Commit Graph

  • bb3188143e fix(network): respect macOS scoped DNS (#12934) sensei-woo 2026-07-13 10:18:40 -04:00
  • 6a590deadf test(deploy): pass the required include option in createDeployFiles test (#12970) Zoltan Kochan 2026-07-13 16:07:30 +02:00
  • 0cdd988e49 feat: implement star, stars, unstar natively in pacquet (#12917) Alessio Attilio 2026-07-13 16:06:31 +02:00
  • cbecd4afc0 fix(config): allow tokenHelper to be set in the global auth.ini (#12833) kyungseopk1m 2026-07-13 23:05:48 +09:00
  • 5b8b101754 feat(overrides): add convergence overrides ("pkg@": exact version) (#12876) Zoltan Kochan 2026-07-13 16:02:13 +02:00
  • 57cc33127e fix(resolver): recover from unsolicited 304 responses (#12888) Yashas Gunderia 2026-07-13 19:26:52 +05:30
  • fcea44f61e fix(deploy): prune unreachable package graph (#12935) sensei-woo 2026-07-13 09:55:25 -04:00
  • 1adc62c436 feat(pacquet): honor extraBinPaths and extraEnv from the updateConfig hook (#12943) Trevor Burnham 2026-07-13 09:38:34 -04:00
  • cc00c45afb fix(deploy): preserve local tarball package names (#12864) Yashas Gunderia 2026-07-13 18:43:33 +05:30
  • b8f856b165 fix(pacquet): honor --no-optional for transitive optional dependencies (#12965) Zoltan Kochan 2026-07-13 15:12:30 +02:00
  • fe4dad55ca chore: update lockfile, Node.js, and pnpm versions (#12802) Zoltan Kochan 2026-07-13 14:52:19 +02:00
  • a4b544fc6e fix(pacquet): parse peers after patch hashes (#12939) sensei-woo 2026-07-13 08:32:00 -04:00
  • bcedb9518b feat(pacquet): report extraneous packages in pnpm list (#12967) Zoltan Kochan 2026-07-13 14:28:05 +02:00
  • 6986a42faa fix(deps-resolver): dedupe injected deps despite unrelated peer-suffix mismatch (#12800) Omri Luzon 2026-07-13 15:24:45 +03:00
  • b9fccc857d feat(cli): implement deprecate and undeprecate commands natively in Rust (#12884) Alessio Attilio 2026-07-13 14:16:10 +02:00
  • 85efb4900b fix: limit concurrent reads of unsaved dependencies (#12866) Minha Kang 2026-07-13 20:33:21 +09:00
  • 0dd21df745 fix: keep bundled dependency fields out of the published pnpm manifest (#12964) Zoltan Kochan 2026-07-13 12:39:54 +02:00
  • 2acb555d85 feat(release): give pnpr its own tag namespace for independent releases pnpr-release-tag Zoltan Kochan 2026-07-13 11:16:06 +02:00
  • d3e1383ff4 feat(release): unify the TypeScript, Rust and pnpr release flows on pnpm's native versioning (#12949) Zoltan Kochan 2026-07-13 11:11:41 +02:00
  • 806ff49162 fix(pnpr): prevent stale hosted packument writes (#12832) YES!HYUNGSEOK 2026-07-13 17:35:26 +09:00
  • b45c85a5fc fix: pnpm cache delete removes a package from all metadata cache directories (#12831) Minha Kang 2026-07-13 06:31:59 +09:00
  • f573900611 fix(pacquet): pin saved node runtime version and preserve package.json formatting (#12948) v12.0.0-alpha.9 Zoltan Kochan 2026-07-12 22:31:00 +02:00
  • c6fd0b7e2f bench(micro-benchmark): isolate the packument and lockfile parse paths (#12950) Khải 2026-07-13 03:03:54 +07:00
  • 826366b7bc feat(releasing): native workspace release management in both stacks — change intents, release plans, per-package release lanes (#12953) Zoltan Kochan 2026-07-12 21:55:49 +02:00
  • 48641d9750 chore(cargo): bump itertools from 0.14.0 to 0.15.0 (#12904) dependabot[bot] 2026-07-12 13:24:45 +02:00
  • f560b25fc6 chore(cargo): bump open from 5.3.5 to 5.3.6 (#12903) dependabot[bot] 2026-07-12 13:24:06 +02:00
  • f03cc16783 chore(cargo): bump sigstore-sign from 0.9.0 to 0.10.0 (#12902) dependabot[bot] 2026-07-12 13:23:22 +02:00
  • 411bbe89ff feat(registry-access): implement team command in both TypeScript and Rust stacks (#12789) Alessio Attilio 2026-07-12 13:17:26 +02:00
  • d32809261f .github/workflows: Migrate workflows to Blacksmith runners (#12951) blacksmith-sh[bot] 2026-07-12 10:42:04 +02:00
  • 3acb421adf feat(pnpr): pnpr-native access control — strict token grammar and registry-scoped teams (#12790) Zoltan Kochan 2026-07-12 01:38:00 +02:00
  • 3e01bc5e0e feat(napi): pass the resolved directory to the readPackage hook (#12936) Zoltan Kochan 2026-07-12 00:02:01 +02:00
  • 1f530acb59 chore: update pnpm to v12.0.0-alpha.8 (#12946) v11.12.0 Zoltan Kochan 2026-07-11 23:05:25 +02:00
  • 54efed02f7 fix(pacquet): close CLI gaps that broke the pnpm release workflow (#12944) v12.0.0-alpha.8 Zoltan Kochan 2026-07-11 22:14:44 +02:00
  • 22a62fbc47 test: skip registry-resolving version tests until the release is published fix-failing-main Zoltan Kochan 2026-07-11 21:47:33 +02:00
  • 98722fab10 chore(release): 11.12.0 (#12937) Zoltan Kochan 2026-07-11 11:34:29 +02:00
  • 252f15e583 fix(resolver): stop hoisted peers from ignoring the declared peer range (#12932) C. Spencer Beggs 2026-07-11 05:17:21 -04:00
  • bcb8b5ace1 fix(pacquet): accept sibling-slot native binaries for the unscoped pnpm wrapper (#12930) Zoltan Kochan 2026-07-11 10:20:01 +02:00
  • 3c6718b91d fix(resolver): break peer dep-path await cycles that span resolution passes (#12927) Zoltan Kochan 2026-07-11 10:08:11 +02:00
  • 7bb4e94dda chore: update pnpm (#12929) Zoltan Kochan 2026-07-11 03:28:55 +02:00
  • 4658133e19 fix(cli): stop pacquet bugs tests from opening the developer's browser (#12926) Zoltan Kochan 2026-07-11 03:14:17 +02:00
  • 7da1dfc314 fix(pacquet): serialize same-name injected importer deps as plain file: refs (#12924) Zoltan Kochan 2026-07-11 02:18:31 +02:00
  • b2b1cf65b0 fix(cli): accept top-level --if-present and stop workspace installs scaffolding a root manifest (#12919) Ellen Agarwal 2026-07-10 17:12:17 -07:00
  • 0609982b29 refactor(pacquet): ship the CLI under its final pnpm name (#12923) Zoltan Kochan 2026-07-11 02:07:14 +02:00
  • 6a85968c12 feat(pacquet): port the stage command and add its -/stage endpoints to pnpr (#12922) Zoltan Kochan 2026-07-11 01:15:59 +02:00
  • 84e3d3bffe chore: trust pnpm publishes and update pnpm to v12.0.0-alpha.6 (#12920) Zoltan Kochan 2026-07-10 22:18:54 +02:00
  • 2d7e723cff fix(ci): stage the Rust release binary outside the repo root before archiving (#12918) Zoltan Kochan 2026-07-10 21:15:55 +02:00
  • 67e9b565f5 fix(cli): accept run flags before the fallback command fix/verify-deps-before-run-no-manifest Zoltan Kochan 2026-07-10 20:20:31 +02:00
  • 78c2245fd4 ci: run typos in the Rust pre-push hook (#12915) Zoltan Kochan 2026-07-10 20:13:09 +02:00
  • eee7c9a0fd fix: don't spawn an install outside a project; port verify-deps-before-run to pacquet (#12910) Zoltan Kochan 2026-07-10 20:12:35 +02:00
  • 2b02764105 feat(pacquet): support the changed-packages filter selector ([<since>]) (#12914) Zoltan Kochan 2026-07-10 20:12:09 +02:00
  • 47257df6ae fix(pacquet): follow-up review findings on the gate's env and lockfile paths Zoltan Kochan 2026-07-10 18:31:26 +02:00
  • e39d710a1d fix(pacquet): address review findings on the verify-deps-before-run gate Zoltan Kochan 2026-07-10 18:20:24 +02:00
  • 00c83a56af test(cli): address review feedback on the no-manifest gate test Zoltan Kochan 2026-07-10 18:00:14 +02:00
  • 5e60de0dea style(pacquet): satisfy perfectionist macro-trailing-comma in the gate Zoltan Kochan 2026-07-10 17:50:02 +02:00
  • 3beb3be71a feat(pacquet): port the verify-deps-before-run gate Zoltan Kochan 2026-07-10 17:46:59 +02:00
  • a559265157 fix(pacquet): stop install from scaffolding package.json over package.yaml Zoltan Kochan 2026-07-10 17:46:59 +02:00
  • 2f4db4e2c2 test(cli): pin fallback-without-manifest behavior against auto-install Zoltan Kochan 2026-07-10 16:51:23 +02:00
  • 9b9785ae05 fix(deps.status): skip the deps check when there is no project manifest Zoltan Kochan 2026-07-10 16:35:03 +02:00
  • 8e17c3d366 refactor: rename the pacquet/ directory to pnpm/ (#12913) Zoltan Kochan 2026-07-10 18:06:56 +02:00
  • a38adda211 fix: install active pnpm version when self-updating (#12879) Yashas Gunderia 2026-07-10 20:47:20 +05:30
  • 4627fa77ca feat(pacquet): login (#12851) Khải 2026-07-10 21:58:50 +07:00
  • fb680c35fb ci: stop bumping pacquet config dep and self-update pnpm from next-12 (#12912) Zoltan Kochan 2026-07-10 16:52:42 +02:00
  • c2248eb9ba ci: derive latest-<major> dist-tag from the version in the Tag workflow (#12911) Zoltan Kochan 2026-07-10 16:52:23 +02:00
  • 7074b6b338 ci(pacquet): draft a GitHub release with install-script assets (#12907) Zoltan Kochan 2026-07-10 16:38:46 +02:00
  • 52b57ade2f feat(cli): support --store-dir in pacquet (#12889) Benjamin Staneck 2026-07-10 16:27:17 +02:00
  • 43711ce654 fix(outdated): skip local lockfile refs (#12834) Gavin Lee 2026-07-10 22:10:43 +08:00
  • a897ef728d feat(pacquet): support custom fetchers from pnpmfile (#12846) Trevor Burnham 2026-07-10 10:06:09 -04:00
  • 5333a2543d fix(pacquet): restore Bit workspace/capsule install parity with the v11 engine (#12899) Zoltan Kochan 2026-07-10 16:02:33 +02:00
  • 601ab8499f fix(pacquet): put workspace root node_modules/.bin on script PATH (#12891) Zoltan Kochan 2026-07-10 14:26:57 +02:00
  • 702ad5f860 fix: update embedded Node.js release keys and automate the refresh (#12901) v10.34.5 release/10 Zoltan Kochan 2026-07-10 13:22:13 +02:00
  • 08f6c1867a ci: pass the target ref to git fetch after an end-of-options separator release/10-update-signatures Zoltan Kochan 2026-07-10 13:20:22 +02:00
  • 7aa583b667 ci: add create-release-pr workflow with automatic trust-root refresh Zoltan Kochan 2026-07-10 13:09:56 +02:00
  • 4f7fd82d3e fix: update embedded Node.js release keys Zoltan Kochan 2026-07-10 13:07:04 +02:00
  • e5dce41eab chore(release): 10.34.5 (#12900) Zoltan Kochan 2026-07-10 12:26:37 +02:00
  • 2ea88f2ac3 chore(release): 10.34.5 release/10-34-5 Zoltan Kochan 2026-07-10 12:04:43 +02:00
  • 36928beae9 fix(config): do not expand env vars in proxy fields from pnpm-workspace.yaml (#12898) Zoltan Kochan 2026-07-10 11:46:20 +02:00
  • 78e29fe558 fix(security): backport lockfile & manifest name/slot containment to v10 (#12890) Zoltan Kochan 2026-07-10 01:50:19 +02:00
  • eff0dbc6fd fix(security): backport lockfile & manifest name/slot containment to v10 release/v10-backport-sec-fixes Zoltan Kochan 2026-07-10 00:56:03 +02:00
  • d2ed60afba test: make git-resolver and dlx git tests immune to GitHub flakiness (#12885) Zoltan Kochan 2026-07-10 00:53:03 +02:00
  • 25da8c8cde chore: update package manager to pnpm v12 (#12811) Zoltan Kochan 2026-07-10 00:49:52 +02:00
  • 8e1e4c0aae chore(release): 11.11.0 (#12886) v11.11.0 Zoltan Kochan 2026-07-09 22:29:10 +02:00
  • fecfe8334b fix(resolver): keep hoisted peer providers out of the root peer context (#12847) C. Spencer Beggs 2026-07-09 16:00:20 -04:00
  • a8ad82d4dd fix: register pn alias in generated completions (#12861) Yashas Gunderia 2026-07-09 22:42:10 +05:30
  • 14332f07dd fix: don't silently drop locked optional deps on resolution failure (#12855) David Barratt 2026-07-09 13:07:23 -04:00
  • 3067e4f6b4 perf(npm-resolver): stop retaining raw registry bodies in the memoized fetch cache (#12870) maroKanatani 2026-07-10 02:06:06 +09:00
  • c70e33e887 fix: allow git build approvals by repository (#12856) Yashas Gunderia 2026-07-09 20:18:31 +05:30
  • abb6f4143b feat(pacquet): implement search command natively in Rust (#12852) Alessio Attilio 2026-07-09 16:15:32 +02:00
  • 9318a11a61 fix: allow global named registries config (#12862) Yashas Gunderia 2026-07-09 19:33:09 +05:30
  • 51300fd41c fix(security): contain lockfile & manifest package names/slots against path traversal (pnpm + pacquet) (#12872) Zoltan Kochan 2026-07-09 15:46:15 +02:00
  • 8ecbbd356c docs(contributing): document Rust toolchain and git-hook tooling (#12875) Zoltan Kochan 2026-07-09 14:07:44 +02:00
  • 0220995765 style(package-manager): replace Unicode ellipsis with ASCII in comments fix-isolated-linker-name-traversal Zoltan Kochan 2026-07-09 12:37:20 +02:00
  • 5a4daec4bd fix(config): do not expand env vars in proxy fields from pnpm-workspace.yaml (#12871) Zoltan Kochan 2026-07-09 11:59:33 +02:00
  • 6e25f3f12b fix(package-manager): guard symlink-layout joins and align invalid-name code Zoltan Kochan 2026-07-09 11:52:34 +02:00
  • 388001cb2e fix(pacquet): napi resolveDependency resolver chain + root-component member reachability (#12849) Zoltan Kochan 2026-07-09 11:47:10 +02:00
  • fd653cfa33 chore: sync tsconfig project references for new workspace dependency Zoltan Kochan 2026-07-09 11:35:49 +02:00
  • 96f26dd132 fix: reject dependency manifest names that escape node_modules Zoltan Kochan 2026-07-09 11:32:39 +02:00
  • c8ccfdf1ff fix(pacquet): reject lockfile names that escape node_modules (GHSA-2rx9-3g3h-c2jv) vuln-027 Zoltan Kochan 2026-07-09 11:25:01 +02:00
  • 508b8c29db feat(cli): implement the access command for both pnpm and pacquet (#12816) Alessio Attilio 2026-07-09 02:00:29 +02:00
  • eb121943e2 fix(pacquet-cli): handle Pkg variant in command_name match (#12850) Zoltan Kochan 2026-07-08 01:31:20 +02:00
  • 692c4494ab fix(pacquet): support recursive project listing (#12848) Zoltan Kochan 2026-07-08 01:15:47 +02:00