mirror/pnpm
1
0 Fork 0
mirror of https://github.com/pnpm/pnpm.git synced 2026-10-06 21:21:31 -04:00
Code Issues Packages Projects Releases Wiki Activity
10,313 Commits 176 Branches 2,030 Tags
52556a858a482ef91c67ea06ec0d2d54bd6dfd2a
Commit Graph
458 Commits
Author SHA1 Message Date
Zoltan Kochan 1b4df57a01 feat!: drop Node.js 20 and 21 support (#10569) 2026-02-08 19:16:24 +01:00
이종혁andZoltan Kochan 5f5f1db2b8 fix(plugin-commands-store): support relative storeDir in store commands (#10490) 
close #10290

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2026-02-06 16:31:47 +01:00
Zoltan Kochanandgithub-actions[bot] 57e99b6996 chore: update pnpm-lock.yaml (#10558) 
---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
 2026-02-06 03:28:39 +01:00
Zoltan Kochan e2e0a321b3 perf: optimize how the integrities of files in the CAFS are stored (#10504) 2026-01-24 21:41:11 +01:00
Zoltan Kochan 40b107efa7 perf: migrate internal cache and index files to MessagePack serialization (#10500) 2026-01-23 01:31:09 +01:00
Brandon Cheng d85ea8d817 fix: pass storeDir to createClient to fix resolution skipping (#10502) 2026-01-22 23:51:38 +01:00
Zoltan Kochan 2ea64631eb fix: skip symlinks pointing outside package root in git and file deps (#10493) 2026-01-21 15:45:56 +01:00
Zoltan Kochan e3b35b6f37 style: update eslint to v9 (#10474) 2026-01-17 12:01:23 +01:00
Zoltan Kochan caabba44ff fix: normalize Windows backslash path traversal attempts in tarball entry filenames 
to prevent security vulnerabilities.
 2026-01-15 17:10:17 +01:00
Zoltan Kochan 9f2b622d10 refactor: rename customFetcherHooks to customFetchers 2026-01-15 12:02:06 +01:00
Zoltan Kochan 5beece9615 feat!: remove old API for custom fetchers (#10464) 2026-01-15 11:57:48 +01:00
Zoltan Kochan a8fe2d5298 feat!: remove the server command (#10463) 2026-01-15 11:32:07 +01:00
Zoltan Kochan a00f9e515c chore: use typescript-go (#10452) 2026-01-14 01:18:13 +01:00
Zoltan Kochan da112f7cb2 revert: "perf: use v8 serialize/deserialize instead of JSON (#9971)" (#10420) 
close #10409
 2026-01-13 15:16:33 +01:00
Zoltan Kochan 8a8a51c394 perf: don't calculate package file paths in the store twice (#10428) 2026-01-12 15:58:25 +01:00
Zoltan Kochan 0bcbaf9994 refactor: move out skip resolution logic from package requester (#10439) 2026-01-12 13:08:50 +01:00
Zoltan Kochan 5a0ed1d450 fix: prevent circular symlinks in projects registry (#10432) 
close #10411
 2026-01-09 18:04:57 +01:00
Zoltan Kochan c5d4d81f56 refactor: rename FilesIndex to FilesMap (#10427) 2026-01-08 18:17:57 +01:00
Zoltan Kochan d71174a4fa perf: calculate the package file maps in the workers (#10422) 2026-01-08 14:53:47 +01:00
Junius ChenandZoltan Kochan b773199eb0 fix(store): return only directory names when clean expired cache (#10384) 
* fix(store): return only directory names when clean expired cache

* docs: add changeset

* test: clean dlx cache

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-12-30 18:01:53 +01:00
bteaCopilotZoltan Kochan
 		facdd717bf feat: add trustPolicyIgnoreAfter (#10359) 
* feat: add `trustPolicyIgnoreAfter`

* Update .changeset/big-lies-pump.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* refactor: npm-resolver

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-12-28 02:01:09 +01:00
Brandon ChengandZoltan Kochan db72923b5c fix: forward $NODE_OPTIONS when running jest for debug terminals (#10364) 
* fix: forward existing `$NODE_OPTIONS` when running jest

* chore: update `package.json` files for meta-updater changes

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-12-27 22:10:52 +01:00
Zoltan KochanandCopilot 9eddabb32b feat: enhance store prune to clean global virtual store (#10360) 
* feat: enhance `store prune` to clean global virtual store

`pnpm store prune` will now clean the global virtual store
via a new project registry and mark-and-sweep garbage collection.

* test: add store prune test for transitive dependency preservation

* refactor: extract global virtual store pruning logic to a new file

* fix: improve symlink handling in global virtual store pruning

* fix: optimize removal of unreachable packages in global virtual store

* fix: refine project registry error handling

Throw `PnpmError` for inaccessible projects
and specifically clean up stale symlinks for `ENOENT` errors.

* test: create virtual store with install command

* refactor: standardize global virtual store directory structure

by placing unscoped packages under an `@` scope.

* test: update store prune tests to use `toContain` and `not.toContain` assertions`

* fix: linting issues

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fix: implemented CR suggestions

* fix: revert not needed change

* fix: use `is-subdir` to accurately determine if symlink targets

are within the global virtual store.

* revert: changes in package.json files

* test: add `--config.ci=false` to store prune tests
 2025-12-26 01:35:35 +01:00
Zoltan Kochan 3bf5e218a6 fix: linking commands of engines (#10354) 
close #10244
 2025-12-23 12:26:59 +01:00
Zoltan Kochan 1cc61e87bc feat!: change the default values of blockExoticSubdeps and strictDepBuilds (#10332) 2025-12-22 14:36:46 +01:00
btea 79791d879f chore: replace mem with memoize (#10344) 2025-12-21 18:09:02 +01:00
Zoltan Kochan 0048667db4 refactor: use Maps instead of Records (#10312) 2025-12-15 11:48:19 +01:00
OrenandZoltan Kochan ba065f6a8b fix(git-fetcher): block git dependencies from running prepare scripts unless allowed (#10288) 
* fix(git-fetcher): block git dependencies from running prepare scripts unless allowed

* Update exec/prepare-package/src/index.ts

Co-authored-by: Zoltan Kochan <z@kochan.io>

* Also implement in gitHostedTarballFetcher

* refactor: move allowBuild function creation to the store manager

* refactor: pass allowBuild function to fetch function directly

* refactor: revert not needed changes and update changesets

* test: fix

* fix: implemented CR suggestions

* test: fix

* test: fix

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-12-09 18:25:07 +01:00
Oren 98a0410aa1 fix(tarball-resolver): add integrity hash to HTTP tarball dependencies (#10287) 
* fix(tarball-resolver): add integrity hash to HTTP tarball dependencies

* Refactor to download tarball just once

* Fix tests

* fix: only calc hash when it is not passed in to the fetcher

* docs: update changesets
 2025-12-08 23:38:27 +01:00
Trevor Burnham 38b8e357b5 feat: add custom resolvers and fetchers (#10246) 2025-11-30 14:19:04 +01:00
Zoltan Kochan 09bb8dbd8c fix: store prune should not fail if the store contains Node.js (#10193) 
close #10131
 2025-11-17 23:45:48 +01:00
Zoltan Kochan 7e2910e70f chore(release): 11.0.0-alpha.0 2025-11-13 15:44:27 +01:00
Ryo Matsukawa 9d3f00b09a feat: add support for trustPolicyExclude (#10168) 
close #10164
 2025-11-11 13:00:20 +01:00
Ryo MatsukawaandZoltan Kochan 10bc39152e feat: add support for npm package trust evidence check via a new trustPolicy setting (#10103) 
close #8889

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-11-09 23:23:58 +01:00
btea cbdc1067cc refactor: replace deprecated method (#10075) 2025-11-09 11:23:24 +01:00
Zoltan Kochan 9b344c8982 perf: use v8 serialize/deserialize instead of JSON (#9971) 
close #9965
 2025-11-06 01:01:06 +01:00
Zoltan Kochan 3ce5f82bd7 Merge remote-tracking branch 'origin/main' into v11 2025-10-28 18:40:05 +01:00
Zoltan Kochan 49f03d14ee chore(release): 10.20.0 2025-10-28 17:35:21 +01:00
Zoltan Kochan dab9abef5c Merge remote-tracking branch 'origin/main' into v11 2025-10-24 14:19:07 +02:00
Zoltan Kochan 0cde1287c8 chore: update repository fields 2025-10-23 11:57:12 +02:00
Zoltan Kochan 43d7b18c2f chore(release): 10.19.0 2025-10-21 15:30:20 +02:00
Ryo MatsukawaandZoltan Kochan 7c1382f7b7 feat: add support for exact versions in minimumReleaseAgeExclude (#10059) 
close #9985

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-10-18 11:10:08 +02:00
Zoltan Kochan 1bfc105da0 chore(release): 10.18.3 2025-10-14 11:27:45 +02:00
Zoltan Kochan a43166624e Merge remote-tracking branch 'origin/main' into v11 2025-10-10 10:01:19 +02:00
Zoltan Kochan 1b15e45ae9 chore(release): 10.18.2 2025-10-09 16:56:04 +02:00
Zoltan Kochan 6618431aee chore(release): libs 2025-09-29 11:56:00 +02:00
Luis HebendanzandZoltan Kochan 9b9faa5c24 fix: retry filesystem operations on EAGAIN (#9959) 
* fix: retry filesystem operations on EAGAIN

filesystem operations can raise EAGAIN to tell the application to try
again later. This is especially often the case under ZFS.

fix: move wrapped functions to graceful-fs directly

* fix: retry filesystem operations on EAGAIN

* fix: retry filesystem operations on EAGAIN

* fix: indexed-pkg-importer

* test: fix

* docs: add changeset

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-09-29 09:32:43 +02:00
Zoltan Kochan 7d075325b9 Merge remote-tracking branch 'origin/main' into v11 2025-09-28 16:01:58 +02:00
Zoltan Kochan fb4da0c0ab feat: print a warning if network requests are slow (#10025) 
* feat: print a warning if network requests are slow

* feat: print a warning if network requests are slow

add a new setting for fetch tarball speed

* feat: print a warning if network requests are slow

* fix: src/fetch.ts

* docs: add changeset
 2025-09-28 11:19:10 +02:00
Zoltan Kochan f307b9a130 Merge remote-tracking branch 'origin/main' into v11 2025-09-24 10:51:53 +02:00