pnpm/.changeset/authenticated-node-mirrors.md at docs-migration-runtime-setting

mirror/pnpm

0 Fork 0

mirror of https://github.com/pnpm/pnpm.git synced 2026-10-30 11:38:32 -04:00

Files

T

Zoltan Kochan 3af5322039 fix: authenticate node.js mirror downloads (#14375 )

Reuse the existing URL-scoped registry credential lookup for every Node.js mirror request instead of introducing a separate authentication setting.

This covers release indexes, SHASUMS files and signatures, and runtime archives in both implementations while retaining longest-path-prefix scoping and cross-origin redirect protections. Authenticated checksum metadata bypasses the URL-keyed disk cache so it cannot cross credential contexts.

Closes pnpm/pnpm#14334.

2026-08-31 21:31:28 +02:00

566 B

Raw Permalink Blame History

@pnpm/crypto.shasums-file, @pnpm/engine.runtime.commands, @pnpm/engine.runtime.node-resolver, @pnpm/fetching.binary-fetcher, @pnpm/fetching.tarball-fetcher, @pnpm/installing.client, @pnpm/network.fetch, @pnpm/resolving.default-resolver, pacquet, pnpm

@pnpm/crypto.shasums-file	@pnpm/engine.runtime.commands	@pnpm/engine.runtime.node-resolver	@pnpm/fetching.binary-fetcher	@pnpm/fetching.tarball-fetcher	@pnpm/installing.client	@pnpm/network.fetch	@pnpm/resolving.default-resolver	pacquet	pnpm
patch	patch	minor	patch	patch	patch	patch	patch	patch	patch

Authenticate Node.js runtime downloads from nodeDownloadMirrors with URL-scoped npm registry credentials, including bearer tokens, basic auth, and tokenHelper pnpm/pnpm#14334.

566 B Raw Permalink Blame History

566 B

Raw Permalink Blame History