Update pnpm to v7.11.0

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pnpm (source)	7.9.5 -> 7.11.0

---

Release Notes

pnpm/pnpm

v7.11.0

Compare Source

Minor Changes

• pnpm patch: edit the patched package in a directory specified by the --edit-dir option. E.g., pnpm patch [email protected] --edit-dir=/home/xxx/src/patched-express #​5304

Patch Changes

• Auto installing a peer dependency in a workspace that also has it as a dev dependency in another project #​5144.
• When an error happens during installation of a subdependency, print some context information in order to be able to locate that subdependency. Print the exact chain of packages that led to the problematic dependency.

Our Gold Sponsors

Our Silver Sponsors

What's Changed

• feat(plugin-command-patching): add path option to patch command by @​roseline1https://github.com/pnpm/pnpm/pull/5304l/5304
• fix: improve dependency installation error message by @​zkochhttps://github.com/pnpm/pnpm/pull/5247l/5247
• fix: auto installing peer dep in a workspace by @​zkochhttps://github.com/pnpm/pnpm/pull/5307l/5307

New Contributors

• @​roseline124 made their first contributihttps://github.com/pnpm/pnpm/pull/5304l/5304

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.10.0...v7.11.0

v7.10.0

Compare Source

Minor Changes

• New time-based resolution strategy supported.

  When resolution-mode is set to time-based, pnpm will resolve dependencies the following way:

  1. Direct dependencies will be resolved to their lowest versions. So if there is foo@^1.1.0 in the dependencies, then 1.1.0 will be installed.
  2. Subdependencies will be resolved from versions that were published before the last direct dependency was published.

  With this resolution mode installations with hot cache are faster. It also reduces the chance of subdependency hijacking as subdependencies will be updated only if direct dependencies are updated.

  This resolution mode works only with npm's full metadata. So it is slower in some scenarios. However, if you use Verdaccio v5.15.1 or newer, you may set the registry-supports-time-field setting to true, and it will be really fast.

  Related RFC.

• Enhance pnpm env with the remove command. To remove a Node.js version installed by pnpm, run:

  pnpm env remove --global <node.js version>
  

Patch Changes

• pnpm store prune should remove all cached metadata.
• Don't modify the manifest of the injected workspace project, when it has the same dependency in prod and peer dependencies.

Our Gold Sponsors

Our Silver Sponsors

What's Changed

• test: fix NODE_PATH test on Windows by @​zkochhttps://github.com/pnpm/pnpm/pull/5257l/5257
• refactor: resolve dependencies by @​zkochhttps://github.com/pnpm/pnpm/pull/5267l/5267
• feat(env): add remove command to pnpm env by @​mark-omarhttps://github.com/pnpm/pnpm/pull/5263l/5263
• docs(CONTRIBUTING): correct setup instructions for first-time clone by @​gwhitnhttps://github.com/pnpm/pnpm/pull/5289l/5289
• fix: don't modify the injected project's manifest by @​zkochhttps://github.com/pnpm/pnpm/pull/5294l/5294
• feat: time-based resolution mode by @​zkochhttps://github.com/pnpm/pnpm/pull/5238l/5238
• feat: resolve direct deps to lowest version when resolution-mode is time-based by @​zkochhttps://github.com/pnpm/pnpm/pull/5298l/5298
• fix: add fallback for time-based resolution by @​zkochhttps://github.com/pnpm/pnpm/pull/5302l/5302

New Contributors

• @​mark-omarov made their first contributihttps://github.com/pnpm/pnpm/pull/5263l/5263
• @​gwhitney made their first contributihttps://github.com/pnpm/pnpm/pull/5289l/5289

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.9.5...v7.10.0

---

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.