Zoltan Kochan 63c0b8eede chore: patch deepmerge@4.3.1 and ignore GHSA-gcqx-w48m-w2h4 (#17443) ...

deepmerge has no patched release upstream for GHSA-gcqx-w48m-w2h4. Patch
deepmerge@4.3.1 to reject __proto__ keys by name in mergeObject() across
index.js, dist/cjs.js, and dist/umd.js (TehShrike/deepmerge#274), and
ignore GHSA-gcqx-w48m-w2h4 in auditConfig.

Also use recentTimestamp() across checkDepsStatus.test.ts so mocked
sub-second mtimes never land on an exact second when Date.now() % 1000 === 0.

2026-10-28 01:41:11 +01:00

..

__fixtures__

fix: hold link: workspace dependencies under dedicated lockfiles with injection (#17177)

2026-10-21 07:15:08 +02:00

__typecheck__

…

__typings__

docs: lint prose with Vale (#17238)

2026-10-22 21:48:09 +02:00

__utils__

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

auth/commands

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

benchmarks

…

bins

fix: refresh privately hoisted bin shims after dependency builds (#17420)

2026-10-27 09:52:35 +01:00

building

fix: refresh privately hoisted bin shims after dependency builds (#17420)

2026-10-27 09:52:35 +01:00

cache

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

catalogs

docs: lint prose with Vale (#17238)

2026-10-22 21:48:09 +02:00

cli

fix: unify pinned-pnpm switch and record decision across entry points (#17427)

2026-10-27 12:28:54 +01:00

config

fix: unify pinned-pnpm switch and record decision across entry points (#17427)

2026-10-27 12:28:54 +01:00

core

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

crypto

feat(cargo): install the Rust toolchain rust-toolchain.toml names (#16741)

2026-10-08 18:08:07 +02:00

deps

chore: patch deepmerge@4.3.1 and ignore GHSA-gcqx-w48m-w2h4 (#17443)

2026-10-28 01:41:11 +01:00

docs

fix(worker): size the worker pool by the cgroup CPU quota (#17385)

2026-10-26 17:20:51 +01:00

engine

fix: unify pinned-pnpm switch and record decision across entry points (#17427)

2026-10-27 12:28:54 +01:00

exec

fix: unify pinned-pnpm switch and record decision across entry points (#17427)

2026-10-27 12:28:54 +01:00

fetching

fix(binary-fetcher): retry zip downloads that drop mid-body (#17413)

2026-10-27 11:05:00 +01:00

fs

fix(importer): fall back to copy when overlayfs refuses to move a package aside (#17426)

2026-10-27 11:45:35 +01:00

global

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

hooks

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

installing

fix(binary-fetcher): retry zip downloads that drop mid-body (#17413)

2026-10-27 11:05:00 +01:00

lockfile

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

log/group

…

modules-mounter/daemon

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

network

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

object

docs: lint prose with Vale (#17238)

2026-10-22 21:48:09 +02:00

os

fix(worker): size the worker pool by the cgroup CPU quota (#17385)

2026-10-26 17:20:51 +01:00

patching

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

pkg-manager/link-bins/test/fixtures/bin-owner-override

…

pkg-manifest

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

pnpm

fix: unify pinned-pnpm switch and record decision across entry points (#17427)

2026-10-27 12:28:54 +01:00

registry-access

fix(unpublish): name the range when it matches every version (#17417)

2026-10-27 11:05:40 +01:00

releasing

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

resolving

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

shell/path

…

store

fix(store): preserve data during prune (#17400)

2026-10-27 08:42:07 +01:00

testing

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

text

…

worker

chore(release): 11.28.9, pacquet 12.16.0, pnpr 0.1.0-alpha.17, get-pnpm 0.0.10 (#17406)

2026-10-27 00:08:12 +01:00

workspace

fix: unify pinned-pnpm switch and record decision across entry points (#17427)

2026-10-27 12:28:54 +01:00

yaml/document-sync

docs: lint prose with Vale (#17238)

2026-10-22 21:48:09 +02:00

fix-duplicates.mjs

…