ReviewOS

also looking at this

ow3org/renovate-config

chore(deps): update all non-major dependencies

#11
Merged renovate[bot] wants to merge renovate/all-minor-patch into main
2 files +170 -172
9 days ago

Mend Renovate

This PR contains the following updates:

PackageChangeAgeAdoptionPassingConfidence
pnpm (source)7.5.0 -> 7.9.0ageadoptionpassingconfidence
renovate (source)^32.105.0 -> ^32.160.2ageadoptionpassingconfidence

Release Notes

pnpm/pnpm

v7.9.0

Compare Source

Minor Changes

  • When ignore-dep-scripts is true, ignore scripts of dependencies but run the scripts of the project.
  • When ignore-compatibility-db is set to true, the compatibility database will not be used to patch dependencies #​5132.
  • Print the versions of packages in peer dependency warnings and errors.
  • Support a new hook for passing a custom package importer to the store controller.

Patch Changes

  • Don't print the same deprecation warning multiple times.
  • On POSIX pnpm setup should suggest users to source the config instead of restarting the terminal.
  • Installing a package with bin that points to an .exe file on Windows #​5159.
  • Fix bug where the package manifest was not resolved if verify-store-integrity is set to false.
  • Fix sorting of keys in lockfile to make it more deterministic and prevent unnecessary churn in the lockfile #​5151.
  • Don't create a separate bundle for pnpx.

Our Gold Sponsors

#### Our Silver Sponsors

v7.8.0

Compare Source

Minor Changes

  • When publishConfig.directory is set, only symlink it to other workspace projects if publishConfig.linkDirectory is set to true. Otherwise, only use it for publishing #​5115.

Patch Changes

  • Don't incorrectly identify a lockfile out-of-date when the package has a publishConfig.directory field #​5124.
  • Don't crash when a config file contains a setting with an env variable that doesn't exist #​5093.

Our Gold Sponsors

#### Our Silver Sponsors
#### What's Changed * fix: don't incorrectly identify a lockfile out-of-date by @​zkochan in https://github.com/pnpm/pnpm/pull/5126 * feat: publishConfig.linkDirectory by @​zkochan in https://github.com/pnpm/pnpm/pull/5125 * fix: don't crash on a .npmrc with missing env var by @​zkochan in https://github.com/pnpm/pnpm/pull/5127 * chore: fix typo by @​LuciNyan in https://github.com/pnpm/pnpm/pull/5128 #### New Contributors * @​LuciNyan made their first contribution in https://github.com/pnpm/pnpm/pull/5128

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.7.1...v7.8.0

v7.7.1

Compare Source

Patch Changes

  • pnpm should not consider a lockfile out-of-date if auto-install-peers is set to true and the peer dependency is in devDependencies or optionalDependencies #​5080.
  • Don't incorrectly consider a lockfile out-of-date when workspace:^ or workspace:~ version specs are used in a workspace.

Our Gold Sponsors

#### Our Silver Sponsors
#### What's Changed * fix: frozen install in a project with peer deps and `auto-install-peers=true` by @​zkochan in https://github.com/pnpm/pnpm/pull/5120 * fix: don't incorrectly consider a lockfile to be out-of-date by @​zkochan in https://github.com/pnpm/pnpm/pull/5121

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.7.0...v7.7.1

v7.7.0

Compare Source

Minor Changes

  • Add experimental lockfile format that should merge conflict less in the importers section. Enabled by setting the use-inline-specifiers-lockfile-format = true feature flag in .npmrc.

    If this feature flag is committed to a repo, we recommend setting the minimum allowed version of pnpm to this release in the package.json engines field. Once this is set, older pnpm versions will throw on invalid lockfile versions.

  • Add publishDirectory field to the lockfile and relink the project when it changes.

  • verify-store-integrity=false makes pnpm skip checking the integrities of files in the global content-addressable store.

  • Allow to set only-built-dependencies[] through .npmrc.

Patch Changes

  • It should be possible to publish a package with local dependencies from a custom publish directory (set via publishConfig.directory) #​3901.
  • pnpm deploy should inject local dependencies of all types (dependencies, optionalDependencies, devDependencies) #​5078.
  • When a project in a workspace has a publishConfig.directory set, dependent projects should install the project from that directory #​3901
  • pnpm deploy: accept absolute paths and use cwd instead of workspaceDir for deploy target directory #​4980.
  • pnpm setup should update .zshrc in the right directory when a $ZDOTDIR is set.

Our Gold Sponsors

#### Our Silver Sponsors
#### What's Changed * fix(deploy): inject all types of deps by @​zkochan in https://github.com/pnpm/pnpm/pull/5084 * fix(make-dedicated-lockfile): prepublishOnly script is automatically … by @​zkochan in https://github.com/pnpm/pnpm/pull/5083 * fix: symlink a workspace pkg correctly, when it has a custom publish dir by @​zkochan in https://github.com/pnpm/pnpm/pull/5089 * feat: add experimental use-inline-specifiers-lockfile-format by @​gluxon in https://github.com/pnpm/pnpm/pull/5091 * fix: plugin-commands-deploy use path resolve on deploy target dir by @​AWare in https://github.com/pnpm/pnpm/pull/5026 * fix: relink the project when its publish directory changes by @​zkochan in https://github.com/pnpm/pnpm/pull/5109 * fix: don't include specifiers field in new experimental lockfile format by @​zkochan in https://github.com/pnpm/pnpm/pull/5110 * feat: verify-store-integrity by @​zkochan in https://github.com/pnpm/pnpm/pull/5112 #### New Contributors * @​AWare made their first contribution in https://github.com/pnpm/pnpm/pull/5026

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.6.0...v7.7.0

v7.6.0

Compare Source

Minor Changes
  • A new setting supported: prefer-symlinked-executables. When true, pnpm will create symlinks to executables in node_modules/.bin instead of command shims (but on POSIX systems only).

    This setting is true by default when node-linker is set to hoisted.

    Related issue: #​4782.

  • When lockfile-include-tarball-url is set to true, every entry in pnpm-lock.yaml will contain the full URL to the package's tarball #​5054.

Patch Changes
  • pnpm deploy should include all dependencies by default #​5035.

  • Don't print warnings about file verifications. Just print info messages instead.

  • pnpm publish --help should print the --recursive and --filter options #​5019.

  • It should be possible to run exec/run/dlx with the --use-node-version option.

  • pnpm deploy should not modify the lockfile #​5071

  • pnpm deploy should not fail in CI #​5071

  • When auto-install-peers is set to true, automatically install direct peer dependencies #​5028.

    So if your project the next manifest:

    {
      "dependencies": {
        "lodash": "^4.17.21"
      },
      "peerDependencies": {
        "react": "^18.2.0"
      }
    }

    pnpm will install both lodash and react as a regular dependencies.

Our Gold Sponsors
##### Our Silver Sponsors
##### What's Changed * pnpm rebuild accepts --store-dir by @​chengcyber in https://github.com/pnpm/pnpm/pull/5036 * fix(deploy): include all deps by default by @​zkochan in https://github.com/pnpm/pnpm/pull/5040 * chore(deps): upgrade nock to v13 by @​mcmxcdev in https://github.com/pnpm/pnpm/pull/5043 * fix: log more info on HTTP error by @​zkochan in https://github.com/pnpm/pnpm/pull/4917 * fix: document the -r option by @​zkochan in https://github.com/pnpm/pnpm/pull/5044 * chore(deps): upgrade sinon to v14 by @​mcmxcdev in https://github.com/pnpm/pnpm/pull/5045 * fix(audit): add authentication to pnpm-audit by @​sled in https://github.com/pnpm/pnpm/pull/5053 * feat: prefer-symlinked-executables by @​zkochan in https://github.com/pnpm/pnpm/pull/5048 * chore: update pnpm-workspace.yaml by @​ayu14214 in https://github.com/pnpm/pnpm/pull/5060 * feat: add `lockfile-include-tarball-url` option by @​MBelniak in https://github.com/pnpm/pnpm/pull/5054 * fix: auto install root peer deps when auto-install-peers=true by @​zkochan in https://github.com/pnpm/pnpm/pull/5067 * fix(deploy): don't modify the lockfile and fail in CI by @​zkochan in https://github.com/pnpm/pnpm/pull/5074 ##### New Contributors * @​mcmxcdev made their first contribution in https://github.com/pnpm/pnpm/pull/5043 * @​sled made their first contribution in https://github.com/pnpm/pnpm/pull/5053 * @​ayu14214 made their first contribution in https://github.com/pnpm/pnpm/pull/5060 * @​MBelniak made their first contribution in https://github.com/pnpm/pnpm/pull/5054

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.5.2...v7.6.0

v7.5.2

Compare Source

Patch Changes

  • Don't print any info messages about .pnpmfile.cjs #​5027.
  • Do not print a package with unchanged version in the installation summary #​5031.

Our Gold Sponsors

#### Our Silver Sponsors
#### What's Changed * fix: summary reporting by @​zkochan in https://github.com/pnpm/pnpm/pull/5031 * fix: don't print info messages about .pnpmfile.cjs by @​zkochan in https://github.com/pnpm/pnpm/pull/5032

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.5.1...v7.5.2

v7.5.1

Compare Source

Patch Changes

  • Don't symlink the autoinstalled peer dependencies to the root of node_modules #​4988.
  • Avoid retaining a copy of the contents of files deleted during patching #​5003.
  • Remove file reporter logging. Logged file is not useful #​4949.

Our Gold Sponsors

#### Our Silver Sponsors
#### What's Changed * fix: don't symlink the autoinstalled peers to the root of node_modules by @​zkochan in https://github.com/pnpm/pnpm/pull/4998 * feat: use irreversible-delete in pnpm patch-commit by @​webstrand in https://github.com/pnpm/pnpm/pull/5008 * feat(file-reporter): remove file reporter by @​william2958 in https://github.com/pnpm/pnpm/pull/5012 #### New Contributors * @​webstrand made their first contribution in https://github.com/pnpm/pnpm/pull/5008 * @​william2958 made their first contribution in https://github.com/pnpm/pnpm/pull/5012

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.5.0...v7.5.1

renovatebot/renovate

v32.160.2

Compare Source

Bug Fixes
Tests

v32.160.1

Compare Source

Bug Fixes
Tests
Miscellaneous Chores

v32.160.0

Compare Source

Features
Miscellaneous Chores

v32.159.5

Compare Source

Build System

v32.159.4

Compare Source

Bug Fixes
Tests

v32.159.3

Compare Source

Build System

v32.159.2

Compare Source

Bug Fixes
Documentation
Miscellaneous Chores

v32.159.1

Compare Source

Bug Fixes
Tests
Documentation

v32.159.0

Compare Source

Features
  • lib/logger: add base branch metadata for multi-base repositories (#​17027) (9f837f2)

v32.158.1

Compare Source

Bug Fixes
Documentation

v32.158.0

Compare Source

Features

v32.157.0

Compare Source

Features

v32.156.1

Compare Source

Bug Fixes
Documentation

v32.156.0

Compare Source

Features

v32.155.0

Compare Source

Features
Miscellaneous Chores
Documentation

v32.154.9

Compare Source

Bug Fixes
Documentation

v32.154.8

Compare Source

Bug Fixes
Miscellaneous Chores

v32.154.7

Compare Source

Build System

v32.154.6

Compare Source

Bug Fixes
  • repo/update: dry run - skip PR update when branch is modified (#​17114) (82a1f32)

v32.154.5

Compare Source

Bug Fixes
  • package-rules: remove edge case if no depName packageRules are defined (#​16930) (726b97b)

v32.154.4

Compare Source

Bug Fixes

v32.154.3

Compare Source

Bug Fixes

v32.154.2

Compare Source

Bug Fixes

v32.154.1

Compare Source

Bug Fixes
Documentation

v32.154.0

Compare Source

Features
Miscellaneous Chores
Code Refactoring

v32.153.4

Compare Source

Bug Fixes
Code Refactoring

v32.153.3

Compare Source

Continuous Integration
Build System

v32.153.2

Compare Source

Bug Fixes
Code Refactoring
  • repository/merge: extract unnecessarily nested function from detectConfigFile (#​17066) (1c429f6)

v32.153.1

Compare Source

Bug Fixes
Documentation

v32.153.0

Compare Source

Features
Bug Fixes
Documentation
Build System
Miscellaneous Chores
Code Refactoring
Tests

v32.152.0

Compare Source

Features
  • util/template: add prettyNewMajor and prettyNewVersion field (#​16831) (4ead106)

v32.151.3

Compare Source

Bug Fixes
  • hermit: findUpLocal expects relative cwd, fix incorrect hermit env in nested directory setup (#​17031) (1111b32)
Documentation
Miscellaneous Chores

v32.151.2

Compare Source

Build System

v32.151.1

Compare Source

Bug Fixes

v32.151.0

Compare Source

Features
Miscellaneous Chores

v32.150.4

Compare Source

Bug Fixes

v32.150.3

Compare Source

Documentation
  • platformAutomerge: recommend setting required status checks (#​16965) (93e200f)
Build System
Miscellaneous Chores

v32.150.2

Compare Source

Bug Fixes

v32.150.1

Compare Source

Bug Fixes

v32.150.0

Compare Source

Features

v32.149.0

Compare Source

Features

v32.148.0

Compare Source

Features

v32.147.0

Compare Source

Features
Miscellaneous Chores

v32.146.0

Compare Source

Features
  • add hermit binary source ([#&#

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Mend Renovate. View repository job log here.

2 changed files on the files tab, with 0 review threads.

Sign in to comment on this pull request.