chore(deps): update pnpm to v9
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| pnpm (source) | 8.9.0 -> 9.12.1 |
Release Notes
pnpm/pnpm (pnpm)
v9.12.1: pnpm 9.12.1
Patch Changes
pnpm update --latestshould not update the automatically installed peer dependencies #6657.pnpm publishshould be able to publish from a local tarball #7950.- The pnpx command should work correctly on Windows, when pnpm is installed via the standalone installation script #8608.
- Prevent
EBUSYerrors caused by creating symlinks in paralleldlxprocesses #8604. - Fix maximum call stack size exceeded error related to circular workspace dependencies #8599.
Platinum Sponsors
|
|
|
Gold Sponsors
|
|
|
|
|
|
|
|
|
|
|
Our Silver Sponsors
|
|
|
|
|
|
|
|
|
|
v9.12.0: pnpm 9.12
Minor Changes
-
Fix peer dependency resolution dead lock #8570. This change might change some of the keys in the
snapshotsfield insidepnpm-lock.yamlbut it should happen very rarely. -
pnpm outdatedcommand supports now a--sort-by=nameoption for sorting outdated dependencies by package name #8523. -
Added the ability for
overridesto remove dependencies by specifying"-"as the field value #8572. For example, to removelodashfrom the dependencies, use this configuration inpackage.json:{ "pnpm": { "overrides": { "lodash": "-" } } }
Patch Changes
- Fixed an issue where
pnpm list --json pkgshowed"private": falsefor a private package #8519. - Packages with
libcthat differ frompnpm.supportedArchitectures.libcare not downloaded #7362. - Prevent
ENOENTerrors caused by runningstore prunein parallel #8586. - Add issues alias to
pnpm bugs#8596.
Platinum Sponsors
|
|
|
Gold Sponsors
|
|
|
|
|
|
|
|
|
|
|
Our Silver Sponsors
|
|
|
|
|
|
|
|
|
|
v9.11.0
v9.10.0: pnpm 9.10
Minor Changes
-
Support for a new CLI flag,
--exclude-peers, added to thelistandwhycommands. When--exclude-peersis used, peer dependencies are not printed in the results, but dependencies of peer dependencies are still scanned #8506. -
Added a new setting to
package.jsonatpnpm.auditConfig.ignoreGhsasfor ignoring vulnerabilities by their GHSA code #6838.For instance:
{ "pnpm": { "auditConfig": { "ignoreGhsas": [ "GHSA-42xw-2xvc-qx8m", "GHSA-4w2v-q235-vp99", "GHSA-cph5-m8f7-6c5x", "GHSA-vh95-rmgr-6w4m" ] } } }
Patch Changes
- Throw an exception if pnpm switches to the same version of itself.
- Reduce memory usage during peer dependencies resolution.
Platinum Sponsors
|
|
|
Gold Sponsors
|
|
|
|
|
|
|
|
|
Our Silver Sponsors
|
|
|
|
|
|
|
|
|
|
v9.9.0
v9.8.0
v9.7.1
v9.7.0: pnpm 9.7
Minor Changes
-
Added pnpm version management. If the
manage-package-manager-versionssetting is set totrue, pnpm will switch to the version specified in thepackageManagerfield ofpackage.json#8363. This is the same field used by Corepack. Example:{ "packageManager": "[email protected]" } -
Added the ability to apply patch to all versions #8337.
If the key of
pnpm.patchedDependenciesis a package name without a version (e.g.pkg), pnpm will attempt to apply the patch to all versions of the package. Failures will be skipped. If there's only one version ofpkginstalled,pnpm patch pkgand subsequentpnpm patch-commit $edit_dirwill create an entry namedpkginpnpm.patchedDependencies. And pnpm will attempt to apply this patch to other versions ofpkgin the future. -
Change the default edit dir location when running
pnpm patchfrom a temporary directory tonode_modules/.pnpm_patches/pkg[@​version]to allow the code editor to open the edit dir in the same file tree as the main project #8379. -
Substitute environment variables in config keys #6679.
Patch Changes
pnpm installshould runnode-gyp rebuildif the project has abinding.gypfile even if the project doesn't have an install script #8293.- Print warnings to stderr #8342.
- Peer dependencies of optional peer dependencies should be automatically installed #8323.
Platinum Sponsors
|
|
|
Gold Sponsors
|
|
|
|
|
|
|
|
|
Our Silver Sponsors
|
|
|
|
|
|
|
|
|
|
|
v9.6.0: pnpm 9.6
Minor Changes
- Support specifying node version (via
pnpm.executionEnv.nodeVersioninpackage.json) for running lifecycle scripts per each package in a workspace #6720. - Overrides now support the
catalogs:protocol #8303.
Patch Changes
- The
pnpm deploycommand now supports thecatalog:protocol #8298. - The
pnpm outdatedcommand now supports thecatalog:protocol #8304. - Correct the error message when trying to run
pnpm patchwithoutnode_modules/.modules.yaml#8257. - Silent reporting fixed with the
pnpm execcommand #7608. - Add registries information to the calculation of dlx cache hash #8299.
Platinum Sponsors
|
|
|
Gold Sponsors
|
|
|
|
|
|
|
|
|
Our Silver Sponsors
|
|
|
|
|
|
|
|
|
|
|
v9.5.0
v9.4.0
v9.3.0
Minor Changes
- Semi-breaking. Dependency key names in the lockfile are shortened if they are longer than 1000 characters. We don't expect this change to affect many users. Affected users most probably can't run install successfully at the moment. This change is required to fix some edge cases in which installation fails with an out-of-memory error or "Invalid string length (RangeError: Invalid string length)" error. The max allowed length of the dependency key can be controlled with the
peers-suffix-max-lengthsetting #8177.
Patch Changes
- Set
reporter-hide-prefixtotrueby default forpnpm exec. In order to show prefix, the user now has to explicitly setreporter-hide-prefix=false#8174.
Platinum Sponsors
|
|
|
Gold Sponsors
|
|
|
|
|
|
|
|
|
Our Silver Sponsors
|
|
|
|
|
|
|
|
|
|
|
v9.2.0
Minor Changes
- If
package-manager-strict-versionis set totrue, pnpm will fail if its version doesn't exactly match the version in the "packageManager" field ofpackage.json.
Patch Changes
- Update
@yarnpkg/pnpto the latest version, fixing issue withnode:imports #8161. - Deduplicate bin names to prevent race condition and corrupted bin scripts #7833.
- pnpm doesn't fail if its version doesn't match the one specified in the "packageManager" field of
package.json#8087. execnow also streams prefixed output when--recursiveor--parallelis specified just asrundoes #8065.
Platinum Sponsors
|
|
|
Gold Sponsors
|
|
|
|
|
|
|
|
|
Our Silver Sponsors
|
|
|
|
Configuration📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - "before 4am on the first day of the month" (UTC). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log. |
[!IMPORTANT]
Review skipped
Bot user detected.
To trigger a single review, invoke the
@coderabbitai reviewcommand.You can disable this status message by setting the
reviews.review_statustofalsein the CodeRabbit configuration file.
Walkthrough
The updates to the package.json file involve a series of sequential upgrades to the packageManager, transitioning from "[email protected]" to "[email protected]", then to "[email protected]", followed by "[email protected]", and finally to "[email protected]". These changes reflect the adoption of newer versions of the pnpm package manager, with no alterations to other metadata.
Changes
| Files | Change Summary |
|---|---|
package.json |
Updated packageManager from "[email protected]" to "[email protected]", then to "[email protected]", "[email protected]", and finally to "[email protected]" |
Poem
🐰 Hopping along with a fresh new tune,
pnpm's upgrades make us swoon!
Dependencies gleam, all lined up in play,
Together we flourish, come what may.
With each little leap, our code takes flight,
In the garden of progress, everything's bright! 🌼
🪧 Tips
Chat
There are 3 ways to chat with CodeRabbit:
- Review comments: Directly reply to a review comment made by CodeRabbit. Example:
I pushed a fix in commit <commit_id>, please review it.Generate unit testing code for this file.Open a follow-up GitHub issue for this discussion.
- Files and specific lines of code (under the "Files changed" tab): Tag
@coderabbitaiin a new review comment at the desired location with your query. Examples:@coderabbitai generate unit testing code for this file.@coderabbitai modularize this function.
- PR comments: Tag
@coderabbitaiin a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:@coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.@coderabbitai read src/utils.ts and generate unit testing code.@coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.@coderabbitai help me debug CodeRabbit configuration file.
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.
CodeRabbit Commands (Invoked using PR comments)
@coderabbitai pauseto pause the reviews on a PR.@coderabbitai resumeto resume the paused reviews.@coderabbitai reviewto trigger an incremental review. This is useful when automatic reviews are disabled for the repository.@coderabbitai full reviewto do a full review from scratch and review all the files again.@coderabbitai summaryto regenerate the summary of the PR.@coderabbitai resolveresolve all the CodeRabbit review comments.@coderabbitai configurationto show the current CodeRabbit configuration for the repository.@coderabbitai helpto get help.
Other keywords and placeholders
- Add
@coderabbitai ignoreanywhere in the PR description to prevent this PR from being reviewed. - Add
@coderabbitai summaryto generate the high-level summary at a specific location in the PR description. - Add
@coderabbitaianywhere in the PR title to generate the title automatically.
CodeRabbit Configuration File (.coderabbit.yaml)
- You can programmatically configure CodeRabbit by adding a
.coderabbit.yamlfile to the root of your repository. - Please see the configuration documentation for more information.
- If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation:
# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
Documentation and Community
- Visit our Documentation for detailed information on how to use CodeRabbit.
- Join our Discord Community to get help, request features, and share feedback.
- Follow us on X/Twitter for updates and announcements.