chore(deps): update pnpm to v8.15.9 #8
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "renovate/pnpm-8.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
8.7.1->8.15.9Release Notes
pnpm/pnpm (pnpm)
v8.15.9: pnpm 8.15.9Compare Source
Patch Changes
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.15.8Compare Source
Patch Changes
script-shelloption is configured to a.bat/.cmdfile on Windows, pnpm will now error withERR_PNPM_INVALID_SCRIPT_SHELL_WINDOWS. Newer versions of Node.js released in April 2024 do not support executing these files directly without behavior differences. If thescript-shelloption is necessary for your use-case, please set a.exefile instead.Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.15.7Compare Source
Patch Changes
pnpm config getprints a comma-separated list for an array value instead of nothing.Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.15.6Compare Source
Patch Changes
pnpm run#7817.peerDependencies#7813.--ignore-scriptsargument toprunecommand #7836.Platinum Sponsors
Gold Sponsors
Silver Sponsors
v8.15.5Compare Source
Patch Changes
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.15.4Compare Source
Patch Changes
readPackagehook should work #7704.Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.15.3Compare Source
Patch Changes
Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.15.2Compare Source
Patch Changes
node_modulesdirectories, pnpm will no longer print multiple prompts simultaneously.node_modules.package.json#4761.Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.15.1Compare Source
Patch Changes
object-hashlibrary instead ofnode-object-hashfor hashing keys of side-effects cache #7591.bundledDependenciesshould never be added to the lockfile withfalseas the value #7576.Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.15.0Compare Source
Upgrade to v8.15.1 or newer
Minor Changes
package.jsonbut a license file exists, try to match and extract the license name #7530.Patch Changes
pnpm update -r --latestwill no longer downgrade prerelease dependencies #7436.--aggregate-outputshould work on scripts executed from the same project #7556.pnpm update --latestruns with arguments containing versions specs. For instance,pnpm update --latest foo@nextis not allowed #7567.Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.14.3Compare Source
Patch Changes
pnpm packshould work as expected when "prepack" modifies the manifest #7558.Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.14.2Compare Source
Patch Changes
pnpm dlxshould not fail, when executed frompackage.json"scripts" 7424.pnpm publishshould pack "main" file or "bin" files defined in "publishConfig" #4195.Platinum Sponsors
Gold Sponsors
Our Silver Sponsors
v8.14.1Compare Source
Patch Changes
pnpm publish#7316.hoisted-workspace-packagesistruedon't hoist the root package even if it has a name. Otherwise we would create a circular symlink.Our Gold Sponsors
Our Silver Sponsors
v8.14.0Compare Source
Minor Changes
hoist-workspace-packagesis set totrue, packages from the workspace are symlinked to either<workspace_root>/node_modules/.pnpm/node_modulesor to<workspace_root>/node_modulesdepending on other hoisting settings (hoist-patternandpublic-hoist-pattern) #7451.pnpm dedupecommand now accepts more command line options that thepnpm installcommand also accepts. Example:pnpm dedupe --store-dir=local-store-dirPatch Changes
pnpm deployshould not touch the target directory if it already exists and isn't empty #7351.pnpm add a-module-already-in-dev-depswill show a message to notice the user that the package was not moved to "dependencies" #926 and fix #7319.Our Gold Sponsors
Our Silver Sponsors
v8.13.1Minor Changes
New commands added for inspecting the store:
pnpm cat-index: Prints the index file of a specific package in the store. The package is specified by its name and version:
pnpm cat-file: Prints the contents of a file based on the hash value stored in the index file. For example:
(EXPERIMENTAL) pnpm find-hash: Lists the packages that include the file with the specified hash. For example:
This command is experimental. We might change how it behaves.
Related issue: #7413.
A new setting added for symlinking injected dependencies from the workspace, if their dependencies use the same peer dependencies as the dependent package. The setting is called
dedupe-injected-deps#7416.Use
--fail-if-no-matchif you want the CLI fail if no packages were matched by the command #7403.Patch Changes
pnpm list --parseableshould not print the same dependency multiple times #7429.pnpm envcommands #7456.pnpm update --interactivecommand #7439.update -i -rwith Git specifiers #7415.Our Gold Sponsors
Our Silver Sponsors
v8.12.1Compare Source
Patch Changes
--fix-lockfilecrashes on tarballs #7368.node_modulesdirectory cannot be removed #7405.Our Gold Sponsors
Our Silver Sponsors
v8.12.0Compare Source
Minor Changes
Patch Changes
dedupe-direct-depsis set totrue, commands of dependencies should be deduplicated #7359.Our Gold Sponsors
Our Silver Sponsors
v8.11.0Compare Source
Minor Changes
(IMPORTANT) When the package tarballs aren't hosted on the same domain on which the registry (the server with the package metadata) is, the dependency keys in the lockfile should only contain
/<pkg_name>@​<pkg_version, not<domain>/<pkg_name>@​<pkg_version>.This change is a fix to avoid the same package from being added to
node_modules/.pnpmmultiple times. The change to the lockfile is backward compatible, so previous versions of pnpm will work with the fixed lockfile.We recommend that all team members update pnpm in order to avoid repeated changes in the lockfile.
Related PR: #7318.
Patch Changes
pnpm add a-module-already-in-dev-depswill show a message to notice the user that the package was not moved to "dependencies" #926.Our Gold Sponsors
Our Silver Sponsors
v8.10.5Compare Source
Patch Changes
pnpm-workspace.yamlfile #7307.Our Gold Sponsors
Our Silver Sponsors
v8.10.4Compare Source
Patch Changes
node-linkerwas set tohoisted#6227.Our Gold Sponsors
Our Silver Sponsors
v8.10.3Compare Source
Patch Changes
(Important) Increased the default amount of allowed concurrent network request on systems that have more than 16 CPUs #7285.
pnpm patchshould reuse existing patch whenshared-workspace-file=false#7252.Don't retry fetching missing packages, since the retries will never work #7276.
When using
pnpm store prune --forcealien directories are removed from the store #7272.Downgraded
npm-packlistbecause the newer version significantly slows down the installation of local directory dependencies, making it unbearably slow.npm-packlistwas upgraded in this PR to fix #6997. We added our own file deduplication to fix the issue of duplicate file entries.Fixed a performance regression on running installation on a project with an up to date lockfile #7297.
Throw an error on invalid
pnpm-workspace.yamlfile #7273.Our Gold Sponsors
Our Silver Sponsors
v8.10.2Compare Source
Patch Changes
Our Gold Sponsors
Our Silver Sponsors
v8.10.1Compare Source
Patch Changes
pnpm-lock.yamlwill no longer contain aregistryfield. This field has been unused for a long time. This change should not cause any issues besides backward compatible modifications to the lockfile #7262.pnpm dlxin the root of a Windows Drive #7263.@npmcli/arboristto patch it with a fix #7269.Our Gold Sponsors
Our Silver Sponsors
v8.10.0Compare Source
Minor Changes
Support for multiple architectures when installing dependencies #5965.
You can now specify architectures for which you'd like to install optional dependencies, even if they don't match the architecture of the system running the install. Use the
supportedArchitecturesfield inpackage.jsonto define your preferences.For example, the following configuration tells pnpm to install optional dependencies for Windows x64:
Whereas this configuration will have pnpm install optional dependencies for Windows, macOS, and the architecture of the system currently running the install. It includes artifacts for both x64 and arm64 CPUs:
Additionally,
supportedArchitecturesalso supports specifying thelibcof the system.The
pnpm licenses listcommand now accepts the--filteroption to check the licenses of the dependencies of a subset of workspace projects #5806.Patch Changes
Allow scoped name as bin name #7112.
When running scripts recursively inside a workspace, the logs of the scripts are grouped together in some CI tools. (Only works with
--workspace-concurrency 1)Print a warning when installing a dependency from a non-existent directory #7159
Should fetch dependency from tarball url when patching dependency installed from git #7196
pnpm setupshould add a newline at the end of the updated shell config file #7227.Improved the performance of linking bins of hoisted dependencies to
node_modules/.pnpm/node_modules/.bin#7212.Wrongful ELIFECYCLE error on program termination #7164.
pnpm publishshould not pack the same file twice sometimes #6997.The fix was to update
npm-packlistto the latest version.Our Gold Sponsors
Our Silver Sponsors
v8.9.2Compare Source
Patch Changes
preinstalllifecycle script is present #7206.Our Gold Sponsors
Our Silver Sponsors
v8.9.1Compare Source
Patch Changes
pnpm update --interactive7109shared-workspace-lockfileis set tofalse, read the pnpm settings frompackage.jsonfiles that are nested. This was broken in pnpm v8.9.0 #7184.node_moduleson Windows Dev Drives #7186. This is a fix to a regression that was shipped with v8.9.0.pnpm dlxshould ignore any settings that are in apackage.jsonfile found in the current working directory #7198.Our Gold Sponsors
Our Silver Sponsors
v8.9.0Compare Source
Minor Changes
🚀Performance improvement: Use reflinks instead of hard links by default on macOS and Windows Dev Drives #5001.
The list of packages that are allowed to run installation scripts now may be provided in a separate configuration file. The path to the file should be specified via the
pnpm.onlyBuiltDependenciesFilefield inpackage.json. For instance:In the example above, the list is loaded from a dependency. The JSON file with the list should contain an array of package names. For instance:
With the above list, only
esbuildand@reflink/reflinkwill be allowed to run scripts during installation.Related issue: #7137.
Add
disallow-workspace-cyclesoption to error instead of warn about cyclic dependenciesAllow
env rmto remove multiple node versions at once, and introduceenv addfor installing node versions without setting as default #7155.Patch Changes
pnpm whywhen the dependencies tree is too big, the command will now prune the tree to just 10 end leafs and now supports--depthargument #7122.neverBuiltDependenciesandonlyBuiltDependenciesfrom the rootpackage.jsonof the workspace, whenshared-workspace-lockfileis set tofalse#7141.pnpm.overridesreplacingresolutions, the two are now merged. This is intended to make it easier to migrate from Yarn by allowing one to keep usingresolutionsfor Yarn, but adding additional changes just for pnpm usingpnpm.overrides.Our Gold Sponsors
Our Silver Sponsors
v8.8.0Compare Source
Minor Changes
--reporter-hide-prefixoption forruncommand to hide project name as prefix for lifecycle log outputs of running scripts #7061.Patch Changes
--ignore-scriptscommand to install, when runningpnpm dedupe --ignore-scripts#7102.node-linkeris set tohoisted, thepackage.jsonfiles of the existing dependencies insidenode_moduleswill be checked to verify their actual versions. The data in thenode_modules/.modules.yamlandnode_modules/.pnpm/lock.yamlmay not be fully reliable, as an installation may fail after changes to dependencies were made but before those state files were updated #7107.Our Gold Sponsors
Our Silver Sponsors
v8.7.6Compare Source
Patch Changes
prepublishOnlyscripts of git-hosted dependencies #7026.use-node-versionornode-versionisn't passed down tocheckEnginewhen using pnpm workspace, resulting in an error #6981.node_modules#6756.Our Gold Sponsors
Our Silver Sponsors
v8.7.5Compare Source
Patch Changes
node_modules/.pnpm#7069.Our Gold Sponsors
Our Silver Sponsors
v8.7.4Compare Source
Patch Changes
package.jsonfrom the content-addressable store #7051.pnpm deploycommand and "injected dependencies" #6943.Our Gold Sponsors
Our Silver Sponsors
v8.7.3Compare Source
Patch Changes
Our Gold Sponsors
Our Silver Sponsors
v8.7.2Compare Source
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.
95070028ebto4edb0a18e3chore(deps): update pnpm to v8.15.5to chore(deps): update pnpm to v8.15.64edb0a18e3to734446902dchore(deps): update pnpm to v8.15.6to chore(deps): update pnpm to v8.15.7734446902dtof7ee325b79chore(deps): update pnpm to v8.15.7to chore(deps): update pnpm to v8.15.8f7ee325b79toc0ac85612echore(deps): update pnpm to v8.15.8to chore(deps): update pnpm to v8.15.9Checkout
From your project repository, check out a new branch and test the changes.