Commit Graph

  • a33c4bfcb0 perf: skip resolution when only pnpm-lock.yaml is missing (pnpm + pacquet) (#12004) Zoltan Kochan 2026-05-28 00:47:45 +02:00
  • b8196b82d1 fix: require integrity for tarball-shaped lockfile resolutions (backport #11966 to v10) (#12007) Zoltan Kochan 2026-05-28 00:44:13 +02:00
  • c94b4f89c7 fix: publish with default access (#11991) Philip Roberts 2026-05-27 23:39:41 +01:00
  • df3b5065be ci(release): pin Node 20 for v10 release workflow (#11997) v10.34.0 Zoltan Kochan 2026-05-27 16:52:39 +02:00
  • 8be85cbbd6 ci(release): clone ldid from ProcursusTeam GitHub mirror (#11990) Zoltan Kochan 2026-05-27 15:23:42 +02:00
  • 72d997cc34 chore(release): 11.4.0 (#11989) v11.4.0 Zoltan Kochan 2026-05-27 15:15:01 +02:00
  • 1de167838c chore(release): 10.34.0 (#11988) Zoltan Kochan 2026-05-27 14:58:46 +02:00
  • 99cdedc235 fix(config): pin unscoped per-registry settings to their source's registry at load time (backport #11953 to v10) (#11986) Zoltan Kochan 2026-05-27 14:37:42 +02:00
  • fb8dd3152d chore(changeset): bump @pnpm/network.auth-header to major release/10-auth-fix Zoltan Kochan 2026-05-27 14:06:11 +02:00
  • 5e5df2e086 fix(config): pin unscoped per-registry settings to their source's registry at load time Zoltan Kochan 2026-05-27 13:46:45 +02:00
  • 6c0f2940c3 fix: fail by default when a tarball does not match the locked integrity (#11985) Zoltan Kochan 2026-05-27 14:25:11 +02:00
  • 19f7df1461 fix(git-fetcher): reject non-SHA commit values before invoking git Zoltan Kochan 2026-05-27 14:13:35 +02:00
  • 525dc388c4 fix: fail by default when a tarball does not match the locked integrity release/10-update-checksum Zoltan Kochan 2026-05-27 13:44:55 +02:00
  • 2067a86e02 fix: reject path-traversal segments in dependency aliases release/10-alias Zoltan Kochan 2026-05-27 13:24:39 +02:00
  • 455cfcd84b fix: reject path-traversal segments in dependency aliases Zoltan Kochan 2026-05-27 13:19:21 +02:00
  • b73908f088 chore: update pnpm-lock.yaml (#11897) Zoltan Kochan 2026-05-27 13:00:13 +02:00
  • e4fa829765 fix: update vulnerable transitive dependencies (#11979) Dharma Kanneganti 2026-05-27 03:50:10 -07:00
  • aa6149df65 fix: fail by default when a tarball does not match the locked integrity (#11968) Zoltan Kochan 2026-05-27 12:46:16 +02:00
  • c12681f68d docs(registry): flesh out @pnpm/pnpr README (#11972) Zoltan Kochan 2026-05-27 00:15:32 +02:00
  • f03dc2d15d refactor(registry): adopt verdaccio-shaped YAML config (#11970) Juan Picado 2026-05-26 23:52:37 +02:00
  • e55f4b5efd fix: require integrity for tarball-shaped lockfile resolutions (#11966) Zoltan Kochan 2026-05-26 23:15:03 +02:00
  • 90d1ce6b60 fix(git-fetcher): reject non-SHA commit values before invoking git (#11967) Zoltan Kochan 2026-05-26 22:56:49 +02:00
  • 89c2b52728 ci(pacquet): pin cargo-dylint to 6.0.0 to unblock CI (#11969) Zoltan Kochan 2026-05-26 20:59:03 +02:00
  • f107b1e13a ci(test): install @pnpm/pnpr from npm instead of building locally (#11964) Zoltan Kochan 2026-05-26 19:33:11 +02:00
  • 0f5f338a89 chore: add pnpr to cspell Zoltan Kochan 2026-05-26 18:50:25 +02:00
  • f578281d2a feat(pacquet/config): --recursive, --workspace-concurrency (#11959) Khải 2026-05-26 23:47:44 +07:00
  • c42f69ffaf ci(pnpr): add manual release workflow that publishes @pnpm/pnpr to npm (#11963) Zoltan Kochan 2026-05-26 17:54:58 +02:00
  • ad84fffd46 fix: reject path-traversal segments in dependency aliases (#11954) Zoltan Kochan 2026-05-26 17:25:25 +02:00
  • a23956e3ab fix(config/reader): pin unscoped per-registry settings to their source's registry at load time (#11953) Zoltan Kochan 2026-05-26 16:46:50 +02:00
  • 0c5b66f1ea fix(pacquet/integrated-benchmark): use --ignore-failure singular hyperfine flag (#11960) Zoltan Kochan 2026-05-26 16:24:49 +02:00
  • a662de44dd fix: pnpm runtime set defaults to devEngines (#11951) Zoltan Kochan 2026-05-26 16:04:10 +02:00
  • 6481f6c161 fix(patching/apply-patch): reject patch paths that escape the patched directory (#11952) Zoltan Kochan 2026-05-26 12:50:19 +02:00
  • 26a7d633bf fix(patching/apply-patch): reject patch paths that escape the patched directory (#11952) Zoltan Kochan 2026-05-26 12:50:19 +02:00
  • 35d235542e fix: validate devEngines runtime onFail (#11822) Puneet Dixit 2026-05-26 13:59:40 +05:30
  • 53580da2e3 docs(cli): drop em dashes from run/exec/dlx comments per writing-style guide claude/magical-allen-CJ2aZ Claude 2026-05-26 01:05:55 +00:00
  • a1f6f32996 fix(pacquet/package-manager): build workspace state from project list, not lockfile (#11946) Zoltan Kochan 2026-05-26 02:24:13 +02:00
  • 198c661b99 fix(pacquet): require pnpm-lock.yaml for single-project optimisticRepeatInstall fast path (#11945) Zoltan Kochan 2026-05-26 01:43:21 +02:00
  • 6b3ba4d337 fix(pacquet): port pnpm's workspace-link short-circuit and depPath helpers (#11944) Zoltan Kochan 2026-05-25 23:45:49 +02:00
  • c8c50caeca perf(pacquet): port optimisticRepeatInstall fast path for repeat installs (#11943) Zoltan Kochan 2026-05-25 23:38:00 +02:00
  • 890ea3b098 fix(cli): satisfy perfectionist single-letter and raw-string lints Claude 2026-05-25 19:08:55 +00:00
  • ca122337b4 fix(executor): raw strings for backslash escapes in run_script tests Claude 2026-05-25 18:57:26 +00:00
  • 0973f22348 fix(cli): use raw strings to satisfy perfectionist::prefer-raw-string Claude 2026-05-25 18:53:33 +00:00
  • 5516552ec9 fix(cli): resolve CI failures for run/exec/dlx port Claude 2026-05-25 18:49:17 +00:00
  • cc4ff817aa fix(pacquet/registry): deserialize optionalDependencies and peerDependenciesMeta (#11934) Zoltan Kochan 2026-05-25 18:33:02 +02:00
  • 7120ac0813 fix(pacquet/resolving-npm-resolver): singleflight verifier lookup caches (#11933) Zoltan Kochan 2026-05-25 17:42:53 +02:00
  • d0823b9367 feat(cli): port dlx from the TypeScript CLI Claude 2026-05-25 15:16:15 +00:00
  • 7dc17fe62b feat(cli): port run and exec from the TypeScript CLI Claude 2026-05-25 15:03:19 +00:00
  • 1fb8a2d5d8 perf(pacquet): unlock no-op short-circuit + port abbreviated-modified verifier shortcut (#11931) Zoltan Kochan 2026-05-25 17:00:16 +02:00
  • b7229f8571 fix(pacquet/resolving-npm-resolver): honor linkWorkspacePackages for bare-semver deps (#11930) Zoltan Kochan 2026-05-25 16:26:39 +02:00
  • e52e4fce63 feat(pacquet): port detect-libc to Rust and replace ad-hoc libc detection in graph-hasher (#11921) Nicolas Le Cam 2026-05-25 15:32:11 +02:00
  • 97391bf341 test(pacquet/package-manager): make side-effects write test umask-agnostic (#11922) Nicolas Le Cam 2026-05-25 14:44:42 +02:00
  • d579e6cbb5 perf(pacquet): trim install-phase syscalls and allocations (#11864) Zoltan Kochan 2026-05-25 14:36:05 +02:00
  • 440e15586d fix: summarize all global update groups (#11920) mehmet turac 2026-05-25 15:18:58 +03:00
  • ae2175829a feat(registry-access): extract dist-tag + adduser helpers, dogfood from tests (#11926) Zoltan Kochan 2026-05-25 14:01:00 +02:00
  • ac299aa0e5 fix(pacquet,package-manager): walk every workspace project in fresh-resolve install (#11905) Zoltan Kochan 2026-05-25 13:11:53 +02:00
  • 0721d64188 fix: require provenance for trusted publisher evidence (#11911) mehmet turac 2026-05-25 13:52:35 +03:00
  • e8b3ae132e fix: clarify non-root resolutions warning (#11912) mehmet turac 2026-05-25 13:31:17 +03:00
  • 494cdcaa01 chore: drop verdaccio from the repo (#11925) Zoltan Kochan 2026-05-25 11:15:30 +02:00
  • d8a79a9c30 feat(registry): add auth/dist-tag/publish endpoints + wire TS tests onto pnpm-registry (#11914) Zoltan Kochan 2026-05-25 09:40:09 +02:00
  • 058f5f2f8b fix(package-manager): port pnpm's lockfile-pruner BFS to re-derive transitive optional (#11919) Zoltan Kochan 2026-05-25 01:35:23 +02:00
  • 3788a8b0e6 perf(pacquet): lazy children realization in dependency tree (#11915) Zoltan Kochan 2026-05-25 00:02:50 +02:00
  • b9de85dcb6 ci(pacquet): drop pnpm comparison and self-compare on main from integrated-benchmark (#11913) Zoltan Kochan 2026-05-24 22:12:29 +02:00
  • f5d7723f3a perf(pacquet): port pnpm's purePkgs + peersCache for peer resolution (#11906) Zoltan Kochan 2026-05-24 21:18:26 +02:00
  • add6c794f1 feat(registry): implement pnpm-registry server and adopt it in pacquet's test mock (#11898) Zoltan Kochan 2026-05-24 21:18:09 +02:00
  • e549cd1cf1 perf(pacquet): no-op short-circuit when node_modules is up to date (#11904) Zoltan Kochan 2026-05-24 18:35:59 +02:00
  • bee378021b docs(resolving-deps-resolver): unlink cross-crate ref in prefetch doc perf/11900 Zoltan Kochan 2026-05-24 17:43:45 +02:00
  • 5938f50e1c perf(resolving-deps-resolver): prefetch packuments during fresh-resolve tree walk Zoltan Kochan 2026-05-24 17:36:12 +02:00
  • a456dc78fb fix(list): limit manifest reads for large workspaces (#11692) mehmet turac 2026-05-24 12:45:40 +03:00
  • 572842a039 fix(installing.commands): clarify "loose mode" wording in minimumReleaseAge log (#11763) shiminshen 2026-05-24 17:02:42 +08:00
  • 9a3207367d chore: update pnpm and pacquet Zoltan Kochan 2026-05-24 10:46:22 +02:00
  • bcbc008f2d fix: temporarily disabling pacquet for release v11.3.0 Zoltan Kochan 2026-05-24 10:36:14 +02:00
  • 6316e7b275 fix(deploy): skip configDependencies in the nested install (#11895) Zoltan Kochan 2026-05-24 10:31:31 +02:00
  • 74a219eac6 fix(pacquet/modules-yaml): write GVS-aware virtualStoreDir to match pnpm (#11896) Zoltan Kochan 2026-05-24 10:31:13 +02:00
  • f2a4d2caef chore(release): 11.3.0 (#11894) Zoltan Kochan 2026-05-24 02:23:07 +02:00
  • 3b62f9da31 feat(publish): add --skip-manifest-obfuscation flag for pack/publish (#11393) modten 2026-05-24 08:15:18 +08:00
  • cdceebc2ab chore: update pacquet to v0.2.7 (#11893) Zoltan Kochan 2026-05-24 02:14:32 +02:00
  • 155af87585 fix(env-installer): prune env lockfile when updating a config dep (#11892) Zoltan Kochan 2026-05-24 01:49:33 +02:00
  • 3209c2510c fix(pacquet/store-dir): append STORE_VERSION to storeDir so pnpm and pacquet stay interchangeable (#11891) Zoltan Kochan 2026-05-24 01:48:24 +02:00
  • e0bd879dea fix(deps-resolver): restore index-based pairing so git/tarball deps aren't dropped (#11890) Zoltan Kochan 2026-05-24 01:17:17 +02:00
  • 4bcc268be8 chore: update node.js used for local development (#11889) Zoltan Kochan 2026-05-24 00:42:49 +02:00
  • ae42a7adc1 fix: preserve catalog: protocol references on upgrade (#11711) Totoro 2026-05-24 06:17:00 +08:00
  • 22cb743672 feat: implement native 'pnpm repo' command (#11505) Alessio Attilio 2026-05-24 00:14:04 +02:00
  • d55263fff5 feat(pkg-manifest): add native set-script command with ss alias (#11504) Alessio Attilio 2026-05-23 23:50:29 +02:00
  • d7da112eea feat(pkg): implement native pnpm pkg command (#11512) Alessio Attilio 2026-05-23 22:59:09 +02:00
  • 389dae8382 ci: fix zizmor ref-version-mismatch on action-gh-release (#11888) Zoltan Kochan 2026-05-23 22:48:09 +02:00
  • 3d143854c0 fix(exec.commands): fall back to alias as bin name when dlx slot lacks package.json (#11886) Zoltan Kochan 2026-05-23 21:42:27 +02:00
  • 7a5cb92f80 chore(cargo): bump assert_cmd from 2.2.1 to 2.2.2 (#11853) dependabot[bot] 2026-05-23 21:21:20 +02:00
  • 43e06bb2ae fix(pacquet): accept string libc in PackageMetadata (#11880) kimulaco 2026-05-24 03:40:25 +09:00
  • 508e6d800b feat: add pnpm stage command (#11863) Jovi De Croock 2026-05-23 20:35:43 +02:00
  • 212315de16 fix: cap lockfile verification memory and add trustLockfile opt-out (#11878) Zoltan Kochan 2026-05-23 20:33:03 +02:00
  • a5b1ac783f chore(deps): bump the github-actions group with 4 updates (#11854) dependabot[bot] 2026-05-23 19:43:23 +02:00
  • bf581bb0a5 ci(bencher): enforce PR thresholds and grant checks: write (#11883) Zoltan Kochan 2026-05-23 18:49:39 +02:00
  • 4088de0433 ci(bencher): record benchmark results to Bencher (#11875) Zoltan Kochan 2026-05-23 15:19:49 +02:00
  • 8c68c20211 fix(pacquet): drop synthetic transitive-peer entries from the importer lockfile (#11877) Zoltan Kochan 2026-05-23 14:21:10 +02:00
  • e7820bf650 perf(pacquet): cache per-wanted resolves in resolve_dependency_tree (#11874) Zoltan Kochan 2026-05-23 12:53:46 +02:00
  • 6ae4b5d5ba chore(lint): more clippy rules (#11855) Tunglies 2026-05-23 18:20:58 +08:00
  • d4a2b0364c chore: update dependencies (#11802) Zoltan Kochan 2026-05-23 11:47:41 +02:00
  • c5a1d0842a perf(package-manager): route fresh-lockfile install through CreateVirtualStore (#11867) Zoltan Kochan 2026-05-23 11:31:21 +02:00
  • 976504fd04 perf(pacquet): close the clean-install gap to pnpm CLI (#11856) Zoltan Kochan 2026-05-22 16:59:28 +02:00
  • d4136eb6f6 chore(pacquet/lint): more clippy (#11839) Khải 2026-05-22 13:48:50 +07:00