Skip to content

chore(deps-dev): bump pnpm from 6.32.10 to 7.0.0#124

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/pnpm-7.0.0
Closed

chore(deps-dev): bump pnpm from 6.32.10 to 7.0.0#124
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/pnpm-7.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 2, 2022

Copy link
Copy Markdown
Contributor

Bumps pnpm from 6.32.10 to 7.0.0.

Release notes

Sourced from pnpm's releases.

v7.0.0

Major Changes

  • Node.js 12 is not supported.

  • The root package is excluded by default, when running pnpm -r exec|run|add #2769.

  • Filtering by path is done by globs.

    In pnpm v6, in order to pick packages under a certain directory, the following filter was used: --filter=./apps

    In pnpm v7, a glob should be used: --filter=./apps/**

    For easier upgrade, we have also added a setting to turn back filtering as it was in v6. Just set legacy-dir-filtering=true in .npmrc.

  • The NODE_PATH env variable is not set in the command shims (the files in node_modules/.bin). This env variable was really long and frequently caused errors on Windows.

    Also, the extend-node-path setting is removed.

    Related PR: #4253

  • The embed-readme setting is false by default.

  • When using pnpm run <script>, all command line arguments after the script name are now passed to the script's argv, even --. For example, pnpm run echo --hello -- world will now pass --hello -- world to the echo script's argv. Previously flagged arguments (e.g. --silent) were interpreted as pnpm arguments unless -- came before it.

  • Side effects cache is turned on by default. To turn it off, use side-effects-cache=false.

  • The npm_config_argv env variable is not set for scripts #4153.

  • pnpx is now just an alias of pnpm dlx.

    If you want to just execute the command of a dependency, run pnpm <cmd>. For instance, pnpm eslint.

    If you want to install and execute, use pnpm dlx <pkg name>.

  • pnpm install -g pkg will add the global command only to a predefined location. pnpm will not try to add a bin to the global Node.js or npm folder. To set the global bin directory, either set the PNPM_HOME env variable or the global-bin-dir setting.

  • pnpm pack should only pack a file as an executable if it's a bin or listed in the publishConfig.executableFiles array.

  • -W is not an alias of --ignore-workspace-root-check anymore. Just use -w or --workspace-root instead, which will also allow to install dependencies in the root of the workspace.

  • Allow to execute a lifecycle script in a directory that doesn't match the package's name. Previously this was only allowed with the --unsafe-perm CLI option #3709.

  • Local dependencies referenced through the file: protocol are hard linked (not symlinked) #4408. If you need to symlink a dependency, use the link: protocol instead.

  • strict-peer-dependencies is true by default #4427.

  • A prerelease version is always added as an exact version to package.json. If the next version of foo is 1.0.0-beta.1 then running pnpm add foo@next will add this to package.json:

... (truncated)

Commits
  • 92dc2a7 chore(release): 7.0.0
  • 2838bd7 fix: peerDependencies
  • 360c65e feat: support @​pnpm/logger v2
  • 4b2a597 chore(release): 6.5.1
  • 1bd9073 fix(reporting): don't warn about unresolved link: deps
  • 5b503f6 chore: update shrinkwrap.yaml
  • b8c373d chore: update shrinkwrap.yaml
  • d7cbe9a chore(deps): update dependency ts-node to v7
  • 3cf2998 chore(release): 6.5.0
  • a525076 feat: add hasBin field to packages snapshots
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pnpm](https://github.com/pnpm/pnpm) from 6.32.10 to 7.0.0.
- [Release notes](https://github.com/pnpm/pnpm/releases)
- [Commits](pnpm/pnpm@v6.32.10...pnpm-shrinkwrap/7.0.0)

---
updated-dependencies:
- dependency-name: pnpm
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 2, 2022
@netlify

netlify Bot commented May 2, 2022

Copy link
Copy Markdown

Deploy Preview for nexusweather failed.

Name Link
🔨 Latest commit d672404
🔍 Latest deploy log https://app.netlify.com/sites/nexusweather/deploys/626fdd554a34e30009528597

@dependabot @github

dependabot Bot commented on behalf of github May 9, 2022

Copy link
Copy Markdown
Contributor Author

Superseded by #127.

@dependabot dependabot Bot closed this May 9, 2022
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/pnpm-7.0.0 branch May 9, 2022 13:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants