Commit Graph

  • 6e45ce18a4 feat(pacquet): port audit command (#12637) Zoltan Kochan 2026-06-25 09:55:25 +02:00
  • c1434c4883 test(git-fetcher): cover bundleDependencies closure depth cap (#12644) Khải 2026-06-25 14:54:18 +07:00
  • 4ae05dccf3 test: authenticate to the pnpr registry mock with bearer tokens (#12636) Zoltan Kochan 2026-06-25 09:41:12 +02:00
  • 54c5c0e028 feat(pacquet-cli): add prune command (#12587) Alessio Attilio 2026-06-25 02:11:37 +02:00
  • 8fec9929c4 feat(cli): port set-script command to pacquet (#12618) A 2026-06-25 00:58:40 +02:00
  • b1839d4ce0 perf(pnpr): require bearer tokens and drop request-time Basic auth (#12596) Zoltan Kochan 2026-06-25 00:03:25 +02:00
  • 6b962c9539 feat(pacquet-cli): add dedupe command (#12586) Alessio Attilio 2026-06-24 21:54:22 +02:00
  • 270aa1d713 chore(deps): bump the github-actions group across 1 directory with 4 updates (#12621) dependabot[bot] 2026-06-24 21:43:57 +02:00
  • 1bbb056276 test(pnpr): opt the unpublish-policy fixtures into registration vuln-029-hardening Zoltan Kochan 2026-06-22 16:39:17 +02:00
  • 5a910fa7e3 style(pnpr): add trailing comma to satisfy dylint in policy test Zoltan Kochan 2026-06-22 16:29:57 +02:00
  • 8309842388 fix(pnpr): harden registration opt-in against review findings Zoltan Kochan 2026-06-22 16:17:23 +02:00
  • 05dc494c96 feat(pacquet-cli): add import command (#12585) Alessio Attilio 2026-06-24 18:51:33 +02:00
  • a7c2dd6dd1 chore: update lockfile, Node.js, pnpm, and pacquet versions (#12603) Zoltan Kochan 2026-06-24 20:44:51 +02:00
  • 689c42b73e ci: carry TS CI / Success only from pull_request and merge_group runs (#12635) Zoltan Kochan 2026-06-24 19:39:35 +02:00
  • e2dab007f8 ci(pnpr): publish a Docker image on release (#12619) Zoltan Kochan 2026-06-24 16:40:29 +02:00
  • e3f2be02f0 ci: don't run push CI on merge-queue branches (#12633) Zoltan Kochan 2026-06-24 15:28:30 +02:00
  • fe28cc6db6 ci: build pnpr per-OS so Linux tests don't wait on the Windows build (#12630) Zoltan Kochan 2026-06-24 15:21:28 +02:00
  • ebd38f8ce0 fix(cli): gate unix-only tests so Windows builds without warnings (#12595) Zoltan Kochan 2026-06-24 13:51:05 +02:00
  • 003bb9a43c feat(pacquet): add patch workflow commands (#12609) spencer17x 2026-06-24 19:50:22 +08:00
  • 4ec0049f55 fix(pacquet/git-fetcher): bundle transitive deps of bundled dependencies (#12620) Khải 2026-06-24 18:38:38 +07:00
  • e583b04e34 ci(benchmark): show commit hash in Integrated-Benchmark Report (#12631) Abdullah Alaqeel 2026-06-24 14:40:14 +03:00
  • bf77ed25ea ci: run required checks on merge_group so the merge queue works (#12627) Zoltan Kochan 2026-06-24 12:23:46 +02:00
  • 0e181379c4 test(pnpm): isolate the metadata cache per test (#12628) Zoltan Kochan 2026-06-24 12:25:54 +02:00
  • 266c2fe7bd refactor(pnpr): source --listen default from Config::DEFAULT_LISTEN (#12629) Zoltan Kochan 2026-06-24 12:12:12 +02:00
  • 76461e0006 feat(pnpr): change default port to 7677 (#12622) Zoltan Kochan 2026-06-24 11:40:01 +02:00
  • e42c2f23cb ci: shard Windows TS tests (#12612) Zoltan Kochan 2026-06-24 02:08:56 +02:00
  • dd79bdc08e ci: require release workflow to run on tags (#12613) Zoltan Kochan 2026-06-23 23:20:03 +02:00
  • 87a43b9d41 ci: fix release workflow body generation (#12614) Zoltan Kochan 2026-06-23 22:13:19 +02:00
  • 9671d9aeed chore(release): 11.9.0 (#12611) v11.9.0 Zoltan Kochan 2026-06-23 17:16:24 +02:00
  • 6a6e43253d ci: fix create release PR (#12610) Zoltan Kochan 2026-06-23 16:25:07 +02:00
  • 852d5379e1 fix(npm-resolver): surface registry fetch errors in tarball URL check (#12519) kyungseopk1m 2026-06-23 22:56:40 +09:00
  • 0a154b1c35 fix(patching.commands): keep the dependency alias when patching a single git-hosted version (#12518) YES!HYUNGSEOK 2026-06-23 22:06:36 +09:00
  • c1bb3021fb fix(integrated-benchmark): keep pnpr bearer-token auth in the benchmark harness revert-88ad Zoltan Kochan 2026-06-23 14:17:37 +02:00
  • 87dbadce00 revert: "fix(pnpr): require auth for resolver requests (pnpm/pnpm#12577)" Zoltan Kochan 2026-06-23 13:17:09 +02:00
  • ec7cf70853 fix(dlx): shorten dlx cache path to avoid Windows MAX_PATH failures (#12605) Zoltan Kochan 2026-06-23 13:06:42 +02:00
  • 3fabad9eb3 ci(integrated-benchmark): isolate auth-send cost by running pre-revision pnpr anonymously bench-isolate-regression Zoltan Kochan 2026-06-23 10:26:11 +02:00
  • ceb7bad0d4 ci(integrated-benchmark): add direct-install baseline to the isolation run Zoltan Kochan 2026-06-23 02:45:18 +02:00
  • ccfc9b04a2 ci(integrated-benchmark): reduce to three pnpr revisions and raise precompile timeout Zoltan Kochan 2026-06-23 02:02:58 +02:00
  • 94df65b2bf ci(integrated-benchmark): isolate the pnpr acceleration regression Zoltan Kochan 2026-06-23 01:30:30 +02:00
  • 2b4952e804 chore(integrated-benchmark): authenticate pnpr with a bearer token (#12597) Zoltan Kochan 2026-06-23 01:15:13 +02:00
  • 7e1be2f8d2 feat(cli): port approve-builds, ignored-builds, and rebuild to pacquet (#12572) Zoltan Kochan 2026-06-23 00:11:13 +02:00
  • f742b0429e fix(pnpr): preserve non-canonical upstream tarball filenames (#12593) Zoltan Kochan 2026-06-22 23:15:55 +02:00
  • 4ef289f3d3 perf(pnpr): serve sidecar-verified cached tarballs without re-parsing the packument fix-perf-regr Zoltan Kochan 2026-06-22 22:52:40 +02:00
  • e341014440 fix(pnpr): harden the streaming tee per review (size cap, length, log redaction) Zoltan Kochan 2026-06-22 17:55:25 +02:00
  • 9a771db960 perf(pnpr): stream proxied tarballs while verifying instead of buffering Zoltan Kochan 2026-06-22 17:38:58 +02:00
  • 88add0909a fix(pnpr): require auth for resolver requests (#12577) Zoltan Kochan 2026-06-22 17:23:48 +02:00
  • 1ee48db668 fix(pnpr): pass MaxUsers to UserStore::in_memory in server tests fix-main-branch Zoltan Kochan 2026-06-22 17:18:58 +02:00
  • 85d9e7708a fix(pnpr): enforce unpublish authorization (#12579) Zoltan Kochan 2026-06-22 16:29:12 +02:00
  • cdc897f838 fix(pnpr): make user self-registration opt-in by default (#12581) Zoltan Kochan 2026-06-22 16:22:42 +02:00
  • 4c4acb654f fix(pnpr): enforce bearer-token readonly and CIDR restrictions (#12574) Zoltan Kochan 2026-06-22 15:36:03 +02:00
  • b6b1162e13 fix(runtime): normalize blank runtime selectors (#12576) Zoltan Kochan 2026-06-22 15:33:29 +02:00
  • 5dc859365c fix(pnpr): fail closed on invalid hosted tarball paths (#12580) Zoltan Kochan 2026-06-22 15:32:33 +02:00
  • bb1872dc3d fix(pnpr): reject unsafe htpasswd usernames (#12578) Zoltan Kochan 2026-06-22 15:24:46 +02:00
  • d577eeaf76 fix(dlx): make failed-install cache cleanup best-effort on Windows (#12575) Zoltan Kochan 2026-06-22 15:13:10 +02:00
  • 0ec878d829 feat(pacquet): port runtime command (#12571) Zoltan Kochan 2026-06-22 14:25:49 +02:00
  • be60cd63eb feat: pacquet cache command (#12553) Alessio Attilio 2026-06-22 14:08:31 +02:00
  • 1c04a00cdb fix(pnpr): verify proxied tarball integrity (#12570) Zoltan Kochan 2026-06-22 13:00:09 +02:00
  • 886fe57aec chore: update lockfile, Node.js, pnpm, and pacquet versions (#12535) Zoltan Kochan 2026-06-22 12:10:18 +02:00
  • bae694f639 fix(lockfile): compute tarball integrity upon download (#12491) Ajeet D'Souza 2026-06-22 15:32:29 +05:30
  • d1635db8b3 feat(pacquet): implement cat-index command (#12551) Alessio Attilio 2026-06-22 11:46:44 +02:00
  • faf31ef8fb fix(pnpr): screen registry responses with osv (#12566) Zoltan Kochan 2026-06-22 10:56:55 +02:00
  • e72b482b6f feat(pacquet): implement find-hash (#12552) Alessio Attilio 2026-06-22 03:30:23 +02:00
  • 4d3fe4b495 refactor(pnpr): move resolver endpoints under the /-/pnpr namespace (#12565) Zoltan Kochan 2026-06-22 03:13:15 +02:00
  • bed6c59f1f feat(pnpr): add registry/resolver feature toggles (#12563) Zoltan Kochan 2026-06-22 02:01:41 +02:00
  • 25a829ed1a fix(audit): combine min release age excl entries (#12538) Kirk Holloway 2026-06-22 01:49:23 +02:00
  • 8928aed6a9 chore: reduce Qodo inline-comment noise on iterated PRs (#12546) Zoltan Kochan 2026-06-22 01:48:09 +02:00
  • a34bfc942e chore(cargo): bump insta from 1.47.2 to 1.48.0 (#12524) dependabot[bot] 2026-06-22 01:25:06 +02:00
  • b4fdfe9b33 fix(package-manager): save hosted-git adds in normalized shortcut form (#12557) Zoltan Kochan 2026-06-21 16:48:02 +02:00
  • bd5390e24e feat(pnpr): add pluggable SQL auth backends (#12547) Zoltan Kochan 2026-06-21 16:31:03 +02:00
  • 49971fb5d6 feat(package-manager): port updateProjectManifest manifest writer (#12549) Zoltan Kochan 2026-06-21 14:57:43 +02:00
  • 247201eb19 feat(pacquet): implement cat-file command (#12550) Alessio Attilio 2026-06-21 14:44:59 +02:00
  • 322f88f4f1 fix: avoid mutating unrelated deps on failed optional updates (#11373) Rayan Salhab 2026-06-21 14:24:21 +03:00
  • bdc1b07f63 feat(pacquet): add restart and stop script commands (#12543) Alessio Attilio 2026-06-21 10:08:56 +02:00
  • 6367954be4 feat(pacquet): add create command (port from pnpm create) (#12542) Alessio Attilio 2026-06-21 10:06:59 +02:00
  • 0d24a60236 feat(pnpr): block vulnerable versions with local OSV index (#12506) Zoltan Kochan 2026-06-21 00:46:23 +02:00
  • 9d7627cca6 feat(pacquet): purge node_modules on layout changes matching validateModules (#12536) Alessio Attilio 2026-06-21 00:42:21 +02:00
  • 1cbb5f2355 fix(resolver): make shared-children missing-peer reuse independent of resolution order (#12514) David Barratt 2026-06-20 15:45:57 -04:00
  • 6379dc1a88 fix(release): write release artifacts to the repo-root dist (#12545) Zoltan Kochan 2026-06-20 20:35:17 +02:00
  • 258b11274c fix(ci): point pnpm CLI bencher extraction at pnpm11/pnpm (#12544) Zoltan Kochan 2026-06-20 20:34:12 +02:00
  • f6dde6246f ci: skip ecosystem-e2e on forks (#12541) btea 2026-06-21 02:18:47 +08:00
  • d3f68e2aa4 fix(audit): compute reachable vulnerabilities with Tarjan SCC (#12467) C. T. Lin 2026-06-20 21:34:06 +08:00
  • 8c3a372048 fix(pacquet): read the pnpm CLI manifest from its pnpm11/ location (#12540) Zoltan Kochan 2026-06-20 15:27:45 +02:00
  • 12baab400d chore(coderabbit): scope the pnpm CLI product label to the pnpm11 directory (#12539) Zoltan Kochan 2026-06-20 14:47:54 +02:00
  • fc2f33912e refactor: move the TypeScript pnpm CLI into a pnpm11/ directory (#12537) Zoltan Kochan 2026-06-20 14:36:25 +02:00
  • 6545793845 fix: avoid updating allowBuilds when workspace is ignored (#12488) Nightt 2026-06-20 18:39:15 +08:00
  • 6c35a432be feat(sbom): add --exclude-peers to omit peer dependencies (#12443) Allan Kimmer Jensen 2026-06-20 12:11:04 +02:00
  • 05b95ab100 fix(network.fetch): reject non-retryable errors instead of throwing in the retry callback (#12517) YES!HYUNGSEOK 2026-06-20 11:18:36 +09:00
  • a84d2a1157 feat(resolving): vendor get-npm-tarball-url as @pnpm/resolving.tarball-url + canonical-URL helper (#12513) Trevor Burnham 2026-06-19 21:02:30 -04:00
  • 1488db1d0a fix(hoist): replace stale non-GVS symlinks when enable-global-virtual-store is toggled on (#12494) Alessio Attilio 2026-06-20 02:13:50 +02:00
  • c12a15f766 chore(cargo): bump ignore from 0.4.25 to 0.4.26 (#12525) dependabot[bot] 2026-06-20 00:48:57 +02:00
  • c59ae0a477 chore(cargo): bump which from 8.0.2 to 8.0.3 (#12523) dependabot[bot] 2026-06-20 00:48:25 +02:00
  • d7ba22ef95 docs: add review guide (#12522) Zoltan Kochan 2026-06-19 23:33:39 +02:00
  • 83457b5764 feat(pacquet): cover the gap in nodeLinker: 'hoisted' (#12510) Khải 2026-06-19 21:59:36 +07:00
  • fbdc0ebaf9 fix(version-policy): treat multiple exact-version excludes as equivalent to a single disjunction (#12516) shiro 2026-06-19 20:20:08 +09:00
  • ee9fab5476 feat(cli): add pacquet why command (#12497) Alessio Attilio 2026-06-19 13:07:55 +02:00
  • 17e7f2ce9e feat(sbom): add issue-tracker external reference from package bugs (#12445) Allan Kimmer Jensen 2026-06-19 12:33:07 +02:00
  • fa7004b261 perf(npm-resolver): cache meta in memory for exact version matches. (#12458) Ryan Tarpine 2026-06-19 06:30:31 -04:00
  • 0f11c4018f chore: update lockfile, Node.js, pnpm, and pacquet versions (#12520) Zoltan Kochan 2026-06-19 12:07:54 +02:00
  • 11ebd9d232 fix(pacquet): preserve exec bit on clone/reflink import path (#12502) kimulaco 2026-06-19 18:19:32 +09:00
  • b7e3ea202c test(npm-resolver): name the closure param to satisfy dylint native-binary-deps Zoltan Kochan 2026-06-19 00:29:51 +02:00