Commit Graph

  • 103b99bdb4 perf(npm): ship pacquet and pnpr as placeholder bins relinked to the native binary on install (#12507) Zoltan Kochan 2026-06-26 16:08:25 +02:00
  • b98cbf8d89 chore: update lockfile, Node.js, pnpm, and pacquet versions (#12680) Zoltan Kochan 2026-06-26 10:50:41 +02:00
  • 6beda88be8 ci: pin oz-agent-action to the exact tag for zizmor's version check (#12678) YES!HYUNGSEOK 2026-06-26 17:24:34 +09:00
  • aea6aceb68 feat(pacquet-cli): add dynamic completion server (#12661) spencer17x 2026-06-26 09:39:07 +08:00
  • f38e696da7 feat(pacquet): port deploy command (#12668) Zoltan Kochan 2026-06-26 03:22:14 +02:00
  • ec76ca3cf3 feat(pacquet): port the "ping" command (#12666) A 2026-06-26 03:05:23 +02:00
  • 2c7369dbab feat(pacquet-cli): port the pack-app command (#12669) Zoltan Kochan 2026-06-26 01:49:05 +02:00
  • 6312916595 feat(pacquet-cli): port the config command (#12672) Zoltan Kochan 2026-06-26 00:23:34 +02:00
  • 3fe10ac744 ci: add Oz cloud triage workflow for new issues (#12673) Zoltan Kochan 2026-06-26 00:21:22 +02:00
  • 3d7d2d17e7 feat(pacquet): port dist-tag command (#12667) Zoltan Kochan 2026-06-26 00:02:00 +02:00
  • af5827376b feat(pacquet-cli): add list, ls, ll, and la commands for local and global package inspection (#12664) Alessio Attilio 2026-06-25 21:27:11 +02:00
  • 159bd27ecb feat(pacquet): pack (#12567) Khải 2026-06-26 01:54:09 +07:00
  • 6aa5b70595 feat(pnpr): multiple-uplink fallback ordering per package (#12648) Juan Picado 2026-06-25 20:53:27 +02:00
  • 9f3df6b9b4 ci(pacquet): shrink test build debuginfo to avoid ENOSPC on the ubuntu runner (#12665) Zoltan Kochan 2026-06-25 19:24:37 +02:00
  • c50c6aaf6b feat(pacquet-cli): port audit signatures (#12663) Zoltan Kochan 2026-06-25 18:25:57 +02:00
  • b0304429b0 feat(pacquet): port whoami command (#12649) A 2026-06-25 17:38:16 +02:00
  • 32d4d3f1f0 feat(cli): port the root command to pacquet (#12632) Nikita Zhukovskii 2026-06-26 00:29:47 +09:00
  • 47685fddab fix(pnpr): allow metadata-only re-publish so pnpm deprecate works (#12659) Zoltan Kochan 2026-06-25 16:15:33 +02:00
  • 208b6921b1 feat(pacquet-cli): add unlink command (#12590) Alessio Attilio 2026-06-25 16:14:27 +02:00
  • dd8ea85662 fix(package-manifest): write package.json atomically via a temp file (#12642) YES!HYUNGSEOK 2026-06-25 22:38:47 +09:00
  • 114e4f5aac ci: gate the pacquet release publish job behind the release environment (#12641) YES!HYUNGSEOK 2026-06-25 22:36:01 +09:00
  • 0c44bb94e6 ci: gate the pnpr release publish and docker jobs behind the release environment (#12640) YES!HYUNGSEOK 2026-06-25 22:34:58 +09:00
  • 11c9fb168f ci: gate the docker.yml workflow_dispatch build behind the release environment (#12639) YES!HYUNGSEOK 2026-06-25 22:33:38 +09:00
  • f6f6c5e15e feat(pacquet): port audit --fix, --ignore, and --interactive (#12653) Zoltan Kochan 2026-06-25 15:27:59 +02:00
  • 04f156ec0e fix(network): retry metadata fetches that fail while reading the body (#12655) Zoltan Kochan 2026-06-25 15:25:40 +02:00
  • 58556049d1 chore: move PR conflict helper to root shell dir (#12656) Zoltan Kochan 2026-06-25 15:24:21 +02:00
  • 00be94896a chore: move PR conflict helper to root shell dir (#12656) gh-readonly-queue/main/pr-12656-305295f83838b831c0f7cce18835e28c5f3c8e1c Zoltan Kochan 2026-06-25 14:23:57 +02:00
  • 305295f838 docs: align agent comment conventions (#12657) Zoltan Kochan 2026-06-25 15:23:54 +02:00
  • 1f462efb3f fix(pnpr): reject dist.integrity tampering in the partial-unpublish PUT (#12647) YES!HYUNGSEOK 2026-06-25 22:23:35 +09:00
  • fff9043d7f fix(pnpr): bound libsql auth backend reads with a timeout (#12645) YES!HYUNGSEOK 2026-06-25 22:22:49 +09:00
  • be6505a72d feat(global): port global package install support to pacquet (#12638) Zoltan Kochan 2026-06-25 14:53:49 +02:00
  • 3425e8011c feat(config): support an _auth setting for registry authentication (#12559) Abdullah Alaqeel 2026-06-25 15:25:25 +03:00
  • 40441c3a83 ci: make review label automation tolerate queued captures (#12654) Zoltan Kochan 2026-06-25 13:26:54 +02:00
  • 1a96a433f4 feat(pacquet-cli): add link command (#12589) Alessio Attilio 2026-06-25 12:26:43 +02:00
  • 0d50197074 fix: restore pacquet current lockfile on repeat install (#12643) spencer17x 2026-06-25 17:34:12 +08:00
  • a06591e349 feat(pacquet-cli): add fetch command (#12588) Alessio Attilio 2026-06-25 10:53:27 +02:00
  • deb6d8ede7 fix(pnpr): reject re-publishing an existing version with 409 Conflict (#12646) YES!HYUNGSEOK 2026-06-25 17:36:17 +09:00
  • 6e45ce18a4 feat(pacquet): port audit command (#12637) Zoltan Kochan 2026-06-25 09:55:25 +02:00
  • c1434c4883 test(git-fetcher): cover bundleDependencies closure depth cap (#12644) Khải 2026-06-25 14:54:18 +07:00
  • 4ae05dccf3 test: authenticate to the pnpr registry mock with bearer tokens (#12636) Zoltan Kochan 2026-06-25 09:41:12 +02:00
  • 54c5c0e028 feat(pacquet-cli): add prune command (#12587) Alessio Attilio 2026-06-25 02:11:37 +02:00
  • 8fec9929c4 feat(cli): port set-script command to pacquet (#12618) A 2026-06-25 00:58:40 +02:00
  • b1839d4ce0 perf(pnpr): require bearer tokens and drop request-time Basic auth (#12596) Zoltan Kochan 2026-06-25 00:03:25 +02:00
  • 6b962c9539 feat(pacquet-cli): add dedupe command (#12586) Alessio Attilio 2026-06-24 21:54:22 +02:00
  • 270aa1d713 chore(deps): bump the github-actions group across 1 directory with 4 updates (#12621) dependabot[bot] 2026-06-24 21:43:57 +02:00
  • 1bbb056276 test(pnpr): opt the unpublish-policy fixtures into registration vuln-029-hardening Zoltan Kochan 2026-06-22 16:39:17 +02:00
  • 5a910fa7e3 style(pnpr): add trailing comma to satisfy dylint in policy test Zoltan Kochan 2026-06-22 16:29:57 +02:00
  • 8309842388 fix(pnpr): harden registration opt-in against review findings Zoltan Kochan 2026-06-22 16:17:23 +02:00
  • 05dc494c96 feat(pacquet-cli): add import command (#12585) Alessio Attilio 2026-06-24 18:51:33 +02:00
  • a7c2dd6dd1 chore: update lockfile, Node.js, pnpm, and pacquet versions (#12603) Zoltan Kochan 2026-06-24 20:44:51 +02:00
  • 689c42b73e ci: carry TS CI / Success only from pull_request and merge_group runs (#12635) Zoltan Kochan 2026-06-24 19:39:35 +02:00
  • e2dab007f8 ci(pnpr): publish a Docker image on release (#12619) Zoltan Kochan 2026-06-24 16:40:29 +02:00
  • e3f2be02f0 ci: don't run push CI on merge-queue branches (#12633) Zoltan Kochan 2026-06-24 15:28:30 +02:00
  • fe28cc6db6 ci: build pnpr per-OS so Linux tests don't wait on the Windows build (#12630) Zoltan Kochan 2026-06-24 15:21:28 +02:00
  • ebd38f8ce0 fix(cli): gate unix-only tests so Windows builds without warnings (#12595) Zoltan Kochan 2026-06-24 13:51:05 +02:00
  • 003bb9a43c feat(pacquet): add patch workflow commands (#12609) spencer17x 2026-06-24 19:50:22 +08:00
  • 4ec0049f55 fix(pacquet/git-fetcher): bundle transitive deps of bundled dependencies (#12620) Khải 2026-06-24 18:38:38 +07:00
  • e583b04e34 ci(benchmark): show commit hash in Integrated-Benchmark Report (#12631) Abdullah Alaqeel 2026-06-24 14:40:14 +03:00
  • bf77ed25ea ci: run required checks on merge_group so the merge queue works (#12627) Zoltan Kochan 2026-06-24 12:23:46 +02:00
  • 0e181379c4 test(pnpm): isolate the metadata cache per test (#12628) Zoltan Kochan 2026-06-24 12:25:54 +02:00
  • 266c2fe7bd refactor(pnpr): source --listen default from Config::DEFAULT_LISTEN (#12629) Zoltan Kochan 2026-06-24 12:12:12 +02:00
  • 76461e0006 feat(pnpr): change default port to 7677 (#12622) Zoltan Kochan 2026-06-24 11:40:01 +02:00
  • e42c2f23cb ci: shard Windows TS tests (#12612) Zoltan Kochan 2026-06-24 02:08:56 +02:00
  • dd79bdc08e ci: require release workflow to run on tags (#12613) Zoltan Kochan 2026-06-23 23:20:03 +02:00
  • 87a43b9d41 ci: fix release workflow body generation (#12614) Zoltan Kochan 2026-06-23 22:13:19 +02:00
  • 9671d9aeed chore(release): 11.9.0 (#12611) v11.9.0 Zoltan Kochan 2026-06-23 17:16:24 +02:00
  • 6a6e43253d ci: fix create release PR (#12610) Zoltan Kochan 2026-06-23 16:25:07 +02:00
  • 852d5379e1 fix(npm-resolver): surface registry fetch errors in tarball URL check (#12519) kyungseopk1m 2026-06-23 22:56:40 +09:00
  • 0a154b1c35 fix(patching.commands): keep the dependency alias when patching a single git-hosted version (#12518) YES!HYUNGSEOK 2026-06-23 22:06:36 +09:00
  • c1bb3021fb fix(integrated-benchmark): keep pnpr bearer-token auth in the benchmark harness revert-88ad Zoltan Kochan 2026-06-23 14:17:37 +02:00
  • 87dbadce00 revert: "fix(pnpr): require auth for resolver requests (pnpm/pnpm#12577)" Zoltan Kochan 2026-06-23 13:17:09 +02:00
  • ec7cf70853 fix(dlx): shorten dlx cache path to avoid Windows MAX_PATH failures (#12605) Zoltan Kochan 2026-06-23 13:06:42 +02:00
  • 3fabad9eb3 ci(integrated-benchmark): isolate auth-send cost by running pre-revision pnpr anonymously bench-isolate-regression Zoltan Kochan 2026-06-23 10:26:11 +02:00
  • ceb7bad0d4 ci(integrated-benchmark): add direct-install baseline to the isolation run Zoltan Kochan 2026-06-23 02:45:18 +02:00
  • ccfc9b04a2 ci(integrated-benchmark): reduce to three pnpr revisions and raise precompile timeout Zoltan Kochan 2026-06-23 02:02:58 +02:00
  • 94df65b2bf ci(integrated-benchmark): isolate the pnpr acceleration regression Zoltan Kochan 2026-06-23 01:30:30 +02:00
  • 2b4952e804 chore(integrated-benchmark): authenticate pnpr with a bearer token (#12597) Zoltan Kochan 2026-06-23 01:15:13 +02:00
  • 7e1be2f8d2 feat(cli): port approve-builds, ignored-builds, and rebuild to pacquet (#12572) Zoltan Kochan 2026-06-23 00:11:13 +02:00
  • f742b0429e fix(pnpr): preserve non-canonical upstream tarball filenames (#12593) Zoltan Kochan 2026-06-22 23:15:55 +02:00
  • 4ef289f3d3 perf(pnpr): serve sidecar-verified cached tarballs without re-parsing the packument fix-perf-regr Zoltan Kochan 2026-06-22 22:52:40 +02:00
  • e341014440 fix(pnpr): harden the streaming tee per review (size cap, length, log redaction) Zoltan Kochan 2026-06-22 17:55:25 +02:00
  • 9a771db960 perf(pnpr): stream proxied tarballs while verifying instead of buffering Zoltan Kochan 2026-06-22 17:38:58 +02:00
  • 88add0909a fix(pnpr): require auth for resolver requests (#12577) Zoltan Kochan 2026-06-22 17:23:48 +02:00
  • 1ee48db668 fix(pnpr): pass MaxUsers to UserStore::in_memory in server tests fix-main-branch Zoltan Kochan 2026-06-22 17:18:58 +02:00
  • 85d9e7708a fix(pnpr): enforce unpublish authorization (#12579) Zoltan Kochan 2026-06-22 16:29:12 +02:00
  • cdc897f838 fix(pnpr): make user self-registration opt-in by default (#12581) Zoltan Kochan 2026-06-22 16:22:42 +02:00
  • 4c4acb654f fix(pnpr): enforce bearer-token readonly and CIDR restrictions (#12574) Zoltan Kochan 2026-06-22 15:36:03 +02:00
  • b6b1162e13 fix(runtime): normalize blank runtime selectors (#12576) Zoltan Kochan 2026-06-22 15:33:29 +02:00
  • 5dc859365c fix(pnpr): fail closed on invalid hosted tarball paths (#12580) Zoltan Kochan 2026-06-22 15:32:33 +02:00
  • bb1872dc3d fix(pnpr): reject unsafe htpasswd usernames (#12578) Zoltan Kochan 2026-06-22 15:24:46 +02:00
  • d577eeaf76 fix(dlx): make failed-install cache cleanup best-effort on Windows (#12575) Zoltan Kochan 2026-06-22 15:13:10 +02:00
  • 0ec878d829 feat(pacquet): port runtime command (#12571) Zoltan Kochan 2026-06-22 14:25:49 +02:00
  • be60cd63eb feat: pacquet cache command (#12553) Alessio Attilio 2026-06-22 14:08:31 +02:00
  • 1c04a00cdb fix(pnpr): verify proxied tarball integrity (#12570) Zoltan Kochan 2026-06-22 13:00:09 +02:00
  • 886fe57aec chore: update lockfile, Node.js, pnpm, and pacquet versions (#12535) Zoltan Kochan 2026-06-22 12:10:18 +02:00
  • bae694f639 fix(lockfile): compute tarball integrity upon download (#12491) Ajeet D'Souza 2026-06-22 15:32:29 +05:30
  • d1635db8b3 feat(pacquet): implement cat-index command (#12551) Alessio Attilio 2026-06-22 11:46:44 +02:00
  • faf31ef8fb fix(pnpr): screen registry responses with osv (#12566) Zoltan Kochan 2026-06-22 10:56:55 +02:00
  • e72b482b6f feat(pacquet): implement find-hash (#12552) Alessio Attilio 2026-06-22 03:30:23 +02:00
  • 4d3fe4b495 refactor(pnpr): move resolver endpoints under the /-/pnpr namespace (#12565) Zoltan Kochan 2026-06-22 03:13:15 +02:00