pnpm/pnpm
### [`v7.13.6`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.6)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.5...v7.13.6)
#### Patch Changes
- Downgrade `@pnpm/npm-conf` to remove annoying builtin warning [#5518](https://togithub.com/pnpm/pnpm/issues/5518).
- `pnpm link --global ` should not change the type of the dependency [#5478](https://togithub.com/pnpm/pnpm/issues/5478).
- When the `pnpm outdated` command fails, print in which directory it failed.
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.13.5`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.5)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.4...v7.13.5)
##### Patch Changes
- Print a warning when cannot read the built-in npm configuration.
- Also include missing deeply linked workspace packages at headless installation [#5034](https://togithub.com/pnpm/pnpm/issues/5034).
- `pnpm outdated` should work when the package tarballs are hosted on a domain that differs from the registry's domain [#5492](https://togithub.com/pnpm/pnpm/issues/5492).
- `strict-peer-dependencies` is set to `false` by default.
##### Our Gold Sponsors
##### Our Silver Sponsors
### [`v7.13.4`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.4)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.3...v7.13.4)
#### Patch Changes
- `pnpm link --global` should work when a custom target directory is specified with the `--dir` CLI option [#5473](https://togithub.com/pnpm/pnpm/pull/5473).
- It should be possible to override dependencies with local packages using overrides [#5443](https://togithub.com/pnpm/pnpm/issues/5443).
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.13.3`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.3)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.2...v7.13.3)
##### Patch Changes
- Don't crash when `auto-install-peers` is set to `true` and installation is done on a workspace with that has the same dependencies in multiple projects [#5454](https://togithub.com/pnpm/pnpm/issues/5454).
- Add global option in `pnpm link --help` [#5461](https://togithub.com/pnpm/pnpm/pull/5461).
- Show execution time on `install`, `update`, `add`, and `remove` [#1021](https://togithub.com/pnpm/pnpm/issues/1021).
- Fix the return path of `pnpm pack`, when a custom destination directory is used [#5471](https://togithub.com/pnpm/pnpm/issues/5471).
##### Our Gold Sponsors
##### Our Silver Sponsors
### [`v7.13.2`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.2)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.1...v7.13.2)
#### Patch Changes
- When linking commands to a directory, remove any .exe files that are already present in that target directory by the same name.
This fixes an issue with pnpm global update on Windows. If pnpm was installed with the standalone script and then updated with pnpm using `pnpm add --global pnpm`, the exe file initially created by the standalone script should be removed.
- When a direct dependency fails to resolve, print the path to the project directory in the error message.
- `pnpm patch-commit` should work when the patch directory is specified with a trailing slash [#5449](https://togithub.com/pnpm/pnpm/issues/5449).
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.13.1`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.1)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.0...v7.13.1)
#### Patch Changes
- `pnpm update --interactive` should not list dependencies ignored via the `pnpm.updateConfig.ignoreDependencies` setting.
#### Our Gold Sponsors
#### Our Silver Sponsors
### [`v7.13.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.0)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.12.2...v7.13.0)
##### Minor Changes
- Ignore packages listed in `package.json` > `pnpm.updateConfig.ignoreDependencies` fields on update/outdated command [#5358](https://togithub.com/pnpm/pnpm/issues/5358)
For instance, if you don't want `webpack` automatically to be updated when you run `pnpm update --latest`, put this to your `package.json`:
```json
{
"pnpm": {
"updateConfig": {
"ignoreDependencies": ["webpack"]
}
}
}
```
Patterns are also supported, so you may ignore for instance any packages from a scope: `@babel/*`.
- It is possible now to update all dependencies except the listed ones using `!`. For instance, update all dependencies, except `lodash`:
pnpm update !lodash
It also works with pattends, for instance:
pnpm update !@babel/*
And it may be combined with other patterns:
pnpm update @babel/* !@babel/core
##### Patch Changes
- Hooks should be applied on `pnpm deploy` [#5306](https://togithub.com/pnpm/pnpm/issues/5306).
- Stop `--filter-prod` option to run command on all the projects when used on workspace. `--filter-prod` option now only filter from `dependencies` and omit `devDependencies` instead of including all the packages when used on workspace. So what was happening is that if you use `--filter-prod` on workspace root like this:
```bash
pnpm --filter-prod ...build-modules exec node -e 'console.log(require(`./package.json`).name)'
```
it was printing all the package of workspace, where it should only print the package name of itself and packages where it has been added as `dependency` (not as `devDependencies`)
- Don't override the root dependency when auto installing peer dependencies [#5412](https://togithub.com/pnpm/pnpm/issues/5412).
##### Our Gold Sponsors
##### Our Silver Sponsors
##### What's Changed
* GitHub Workflows security hardening by @sashashu[https://github.com/pnpm/pnpm/pull/5405](https://togithub.com/pnpm/pnpm/pull/5405)l/5405
* feat: merge readPackage hook from opts and pnpmfile by @AGrz[https://github.com/pnpm/pnpm/pull/5403](https://togithub.com/pnpm/pnpm/pull/5403)l/5403
* feat: excluding deps from update by @zkoch[https://github.com/pnpm/pnpm/pull/5432](https://togithub.com/pnpm/pnpm/pull/5432)l/5432
* fix: dir path repeated join in link global by @lv[https://github.com/pnpm/pnpm/pull/5434](https://togithub.com/pnpm/pnpm/pull/5434)l/5434
* fix: filter-prod flag including all workspace pkgs by @noorulh[https://github.com/pnpm/pnpm/pull/5437](https://togithub.com/pnpm/pnpm/pull/5437)l/5437
* Feature: ignore packages listed in `package.json > pnpm.updateConfig.ignoreDependencies` on update/outdated commands by @Shinyaige[https://github.com/pnpm/pnpm/pull/5408](https://togithub.com/pnpm/pnpm/pull/5408)l/5408
* fix: don't override root deps when auto installing peers by @zkoch[https://github.com/pnpm/pnpm/pull/5442](https://togithub.com/pnpm/pnpm/pull/5442)l/5442
##### New Contributors
* @sashashura made their first contributi[https://github.com/pnpm/pnpm/pull/5405](https://togithub.com/pnpm/pnpm/pull/5405)l/5405
* @AGrzes made their first contributi[https://github.com/pnpm/pnpm/pull/5403](https://togithub.com/pnpm/pnpm/pull/5403)l/5403
* @noorulh06 made their first contributi[https://github.com/pnpm/pnpm/pull/5437](https://togithub.com/pnpm/pnpm/pull/5437)l/5437
**Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.12.2...v7.13.0
### [`v7.12.2`](https://togithub.com/pnpm/pnpm/releases/tag/v7.12.2)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.12.1...v7.12.2)
##### Patch Changes
- Don't crash when auto-install-peers is true and the project has many complex circular dependencies [#5394](https://togithub.com/pnpm/pnpm/pull/5394).
- `pnpm link --global` should work with the `--dir=` option [#5371](https://togithub.com/pnpm/pnpm/pull/5371).
##### Our Gold Sponsors
##### Our Silver Sponsors
##### What's Changed
* fix: error in pnpm --dir link --global by @lv[https://github.com/pnpm/pnpm/pull/5371](https://togithub.com/pnpm/pnpm/pull/5371)l/5371
* fix: cli crash with auto-install-peers=true by @zkoch[https://github.com/pnpm/pnpm/pull/5394](https://togithub.com/pnpm/pnpm/pull/5394)l/5394
##### New Contributors
* @lvqq made their first contributi[https://github.com/pnpm/pnpm/pull/5371](https://togithub.com/pnpm/pnpm/pull/5371)l/5371
**Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.12.1...v7.12.2
### [`v7.12.1`](https://togithub.com/pnpm/pnpm/releases/tag/v7.12.1)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.12.0...v7.12.1)
#### Patch Changes
- Deduplicate peer dependencies when automatically installing them [#5373](https://togithub.com/pnpm/pnpm/issues/5373).
#### Our Gold Sponsors
#### Our Silver Sponsors
#### What's Changed
* fix: deduplicate peer deps by @zkoch[https://github.com/pnpm/pnpm/pull/5377](https://togithub.com/pnpm/pnpm/pull/5377)l/5377
**Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.12.0...v7.12.1
### [`v7.12.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.12.0)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.11.0...v7.12.0)
#### Minor Changes
- A new setting supported in the pnpm section of the `package.json` file: `allowNonAppliedPatches`. When it is set to `true`, non-applied patches will not cause an error, just a warning will be printed. For example:
```json
{
"name": "foo",
"version": "1.0.0",
"pnpm": {
"patchedDependencies": {
"express@4.18.1": "patches/express@4.18.1.patch"
},
"allowNonAppliedPatches": true
}
}
```
- Now it is possible to exclude packages from hoisting by prepending a `!` to the pattern. This works with both the `hoist-pattern` and `public-hoist-pattern` settings. For instance:
public-hoist-pattern[]='*types*'
public-hoist-pattern[]='!@types/react'
hoist-pattern[]='*eslint*'
hoist-pattern[]='!*eslint-plugin*'
Ref [#5272](https://togithub.com/pnpm/pnpm/issues/5272)
#### Patch Changes
- When the same dependency with missing peers is used in multiple workspace projects, install the missing peers in each workspace project [#4820](https://togithub.com/pnpm/pnpm/issues/4820).
- `pnpm patch` should work on files that don't have an end of line [#5320](https://togithub.com/pnpm/pnpm/issues/5320).
- Fix `pnpm patch` using a custom `--edit-dir`.
#### Our Gold Sponsors
#### Our Silver Sponsors
#### What's Changed
* fix(patch): allow to edit a package in any directory by @zkoch[https://github.com/pnpm/pnpm/pull/5331](https://togithub.com/pnpm/pnpm/pull/5331)l/5331
* feat(matcher): ignore patterns by @LuciNy[https://github.com/pnpm/pnpm/pull/5336](https://togithub.com/pnpm/pnpm/pull/5336)l/5336
* fix(patch): ignore No newline at end of file by @await-o[https://github.com/pnpm/pnpm/pull/5321](https://togithub.com/pnpm/pnpm/pull/5321)l/5321
* feat(patch): allow non-applied patches by @larrybahr-ocel[https://github.com/pnpm/pnpm/pull/5354](https://togithub.com/pnpm/pnpm/pull/5354)l/5354
* chore: update @pnpm/meta-updater by @ibe[https://github.com/pnpm/pnpm/pull/5360](https://togithub.com/pnpm/pnpm/pull/5360)pm/pull/5360
* fix: auto-install-peers in a workspace by @zkoch[https://github.com/pnpm/pnpm/pull/5359](https://togithub.com/pnpm/pnpm/pull/5359)l/5359
#### New Contributors
* @await-ovo made their first contributi[https://github.com/pnpm/pnpm/pull/5321](https://togithub.com/pnpm/pnpm/pull/5321)l/5321
* @larrybahr-ocelot made their first contributi[https://github.com/pnpm/pnpm/pull/5354](https://togithub.com/pnpm/pnpm/pull/5354)l/5354
**Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.11.0...v7.12.0
### [`v7.11.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.11.0)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.10.0...v7.11.0)
#### Minor Changes
- `pnpm patch`: edit the patched package in a directory specified by the `--edit-dir` option. E.g., `pnpm patch express@3.1.0 --edit-dir=/home/xxx/src/patched-express` [#5304](https://togithub.com/pnpm/pnpm/pull/5304)
#### Patch Changes
- Auto installing a peer dependency in a workspace that also has it as a dev dependency in another project [#5144](https://togithub.com/pnpm/pnpm/issues/5144).
- When an error happens during installation of a subdependency, print some context information in order to be able to locate that subdependency. Print the exact chain of packages that led to the problematic dependency.
#### Our Gold Sponsors
#### Our Silver Sponsors
#### What's Changed
* feat(plugin-command-patching): add path option to patch command by @roseline1[https://github.com/pnpm/pnpm/pull/5304](https://togithub.com/pnpm/pnpm/pull/5304)l/5304
* fix: improve dependency installation error message by @zkoch[https://github.com/pnpm/pnpm/pull/5247](https://togithub.com/pnpm/pnpm/pull/5247)l/5247
* fix: auto installing peer dep in a workspace by @zkoch[https://github.com/pnpm/pnpm/pull/5307](https://togithub.com/pnpm/pnpm/pull/5307)l/5307
#### New Contributors
* @roseline124 made their first contributi[https://github.com/pnpm/pnpm/pull/5304](https://togithub.com/pnpm/pnpm/pull/5304)l/5304
**Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.10.0...v7.11.0
### [`v7.10.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.10.0)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.9.5...v7.10.0)
#### Minor Changes
- New time-based resolution strategy supported.
When `resolution-mode` is set to `time-based`, pnpm will resolve dependencies the following way:
1. Direct dependencies will be resolved to their lowest versions. So if there is `foo@^1.1.0` in the dependencies, then `1.1.0` will be installed.
2. Subdependencies will be resolved from versions that were published before the last direct dependency was published.
With this resolution mode installations with hot cache are faster. It also reduces the chance of subdependency hijacking as subdependencies will be updated only if direct dependencies are updated.
This resolution mode works only with npm's [full metadata](https://togithub.com/npm/registry/blob/master/docs/responses/package-metadata.md#full-metadata-format). So it is slower in some scenarios. However, if you use [Verdaccio](https://verdaccio.org/) v5.15.1 or newer, you may set the `registry-supports-time-field` setting to `true`, and it will be really fast.
Related [RFC](https://togithub.com/pnpm/rfcs/pull/2).
- Enhance `pnpm env` with the `remove` command. To remove a Node.js version installed by pnpm, run:
pnpm env remove --global
#### Patch Changes
- `pnpm store prune` should remove all cached metadata.
- Don't modify the manifest of the injected workspace project, when it has the same dependency in prod and peer dependencies.
#### Our Gold Sponsors
#### Our Silver Sponsors
#### What's Changed
* test: fix NODE_PATH test on Windows by @zkoch[https://github.com/pnpm/pnpm/pull/5257](https://togithub.com/pnpm/pnpm/pull/5257)l/5257
* refactor: resolve dependencies by @zkoch[https://github.com/pnpm/pnpm/pull/5267](https://togithub.com/pnpm/pnpm/pull/5267)l/5267
* feat(env): add remove command to pnpm env by @mark-omar[https://github.com/pnpm/pnpm/pull/5263](https://togithub.com/pnpm/pnpm/pull/5263)l/5263
* docs(CONTRIBUTING): correct setup instructions for first-time clone by @gwhitn[https://github.com/pnpm/pnpm/pull/5289](https://togithub.com/pnpm/pnpm/pull/5289)l/5289
* fix: don't modify the injected project's manifest by @zkoch[https://github.com/pnpm/pnpm/pull/5294](https://togithub.com/pnpm/pnpm/pull/5294)l/5294
* feat: time-based resolution mode by @zkoch[https://github.com/pnpm/pnpm/pull/5238](https://togithub.com/pnpm/pnpm/pull/5238)l/5238
* feat: resolve direct deps to lowest version when resolution-mode is time-based by @zkoch[https://github.com/pnpm/pnpm/pull/5298](https://togithub.com/pnpm/pnpm/pull/5298)l/5298
* fix: add fallback for time-based resolution by @zkoch[https://github.com/pnpm/pnpm/pull/5302](https://togithub.com/pnpm/pnpm/pull/5302)l/5302
#### New Contributors
* @mark-omarov made their first contributi[https://github.com/pnpm/pnpm/pull/5263](https://togithub.com/pnpm/pnpm/pull/5263)l/5263
* @gwhitney made their first contributi[https://github.com/pnpm/pnpm/pull/5289](https://togithub.com/pnpm/pnpm/pull/5289)l/5289
**Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.9.5...v7.10.0
### [`v7.9.5`](https://togithub.com/pnpm/pnpm/releases/tag/v7.9.5)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.9.4...v7.9.5)
#### Patch Changes
- Set `NODE_PATH` when `prefer-symlinked-executables` is enabled [#5251](https://togithub.com/pnpm/pnpm/pull/5251).
- Fail with a meaningful error when the audit endpoint doesn't exist [#5200](https://togithub.com/pnpm/pnpm/issues/5200).
- Symlink a local dependency to `node_modules`, even if the target directory doesn't exist [#5219](https://togithub.com/pnpm/pnpm/issues/5219).
#### Our Gold Sponsors
#### Our Silver Sponsors
#### What's Changed
* Fix pnpm audit bad API response on private registry by @timtong19[https://github.com/pnpm/pnpm/pull/5246](https://togithub.com/pnpm/pnpm/pull/5246)l/5246
* fix: set NODE_PATH when is turned on by @d3[https://github.com/pnpm/pnpm/pull/5251](https://togithub.com/pnpm/pnpm/pull/5251)l/5251
* fix: symlink local dep even when target dir does not exist by @zkoch[https://github.com/pnpm/pnpm/pull/5253](https://togithub.com/pnpm/pnpm/pull/5253)l/5253
* fix: only set extraEnv for preferSymlinkedExecutables if it's not windows by @d3[https://github.com/pnpm/pnpm/pull/5256](https://togithub.com/pnpm/pnpm/pull/5256)l/5256
#### New Contributors
* @timtong1982 made their first contributi[https://github.com/pnpm/pnpm/pull/5246](https://togithub.com/pnpm/pnpm/pull/5246)l/5246
**Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.9.4...v7.9.5
### [`v7.9.4`](https://togithub.com/pnpm/pnpm/releases/tag/v7.9.4)
[Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.9.3...v7.9.4)
#### Patch Changes
- Auto install peer dependencies when auto-install-peers is set to true and the lockfile is up to date [#5213](https://togithub.com/pnpm/pnpm/issues/5213).
- `pnpm env`: for Node.js<16 install the x64 build on Darwin ARM as ARM build is not available [#5239](https://togithub.com/pnpm/pnpm/pull/5239).
- `pnpm env`: log a message when the node.js tarball starts the download [#5241](https://togithub.com/pnpm/pnpm/pull/5241).
- Fix `pnpm install --merge-git-branch-lockfile` when the lockfile is up to date [#5212](https://togithub.com/pnpm/pnpm/issues/5212).
#### Our Gold Sponsors
#### Our Silver Sponsors
#### What's Changed
* feat(cafs): extend cafs with getFilePathByModeInCafs by @d3[https://github.com/pnpm/pnpm/pull/5232](https://togithub.com/pnpm/pnpm/pull/5232)l/5232
* fix: mergeGitBranchLockfiles when merged lockfile is up-to-date by @chengcyb[https://github.com/pnpm/pnpm/pull/5233](https://togithub.com/pnpm/pnpm/pull/5233)l/5233
* test: all test packages should be from the @pnpm.e2e scope by @[https://github.com/pnpm/pnpm/pull/5211](https://togithub.com/pnpm/pnpm/pull/5211)pm/pull/5211
* fix: node<16 download fail on arm chips on macos by @ambar-ark[https://github.com/pnpm/pnpm/pull/5239](https://togithub.com/pnpm/pnpm/pull/5239)l/5239
* feat(env): show state on fetching node by @JacobLinCo[https://github.com/pnpm/pnpm/pull/5241](https://togithub.com/pnpm/pnpm/pull/5241)l/5241
* Fix: install peerDeps which is not optional on headless install by @Shinyaige[https://github.com/pnpm/pnpm/pull/5243](https://togithub.com/pnpm/pnpm/pull/5243)l/5243
#### New Contributors
* @ambar-arkin made their first contributi[https://github.com/pnpm/pnpm/pull/5239](https://togithub.com/pnpm/pnpm/pull/5239)l/5239
* @JacobLinCool made their first contributi[https://github.com/pnpm/pnpm/pull/5241](https://togithub.com/pnpm/pnpm/pull/5241)l/5241
* @Shinyaigeek made their first contributi[https://github.com/pnpm/pnpm/pull/5243](https://togithub.com/pnpm/pnpm/pull/5243)l/5243
**Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.9.3...v7.9.4
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, click this checkbox.
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
7.9.3->7.13.6Release Notes
pnpm/pnpm
### [`v7.13.6`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.6) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.5...v7.13.6) #### Patch Changes - Downgrade `@pnpm/npm-conf` to remove annoying builtin warning [#5518](https://togithub.com/pnpm/pnpm/issues/5518). - `pnpm link --globalConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.