Commit Graph

  • 53b105416f chore(release): 11.6.0 (#12336) v11.6.0 Zoltan Kochan 2026-06-12 00:53:15 +02:00
  • 615c6694e1 feat: support URL-scoped registry auth via npm_config_// and pnpm_config_// env vars (#12338) Zoltan Kochan 2026-06-12 00:41:09 +02:00
  • 7929aa5150 ci(pacquet): free runner disk space before the coverage build reg-met-opt Zoltan Kochan 2026-06-11 21:26:35 +02:00
  • 217fbe0972 fix: only suggest a pnpm config set command for shell-safe keys (#12335) Zoltan Kochan 2026-06-11 20:13:13 +02:00
  • 84bb4b1a04 perf: close the warm-resolve, symlink-churn, and download-concurrency gaps (#12329) Zoltan Kochan 2026-06-11 19:39:45 +02:00
  • bc9ed78f48 fix: clearer warning when a project .npmrc uses env variables in registry/auth settings (#12333) Zoltan Kochan 2026-06-11 19:39:15 +02:00
  • 28e8cee5f6 ci: free runner disk space before the Linux test sweep Zoltan Kochan 2026-06-11 19:22:56 +02:00
  • c7c97c30df chore(release): 10.34.3 (#12332) v10.34.3 Zoltan Kochan 2026-06-11 18:45:16 +02:00
  • 598ea3f717 fix: clearer warning when a project .npmrc uses env variables in registry/auth settings (#12331) Zoltan Kochan 2026-06-11 18:37:46 +02:00
  • f86db31931 ci(pacquet): free runner disk space before the Linux lint-and-test build Zoltan Kochan 2026-06-11 18:34:37 +02:00
  • c99510cc60 perf: raise the default network concurrency floor from 16 to 64 Zoltan Kochan 2026-06-11 17:17:38 +02:00
  • 4afaac85c7 perf(fs): normalize relative link contents in the symlink up-to-date check Zoltan Kochan 2026-06-11 17:17:36 +02:00
  • 9a3cfa40fd perf(resolving-npm-resolver): probe deprecation without hydrating version manifests Zoltan Kochan 2026-06-11 17:17:34 +02:00
  • f85557b73f fix: upgrade @pnpm/npm-conf to 3.0.3 to block trusted config redirect (#12328) Zoltan Kochan 2026-06-11 17:22:11 +02:00
  • f11b4fcad7 feat(deps-installer): announce reused lockfile-verification verdicts (#12326) Zoltan Kochan 2026-06-11 17:09:12 +02:00
  • cb18695c5b perf(pacquet): lazy packument hydration, sharded meta cache, and an indexed metadata mirror (#12322) Zoltan Kochan 2026-06-11 12:12:46 +02:00
  • 657d322b15 perf(network): schedule tarball downloads by estimated pipeline work (#12309) Zoltan Kochan 2026-06-11 02:58:36 +02:00
  • ac367fce91 chore(rust/clippy): pedantic, nursery, and some (#12209) Khải 2026-06-11 05:43:22 +07:00
  • 9cd8070722 perf(resolving-npm-resolver): parse packuments off the reactor and release the network permit first (#12318) Zoltan Kochan 2026-06-11 00:33:31 +02:00
  • 52be454d57 fix: infer missing platform fields of optional dependencies from the package name (#12312) Zoltan Kochan 2026-06-10 21:51:40 +02:00
  • d976edf4ec perf: content-check modified manifests and fall back to the current lockfile on the repeat-install fast path (pacquet + pnpm) (#12315) Zoltan Kochan 2026-06-10 21:24:47 +02:00
  • 5aed1200ea feat: add musl binaries for pacquet and pnpr (#12316) Zoltan Kochan 2026-06-10 18:10:36 +02:00
  • 343441ca62 chore(release): 10.34.2 (#12311) v10.34.2 Zoltan Kochan 2026-06-10 15:40:37 +02:00
  • 14bceb1e0b fix(security): harden build-approval artifact identities on v10 (#12306) Zoltan Kochan 2026-06-10 15:10:00 +02:00
  • d2125b86ac chore: update lockfile, Node.js, pnpm, and pacquet versions (#12261) Zoltan Kochan 2026-06-10 14:25:19 +02:00
  • b7195db5c8 chore(release): 11.5.3 (#12305) v11.5.3 Zoltan Kochan 2026-06-10 12:40:29 +02:00
  • 65443f4bdf fix: validate staged tarball filenames (#12303) Zoltan Kochan 2026-06-10 12:06:10 +02:00
  • bf1b731ee6 fix: harden allowBuilds artifact approvals (#12294) Zoltan Kochan 2026-06-10 12:05:28 +02:00
  • 2c0b91d6b9 fix(exec): skip deps auto-install without manifest (#12301) Scarab Systems 2026-06-10 05:46:23 -04:00
  • 46fd26afc9 feat(view): show deprecation warning and bin info (#12271) Dasa Paddock 2026-06-09 23:22:06 -07:00
  • c452019ac0 fix(security): port the latest security fixes to v10 (#12300) Zoltan Kochan 2026-06-10 08:01:14 +02:00
  • 3d50680eda fix(security): verify Node.js runtime SHASUMS OpenPGP signature (#12295) Zoltan Kochan 2026-06-10 00:33:31 +02:00
  • 822beb5fa0 fix: harden package-manager bootstrap metadata (#12296) Zoltan Kochan 2026-06-10 00:30:31 +02:00
  • 5f2bb9f5ba fix(security): verify npm registry signature before spawning a package-manager binary (#12292) Zoltan Kochan 2026-06-09 23:37:20 +02:00
  • 1017c36776 fix: block untrusted request destination env expansion (#12291) Zoltan Kochan 2026-06-09 22:29:15 +02:00
  • 230df57aa5 fix(bins.resolver): reject reserved manifest bin names (#12289) Zoltan Kochan 2026-06-09 20:20:56 +02:00
  • ea204b07b7 feat(pacquet): configurational dependencies support (#12285) Zoltan Kochan 2026-06-09 19:47:27 +02:00
  • f39d6cc20d docs(pnpr): document short-circuit response shape docs-pnpr-short-circuit-response Zoltan Kochan 2026-06-09 18:20:11 +02:00
  • d188316989 fix(pacquet): apply overrides during fresh resolution (#12283) Zoltan Kochan 2026-06-09 14:07:21 +02:00
  • 8c9edf29c6 feat(lockfile): emit patchedDependencies block in pacquet lockfile (#12281) Zoltan Kochan 2026-06-09 12:01:42 +02:00
  • b73083537d feat(lockfile): emit pnpmfileChecksum in pacquet lockfiles (#12280) Zoltan Kochan 2026-06-09 09:14:52 +02:00
  • a06adee919 fix(lockfile): match pnpm's runtime dependency lockfile format (#12277) Zoltan Kochan 2026-06-09 07:18:59 +02:00
  • b1a6f4d4b5 fix(deps-resolver): align pacquet peer parent contexts (#12273) Zoltan Kochan 2026-06-09 07:16:58 +02:00
  • 7006bfaf2f fix(npm-resolver): render workspace self-dependency as bare link: (#12276) Zoltan Kochan 2026-06-09 01:02:23 +02:00
  • 55a4035abf fix(pacquet): record catalog snapshot for npm-aliased catalog deps (#12274) Zoltan Kochan 2026-06-09 00:29:11 +02:00
  • bafcfbaefc fix(pacquet): match pnpm peer-suffix rendering for walk-ancestor peers (#12267) Zoltan Kochan 2026-06-08 23:10:06 +02:00
  • e4d2fe025e docs: clarify store trust boundary (#12268) Zoltan Kochan 2026-06-08 21:03:28 +02:00
  • c74d4e161a docs: document threat model and trust boundaries in security policy (#12269) Zoltan Kochan 2026-06-08 20:46:44 +02:00
  • 97e1982d28 fix: detect enableGlobalVirtualStore toggle in workspace state check (#12147) Abdullah Alaqeel 2026-06-08 18:15:49 +03:00
  • 027196babe fix: parse bare color as boolean flag (#12162) minbang 2026-06-08 22:04:19 +09:00
  • b4cc602b6d docs: update the list of sponsors (#12265) Zoltan Kochan 2026-06-08 14:37:12 +02:00
  • 894ea6af2c feat: deprecate $ version references in overrides (#12262) Zoltan Kochan 2026-06-08 14:00:05 +02:00
  • 9777566bf4 chore: add .pr_agent.toml to configure Qodo reviews (#12264) Guy Vago 2026-06-08 14:58:23 +03:00
  • 29a496ac7c fix: make peer-dependent deduplication deterministic (#12179) David Barratt 2026-06-08 06:44:55 -04:00
  • 6f11872579 feat(pnpr): revalidate stale packuments with conditional GET to upstream (#12239) Juan Picado 2026-06-08 00:38:11 +02:00
  • 3537020817 fix: respect pmOnFail ignore in self-update (#12231) marko1olo 2026-06-08 02:15:38 +04:00
  • 7e5ffb0ac8 chore: update pacquet version (#12233) Zoltan Kochan 2026-06-07 23:43:59 +02:00
  • 0dc770aa7b perf(pacquet): share virtual-store slot linking pass (#12251) Zoltan Kochan 2026-06-07 23:27:15 +02:00
  • f73c6f09e3 docs(pnpr): document short-circuit response shape perf-pnpr-frozen-overlap Zoltan Kochan 2026-06-07 21:42:02 +02:00
  • f0dfb0da1d Revert "perf(pnpr): stream package frames from the frozen-lockfile short-circuit" Zoltan Kochan 2026-06-07 21:29:13 +02:00
  • 68ddaf9198 perf(pacquet): speed up lockfile verification repeats (#12260) Zoltan Kochan 2026-06-07 21:20:22 +02:00
  • 7047c2f33a perf(pnpr): stream package frames from the frozen-lockfile short-circuit Zoltan Kochan 2026-06-07 14:32:49 +02:00
  • 6b5d91a4cc fix(config): restore globalconfig lookup (#12252) marko1olo 2026-06-07 15:25:52 +04:00
  • e42e09dc20 fix: route benchmark registry tarballs through proxy (#12257) Zoltan Kochan 2026-06-07 13:11:15 +02:00
  • 75bf4bfe1e chore(husky): reject bare #NNN issue refs in commit messages (#12238) Khải 2026-06-07 05:47:49 +07:00
  • 51839cd3b8 perf(package-manager): parallelize cold-batch slot linking (#12249) Zoltan Kochan 2026-06-06 23:40:07 +02:00
  • d276a781c6 fix(pacquet): reuse in-flight prefetch on the cold-batch download (race fix) (#12243) Zoltan Kochan 2026-06-06 21:13:44 +02:00
  • 7db1e75180 perf(tarball): run parallel CAS writes on a dedicated rayon pool (#12248) Zoltan Kochan 2026-06-06 21:13:04 +02:00
  • bea64b24a4 perf(tarball): parallelize per-file CAS writes within a tarball (#12247) Zoltan Kochan 2026-06-06 19:55:49 +02:00
  • de32f83a67 fix(pnpr): parse /v1/resolve NDJSON stream in the TypeScript client (#12246) Zoltan Kochan 2026-06-06 19:55:06 +02:00
  • 5f7f747f60 fix(package-manager): stop pnpr install re-downloading prefetched tarballs (#12245) Zoltan Kochan 2026-06-06 19:54:22 +02:00
  • c199198e94 perf(pnpr): stream /v1/resolve, and fix the integrated benchmark to actually exercise pnpr (#12237) Zoltan Kochan 2026-06-06 15:25:08 +02:00
  • da4c80c145 fix(pacquet): report fresh-install prefetch downloads as fetched, not found_in_store (#12236) Zoltan Kochan 2026-06-06 14:56:30 +02:00
  • 1f8b4a1ba4 chore(cargo): bump tabled from 0.17.0 to 0.20.0 (#12216) dependabot[bot] 2026-06-06 12:01:22 +02:00
  • 1f549ebbfa chore(cargo): bump serde-saphyr from 0.0.26 to 0.0.27 (#12219) dependabot[bot] 2026-06-06 11:42:25 +02:00
  • 66efa1d2d6 chore(cargo): bump dashmap from 6.1.0 to 6.2.1 (#12217) dependabot[bot] 2026-06-06 10:38:00 +02:00
  • 76587d3def chore(cargo): bump reqwest from 0.13.3 to 0.13.4 (#12215) dependabot[bot] 2026-06-06 10:37:24 +02:00
  • 089484aca8 perf(pnpr): resolve server-side and fetch tarballs directly (#12232) Zoltan Kochan 2026-06-06 02:16:33 +02:00
  • 50cb7af337 feat(lockfile): write pnpm-lock.yaml byte-for-byte identical to pnpm (#12223) Zoltan Kochan 2026-06-05 23:52:34 +02:00
  • 3cb794541c test(pnpr): satisfy pacquet ci lint rules pnpr-resolution-metadata-db Zoltan Kochan 2026-06-05 21:32:28 +02:00
  • 5a81090d54 perf(pnpr): feed server file maps into pacquet linker Zoltan Kochan 2026-06-05 11:50:00 +02:00
  • 04473e027c chore(deps): bump the github-actions group across 1 directory with 10 updates (#12220) dependabot[bot] 2026-06-05 20:56:11 +02:00
  • af2dac2918 chore: add Coolify to cspell dictionary pnpr-docker Zoltan Kochan 2026-06-05 20:27:37 +02:00
  • 82da8431c2 chore(pnpr): add Dockerfile, compose, and deployment guide Zoltan Kochan 2026-06-04 17:11:33 +02:00
  • 19ced3ab68 perf(pnpr): cache repeated public install resolutions Zoltan Kochan 2026-06-05 16:04:08 +02:00
  • 9ca46fa1ec fix(pnpr): validate the install file manifest before streaming the 200 pnpr-stream-install-response Zoltan Kochan 2026-06-05 16:22:23 +02:00
  • 80114b60ea docs(pnpr): fix dangling intra-doc links to removed build_files_payload Zoltan Kochan 2026-06-05 15:47:44 +02:00
  • e4a9f438f3 perf(pnpr): feed server file maps into pacquet linker pnpr-perf-inv Zoltan Kochan 2026-06-05 11:50:00 +02:00
  • ed3b854afa perf(pnpr): stream the /v1/install response instead of buffering Zoltan Kochan 2026-06-05 11:47:35 +02:00
  • 9f002da43f chore: update lockfile and pnpm (#12211) Zoltan Kochan 2026-06-05 10:05:32 +02:00
  • ae212c8e1b feat(pnpr): forward uplink auth token and custom headers to upstreams (#12186) Juan Picado 2026-06-05 09:54:09 +02:00
  • 70554b8677 feat(pnpr): config-selectable networked-SQLite auth backend (#12199 phase 3) (#12206) Zoltan Kochan 2026-06-05 09:15:17 +02:00
  • 4b4d38361c chore(release): 11.5.2 (#12207) v11.5.2 Zoltan Kochan 2026-06-05 08:27:41 +02:00
  • cbfeeef328 fix: avoid partial package materialization under concurrent installs (#12204) Zoltan Kochan 2026-06-05 01:55:13 +02:00
  • 02e1e7760e test(registry-mock): read uplinked packuments from pnpr's proxy cache dir (#12205) Zoltan Kochan 2026-06-05 00:57:05 +02:00
  • 4e740d5562 fix(gvs): run dependency build scripts under the global virtual store (#11987) Ruben Nogueira 2026-06-04 23:30:44 +01:00
  • a6682244cd feat(pacquet): port the catalogMode auto-cataloging half (saveCatalogName / catalog writes) (#12202) Zoltan Kochan 2026-06-05 00:22:53 +02:00
  • 69354b288f chore(release): key changeset-released ledger by target branch (#12201) Zoltan Kochan 2026-06-04 23:32:47 +02:00
  • 8e5e764037 feat(pnpr): store hosted packages in an S3-compatible object store (#12198) Zoltan Kochan 2026-06-04 22:44:53 +02:00
  • e7e99f04e4 fix: do not crash when a catalog specifier is a range (#11706) shiminshen 2026-06-05 03:20:01 +08:00