2515828983
* chore: update dependencies, Node.js, pnpm, and GitHub Actions * chore: generate the embedded CAS loader bundle on install The CAS loader that `deps-restorer` embeds with include_str! was a minified esbuild bundle committed to the repo. Every enhanced-resolve or esbuild bump rewrote most of it, and a stale copy failed CI with a byte-by-byte assertion diff. `@pnpm/esm-loader` now generates it from a `prepare` script, so every `pnpm install` that includes the package writes it before cargo builds. Cargo already depends on that install for `.pnpm/crates`. The package gets its own esbuild devDependency instead of borrowing pnpm11/pnpm's. The filtered installs that feed cargo (install-crates and the wasm release job) now also select `@pnpm/esm-loader`. Also ignore GHSA-hp3w-g68c-fv3c. sprintf-js has no patched release, and it is reached only through argparse 1 formatting its own help text. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore: write the CAS loader bundle atomically and generate it for wasm CI An interrupted `prepare` could leave a truncated bundle that a later up-to-date install never rewrites. Write to a temporary file and rename. The pnpm-wasm workflow builds the CLI after a filtered install, so it now selects `@pnpm/esm-loader` too. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
100 lines
2.2 KiB
Plaintext
100 lines
2.2 KiB
Plaintext
# Logs
|
|
logs
|
|
*.log
|
|
npm-debug.log*
|
|
|
|
# Dependency directory
|
|
**/node_modules/**
|
|
_node_modules
|
|
.pnp.cjs
|
|
|
|
# Coverage directory used by tools like istanbul
|
|
coverage
|
|
|
|
.tmp
|
|
_docpress
|
|
.DS_Store
|
|
|
|
lib
|
|
dist
|
|
tsconfig.tsbuildinfo
|
|
tsconfig.lint.tsbuildinfo
|
|
test.lib/
|
|
|
|
# Generated by `pnpm --filter pnpm run compile` (tsgo typecheck).
|
|
# The root `/pnpm/` entry that used to sit here (build detritus in the
|
|
# pre-pnpm11 package location) is gone: `pnpm/` is the Rust source tree
|
|
# now, so it must not be ignored. Delete any stale generated `pnpm/`
|
|
# dir left over from before the pnpm11 relocation.
|
|
__typecheck__/
|
|
|
|
# Visual Studio Code configs
|
|
.vscode/
|
|
|
|
# JetBrains IDEs
|
|
.idea/
|
|
|
|
# pnpm uses npm for publishing a new version with
|
|
# dependencies bundled but the npm lockfile is not needed
|
|
# because pnpm use pnpm for installation
|
|
package-lock.json
|
|
|
|
__package_previews__
|
|
.store
|
|
|
|
privatePackages/store
|
|
|
|
## Verdaccio storage
|
|
storage
|
|
# ...but not pnpr's `storage` crate. The bare rule above is unanchored, so it
|
|
# matches a directory of that name at any depth and would otherwise swallow
|
|
# this source tree — silently, since `git add` skips ignored paths without
|
|
# saying so. Keep this negation in step if the crate ever moves.
|
|
!/pnpr/crates/storage/
|
|
!/pnpr/crates/storage/**
|
|
|
|
yarn.lock
|
|
|
|
RELEASE.md
|
|
|
|
.jest-cache
|
|
.verdaccio-cache
|
|
.turbo
|
|
.eslintcache
|
|
## Claude Code's local state, except the tracked skills symlink. Git cannot
|
|
## re-include a path inside an excluded directory, so the root .claude
|
|
## directory is un-excluded first and its contents excluded again.
|
|
.claude
|
|
!/.claude/
|
|
/.claude/*
|
|
!/.claude/skills
|
|
.local-settings
|
|
.pnpm-typecheck.json
|
|
|
|
## custom modules-dir fixture
|
|
pnpm11/__fixtures__/custom-modules-dir/**/fake_modules/
|
|
pnpm11/__fixtures__/custom-modules-dir/cache/
|
|
pnpm11/__fixtures__/custom-modules-dir/patches/
|
|
|
|
## pacquet (Rust) artifacts
|
|
/target
|
|
/bench-work-env
|
|
.pacquet
|
|
/.pnpm/
|
|
|
|
## test registry auth state (written by pnpr when serving with auth)
|
|
htpasswd
|
|
tokens.db
|
|
pnpm/npm/napi/*.node
|
|
|
|
# Generated NAPI addon platform packages + cross-compiled artifacts
|
|
pnpm/npm/napi.*/
|
|
|
|
# Generated by pnpm/wasm/stage.mjs
|
|
pnpm/npm/wasm/
|
|
/pnpm-napi.*.node
|
|
pnpr-bins-*
|
|
|
|
# Generated by the `prepare` script of pnpm/esm-loader.
|
|
pnpm/crates/deps-restorer/src/cas-loader.mjs.inc
|