leap-16.0 Update from Factory #2
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: pool/pnpm#2
Reference in New Issue
Block a user
Delete Branch "michals/pnpm:leap-16.0"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
- update to version 9.12.3: * Don't purge node_modules, when typing "n" in the prompt that asks whether to remove node_modules before installation #8655 * Fix a bug causing pnpm to infinitely spawn itself when manage- package-manager-versions=true is set and the .tools directory is corrupt * Use crypto.hash, when available, for improved performance #8629 * Fixed a race condition in temporary file creation in the store by including worker thread ID in filename. Previously, multiple worker threads could attempt to use the same temporary file. Temporary files now include both process ID and thread ID for uniqueness #8703 * All commands should read settings from the package.json at the root of the workspace #8667 * When manage-package-manager-versions is set to true, errors spawning a self-managed version of pnpm will now be shown (instead of being silent) * Pass the find command to npm, it is an alias for npm search - includes 9.12.2: * When checking whether a file in the store has executable permissions, the new approach checks if at least one of the executable bits (owner, group, and others) is set to 1. Previously, a file was incorrectly considered executable only when all the executable bits were set to 1. This fix ensures that files with any executable permission, regardless of the user class, are now correctly identified as executable #8546 OBS-URL: https://build.opensuse.org/request/show/1222899 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=8- update to version 9.13.0: * The self-update now accepts a version specifier to install a specific version of pnpm. * Fix Cannot read properties of undefined (reading 'name') that is printed while trying to render the missing peer dependencies warning message #8538 OBS-URL: https://build.opensuse.org/request/show/1224045 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=9- update to version 9.13.1: * Fixed some edge cases where resolving circular peer dependencies caused a dead lock #8720 OBS-URL: https://build.opensuse.org/request/show/1224298 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=10- update to version 9.13.2: * Detection of circular peer dependencies should not crash with aliased dependencies #8759. Fixes a regression introduced in the previous version. * Fix race condition of symlink creations caused by multiple parallel dlx processes. OBS-URL: https://build.opensuse.org/request/show/1224585 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=11- update to version 9.14.2: pnpm publish --json should work #8788 - includes 9.14.1: * Added support for pnpm pack --json to print packed tarball and contents in JSON format #8765 * pnpm exec should print a meaningful error message when no command is provided #8752 * pnpm setup should remove the CLI from the target location before moving the new binary #8173 * Fix ERR_PNPM_TARBALL_EXTRACT error while installing a dependency from GitHub having a slash in branch name #7697 * Don't crash if the use-node-version setting is used and the system has no Node.js installed #8769 * Convert settings in local .npmrc files to their correct types. For instance, child-concurrency should be a number, not a string #5075 * pnpm should fail if a project requires a different package manager even if manage-package-manager-versions is set to true * pnpm init should respect the --dir option #8768 - includes 9.14.0: * chore: use verify-deps-before-run * fix(init): --dir option should be respected (#8768) * feat: support json format output in pnpm pack (#8765) * fix: pnpm exec should specify command (#8774) * fix: proper types of settings in local .npmrc files (#8775) * fix: ERR_PNPM_TARBALL_EXTRACT when the URL's hash contains a slash * fix: the CLI should fail if a different package manager is required by the project * fix: ETXTBSY error on running setup (#8780) * feat: add linux-riscv64 build (#8779) * fix: remove link to X from update notifier (#8773) * docs: update sponsors * fix: upgrade cross-sapwn (#8782) * fix: don't crash when use-node-version is set and there is no node.js * docs: update changesets OBS-URL: https://build.opensuse.org/request/show/1225413 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=12- update to version 9.14.4: * Don't ever save mutated metadata to the metadata cache - includes 9.14.3: * Some commands should ignore the packageManager field check of package.json #7959 OBS-URL: https://build.opensuse.org/request/show/1227543 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=13- update to version 9.15.0: * Metadata directory version bumped to force fresh cache after we shipped a fix to the metadata write function. This change is backward compatible as install doesn't require a metadata cache * pnpm update --global should not crash if there are no any global packages installed #7898 * Fix an exception when running pnpm update --interactive if catalogs are used. OBS-URL: https://build.opensuse.org/request/show/1229063 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=14- update to version 9.15.1: * pnpm remove should not link dependencies from the workspace, when link-workspace-packages is set to false #7674 * Installation with hoisted node_modules should not fail, when a dependency has itself in its own peer dependencies #8854 OBS-URL: https://build.opensuse.org/request/show/1233065 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=15- update to 10.0.0: * Lifecycle scripts of dependencies are not executed during installation by default! This is a breaking change aimed at increasing security. In order to allow lifecycle scripts of specific dependencies, they should be listed in the pnpm onlyBuiltDependencies field of package.json #8897 * The pnpm link command now adds overrides to the root package.json. #8653 * Secure hashing with SHA256 * Configuration updates * Changes to the global store * The # character is now escaped in directory names within node_modules/.pnpm. #8557 * Running pnpm add --global pnpm or pnpm add --global @pnpm/exe now fails with an error message, directing you to use pnpm self-update instead. #8728 * Dependencies added via a URL now record the final resolved URL in the lockfile, ensuring that any redirects are fully captured. #8833 * The pnpm deploy command now only works in workspaces that have inject-workspace-packages=true. This limitation is introduced to allow us to create a proper lockfile for the deployed project using the workspace lockfile. * Removed conversion from lockfile v6 to v9. If you need v6-to- v9 conversion, use pnpm CLI v9. * pnpm test now passes all parameters after the test keyword directly to the underlying script. This matches the behavior of pnpm run test. Previously you needed to use the -- prefix. #8619 * node-gyp updated to version 11. * pnpm deploy now tries creating a dedicated lockfile from a shared lockfile for deployment. It will fallback to deployment without a lockfile if there is no shared lockfile or force-legacy-deploy is set to true. * Added support for a new type of dependencies called "configurational dependencies". These dependencies are installed before all the other types of dependencies (befor "dependencies", "devDependencies", "optionalDependencies"). * New verify-deps-before-run setting. This setting controls how pnpm checks node_modules before running scripts #8836 * On repeated installs, pnpm performs a quick check to ensure node_modules is up to date. #8838 * pnpm add integrates with default workspace catalog: #8640 * pnpm dlx now resolves packages to their exact versions and uses these exact versions for cache keys. This ensures pnpm dlx always installs the latest requested packages #8811 * No node_modules validation on certain commands. Commands that should not modify node_modules (e.g., pnpm install --lockfile- only) no longer validate or purge node_modules. #8657 * for full changes, see https://github.com/pnpm/pnpm/releases/tag/v10.0.0 OBS-URL: https://build.opensuse.org/request/show/1236750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=18- update to 10.1.0: * Added a new command for printing the list of dependencies with ignored build scripts: pnpm ignored-builds #8963. * Added a new command for approving dependencies for running scripts during installation: pnpm approve-builds #8963. * Added a new setting called optimistic-repeat-install. When enabled, a fast check will be performed before proceeding to installation. This way a repeat install or an install on a project with everything up-to-date becomes a lot faster. But some edge cases might arise, so we keep it disabled by default for now #8977. * Added a new field "pnpm.ignoredBuiltDependencies" for explicitly listing packages that should not be built. When a package is in the list, pnpm will not print an info message about that package not being built #8935. * Verify that the package name is valid when executing the publish command. * When running pnpm install, the preprepare and postprepare scripts of the project should be executed #8989. * Allow workspace: and catalog: to be part of wider version range in peerDependencies. * pnpm deploy should inherit the pnpm object from the root package.json #8991. * Make sure that the deletion of a node_modules in a sub- project of a monorepo is detected as out-of-date #8959. * Fix infinite loop caused by lifecycle scripts using pnpm to execute other scripts during pnpm install with verify-deps-before-run=install #8954. * Replace strip-ansi with the built-in util. stripVTControlCharacters #9009. * Do not print patched dependencies as ignored dependencies that require a build #8952. OBS-URL: https://build.opensuse.org/request/show/1241549 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=19- update to 10.2.1: * Don't read a package from side-effects cache if it isn't allowed to be built #9042. * pnpm approve-builds should work, when executed from a subdirectory of a workspace #9042. * pnpm deploy --legacy should work without injected dependencies * Add information about how to deploy without "injected dependencies" to the "pnpm deploy" error message. - includes 10.2.0: * Packages executed via pnpm dlx and pnpm create are allowed to be built (run postinstall scripts) by default. * Quote args for scripts with shell-quote to support new lines (on POSIX only) #8980. * Fix a bug in which pnpm deploy fails to read the correct projectId when the deploy source is the same as the workspace directory #9001. * Proxy settings should be respected, when resolving Git-hosted dependencies #6530. * Prevent overrides from adding invalid version ranges to peerDependencies by keeping the peerDependencies and overriding them with prod dependencies #8978. * Sort the package names in the "pnpm.onlyBuiltDependencies" list saved by pnpm approve-builds. OBS-URL: https://build.opensuse.org/request/show/1244417 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=20- update to 10.3.0: * Added a new setting called strict-dep-builds. When enabled, the installation will exit with a non-zero exit code if any dependencies have unreviewed build scripts (aka postinstall scripts) #9071. * Fix a false negative of verify-deps-before-run after pnpm install --production|--no-optional #9019. * Print the warning about blocked installation scripts at the end of the installation output and make it more prominent. OBS-URL: https://build.opensuse.org/request/show/1245177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=21- update to 10.4.1: * Throws an error when the value provided by the --allow-build option overlaps with the pnpm.ignoredBuildDependencies list #9105. * Print pnpm's version after the execution time at the end of the console output. * Print warning about ignored builds of dependencies on repeat install #9106. * Setting init-package-manager should work. - includes 10.4.0: * pnpm approve-builds --global works now for allowing dependencies of globally installed packages to run postinstall scripts. * The pnpm add command now supports a new flag, --allow-build, which allows building the specified dependencies. * pnpm approve-builds should work after two consecutive pnpm install runs #9083. * Fix instruction for updating pnpm with corepack #9101. * The pnpm version specified by packageManager cannot start with v. OBS-URL: https://build.opensuse.org/request/show/1246518 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=22- update to 10.5.0: * The pnpm.* settings from package.json can now be specified in the pnpm-workspace.yaml file instead #9121. * Added support for automatically syncing files of injected workspace packages after pnpm run #9081. Use the sync-injected -deps-after-scripts setting to specify which scripts build the workspace package. This tells pnpm when syncing is needed. The setting should be defined in a .npmrc file at the root of the workspace. * The packages field in pnpm-workspace.yaml became optional. * pnpm link with no parameters should work as if --global is specified #9151 * Allow scope registry CLI option without --config. prefix such as --@scope:registry=https://scope.example.com/npm #9089 * pnpm link <path> should calculate relative path from the root of the workspace directory #9132 * Fix a bug causing catalog snapshots to be removed from the pnpm-lock.yaml file when using --fix-lockfile and --filter. #8639 * Fix a bug causing catalog protocol dependencies to not re- resolve on a filtered install #8638 OBS-URL: https://build.opensuse.org/request/show/1248515 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=23- update to 10.10.0: * Allow loading the preResolution, importPackage, and fetchers hooks from local pnpmfile. * Fix cd command, when shellEmulator is true #7838. * Sort keys in pnpm-workspace.yaml #9453. * Pass the npm_package_json environment variable to the executed scripts #9452. * Fixed a mistake in the description of the --reporter=silent option. OBS-URL: https://build.opensuse.org/request/show/1276646 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pnpm?expand=0&rev=36Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .
Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment:
@maintenance-release-review: approve.To request changes on behalf of the group, create the following comment:
@maintenance-release-review: declinefollowed with lines justifying the decision.Future edits of the comments are ignored, a new comment is required to change the review state.
Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .
Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment:
@opensuse-review: approve.To request changes on behalf of the group, create the following comment:
@opensuse-review: declinefollowed with lines justifying the decision.Future edits of the comments are ignored, a new comment is required to change the review state.
Legal review in progress.
@maintenance-release-review: approve
merge ok
rfrohl approved a review on behalf of maintenance-release-review
@opensuse-review : approve
LGTM
merge ok
oertel approved a review on behalf of opensuse-review
Legal reviewed by dec16180 as acceptable_by_lawyer: