Security2431 / 2day-report

Gain a clear overview of your team's progress and availability! 📅
https://2day.report
MIT License
1 stars 0 forks source link

chore(deps): update pnpm to v9.10.0 #567

Open renovate[bot] opened 1 month ago

renovate[bot] commented 1 month ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
pnpm (source) 9.6.0 -> 9.10.0 age adoption passing confidence

Release Notes

pnpm/pnpm (pnpm) ### [`v9.10.0`](https://redirect.github.com/pnpm/pnpm/releases/tag/v9.10.0): pnpm 9.10 [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.9.0...v9.10.0) #### Minor Changes - Support for a new CLI flag, `--exclude-peers`, added to the `list` and `why` commands. When `--exclude-peers` is used, peer dependencies are not printed in the results, but dependencies of peer dependencies are still scanned [#​8506](https://redirect.github.com/pnpm/pnpm/pull/8506). - Added a new setting to `package.json` at `pnpm.auditConfig.ignoreGhsas` for ignoring vulnerabilities by their GHSA code [#​6838](https://redirect.github.com/pnpm/pnpm/issues/6838). For instance: ```json { "pnpm": { "auditConfig": { "ignoreGhsas": [ "GHSA-42xw-2xvc-qx8m", "GHSA-4w2v-q235-vp99", "GHSA-cph5-m8f7-6c5x", "GHSA-vh95-rmgr-6w4m" ] } } } ``` #### Patch Changes - Throw an exception if pnpm switches to the same version of itself. - Reduce memory usage during peer dependencies resolution. #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v9.9.0`](https://redirect.github.com/pnpm/pnpm/compare/v9.8.0...v9.9.0) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.8.0...v9.9.0) ### [`v9.8.0`](https://redirect.github.com/pnpm/pnpm/compare/v9.7.1...v9.8.0) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.7.1...v9.8.0) ### [`v9.7.1`](https://redirect.github.com/pnpm/pnpm/compare/v9.7.0...v9.7.1) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.7.0...v9.7.1) ### [`v9.7.0`](https://redirect.github.com/pnpm/pnpm/releases/tag/v9.7.0): pnpm 9.7 [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.6.0...v9.7.0) #### Minor Changes - Added pnpm version management. If the `manage-package-manager-versions` setting is set to `true`, pnpm will switch to the version specified in the `packageManager` field of `package.json` [#​8363](https://redirect.github.com/pnpm/pnpm/pull/8363). This is the same field used by Corepack. Example: ```json { "packageManager": "pnpm@9.3.0" } ``` - Added the ability to apply patch to all versions [#​8337](https://redirect.github.com/pnpm/pnpm/pull/8337). If the key of `pnpm.patchedDependencies` is a package name without a version (e.g. `pkg`), pnpm will attempt to apply the patch to all versions of the package. Failures will be skipped. If there's only one version of `pkg` installed, `pnpm patch pkg` and subsequent `pnpm patch-commit $edit_dir` will create an entry named `pkg` in `pnpm.patchedDependencies`. And pnpm will attempt to apply this patch to other versions of `pkg` in the future. - Change the default edit dir location when running `pnpm patch` from a temporary directory to `node_modules/.pnpm_patches/pkg[@​version]` to allow the code editor to open the edit dir in the same file tree as the main project [#​8379](https://redirect.github.com/pnpm/pnpm/issues/8379). - Substitute environment variables in config keys [#​6679](https://redirect.github.com/pnpm/pnpm/issues/6679). #### Patch Changes - `pnpm install` should run `node-gyp rebuild` if the project has a `binding.gyp` file even if the project doesn't have an install script [#​8293](https://redirect.github.com/pnpm/pnpm/issues/8293). - Print warnings to stderr [#​8342](https://redirect.github.com/pnpm/pnpm/pull/8342). - Peer dependencies of optional peer dependencies should be automatically installed [#​8323](https://redirect.github.com/pnpm/pnpm/issues/8323). #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

vercel[bot] commented 1 month ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
2day-report ❌ Failed (Inspect) Sep 9, 2024 5:34pm