@pnpm/building.policy 1100.0.21 → 1100.1.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @pnpm/building.policy
 
+## 1100.1.0
+
+### Minor Changes
+
+- Build scripts can now be rejected before the package is installed [#14067](https://github.com/pnpm/pnpm/issues/14067):
+
+  - `pnpm add --allow-build=!<pkg>` records `<pkg>: false` in `allowBuilds`. It used to write a `!<pkg>: true` entry that matched no package. On a global install the denial was dropped altogether, so the post-install prompt offered the build for approval.
+  - `pnpm approve-builds <pkg>` and `pnpm approve-builds !<pkg>` record their decision even when no packages are awaiting approval, and report a package that is not awaiting approval with a warning so a typo stays visible. Both cases used to fail the command with an error.
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.version-policy@1100.2.3
+
 ## 1100.0.21
 
 ### Patch Changes

package/lib/index.d.ts

@@ -23,3 +23,14 @@ export declare function allowBuildKeyFromIgnoredBuild(depPath: DepPath): string;
  * this proves absent from a resolved-name index.
  */
 export declare function packageNameFromAllowBuildKey(key: string): string | undefined;
+/**
+ * The package an `--allow-build` value or an `approve-builds` argument names,
+ * and whether it is allowed to build: a leading `!` denies the build.
+ *
+ * A selector that is empty or only `!` yields an empty name. Callers reject
+ * that rather than persist an empty `allowBuilds` key.
+ */
+export declare function parseAllowBuildSelector(selector: string): {
+    name: string;
+    allowed: boolean;
+};

package/lib/index.js

@@ -107,6 +107,18 @@ export function packageNameFromAllowBuildKey(key) {
         return undefined;
     return name;
 }
+/**
+ * The package an `--allow-build` value or an `approve-builds` argument names,
+ * and whether it is allowed to build: a leading `!` denies the build.
+ *
+ * A selector that is empty or only `!` yields an empty name. Callers reject
+ * that rather than persist an empty `allowBuilds` key.
+ */
+export function parseAllowBuildSelector(selector) {
+    return selector.startsWith('!')
+        ? { name: selector.slice(1), allowed: false }
+        : { name: selector, allowed: true };
+}
 function addAllowBuildRule(pkg, target) {
     if (isGitRepoAllowBuildKey(pkg)) {
         target.gitRepos.add(pkg);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.policy",
-  "version": "1100.0.21",
+  "version": "1100.1.0",
   "description": "Create a function for filtering out dependencies that are not allowed to be built",
   "keywords": [
     "pnpm",
@@ -27,13 +27,13 @@
     "!*.map"
   ],
   "dependencies": {
-    "@pnpm/config.version-policy": "1100.2.2",
+    "@pnpm/config.version-policy": "1100.2.3",
     "@pnpm/deps.path": "1101.0.1",
     "@pnpm/types": "1102.1.0"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/building.policy": "1100.0.21"
+    "@pnpm/building.policy": "1100.1.0"
   },
   "engines": {
     "node": ">=22.13"