Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update pnpm to v8.15.9 #665

Merged
merged 1 commit into from
Jul 27, 2024
Merged

chore(deps): update pnpm to v8.15.9 #665

merged 1 commit into from
Jul 27, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 25, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
pnpm (source) 8.14.1 -> 8.15.9 age adoption passing confidence

Release Notes

pnpm/pnpm (pnpm)

v8.15.9: pnpm 8.15.9

Compare Source

Patch Changes

  • Deduplicate bin names to prevent race condition and corrupted bin scripts #​7833.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.8

Compare Source

v8.15.7

Compare Source

v8.15.6

Compare Source

Patch Changes

  • The exit code of the child process should be preserved on pnpm run #​7817.
  • When sorting packages in a workspace, take into account workspace dependencies specified as peerDependencies #​7813.
  • Add --ignore-scripts argument to prune command #​7836.

Platinum Sponsors

Gold Sponsors

Silver Sponsors

v8.15.5

Compare Source

v8.15.4

Compare Source

v8.15.3

Compare Source

Patch Changes

  • Remove vulnerable "ip" package from the dependencies #​7652.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.2

Compare Source

Patch Changes

  • When purging multiple node_modules directories, pnpm will no longer print multiple prompts simultaneously.
  • Don't print an unnecessary warning when adding new dependencies to a project that uses hoisted node_modules.
  • Linking globally the command of a package that has no name in package.json #​4761.
  • Installation should work with lockfile created by pnpm v9.0.0-alpha.4

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.1

Compare Source

Patch Changes

  • Use the object-hash library instead of node-object-hash for hashing keys of side-effects cache #​7591.
  • bundledDependencies should never be added to the lockfile with false as the value #​7576.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.0

Compare Source

Minor Changes

  • When the license field does not exist in package.json but a license file exists, try to match and extract the license name #​7530.

Patch Changes

  • Running pnpm update -r --latest will no longer downgrade prerelease dependencies #​7436.
  • --aggregate-output should work on scripts executed from the same project #​7556.
  • Prefer hard links over reflinks on Windows as they perform better #​7564.
  • Reduce the length of the side-effects cache key. Instead of saving a stringified object composed from the dependency versions of the package, use the hash calculated from the said object #​7563.
  • Throw an error if pnpm update --latest runs with arguments containing versions specs. For instance, pnpm update --latest foo@next is not allowed #​7567.
  • Don't fail in Windows CoW if the file already exists #​7554.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.14.3

Compare Source

Patch Changes

  • pnpm pack should work as expected when "prepack" modifies the manifest #​7558.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.14.2

Compare Source

Patch Changes

  • Registry configuration from previous installation should not override current settings #​7507.
  • pnpm dlx should not fail, when executed from package.json "scripts" 7424.
  • A git-hosted dependency should not be added to the store if it failed to be built #​7407.
  • pnpm publish should pack "main" file or "bin" files defined in "publishConfig" #​4195.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added d:patch Pull requests that update a patch dependency dependencies Pull requests that update a dependency file labels Jan 25, 2024
Copy link

vercel bot commented Jan 25, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
noisekun ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 20, 2024 8:33pm

@codecov-commenter
Copy link

codecov-commenter commented Jan 25, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (ff4b510) 65.09% compared to head (97bf47b) 65.09%.

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #665   +/-   ##
=======================================
  Coverage   65.09%   65.09%           
=======================================
  Files          55       55           
  Lines         719      719           
  Branches       84       84           
=======================================
  Hits          468      468           
  Misses        237      237           
  Partials       14       14           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot changed the title chore(deps): update pnpm to v8.14.2 chore(deps): update pnpm to v8.14.3 Jan 26, 2024
@renovate renovate bot changed the title chore(deps): update pnpm to v8.14.3 chore(deps): update pnpm to v8.15.1 Feb 1, 2024
@renovate renovate bot changed the title chore(deps): update pnpm to v8.15.1 chore(deps): update pnpm to v8.15.2 Feb 16, 2024
@renovate renovate bot changed the title chore(deps): update pnpm to v8.15.2 chore(deps): update pnpm to v8.15.3 Feb 18, 2024
@renovate renovate bot changed the title chore(deps): update pnpm to v8.15.3 chore(deps): update pnpm to v8.15.4 Feb 27, 2024
@renovate renovate bot changed the title chore(deps): update pnpm to v8.15.4 chore(deps): update pnpm to v8.15.5 Mar 20, 2024
@renovate renovate bot changed the title chore(deps): update pnpm to v8.15.5 chore(deps): update pnpm to v8.15.6 Apr 4, 2024
@renovate renovate bot changed the title chore(deps): update pnpm to v8.15.6 chore(deps): update pnpm to v8.15.7 Apr 16, 2024
@renovate renovate bot changed the title chore(deps): update pnpm to v8.15.7 chore(deps): update pnpm to v8.15.8 May 3, 2024
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | pnpm    | 8.14.1 | 8.15.9 |
@renovate renovate bot changed the title chore(deps): update pnpm to v8.15.8 chore(deps): update pnpm to v8.15.9 Jul 20, 2024

Micro-Learning Topic: Race condition (Detected by phrase)

Matched on "race condition"

What is this? (2min video)

A race condition is a flaw that produces an unexpected result when the timing of actions impact other actions.

Try a challenge in Secure Code Warrior

@mateusfg7 mateusfg7 merged commit e281e4a into main Jul 27, 2024
5 checks passed
@mateusfg7 mateusfg7 deleted the deps/pnpm-8.x branch July 27, 2024 12:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
d:patch Pull requests that update a patch dependency dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants