mirror/pnpm

0 Fork 0

mirror of https://github.com/pnpm/pnpm.git synced 2026-10-09 23:02:09 -04:00

Files

T

Zoltan Kochan eba03e0d5c fix: detect reverted catalog entries on install (#12438 )

* fix: detect reverted catalog entries on install

After an update bumped a catalog entry in pnpm-workspace.yaml, the workspace
state cache stored the pre-update catalog versions, so reverting the entry back
to its original version was reported as "Already up to date" instead of
reinstalling the previous version.

Fold the catalogs written during the install into the catalogs recorded in the
workspace state so a later install detects the reverted entry as outdated.

Closes https://github.com/pnpm/pnpm/issues/12418

* fix: harden catalog merge against prototype pollution and entry loss

Address review feedback on the catalog-merge helper:

- mergeCatalogs now builds null-prototype records and copies entries with
  Object.defineProperty, so a catalog or dependency name like __proto__
  (which can flow in from parsed pnpm-workspace.yaml) becomes an ordinary
  own property instead of corrupting the result's prototype.
- The recursive per-project install path now accumulates updatedCatalogs
  with mergeCatalogs instead of a shallow Object.assign, so two projects
  updating different entries of the same catalog no longer clobber each
  other.

2026-06-16 07:29:26 +02:00

src

fix: detect reverted catalog entries on install (#12438 )

2026-06-16 07:29:26 +02:00

test

fix: stabilize Windows pacquet install tests (#12410 )

2026-06-15 01:53:56 +02:00

CHANGELOG.md

chore(release): 11.7.0 (#12414 )

2026-06-15 08:37:08 +02:00

package.json

fix: detect reverted catalog entries on install (#12438 )