Commit Graph

  • 4f7fd82d3e fix: update embedded Node.js release keys Zoltan Kochan 2026-07-10 13:07:04 +02:00
  • e5dce41eab chore(release): 10.34.5 (#12900) Zoltan Kochan 2026-07-10 12:26:37 +02:00
  • 2ea88f2ac3 chore(release): 10.34.5 release/10-34-5 Zoltan Kochan 2026-07-10 12:04:43 +02:00
  • 36928beae9 fix(config): do not expand env vars in proxy fields from pnpm-workspace.yaml (#12898) Zoltan Kochan 2026-07-10 11:46:20 +02:00
  • 78e29fe558 fix(security): backport lockfile & manifest name/slot containment to v10 (#12890) Zoltan Kochan 2026-07-10 01:50:19 +02:00
  • eff0dbc6fd fix(security): backport lockfile & manifest name/slot containment to v10 release/v10-backport-sec-fixes Zoltan Kochan 2026-07-10 00:56:03 +02:00
  • d2ed60afba test: make git-resolver and dlx git tests immune to GitHub flakiness (#12885) Zoltan Kochan 2026-07-10 00:53:03 +02:00
  • 25da8c8cde chore: update package manager to pnpm v12 (#12811) Zoltan Kochan 2026-07-10 00:49:52 +02:00
  • 8e1e4c0aae chore(release): 11.11.0 (#12886) v11.11.0 Zoltan Kochan 2026-07-09 22:29:10 +02:00
  • fecfe8334b fix(resolver): keep hoisted peer providers out of the root peer context (#12847) C. Spencer Beggs 2026-07-09 16:00:20 -04:00
  • a8ad82d4dd fix: register pn alias in generated completions (#12861) Yashas Gunderia 2026-07-09 22:42:10 +05:30
  • 14332f07dd fix: don't silently drop locked optional deps on resolution failure (#12855) David Barratt 2026-07-09 13:07:23 -04:00
  • 3067e4f6b4 perf(npm-resolver): stop retaining raw registry bodies in the memoized fetch cache (#12870) maroKanatani 2026-07-10 02:06:06 +09:00
  • c70e33e887 fix: allow git build approvals by repository (#12856) Yashas Gunderia 2026-07-09 20:18:31 +05:30
  • abb6f4143b feat(pacquet): implement search command natively in Rust (#12852) Alessio Attilio 2026-07-09 16:15:32 +02:00
  • 9318a11a61 fix: allow global named registries config (#12862) Yashas Gunderia 2026-07-09 19:33:09 +05:30
  • 51300fd41c fix(security): contain lockfile & manifest package names/slots against path traversal (pnpm + pacquet) (#12872) Zoltan Kochan 2026-07-09 15:46:15 +02:00
  • 8ecbbd356c docs(contributing): document Rust toolchain and git-hook tooling (#12875) Zoltan Kochan 2026-07-09 14:07:44 +02:00
  • 0220995765 style(package-manager): replace Unicode ellipsis with ASCII in comments fix-isolated-linker-name-traversal Zoltan Kochan 2026-07-09 12:37:20 +02:00
  • 5a4daec4bd fix(config): do not expand env vars in proxy fields from pnpm-workspace.yaml (#12871) Zoltan Kochan 2026-07-09 11:59:33 +02:00
  • 6e25f3f12b fix(package-manager): guard symlink-layout joins and align invalid-name code Zoltan Kochan 2026-07-09 11:52:34 +02:00
  • 388001cb2e fix(pacquet): napi resolveDependency resolver chain + root-component member reachability (#12849) Zoltan Kochan 2026-07-09 11:47:10 +02:00
  • fd653cfa33 chore: sync tsconfig project references for new workspace dependency Zoltan Kochan 2026-07-09 11:35:49 +02:00
  • 96f26dd132 fix: reject dependency manifest names that escape node_modules Zoltan Kochan 2026-07-09 11:32:39 +02:00
  • c8ccfdf1ff fix(pacquet): reject lockfile names that escape node_modules (GHSA-2rx9-3g3h-c2jv) vuln-027 Zoltan Kochan 2026-07-09 11:25:01 +02:00
  • 508b8c29db feat(cli): implement the access command for both pnpm and pacquet (#12816) Alessio Attilio 2026-07-09 02:00:29 +02:00
  • eb121943e2 fix(pacquet-cli): handle Pkg variant in command_name match (#12850) Zoltan Kochan 2026-07-08 01:31:20 +02:00
  • 692c4494ab fix(pacquet): support recursive project listing (#12848) Zoltan Kochan 2026-07-08 01:15:47 +02:00
  • fd20a6ee8a chore(deps): bump the github-actions group across 1 directory with 11 updates (#12785) dependabot[bot] 2026-07-08 01:12:37 +02:00
  • 7a27027368 feat(pacquet-cli): implement pkg command (#12795) Alessio Attilio 2026-07-08 00:13:51 +02:00
  • 6fbbebfa52 fix(pacquet): support pnpm repo CI scripts (#12842) Zoltan Kochan 2026-07-07 21:09:43 +02:00
  • be8e8ea747 feat(pacquet): expose linkWorkspacePackages in the napi binding (#12844) Zoltan Kochan 2026-07-07 19:30:20 +02:00
  • 25bd5c3fe5 fix: allow standalone pnpm downgrades (#12840) Zoltan Kochan 2026-07-07 19:29:06 +02:00
  • dcfc611d3b fix: honor trustPolicy in pnpm self-update, and recover from unusable cached engine slots (#12838) Zoltan Kochan 2026-07-07 19:28:06 +02:00
  • b789d81127 docs: clarify support timeline for version 11.x (#12839) Zoltan Kochan 2026-07-07 14:58:50 +02:00
  • febe5f36da ci: build the musl NAPI addon with dynamic CRT linking (#12837) Zoltan Kochan 2026-07-07 12:38:01 +02:00
  • 47ef6f04ed fix: allow pnpm v10 to switch/self-update to pnpm v12 (#12835) Zoltan Kochan 2026-07-07 11:39:02 +02:00
  • 33d532cee4 fix(security): verify pnpm engine before relinking and sanitize wrapper bin names release/10-v12-install Zoltan Kochan 2026-07-07 10:50:25 +02:00
  • de1371daa9 feat(pacquet): add Node API bindings for the Rust engine (#12822) Zoltan Kochan 2026-07-07 10:45:03 +02:00
  • 28e8710b9a fix: allow pnpm v10 to switch/self-update to pnpm v12 Zoltan Kochan 2026-07-07 10:35:52 +02:00
  • 1219c994dc fix(pacquet): persist the synthesized runtime package.json into the store index (#12829) Zoltan Kochan 2026-07-07 10:00:48 +02:00
  • d1da02e38d feat(pacquet): publish (initial) (#12691) Khải 2026-07-07 02:26:35 +07:00
  • ed54cccc6f fix: filter pacquet install summary by prefix (#12824) Zoltan Kochan 2026-07-06 21:20:16 +02:00
  • 91da714725 fix(pacquet): stop printing skipped optional dependency warnings (#12825) Zoltan Kochan 2026-07-06 18:48:29 +02:00
  • f8058ebcb9 fix: switch pacquet to project package manager version (#12821) Zoltan Kochan 2026-07-06 17:02:46 +02:00
  • dba2255af8 fix(pacquet-cli): install exe wrapper for with downgrades (#12820) Zoltan Kochan 2026-07-06 13:17:55 +02:00
  • 3685987206 fix(pacquet): resolve caller catalogs in dlx overrides and find runtime bins (#12817) Zoltan Kochan 2026-07-06 07:48:43 +02:00
  • 39a030d47e style: formatting KSXGitHub-patch-4 Khải 2026-07-06 11:52:21 +07:00
  • 10a800ade0 chore(rust): strip aggressive optimization to improve compile time Khải 2026-07-06 11:41:28 +07:00
  • 23996e9504 feat(pacquet): support global runtime install (#12814) Zoltan Kochan 2026-07-05 22:33:06 +02:00
  • 1a3406d82d fix(cli): accept a --no-<flag> negation for every boolean flag (#12812) Zoltan Kochan 2026-07-05 10:58:33 +02:00
  • 2dabb31dce fix(pacquet): skip unsupported optional deps on fresh install (#12809) Zoltan Kochan 2026-07-05 08:42:49 +02:00
  • e0616d3550 fix(cli): support top-level command fallback (#12810) Zoltan Kochan 2026-07-05 08:40:33 +02:00
  • 2b5e9bc54c fix(cli): print the bare version for --version and -v (#12808) Zoltan Kochan 2026-07-05 01:15:17 +02:00
  • fbf78bd7d2 chore: fix lockfile (#12807) Zoltan Kochan 2026-07-05 00:13:34 +02:00
  • e36ae78f7d fix(release): declare the MIT license in the generated native packages (#12806) Zoltan Kochan 2026-07-04 23:48:56 +02:00
  • 8d1d7590c8 chore: remove the redundant dependency-field validation from the pnpmfile pack hook (#12805) Zoltan Kochan 2026-07-04 23:48:38 +02:00
  • b7908f96e7 chore(release): stage the wrapper packages in the Rust release workflow (#12804) Zoltan Kochan 2026-07-04 22:51:50 +02:00
  • 276d634ab1 fix(release): keep the pack-app config inside the packed project (#12801) v11.10.0 Zoltan Kochan 2026-07-04 21:42:11 +02:00
  • 7cd1e4f4f6 chore(release): 11.10.0 (#12799) Zoltan Kochan 2026-07-04 21:05:03 +02:00
  • 2f389d6cf7 feat(release): auto-refresh embedded signing keys in the release PR (#12798) Zoltan Kochan 2026-07-04 20:47:45 +02:00
  • d53917264f fix(pack): compute packed summary before postpack cleanup (#12777) Hichem Taboukouyout 2026-07-04 18:43:41 +01:00
  • dcabb78620 fix(resolver): targeted updates resolve exactly like a fresh install (#12558) Abdullah Alaqeel 2026-07-04 20:22:14 +03:00
  • 07c9787a48 chore(cargo): bump reflink-copy from 0.1.29 to 0.1.30 (#12783) dependabot[bot] 2026-07-04 17:57:26 +02:00
  • c09a1c5765 chore(cargo): bump pgp from 0.19.0 to 0.20.0 (#12782) dependabot[bot] 2026-07-04 17:56:56 +02:00
  • be363b1b1c chore(cargo): bump bcrypt from 0.19.1 to 0.19.2 (#12781) dependabot[bot] 2026-07-04 17:56:32 +02:00
  • 11a7fddb74 perf(npm-resolver): cache disk-loaded metadata in memory on offline resolution (#12760) Andrew Stegmaier 2026-07-04 10:50:02 -05:00
  • acbdb94853 fix(completion): complete workspaces with -F alias as for --filter (#12788) Cosimo Matteini 2026-07-04 17:05:36 +02:00
  • 99982b9f00 perf(npm-resolver): normalize non-abbreviated registry metadata (#12772) Andrew Stegmaier 2026-07-04 10:01:09 -05:00
  • 84cf84c62e fix(package-manager): don't wipe node_modules on an included-deps change (#12676) YES!HYUNGSEOK 2026-07-04 22:18:48 +09:00
  • ebb4096646 feat(pacquet-cli): implement pnpm peers command (#12706) Alessio Attilio 2026-07-04 13:29:45 +02:00
  • fdfe172f6c feat(pacquet): route preResolution hook info/warn logging to pnpm:hook channel (#12681) Alessio Attilio 2026-07-04 13:29:05 +02:00
  • c3e9fddf9e chore: update lockfile, Node.js, pnpm, and pacquet versions (#12751) Zoltan Kochan 2026-07-04 11:19:10 +02:00
  • ce5d5a57cb fix(pnpm): resolve relative patchedDependencies against lockfileDir (#12762) luo2430 2026-07-04 16:59:29 +08:00
  • 806c3ecd9f fix: suppress auth warning when PNPM_CONFIG_NPMRC_AUTH_FILE points at project .npmrc (#12679) Ankit Pradhan 2026-07-04 14:24:11 +05:45
  • 25c738883d fix(resolving): reject malformed jsr: and named-registry package names (empty scope/name, path separators) (#12677) JSap0914 2026-07-04 07:50:41 +09:00
  • e2e3c818f2 feat: add issues alias to bugs command (#12734) Alessio Attilio 2026-07-04 00:16:08 +02:00
  • 1e81761409 Expose web authentication authUrl and doneUrl in JSON error output when OTP is required in a non-interactive terminal (#12786) Mateusz Burzyński 2026-07-03 22:37:15 +02:00
  • 90dd34672b feat(pnpr): merge the namespace and the ACL into per-registry packages: maps (RFC pnpm/rfcs#17) (#12787) Zoltan Kochan 2026-07-03 21:49:06 +02:00
  • a6c4d5f1e8 fix: show available workspace versions on version mismatch (#12615) Hardik Dholariya 2026-07-03 19:37:33 +05:30
  • 2adaadd88e docs(pacquet): link needless_borrowed_parameters to the owned-parameter rule claude/perfectionist-needless-borrowed-params-auz8x1 Claude 2026-07-03 12:21:53 +00:00
  • 0eb619e15a chore(git): merge main into claude/perfectionist-needless-borrowed-params-auz8x1 Claude 2026-07-03 12:21:45 +00:00
  • 02ef9b57a5 feat(pnpr): declare patterns on registries, reduce routers to ordered sources (#12778) Zoltan Kochan 2026-07-03 13:38:24 +02:00
  • 804e15ff15 refactor(pacquet,pnpr): re-enable perfectionist::needless_borrowed_parameters Claude 2026-07-03 11:24:04 +00:00
  • 9ef4c01c98 feat(pnpr): derive the registry surface from declared mounts (#12773) Zoltan Kochan 2026-07-03 00:34:46 +02:00
  • 991405eaff fix(default-reporter): restore ansi-diff to stop duplicated output lines (#12698) Abdullah Alaqeel 2026-07-02 23:56:44 +03:00
  • a3153604b3 fix(pnpr): repair registry-mock routing and migrate tests off real-npm writes (#12769) Zoltan Kochan 2026-07-02 22:51:48 +02:00
  • 9375797b46 feat(pacquet-cli): add pacquet sbom command (#12732) Allan Kimmer Jensen 2026-07-02 17:04:43 +02:00
  • c1212355bf fix: respect transitive dependencies when sorting filtered projects (#12688) Adrian Niculescu 2026-07-02 18:03:35 +03:00
  • 8491f8e26f feat(cli): implement prefix command (#12728) Alessio Attilio 2026-07-02 17:02:32 +02:00
  • 72b1927856 feat(pnpr): registry mounts as the only routing model (RFC pnpm/rfcs#13) (#12747) Zoltan Kochan 2026-07-02 11:45:23 +02:00
  • ddbb4899c2 feat(pacquet): implement bugs command (#12687) Alessio Attilio 2026-07-01 18:09:02 +02:00
  • 397f9783f4 fix: avoid passing infinite width to cli-truncate when streaming lifecycle output (#12750) Zoltan Kochan 2026-07-01 09:15:29 +02:00
  • b6d29d212d chore: update lockfile, Node.js, pnpm, and pacquet versions (#12692) Zoltan Kochan 2026-06-30 20:56:39 +02:00
  • f57f5af8bd docs(pacquet): remove TypeScript-code references from comments and document the parity paradigm (#12737) Khải 2026-07-01 01:53:14 +07:00
  • b81fb8f676 feat(pnpr): stream sized package frames from verify-lockfile feat/pnpr-verify-sized-frames Zoltan Kochan 2026-06-30 00:34:21 +02:00
  • a6f303c2ff chore(rust/dylint): upgrade perfectionist 0.0.0-rc.22 (#12719) Khải 2026-06-30 05:27:17 +07:00
  • c4acfadd86 fix(pnpr): stream proxied tarballs instead of buffering-then-verifying (and benchmark the cold pnpr cache) (#12729) Zoltan Kochan 2026-06-29 23:42:49 +02:00
  • cc04eb174e feat(cli): port the bin command to pacquet (#12703) Nikita Zhukovskii 2026-06-30 05:53:32 +09:00
  • da9f834e34 feat(pacquet-cli): implement pnpm repo command (#12702) Alessio Attilio 2026-06-29 22:52:42 +02:00