mirror of https://github.com/pnpm/pnpm.git synced 2026-03-27 19:41:44 -04:00

Files

Varun Chawla e73da5e27b fix(lockfile): respect lockfile-include-tarball-url=false for non-standard URLs (#10621 )

When lockfile-include-tarball-url is explicitly set to false, tarball URLs
are now always excluded from the lockfile. Previously, packages hosted under
non-standard tarball URLs would still have their tarball field written to the
lockfile even when the setting was false, causing flaky and inconsistent
behavior across environments.

The fix makes the option tri-state internally:
- true: always include tarball URLs
- false: never include tarball URLs
- undefined (not set): use the existing heuristic that includes tarball URLs
  only for packages with non-standard registry URLs

close #6667

2026-02-25 11:03:32 +01:00