Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump pnpm from 8.15.8 to 9.5.0 #785

Merged
merged 1 commit into from
Jul 8, 2024
Merged

Conversation

mazi-renovate[bot]
Copy link
Contributor

@mazi-renovate mazi-renovate bot commented Jun 6, 2024

This PR contains the following updates:

Package Type Update Change OpenSSF
pnpm (source) packageManager major 8.15.8 -> 9.5.0 OpenSSF Scorecard

Release Notes

pnpm/pnpm (pnpm)

v9.5.0: pnpm 9.5

Compare Source

Minor Changes

  • Added support for catalogs #​8122.

    Catalogs may be declared in the pnpm-workspace.yaml file. For example:

Default catalogs

catalog:
  chalk: ^4.1.2

Named catalogs

catalogs:
  react16:
    react: ^16.7.0
    react-dom: ^16.7.0
  react17:
    react: ^17.10.0
    react-dom: ^17.10.0
```

Then, in `package.json` files, use the `catalog:` protocol to reference a "default" or "named" catalog:

```json
{
  "dependencies": {
    "chalk": "catalog:",
    "react": "catalog:react16",
    "react-dom": "catalog:react16"
  }
}
```

Shout out to @​gluxon for implementing it!
  • Bundled pnpm setup now creates the pnpx script #​8230.

Patch Changes

  • Read authentication information from .npmrc in the current directory when running dlx #​7996.
  • Updated @pnpm/tabtab to v0.5.4, enabling zsh autocomplete lazy loading #​8236.
  • Installation with filtering will now work, when dedupe-peer-dependents is set to true #​6300.
  • Fixed dlx not actually using the Node.js version specified by --use-node-version.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.4.0

Compare Source

Minor Changes

  • Some registries allow the exact same content to be published under different package names and/or versions. This breaks the validity checks of packages in the store. To avoid errors when verifying the names and versions of such packages in the store, you may now set the strict-store-pkg-content-check setting to false #​4724.

Patch Changes

  • Fix package-manager-strict-version missing in config #​8195.
  • If install is performed on a subset of workspace projects, always create an up-to-date lockfile first. So, a partial install can be performed only on a fully resolved (non-partial) lockfile #​8165.
  • Handle workspace protocol with any semver range specifier, when used in peer dependencies #​7578.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.3.0

Compare Source

Minor Changes

  • Semi-breaking. Dependency key names in the lockfile are shortened if they are longer than 1000 characters. We don't expect this change to affect many users. Affected users most probably can't run install successfully at the moment. This change is required to fix some edge cases in which installation fails with an out-of-memory error or "Invalid string length (RangeError: Invalid string length)" error. The max allowed length of the dependency key can be controlled with the peers-suffix-max-length setting #​8177.

Patch Changes

  • Set reporter-hide-prefix to true by default for pnpm exec. In order to show prefix, the user now has to explicitly set reporter-hide-prefix=false #​8174.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.2.0

Compare Source

Minor Changes

  • If package-manager-strict-version is set to true, pnpm will fail if its version doesn't exactly match the version in the "packageManager" field of package.json.

Patch Changes

  • Update @yarnpkg/pnp to the latest version, fixing issue with node: imports #​8161.
  • Deduplicate bin names to prevent race condition and corrupted bin scripts #​7833.
  • pnpm doesn't fail if its version doesn't match the one specified in the "packageManager" field of package.json #​8087.
  • exec now also streams prefixed output when --recursive or --parallel is specified just as run does #​8065.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.1.4

Compare Source

Patch Changes

  • Improved the performance of the resolution stage by changing how missing peer dependencies are detected #​8144.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.1.3

Compare Source

Patch Changes

  • Fix a bug in which a dependency that is both optional for one package but non-optional for another is omitted when optional=false #​8066.
  • Clear resolution cache before starting peer dependencies resolution #​8109.
  • Reduce memory usage by peer dependencies resolution #​8072.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.1.2

Compare Source

Patch Changes

  • Reduced memory usage during peer dependencies resolution #​8084.
  • Details in the pnpm licenses output are not misplaced anymore #​8071.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.1.1

Compare Source

Patch Changes

  • Improve the performance of the peers resolution stage by utilizing more cache #​8058.
  • Overrides with link: now preserve absolute path #​8053.
  • Fix incorrect path when resolving relative file: overrides for workspace package #​8053.
  • Print a better error message when resolution-mode is set to time-based and the registry fails to return the "time" field in the package's metadata.
  • Fix shell completion on MinGW-w64 environment.

Platinum Sponsors

Gold Sponsors


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot. - View logs

Copy link
Contributor

github-actions bot commented Jun 6, 2024

Latest commit: 347affa ( base: 04158be + head: d78f344 )
Status: ✅  Deploy successful!
Preview URL: https://56d92904.github-test-15v.pages.dev
PR Preview URL: https://pull-785-merge.github-test-15v.pages.dev

View workflow logs
View Cloudflare logs

@mazi-renovate mazi-renovate bot changed the title chore(deps): update pnpm from 9.1.3+sha512.7c2ea089e1a6af306409c4fc8c4f0897bdac32b772016196c469d9428f1fe2d5a21daf8ad6512762654ac645b5d9136bb210ec9a00afa8dbc4677843ba362ecd to v9.2.0 chore(deps): update pnpm from 9.1.3+sha512.7c2ea089e1a6af306409c4fc8c4f0897bdac32b772016196c469d9428f1fe2d5a21daf8ad6512762654ac645b5d9136bb210ec9a00afa8dbc4677843ba362ecd to v9.3.0 Jun 10, 2024
@Mogyuchi Mogyuchi force-pushed the main branch 2 times, most recently from 9fb769b to bbad5fe Compare June 13, 2024 14:12
Mogyuchi
Mogyuchi previously approved these changes Jul 6, 2024
Mogyuchi
Mogyuchi previously approved these changes Jul 8, 2024
| datasource | package | from   | to    |
| ---------- | ------- | ------ | ----- |
| npm        | pnpm    | 8.15.8 | 9.5.0 |
@mazi-renovate mazi-renovate bot merged commit fef2c89 into main Jul 8, 2024
18 checks passed
@mazi-renovate mazi-renovate bot deleted the renovate/pnpm-9.x branch July 8, 2024 02:56
@mazi-release mazi-release bot mentioned this pull request Jul 8, 2024
@mazi-release mazi-release bot mentioned this pull request Aug 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant