mirror/pnpm
1
0
Fork 0
mirror of https://github.com/pnpm/pnpm.git synced 2026-04-28 11:01:30 -04:00
Code Issues Packages Projects Releases Wiki Activity
10,701 Commits 380 Branches 1,880 Tags
fcdd50aaa773bc30f90bba767ca6c374646bf87e
Commit Graph

10701 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
btea
734420ce01 fix: audit (#10198) 
* fix: audit

* fix: use safer range

* fix: don't remove our fork of js-yaml

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-11-18 11:42:28 +01:00
btea
f80ae03f60 refactor: add createPackageVersionPolicyByExclude (#10194) 2025-11-18 00:59:15 +01:00
Ryo Matsukawa
b51bb42da5 feat!: support lowercase options in pnpm add (-d, -p, -o, -e) (#10079) 
close #9197
 2025-11-17 23:52:11 +01:00
Zoltan Kochan
09bb8dbd8c fix: store prune should not fail if the store contains Node.js (#10193) 
close #10131
 2025-11-17 23:45:48 +01:00
Ryo Matsukawa
2464485700 feat: add --lockfile-only option to pnpm list (#10066) 
close #10020

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-11-17 16:57:29 +01:00
Brandon Cheng
a0e3a21a93 fix: use esm import for @pnpm/patch-package in @pnpm/apply-patch (#10191) 2025-11-16 23:35:25 +01:00
Brandon Cheng
23b139a10f chore: ignore GHSA-mh29-5h37-fv8m (#10192) 
https://github.com/changesets/changesets/issues/1762
 2025-11-16 22:21:41 +01:00
Zoltan Kochan
46f10165ed fix: self-update should not install @pnpm/exe >= 11 (#10190) 2025-11-14 15:19:36 +01:00
btea
4e64267d08 chore: add unrs-resolver to onlyBuiltDependencies (#10184) 2025-11-13 22:18:07 +01:00
Zoltan Kochan
2fe74dac98 chore(release): 11.0.0-alpha.1 v11.0.0-alpha.1 2025-11-13 18:19:57 +01:00
Zoltan Kochan
f5f9f4ec6e chore: don't crash if some artifacts are not found v11.0.0-alpha.0 2025-11-13 17:10:07 +01:00
Zoltan Kochan
e18840d279 fix: update publish-packed 2025-11-13 17:08:13 +01:00
Zoltan Kochan
d3ce6e8985 ci: run Node.js 24 in the release action 2025-11-13 16:21:52 +01:00
Zoltan Kochan
7e2910e70f chore(release): 11.0.0-alpha.0 2025-11-13 15:44:27 +01:00
Zoltan Kochan
b57e08bd2d docs: fix changeset 2025-11-13 15:20:12 +01:00
Zoltan Kochan
2da49df476 chore: fix lockfile 2025-11-12 15:54:27 +01:00
Zoltan Kochan
575528e09d chore: update pnpm 2025-11-12 15:04:15 +01:00
Zoltan Kochan
0fd53e10bd fix: concurrently hard linking a directory (#10181) 
close #10179
 2025-11-12 14:07:18 +01:00
Zoltan Kochan
ba70035691 fix: update parse-npm-tarball-url to v4 (#10182) 
close #10175
 2025-11-12 14:06:56 +01:00
Zoltan Kochan
ec973ea8a2 ci: checkout a known good commit of ldid 2025-11-11 23:09:18 +01:00
Zoltan Kochan
3ad031d787 fix: compile 2025-11-11 13:05:57 +01:00
Ryo Matsukawa
9d3f00b09a feat: add support for trustPolicyExclude (#10168) 
close #10164
 2025-11-11 13:00:20 +01:00
Khải
075aa993bb feat(config): global yaml (#10145) 
* feat(config): global `rc.yaml`

* fix: undefined `rawConfig`

* test: add a test

* feat: re-export `isSupportedNpmConfig`

* feat: return `'compat'` to distinguish compatibility reason

* docs: `isSupportedNpmConfig`

* fix: eslint

* docs: clarify the case of the config key

* feat(cli/config/set): target yaml for pnpm-specific settings

* fix: read the correct file

* fix: write to the correct directory

* refactor: remove disabled code

* refactor: get `configDir` directly

* docs: remove outdated documentation

* test: fix a test

* test: rename

* fix: explicitly tell npm the config file path

* test: add a test

* test: add a test

* test: fix a test

* fix: local config dir

* fix: `managingAuthSettings`

* test: rename

* test: fix

* test: add a test

* test: demonstrate choosing config files

* test: fix

* docs: yet another consideration

* test: demonstrate choosing config files

* fix: correct local config file names in test helper

* test: demonstrate choosing config files

* test: use the helper

* test: add a test

* test: correct a test

* test: fix

* test: fix

* fix: eslint

* test: remove duplicate

* feat: validate `rc.yaml`

* docs: changeset

* test: fix `configDelete.test.ts`

* feat: other `npm` call-sites

* fix: make optional again

* feat: remove the change from `publish`

* fix: eslint

* refactor: just one is sufficient

* refactor: replace type union with 3 functions

* refactor(test): extract helper functions

* fix: add `rc.yaml` to `rawConfig`

* test: keep workspace settings out of `rc.yaml`

* test: fix `spawn ENOENT`

* chore(git): revert invalid change

This reverts commit 1ff6fe2323.

* feat: rename `rc.yaml` to `config.yaml`

* refactor: replace `acceptNonRc` with `!globalSettingsOnly`

* feat!: remove compat completely

* refactor: rename a function

* fix: no actual catalogs

* refactor: replace bool flag with preemptive filter

* feat!: filter global config keys

* test: fix

* fix: exclude `deploy-all-files`

* fix: reverse schema merge order

* feat(cli/config/set): validate global config yaml key

* test: remove duplicated assertion

* docs: correct

* docs: goal changed
 2025-11-11 11:24:06 +01:00
Zoltan Kochan
f03b9ecf4e feat: support engines in publishConfig (#10169) 2025-11-11 01:18:23 +01:00
dependabot[bot]
d5f736ce56 chore(deps): bump softprops/action-gh-release (#10165) 
Bumps the github-actions group with 1 update: [softprops/action-gh-release](https://github.com/softprops/action-gh-release).


Updates `softprops/action-gh-release` from 2.4.1 to 2.4.2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](6da8fa9354...5be0e66d93)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-10 14:18:42 +01:00
Zoltan Kochan
ab9be93edf chore: bundle @pnpm/exe with Node.js 24 2025-11-10 02:39:34 +01:00
Zoltan Kochan
8a31cf1398 feat: added engines.runtime to pnpm CLI 
The pnpm CLI will now be installed with Node.js
 2025-11-10 01:24:00 +01:00
Zoltan Kochan
df6d546e13 chore: fix repository URLs in package.json files of utils 2025-11-10 00:58:29 +01:00
Ryo Matsukawa
10bc39152e feat: add support for npm package trust evidence check via a new trustPolicy setting (#10103) 
close #8889

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-11-09 23:23:58 +01:00
Zoltan Kochan
b09722fc01 fix: concurrently hard linking a directory (#10163) 
close #10160
 2025-11-09 12:07:11 +01:00
btea
cbdc1067cc refactor: replace deprecated method (#10075) 2025-11-09 11:23:24 +01:00
Ryo Matsukawa
d5d4eedeeb feat: add support for pnpm config get globalconfig (#10090) 
close #9977
 2025-11-08 14:14:36 +01:00
Mike DiDomizio
357490525a fix: gitBranchLockfile/mergeGitBranchLockfilesBranchPattern set in workspace file (#10139) 
close #9651
 2025-11-06 15:42:21 +01:00
Trevor Burnham
0b5ccc9238 fix(update): prevent package.json updates when updating indirect dependencies (#5118) (#10155) 
close #5118
 2025-11-06 15:13:51 +01:00
Zoltan Kochan
9b344c8982 perf: use v8 serialize/deserialize instead of JSON (#9971) 
close #9965
 2025-11-06 01:01:06 +01:00
Khải
d392c3d059 fix: explicitly tell npm the config file path (#10154) 
* fix: explicitly tell npm the config file path

* fix: `managingAuthSettings`

* feat: other `npm` call-sites

* docs: changeset

* fix: make optional again

* feat: remove the change from `publish`

* fix: eslint

* refactor: just one is sufficient
 2025-11-05 23:46:20 +01:00
dependabot[bot]
5e65855aa8 chore(deps): bump the github-actions group across 1 directory with 2 updates (#10152) 
Bumps the github-actions group with 2 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action) and [cbrgm/mastodon-github-action](https://github.com/cbrgm/mastodon-github-action).


Updates `github/codeql-action` from 4.30.9 to 4.31.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](16140ae1a1...0499de31b9)

Updates `cbrgm/mastodon-github-action` from 2.1.20 to 2.1.21
- [Release notes](https://github.com/cbrgm/mastodon-github-action/releases)
- [Commits](92418eedbe...96ff691bc4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: cbrgm/mastodon-github-action
  dependency-version: 2.1.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-05 11:48:42 +01:00
Zoltan Kochan
817804a787 chore: fix build artifacts script 2025-11-05 01:55:22 +01:00
Zoltan Kochan
75898b144a chore: fix build artifacts script 2025-11-05 01:26:24 +01:00
Zoltan Kochan
efb48dcab5 feat: install js runtime as prod dependency (#10141) 2025-10-31 17:12:50 +01:00
Khải
d4bf2d0e60 feat(cli/config)!: config command outputs changed from INI to JSON with camelCase keys (#10142) 2025-10-30 11:34:48 +01:00
Zoltan Kochan
2d8c6307f5 ci: run all tests on the main branch 2025-10-28 22:03:11 +01:00
Zoltan Kochan
0e738e4e97 ci: run all tests on the main branch 2025-10-28 21:58:50 +01:00
Zoltan Kochan
3ce5f82bd7 Merge remote-tracking branch 'origin/main' into v11 2025-10-28 18:40:05 +01:00
Zoltan Kochan
49f03d14ee chore(release): 10.20.0 v10.20.0 2025-10-28 17:35:21 +01:00
Zoltan Kochan
66d7a9af0c Merge remote-tracking branch 'origin/main' into v11 2025-10-28 17:24:42 +01:00
Khải
ae43ac79fa feat(cli/config)!: breaking changes (#9854) 
* feat(cli/config)!: breaking changes

* refactor(test): remove `deepNullProto` and reuse `getOutputString`

* feat(cli/config/list): censor protected settings

* test: censorship of protected settings

* docs(changeset): censorship of protected settings

* fix: eslint

* feat(config)!: exclude non-option from `rawConfig`

* fix: eslint

* refactor: move default registries to builtin (#9886)

* feat(config)!: filter rc settings

* feat(config): don't exclude non-options

This reverts commit a79f72dbfb.

* feat(cli/config/get)!: print array as json

* test: fix

* docs(changeset): correct

* test: fix

* feat(cli/config)!: only kebabize option fields (wip)

* chore(git): revert the implementation

This reverts commit 529f9bdd47.

* test: restore

This reverts commit d8191e0ed8.

* feat(cli/config)!: only kebabize option fields (wip)

* feat: use `types` instead

* feat(cli/config/get)!: only kebabize rc fields

* test: add

* test: non-rc kebab-case keys

* test: correct

* docs(changeset): correct

* docs(changeset): style

* docs(changeset): correct

* test: only kebabize rc fields

* fix: import path

* fix: eslint

* fix: `isCamelCase`

* feat(cli/config/set)!: forbid unknown rc fields

* test: fix existing test

* test: refuse unsupported rc settings

* feat: hint

* feat(cli/config/set)!: refuse kebab-case workspace-specific settings

* feat(config)!: ignore non-camelCase from `pnpm-workspace.yaml`

* test: config get

* test: config list

* refactor: extract shared code into its own package

* test: `isCamelCase`

* feat(cli/config/list)!: consistent naming cases

* refactor: make it more reusable

* feat(cli/config/get)!: consistent naming cases

* feat(cli/config/get): censor protected settings

* test: `get ''` should be the same as `list`

* docs(test): quotation marks

* refactor: remove unnecessary `test.each`

* docs(changeset): case changes

* test: unknown keys

* docs(changeset): correct

* docs(changeset): non camelCase from `pnpm-workspace.yaml`

* fix: eslint

* docs(changeset): correct terminology

* docs(changeset): clarify

* feat!: do not load non-auth and non-registry

* fix: implementation

* test: no hidden settings

* fix: eslint

* fix: do not drop default values

* test: fix

* test: remove irrelevant tests

* test: fix (wip)

* fix: auth

* test: skip an inapplicable test

* test: temporary skip a test

* test: fix 'respects testPattern'

* test: fix 'respects changedFilesIgnorePattern'

* test: fix 'changedFilesIgnorePattern is respected'

* test: rename a test

* test: fix `package-lock=false`

* feat: exception for `managePackageManagerVersions`

* test: `managePackageManagerVersions: false`

* test: fix (wip)

* test: workaround

* fix: default `optional` to `true`

* fix: `filter` on `pnpm-workspace.yaml`

* test: fix

* test: disable ones that no longer apply

* chore(git): revert incorrect change

* fix: `filter` on `pnpm-workspace.yaml` (#10127)

* fix: `filter` on `pnpm-workspace.yaml`

* docs: changeset

* fix: actual fix

* fix: don't set default on config

* docs(readme): correct a package description

* fix: typo

* test: fix

* test: use a field that wouldn't be ignored

* test: replace some `.npmrc` with `pnpm-workspace.yaml`

* docs(changeset): less awkward wordings

* docs(changeset): correction
 2025-10-28 17:09:15 +01:00
Daiki Nishikawa
0152a51061 fix: omit the major version matching restriction when filtering latest dist-tags in pkg metadata (#10130) 
close #10100

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
 2025-10-28 17:05:36 +01:00
Khải
ed1a7fe7cd fix: filter on pnpm-workspace.yaml (#10127) 
* fix: `filter` on `pnpm-workspace.yaml`

* docs: changeset

* fix: actual fix

* fix: don't set default on config
 2025-10-27 13:36:35 +01:00
SJ Hayman
6c3dcb8bf7 fix: skip time field validation for packages excluded by minimumReleaseAgeExclude (#10118) 
Co-authored-by: SJ Hayman <sj@e2.ltd>
 2025-10-27 11:34:56 +01:00