
This PR contains the following updates:
Release Notes
pnpm/pnpm (pnpm)
Compare Source
Patch Changes
- Remove vulnerable "ip" package from the dependencies #7652.
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
Compare Source
Patch Changes
- When purging multiple
node_modules directories, pnpm will no longer print multiple prompts simultaneously.
- Don't print an unnecessary warning when adding new dependencies to a project that uses hoisted
node_modules.
- Linking globally the command of a package that has no name in
package.json #4761.
- Installation should work with lockfile created by pnpm v9.0.0-alpha.4
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
Compare Source
Patch Changes
- Use the
object-hash library instead of node-object-hash for hashing keys of side-effects cache #7591.
bundledDependencies should never be added to the lockfile with false as the value #7576.
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
Compare Source
Minor Changes
- When the license field does not exist in
package.json but a license file exists, try to match and extract the license name #7530.
Patch Changes
- Running
pnpm update -r --latest will no longer downgrade prerelease dependencies #7436.
--aggregate-output should work on scripts executed from the same project #7556.
- Prefer hard links over reflinks on Windows as they perform better #7564.
- Reduce the length of the side-effects cache key. Instead of saving a stringified object composed from the dependency versions of the package, use the hash calculated from the said object #7563.
- Throw an error if
pnpm update --latest runs with arguments containing versions specs. For instance, pnpm update --latest foo@next is not allowed #7567.
- Don't fail in Windows CoW if the file already exists #7554.
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
Compare Source
Patch Changes
pnpm pack should work as expected when "prepack" modifies the manifest #7558.
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
Compare Source
Patch Changes
- Registry configuration from previous installation should not override current settings #7507.
pnpm dlx should not fail, when executed from package.json "scripts" 7424.
- A git-hosted dependency should not be added to the store if it failed to be built #7407.
pnpm publish should pack "main" file or "bin" files defined in "publishConfig" #4195.
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
Compare Source
Patch Changes
- Resolve the current working directory to its real location before doing any operations #6524.
- Allow using token helpers in
pnpm publish #7316.
- Handle Git repository names containing capital letters #7488.
- When
hoisted-workspace-packages is true don't hoist the root package even if it has a name. Otherwise we would create a circular symlink.
Our Gold Sponsors
Our Silver Sponsors
Compare Source
Minor Changes
- A new option added for hoisting packages from the workspace. When
hoist-workspace-packages is set to true, packages from the workspace are symlinked to either <workspace_root>/node_modules/.pnpm/node_modules or to <workspace_root>/node_modules depending on other hoisting settings (hoist-pattern and public-hoist-pattern) #7451.
- The
pnpm dedupe command now accepts more command line options that the pnpm install command also accepts. Example: pnpm dedupe --store-dir=local-store-dir
Patch Changes
- The package information output by cat-index should be sorted by key.
pnpm deploy should not touch the target directory if it already exists and isn't empty #7351.
pnpm add a-module-already-in-dev-deps will show a message to notice the user that the package was not moved to "dependencies" #926 and fix #7319.
- Don't install Node.js when use-node-version is set in a WebContainer #7478.
- Fix copy-on-write on Windows Dev Drives #7468.
Our Gold Sponsors
Our Silver Sponsors
Minor Changes
- New commands added for inspecting the stor
Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
- [ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
⚠️ No Changeset found
Latest commit: 8ee2683f96921e696a5b1e45dc7c1183e49c494c
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
This PR includes no changesets
When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types
Click here to learn what changesets are, and how to add one.
Click here if you're a maintainer who wants to add a changeset to this PR