mirror/pnpm
1
0 Fork 0
mirror of https://github.com/pnpm/pnpm.git synced 2026-10-23 00:04:28 -04:00
Code Issues Packages Projects Releases Wiki Activity
9,011 Commits 192 Branches 2,045 Tags
2cb67d7294cd0c1ff399e7ca4e4f6bfbde973bfa
Commit Graph
9011 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Zoltan Kochan 2cb67d7294 fix: out-of-memory error during peers resolution (#8058) 2024-05-07 13:37:47 +02:00
Zoltan Kochan 43b6bb7ce3 fix: print a better error message when "time" is missing from metadata (#8059) 2024-05-07 12:58:31 +02:00
Zoltan Kochan 01a4566655 chore(release): 9.1.0 v9.1.0 2024-05-06 11:13:30 +02:00
阿豪 db1d6ffb9a feat(graph-sequencer): topological ordering will look for the longest circle (#8052) 2024-05-06 11:05:21 +02:00
Zoltan Kochan 7a0536e23d fix: cannot read properties of undefined (reading missingPeersOfChildren) (#8054) 
close #8041
 2024-05-06 09:21:08 +02:00
btea 21de734b5a fix: outdated output table information is misplaced (#8037) 2024-05-04 11:44:02 +02:00
Khải c50afe4ddc feat: forbid bundledDependencies without node-linker=hoisted (#8043) 2024-05-03 16:43:22 +02:00
Khải d900fe71da test: fix false positive when errors fail to throw (#8044) 2024-05-02 21:47:27 +02:00
Khải cb0f459c54 fix: recursive update with workspace alias (#7999) 
close #7975
 2024-04-30 01:17:12 +02:00
Zoltan Kochan 7e69321e53 chore(release): 9.1.0-0 v9.1.0-0 2024-04-29 15:36:28 +02:00
Zoltan Kochan 3f5182a175 revert: "feat: read catalog configs from workspace manifest (feature flagged) (#8019)" 
This reverts commit 773434ea22.
 2024-04-29 15:28:15 +02:00
Zoltan Kochan b3d1495566 fix: recreate node_modules if virtual-store-dir-max-length changes (#8032) 2024-04-29 15:24:06 +02:00
Zoltan Kochan 1a6f7fb7e5 fix: only automatically resolve optional peers with versions that satisfy the ranges (#8028) 
close #7985
 2024-04-29 14:19:40 +02:00
Zoltan Kochan 9719a42d0e feat: configurable max length of directories inside node_modules/.pnpm (#7994) 
close #7355
 2024-04-28 11:07:29 +02:00
Zoltan Kochan b7ac82ea3c docs: update SECURITY.md 2024-04-27 21:50:55 +02:00
Brandon Cheng d066dae2b8 refactor: annotate linkedDep as ResolvedDirectDependency (#7988) 2024-04-26 16:15:22 +02:00
Brandon Cheng 773434ea22 feat: read catalog configs from workspace manifest (feature flagged) (#8019) 
* refactor: move InvalidWorkspaceManifestError to its own file

* feat: read catalogs config from workspace manifest

* feat: disable catalogs config reads by default

* chore: add changeset for new catalog config parsing
 2024-04-26 14:12:51 +02:00
dependabot[bot] 3f421a0901 chore(deps): bump the github-actions group with 6 updates (#8008) 
Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [actions/setup-node](https://github.com/actions/setup-node) | `3` | `4` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2` | `3` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `1` | `2` |
| [bluwy/release-for-reddit-action](https://github.com/bluwy/release-for-reddit-action) | `1` | `2` |
| [cbrgm/mastodon-github-action](https://github.com/cbrgm/mastodon-github-action) | `1` | `2` |


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

Updates `softprops/action-gh-release` from 1 to 2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/v1...v2)

Updates `bluwy/release-for-reddit-action` from 1 to 2
- [Release notes](https://github.com/bluwy/release-for-reddit-action/releases)
- [Changelog](https://github.com/bluwy/release-for-reddit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/bluwy/release-for-reddit-action/compare/v1...v2)

Updates `cbrgm/mastodon-github-action` from 1 to 2
- [Release notes](https://github.com/cbrgm/mastodon-github-action/releases)
- [Commits](https://github.com/cbrgm/mastodon-github-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: bluwy/release-for-reddit-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: cbrgm/mastodon-github-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-24 15:40:49 +02:00
dependabot[bot] f97ff6bf16 chore(deps): bump the github-actions group with 6 updates (#8008) 
Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [actions/setup-node](https://github.com/actions/setup-node) | `3` | `4` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2` | `3` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `1` | `2` |
| [bluwy/release-for-reddit-action](https://github.com/bluwy/release-for-reddit-action) | `1` | `2` |
| [cbrgm/mastodon-github-action](https://github.com/cbrgm/mastodon-github-action) | `1` | `2` |


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

Updates `softprops/action-gh-release` from 1 to 2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/v1...v2)

Updates `bluwy/release-for-reddit-action` from 1 to 2
- [Release notes](https://github.com/bluwy/release-for-reddit-action/releases)
- [Changelog](https://github.com/bluwy/release-for-reddit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/bluwy/release-for-reddit-action/compare/v1...v2)

Updates `cbrgm/mastodon-github-action` from 1 to 2
- [Release notes](https://github.com/cbrgm/mastodon-github-action/releases)
- [Commits](https://github.com/cbrgm/mastodon-github-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: bluwy/release-for-reddit-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: cbrgm/mastodon-github-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-24 15:40:29 +02:00
Christian Clauss 265fa70194 ci: keep GitHub Actions up to date with GitHub's Dependabot (#7979) 
Fixes software supply chain safety warnings like at the bottom right of
https://github.com/pnpm/pnpm/actions/runs/8754597692

* [Keeping your actions up to date with Dependabot](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot)
* [Configuration options for the dependabot.yml file - package-ecosystem](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem)
 2024-04-24 15:11:16 +02:00
Zoltan Kochan 88f53d4a78 chore(release): 9.0.6 v9.0.6 2024-04-24 15:01:39 +02:00
Zoltan Kochan 820934207a fix: don't upgrade the lockfile format during frozen lockfile install (#8006) 
close #7991
 2024-04-24 14:59:58 +02:00
Zoltan Kochan c969f374de fix: git-hosted dependencies (#8005) 
close #7990
 2024-04-24 13:46:09 +02:00
Zoltan Kochan 63adcb5351 chore(release): 9.0.5 v9.0.5 2024-04-21 23:02:35 +02:00
Zoltan Kochan 6b6ca69e1f fix: save the lockfile in the new format even if it is up-to-date (#7984) 2024-04-21 23:01:54 +02:00
Zoltan Kochan 2cbf7b767b fix: converting lockfile with directory dependencies (#7983) 
close #7955
close #7958
 2024-04-21 21:39:58 +02:00
Zoltan Kochan abaf12e8cf fix: resolving peer deps with prerelease versions (#7981) 
close #7977
 2024-04-21 14:31:58 +02:00
Zoltan Kochan e9530a8ff7 docs: add changesets 2024-04-21 13:41:06 +02:00
Zoltan Kochan 8a0798d514 fix: resolution of aliased dependencies (#7982) 
close #7957
 2024-04-21 13:16:20 +02:00
Khải 04310be557 fix(overrides): relative file: (#7966) 
close #7858
 2024-04-19 15:42:49 +02:00
Zoltan Kochan 50e37072f4 chore(release): 9.0.4 v9.0.4 2024-04-19 02:49:53 +02:00
Zoltan Kochan b7d2ed47be fix: ignore the engines.pnpm field of dependencies (#7968) 
close #7965
 2024-04-19 02:49:01 +02:00
Zoltan Kochan eb1947576f fix: resolution of aliased dependencies (#7967) 
close #7957
 2024-04-19 02:46:05 +02:00
Zoltan Kochan 65df252783 chore(release): 9.0.3 v9.0.3 2024-04-18 18:27:04 +02:00
Zoltan Kochan d1d5203756 fix: completion command in the standalone pnpm binary (#7963) 
close #7948
 2024-04-18 18:23:38 +02:00
Brandon Cheng bfadc0af12 fix: error when script-shell is configured to a .bat or .cmd file (#7945) 2024-04-18 17:34:15 +02:00
Zoltan Kochan a80b539c36 fix: print a hint about the package-manager-strict setting (#7960) 
close #7956
 2024-04-18 13:18:30 +02:00
Zoltan Kochan d87d36e82e chore(release): 9.0.2 v9.0.2 2024-04-17 18:38:31 +02:00
Zoltan Kochan b3961cb19d fix: linking optional dependencies (#7949) 
close #7943
 2024-04-17 17:35:05 +02:00
Zoltan Kochan dd43b0f6bc chore(release): 9.0.1 v9.0.1 2024-04-16 16:00:46 +02:00
Zoltan Kochan 461d76a2e5 fix: frozen lockfile should work with lockfile v6 (#7935) 
close #7934
 2024-04-16 16:00:00 +02:00
Isaac TurnerandZoltan Kochan 742ceb4050 docs: add 9.x to supported versions in SECURITY.md (#7933) 
* Add 9.x to supported versions

* docs: drop pnpm v7 support

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2024-04-16 13:43:06 +02:00
Zoltan Kochan 8f320421d4 ci(release): update tag 2024-04-16 12:46:09 +02:00
Zoltan Kochan dd6b0b62d8 chore(release): 9.0.0 v9.0.0 2024-04-16 12:18:30 +02:00
Zoltan Kochan f8f950b8b5 docs: update changelog 2024-04-16 02:26:55 +02:00
Zoltan Kochan 090922c85c chore: update @pnpm/npm-lifecycle 2024-04-16 01:51:06 +02:00
Brandon ChengandZoltan Kochan db7aee89a0 refactor: remove zipWith when resolving dependencies of importers (#7927) 
* refactor: avoid zipWith when resolving dependencies of importers

Instead of creating two separate arrays and zipping them together, the
initial map here can create the pairs array directly.

I'm not expecting any behavior changes in this commit other than
slightly improved readability and performance.

* refactor: resolve dependencies

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2024-04-15 13:01:08 +02:00
Brandon Cheng 73b241d27b refactor: split out resolvedDependenciesOfImporter for readability (#7928) 2024-04-15 00:14:14 +02:00
Khải 2786b549d9 chore(eslint): explicit-module-boundary-types (#7926) 2024-04-14 13:37:50 +02:00
Khải fce013da83 refactor(pnpm): return type annotations (#7925) 2024-04-14 12:52:15 +02:00