svg-GHC-2 / frank

0 stars 0 forks source link

Update pnpm to v8.15.9 #70

Open mend-for-github-com[bot] opened 9 months ago

mend-for-github-com[bot] commented 9 months ago

This PR contains the following updates:

Package Type Update Change
pnpm (source) engines minor 8.10.0 -> 8.15.9

Release Notes

pnpm/pnpm (pnpm) ### [`v8.15.9`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.9): pnpm 8.15.9 [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.8...v8.15.9) #### Patch Changes - Deduplicate bin names to prevent race condition and corrupted bin scripts [#​7833](https://togithub.com/pnpm/pnpm/issues/7833). #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v8.15.8`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.8) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.7...v8.15.8) #### Patch Changes - Upgrade tar to v6.2.1 in the dependences [#​7939](https://togithub.com/pnpm/pnpm/issues/7939). - If the `script-shell` option is configured to a `.bat`/`.cmd` file on Windows, pnpm will now error with `ERR_PNPM_INVALID_SCRIPT_SHELL_WINDOWS`. Newer [versions of Node.js released in April 2024](https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2) do not support executing these files directly without behavior differences. If the `script-shell` option is necessary for your use-case, please set a `.exe` file instead. #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v8.15.7`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.7) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.6...v8.15.7) #### Patch Changes - `pnpm config get` prints a comma-separated list for an array value instead of nothing. - It should be possible to publish a tarball with custom dist-tag [#​7845](https://togithub.com/pnpm/pnpm/issues/7845). - Print the list of packages that were not built because they are ignored by configuration settings. #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v8.15.6`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.6) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.5...v8.15.6) #### Patch Changes - The exit code of the child process should be preserved on `pnpm run` [#​7817](https://togithub.com/pnpm/pnpm/issues/7817). - When sorting packages in a workspace, take into account workspace dependencies specified as `peerDependencies` [#​7813](https://togithub.com/pnpm/pnpm/issues/7813). - Add `--ignore-scripts` argument to `prune` command [#​7836](https://togithub.com/pnpm/pnpm/pull/7836). #### Platinum Sponsors
#### Gold Sponsors
#### Silver Sponsors
### [`v8.15.5`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.5) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.4...v8.15.5) #### Patch Changes - Correctly detect the active Node.js version during headless installation [#​7801](https://togithub.com/pnpm/pnpm/pull/7801). - The npm CLI executed from pnpm should not use Corepack [#​7747](https://togithub.com/pnpm/pnpm/pull/7747). #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v8.15.4`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.4) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.3...v8.15.4) #### Patch Changes - Print the right error code when a package fails to be added to the store [#​7679](https://togithub.com/pnpm/pnpm/issues/7679). - Don't fail on a tarball that appears to be not a USTAR or GNU TAR archive. Still try to unpack the tarball [#​7120](https://togithub.com/pnpm/pnpm/issues/7120). - Always add a name and version field to the index files in the store [#​7115](https://togithub.com/pnpm/pnpm/issues/7115). - Deleting a dependencies field via a `readPackage` hook should work [#​7704](https://togithub.com/pnpm/pnpm/pull/7704). - Symlinks should be resolved and uploaded to the side-effects cache [#​7691](https://togithub.com/pnpm/pnpm/issues/7691). #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v8.15.3`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.3) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.2...v8.15.3) #### Patch Changes - Remove vulnerable "ip" package from the dependencies [#​7652](https://togithub.com/pnpm/pnpm/issues/7652). #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v8.15.2`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.2) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.1...v8.15.2) #### Patch Changes - When purging multiple `node_modules` directories, pnpm will no longer print multiple prompts simultaneously. - Don't print an unnecessary warning when adding new dependencies to a project that uses hoisted `node_modules`. - Linking globally the command of a package that has no name in `package.json` [#​4761](https://togithub.com/pnpm/pnpm/issues/4761). - Installation should work with lockfile created by pnpm v9.0.0-alpha.4 #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v8.15.1`](https://togithub.com/pnpm/pnpm/releases/tag/v8.15.1) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.15.0...v8.15.1) #### Patch Changes - Use the `object-hash` library instead of `node-object-hash` for hashing keys of side-effects cache [#​7591](https://togithub.com/pnpm/pnpm/pull/7591). - `bundledDependencies` should never be added to the lockfile with `false` as the value [#​7576](https://togithub.com/pnpm/pnpm/issues/7576). #### Platinum Sponsors
#### Gold Sponsors