fix: pick package by real name to resolve a peer dependency
close #9913
This fixes a regression introduced in #9835
* fix: resolve from alias
* test: fix
* refactor: test
* fix: sort aliases
* docs: add changesets
* refactor: types
2025-08-31 10:40:02 +02:00
btea
05dd45ea82
perf: replace startsWith with strict equality ( #9881 )
2025-08-21 14:14:26 +02:00
Zoltan Kochan
facd7656e8
refactor: always use extensions in relative imports ( #9878 )
2025-08-19 15:25:11 +02:00
Zoltan Kochan
c89c93d59b
test: use @jest/globals ( #9877 )
2025-08-19 00:16:25 +02:00
Zoltan Kochan
14c78e81d4
test: use jest.mocked ( #9874 )
2025-08-18 15:22:37 +02:00
