Update pnpm to v8.7.0

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pnpm (source)	8.6.10 -> 8.7.0

---

Release Notes

pnpm/pnpm (pnpm)

### [`v8.7.0`](https://togithub.com/pnpm/pnpm/releases/tag/v8.7.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.6.12...v8.7.0) ##### Minor Changes - Improve performance of installation by using a worker pool for extracting packages and writing them to the content-addressable store [#​6850](https://togithub.com/pnpm/pnpm/pull/6850) - The default value of the `resolution-mode` setting is changed to `highest`. This setting was changed to `lowest-direct` in v8.0.0 and some users were [not happy with the change](https://togithub.com/pnpm/pnpm/issues/6463). A [twitter poll](https://twitter.com/pnpmjs/status/1693707270897517022) concluded that most of the users want the old behaviour (`resolution-mode` set to `highest` by default). This is a semi-breaking change but should not affect users that commit their lockfile [#​6463](https://togithub.com/pnpm/pnpm/issues/6463). ##### Patch Changes - Warn when linking a package with peerDependencies [#​615](https://togithub.com/pnpm/pnpm/issues/615). - Add support for npm lockfile v3 in `pnpm import` [#​6233](https://togithub.com/pnpm/pnpm/issues/6233). - Override peerDependencies in `pnpm.overrides` [#​6759](https://togithub.com/pnpm/pnpm/issues/6759). - Respect workspace alias syntax in pkg graph [#​6922](https://togithub.com/pnpm/pnpm/issues/6922) - Emit a clear error message when users attempt to specify an undownloadable node version [#​6916](https://togithub.com/pnpm/pnpm/pull/6916). - `pnpm patch` should write patch files with a trailing newline [#​6905](https://togithub.com/pnpm/pnpm/pull/6905). - Dedupe deps with the same alias in direct dependencies [6966](https://togithub.com/pnpm/pnpm/issues/6966) - Don't prefix install output for the dlx command. - Performance optimizations. Package tarballs are now download directly to memory and built to an ArrayBuffer. Hashing and other operations are avoided until the stream has been fully received [#​6819](https://togithub.com/pnpm/pnpm/pull/6819). ##### Our Gold Sponsors ##### Our Silver Sponsors ### [`v8.6.12`](https://togithub.com/pnpm/pnpm/releases/tag/v8.6.12) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.6.11...v8.6.12) ##### Patch Changes - Make the error message friendlier when a user attempts to run a command that does not exist [#​6887](https://togithub.com/pnpm/pnpm/pull/6887). - `pnpm patch` should work correctly when `shared-workspace-file` is set to `false` [#​6885](https://togithub.com/pnpm/pnpm/issues/6885). - `pnpm env use` should retry deleting the previous Node.js executable [#​6587](https://togithub.com/pnpm/pnpm/issues/6587). - `pnpm dlx` should not print an error stack when the underlying script execution fails [#​6698](https://togithub.com/pnpm/pnpm/issues/6698). - When showing the download progress of large tarball files, always display the same number of digits after the decimal point [#​6901](https://togithub.com/pnpm/pnpm/issues/6901). - Report download progress less frequently to improve performance [#​6906](https://togithub.com/pnpm/pnpm/pull/6906). - `pnpm install --frozen-lockfile --lockfile-only` should fail if the lockfile is not up to date with the `package.json` files [#​6913](https://togithub.com/pnpm/pnpm/issues/6913). ##### Our Gold Sponsors ##### Our Silver Sponsors ### [`v8.6.11`](https://togithub.com/pnpm/pnpm/releases/tag/v8.6.11) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.6.10...v8.6.11) #### Patch Changes - Change the install error message when a lockfile is wanted but absent to indicate the wanted lockfile is absent, not present. This now reflects the actual error [#​6851](https://togithub.com/pnpm/pnpm/pull/6851). - When dealing with a local dependency that is a path to a symlink, a new symlink should be created to the original symlink, not to the actual directory location. - The length of the temporary file names in the content-addressable store reduced in order to prevent `ENAMETOOLONG` errors from happening [#​6842](https://togithub.com/pnpm/pnpm/issues/6842). - Don't print "added" stats, when installing with `--lockfile-only`. - Installation of a git-hosted dependency should not fail if the `pnpm-lock.yaml` file of the installed dependency is not up-to-date [#​6865](https://togithub.com/pnpm/pnpm/issues/6865). - Don't ignore empty strings in params [#​6594](https://togithub.com/pnpm/pnpm/issues/6594). - Always set `dedupe-peer-dependents` to `false`, when running installation during deploy [#​6858](https://togithub.com/pnpm/pnpm/issues/6858). - When several containers use the same store simultaneously, there's a chance that multiple containers may create a temporary file at the same time. In such scenarios, pnpm could fail to rename the temporary file in one of the containers. This issue has been addressed: pnpm will no longer fail if the temporary file is absent but the destination file exists. - Authorization token should be found in the configuration, when the requested URL is explicitly specified with a default port (443 on HTTPS or 80 on HTTP) [#​6863](https://togithub.com/pnpm/pnpm/pull/6864). #### Our Gold Sponsors #### Our Silver Sponsors

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[stackblitz[bot]]

Run & review this pull request in StackBlitz Codeflow.

[changeset-bot[bot]]

⚠️ No Changeset found

Latest commit: 09f8ebe3878864e996182e9b8aa368e1039f1c43

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR