unjs/defu
### [`v6.1.1`](https://togithub.com/unjs/defu/blob/HEAD/CHANGELOG.md#611-httpsgithubcomunjsdefucomparev610v611-2022-11-14)
[Compare Source](https://togithub.com/unjs/defu/compare/v6.1.0...v6.1.1)
unjs/node-fetch-native
### [`v0.1.8`](https://togithub.com/unjs/node-fetch-native/blob/HEAD/CHANGELOG.md#018-httpsgithubcomunjsnode-fetch-nativecomparev017v018-2022-10-15)
[Compare Source](https://togithub.com/unjs/node-fetch-native/compare/v0.1.7...v0.1.8)
pnpm/pnpm
### [`v7.16.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.16.0)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.15.0...v7.16.0)
#### Minor Changes
- Support `pnpm env list` to list global or remote Node.js versions [#5546](https://togithub.com/pnpm/pnpm/issues/5546).
#### Patch Changes
- Replace environment variable placeholders with their values, when reading `.npmrc` files in subdirectories inside a workspace [#2570](https://togithub.com/pnpm/pnpm/issues/2570).
- Fix an error that sometimes happen on projects with linked local dependencies [#5327](https://togithub.com/pnpm/pnpm/issues/5327).
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.15.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.15.0)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.14.2...v7.15.0)
#### Minor Changes
- Support `--format=json` option to output outdated packages in JSON format with `outdated` command [#2705](https://togithub.com/pnpm/pnpm/issues/2705).
```bash
pnpm outdated --format=json
#or
pnpm outdated --json
```
- A new setting supported for ignoring vulnerabilities by their CVEs. The ignored CVEs may be listed in the `pnpm.auditConfig.ignoreCves` field of `package.json`. For instance:
```json
{
"pnpm": {
"auditConfig": {
"ignoreCves": [
"CVE-2019-10742",
"CVE-2020-28168",
"CVE-2021-3749",
"CVE-2020-7598"
]
}
}
}
```
#### Patch Changes
- The reporter should not crash when the CLI process is kill during lifecycle scripts execution [#5588](https://togithub.com/pnpm/pnpm/pull/5588).
- Installation shouldn't fail when the injected dependency has broken symlinks. The broken symlinks should be just skipped [#5598](https://togithub.com/pnpm/pnpm/issues/5598).
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.14.2`](https://togithub.com/pnpm/pnpm/releases/tag/v7.14.2)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.14.1...v7.14.2)
#### Patch Changes
- Don't fail if cannot override the name field of the error object [#5572](https://togithub.com/pnpm/pnpm/issues/5572).
- Don't fail on rename across devices.
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.14.1`](https://togithub.com/pnpm/pnpm/releases/tag/v7.14.1)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.14.0...v7.14.1)
#### Patch Changes
- `pnpm list --long --json` should print licenses and authors of packages [#5533](https://togithub.com/pnpm/pnpm/pull/5533).
- Don't crash on lockfile with no packages field [#5553](https://togithub.com/pnpm/pnpm/issues/5553).
- Version overrider should have higher priority then custom read package hook from `.pnpmfile.cjs`.
- Don't print context information when running install for the `pnpm dlx` command.
- Print a warning if a `package.json` has a workspaces field but there is no `pnpm-workspace.yaml` file [#5363](https://togithub.com/pnpm/pnpm/issues/5363).
- It should be possible to set a custom home directory for pnpm by changing the PNPM_HOME environment variable.
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.14.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.14.0)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.6...v7.14.0)
##### Minor Changes
- Add `pnpm doctor` command to do checks for known common issues
##### Patch Changes
- Ignore the `always-auth` setting.
pnpm will never reuse the registry auth token for requesting the package tarball, if the package tarball is hosted on a different domain.
So, for example, if your registry is at `https://company.registry.com/` but the tarballs are hosted at `https://tarballs.com/`, then you will have to configure the auth token for both domains in your `.npmrc`:
@my-company:registry=https://company.registry.com/
//company.registry.com/=SOME_AUTH_TOKEN
//tarballs.com/=SOME_AUTH_TOKEN
##### Our Gold Sponsors
##### Our Silver Sponsors
### [`v7.13.6`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.6)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.5...v7.13.6)
#### Patch Changes
- Downgrade `@pnpm/npm-conf` to remove annoying builtin warning [#5518](https://togithub.com/pnpm/pnpm/issues/5518).
- `pnpm link --global ` should not change the type of the dependency [#5478](https://togithub.com/pnpm/pnpm/issues/5478).
- When the `pnpm outdated` command fails, print in which directory it failed.
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.13.5`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.5)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.4...v7.13.5)
#### Patch Changes
- Print a warning when cannot read the built-in npm configuration.
- Also include missing deeply linked workspace packages at headless installation [#5034](https://togithub.com/pnpm/pnpm/issues/5034).
- `pnpm outdated` should work when the package tarballs are hosted on a domain that differs from the registry's domain [#5492](https://togithub.com/pnpm/pnpm/issues/5492).
- `strict-peer-dependencies` is set to `false` by default.
#### Our Gold Sponsors
#### Our Silver Sponsors
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
^6.1.0
->^6.1.1
^0.1.7
->^0.1.8
7.13.4
->7.16.0
Release Notes
unjs/defu
### [`v6.1.1`](https://togithub.com/unjs/defu/blob/HEAD/CHANGELOG.md#611-httpsgithubcomunjsdefucomparev610v611-2022-11-14) [Compare Source](https://togithub.com/unjs/defu/compare/v6.1.0...v6.1.1)unjs/node-fetch-native
### [`v0.1.8`](https://togithub.com/unjs/node-fetch-native/blob/HEAD/CHANGELOG.md#018-httpsgithubcomunjsnode-fetch-nativecomparev017v018-2022-10-15) [Compare Source](https://togithub.com/unjs/node-fetch-native/compare/v0.1.7...v0.1.8)pnpm/pnpm
### [`v7.16.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.16.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.15.0...v7.16.0) #### Minor Changes - Support `pnpm env list` to list global or remote Node.js versions [#5546](https://togithub.com/pnpm/pnpm/issues/5546). #### Patch Changes - Replace environment variable placeholders with their values, when reading `.npmrc` files in subdirectories inside a workspace [#2570](https://togithub.com/pnpm/pnpm/issues/2570). - Fix an error that sometimes happen on projects with linked local dependencies [#5327](https://togithub.com/pnpm/pnpm/issues/5327). #### Our Gold SponsorsConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.