@pnpm/config.parse-overrides 1100.0.2 → 1100.1.0

package/CHANGELOG.md

@@ -0,0 +1,241 @@
+# @pnpm/parse-overrides
+
+## 1100.1.0
+
+### Minor Changes
+
+- Added a new override selector form with an empty range — `"pkg@": "<version>"` — called a convergence override. It rewrites a dependency edge only when its exact version satisfies the edge's declared range, so compatible consumers converge on one version while incompatible consumers keep their own resolution — now and for any dependent added in the future [#12794](https://github.com/pnpm/pnpm/issues/12794).
+
+  ```yaml
+  overrides:
+    "form-data@": 4.0.6
+  ```
+
+  The value must be an exact version. When a full resolution detects that every declared range also admits a newer version, pnpm warns that the override is stale and names the version to converge on. Previously an empty range in an override selector was undocumented and behaved like a bare (unscoped) override.
+
+## 1100.0.2
+
+### Patch Changes
+
+- Updated dependencies [852d537]
+  - @pnpm/error@1100.0.1
+
+## 1100.0.1
+
+### Patch Changes
+
+- 184ce26: Fix the package name in README.md.
+- Updated dependencies [184ce26]
+  - @pnpm/resolving.parse-wanted-dependency@1100.0.1
+
+## 1002.0.0
+
+### Major Changes
+
+- 491a84f: This package is now pure ESM.
+- 7d2fd48: Node.js v18, 19, 20, and 21 support discontinued.
+
+### Patch Changes
+
+- Updated dependencies [491a84f]
+- Updated dependencies [7d2fd48]
+- Updated dependencies [831f574]
+  - @pnpm/resolving.parse-wanted-dependency@1002.0.0
+  - @pnpm/catalogs.resolver@1001.0.0
+  - @pnpm/catalogs.types@1001.0.0
+  - @pnpm/error@1001.0.0
+
+## 1001.0.3
+
+### Patch Changes
+
+- @pnpm/error@1000.0.5
+
+## 1001.0.2
+
+### Patch Changes
+
+- @pnpm/error@1000.0.4
+- @pnpm/catalogs.resolver@1000.0.5
+
+## 1001.0.1
+
+### Patch Changes
+
+- @pnpm/error@1000.0.3
+- @pnpm/catalogs.resolver@1000.0.4
+
+## 1001.0.0
+
+### Major Changes
+
+- 8a9f3a4: `pref` renamed to `bareSpecifier`.
+
+### Patch Changes
+
+- Updated dependencies [8a9f3a4]
+  - @pnpm/parse-wanted-dependency@1001.0.0
+  - @pnpm/catalogs.resolver@1000.0.3
+
+## 1000.0.2
+
+### Patch Changes
+
+- @pnpm/error@1000.0.2
+- @pnpm/catalogs.resolver@1000.0.2
+
+## 1000.0.1
+
+### Patch Changes
+
+- @pnpm/error@1000.0.1
+- @pnpm/catalogs.resolver@1000.0.1
+
+## 5.1.2
+
+### Patch Changes
+
+- @pnpm/error@6.0.3
+- @pnpm/catalogs.resolver@0.1.2
+
+## 5.1.1
+
+### Patch Changes
+
+- @pnpm/error@6.0.2
+- @pnpm/catalogs.resolver@0.1.1
+
+## 5.1.0
+
+### Minor Changes
+
+- 0f0e441: Overrides now support catalogs [#8303](https://github.com/pnpm/pnpm/issues/8303).
+
+## 5.0.1
+
+### Patch Changes
+
+- Updated dependencies [a7aef51]
+  - @pnpm/error@6.0.1
+
+## 5.0.0
+
+### Major Changes
+
+- 43cdd87: Node.js v16 support dropped. Use at least Node.js v18.12.
+
+### Patch Changes
+
+- Updated dependencies [3ded840]
+- Updated dependencies [43cdd87]
+  - @pnpm/error@6.0.0
+  - @pnpm/parse-wanted-dependency@6.0.0
+
+## 4.0.2
+
+### Patch Changes
+
+- @pnpm/error@5.0.2
+
+## 4.0.1
+
+### Patch Changes
+
+- @pnpm/error@5.0.1
+
+## 4.0.0
+
+### Major Changes
+
+- eceaa8b8b: Node.js 14 support dropped.
+
+### Patch Changes
+
+- Updated dependencies [eceaa8b8b]
+  - @pnpm/parse-wanted-dependency@5.0.0
+  - @pnpm/error@5.0.0
+
+## 3.0.3
+
+### Patch Changes
+
+- Updated dependencies [2ae1c449d]
+  - @pnpm/parse-wanted-dependency@4.1.0
+
+## 3.0.2
+
+### Patch Changes
+
+- @pnpm/error@4.0.1
+
+## 3.0.1
+
+### Patch Changes
+
+- Updated dependencies [a9d59d8bc]
+  - @pnpm/parse-wanted-dependency@4.0.1
+
+## 3.0.0
+
+### Major Changes
+
+- f884689e0: Require `@pnpm/logger` v5.
+
+### Patch Changes
+
+- Updated dependencies [043d988fc]
+- Updated dependencies [f884689e0]
+  - @pnpm/error@4.0.0
+  - @pnpm/parse-wanted-dependency@4.0.0
+
+## 2.0.4
+
+### Patch Changes
+
+- Updated dependencies [e8a631bf0]
+  - @pnpm/error@3.1.0
+
+## 2.0.3
+
+### Patch Changes
+
+- Updated dependencies [238a165a5]
+  - @pnpm/parse-wanted-dependency@3.0.2
+
+## 2.0.2
+
+### Patch Changes
+
+- Updated dependencies [42c1ea1c0]
+  - @pnpm/parse-wanted-dependency@3.0.1
+
+## 2.0.1
+
+### Patch Changes
+
+- @pnpm/error@3.0.1
+
+## 2.0.0
+
+### Major Changes
+
+- 542014839: Node.js 12 is not supported.
+
+### Patch Changes
+
+- Updated dependencies [542014839]
+  - @pnpm/error@3.0.0
+  - @pnpm/parse-wanted-dependency@3.0.0
+
+## 1.0.1
+
+### Patch Changes
+
+- Updated dependencies [70ba51da9]
+  - @pnpm/error@2.1.0
+
+## 1.0.0
+
+### Major Changes
+
+- 613211b16: Initial release.

package/lib/index.d.ts

@@ -4,6 +4,13 @@ export interface VersionOverride {
     parentPkg?: PackageSelector;
     targetPkg: PackageSelector;
     newBareSpecifier: string;
+    /**
+     * True for empty-range selectors (`"pkg@"`): a convergence override. It
+     * applies to a dependency edge only when `newBareSpecifier` (always an
+     * exact version) satisfies the edge's declared range, so applying it can
+     * never violate a consumer's range.
+     */
+    converge?: boolean;
 }
 export interface PackageSelector {
     name: string;

package/lib/index.js

@@ -1,6 +1,7 @@
 import { matchCatalogResolveResult, resolveFromCatalog } from '@pnpm/catalogs.resolver';
 import { PnpmError } from '@pnpm/error';
 import { parseWantedDependency } from '@pnpm/resolving.parse-wanted-dependency';
+import semver from 'semver';
 const DELIMITER_REGEX = /[^ |@]>/;
 export function parseOverrides(overrides, catalogs) {
     const _resolveFromCatalog = resolveFromCatalog.bind(null, catalogs ?? {});
@@ -17,13 +18,28 @@ export function parseOverrides(overrides, catalogs) {
                 throw new PnpmError('CATALOG_IN_OVERRIDES', `Could not resolve a catalog in the overrides: ${error.message}`);
             },
         });
-        return {
+        const override = {
             selector,
             newBareSpecifier: resolvedCatalog ?? newBareSpecifier,
             ...result,
         };
+        return markConvergeOverride(override);
     });
 }
+function markConvergeOverride(override) {
+    const emptyRangeInParentChildSelector = override.parentPkg != null &&
+        (override.parentPkg.bareSpecifier === '' || override.targetPkg.bareSpecifier === '');
+    if (emptyRangeInParentChildSelector) {
+        throw new PnpmError('INVALID_CONVERGENCE_OVERRIDE', `Cannot use an empty range in the "${override.selector}" selector: convergence overrides ("pkg@") cannot be combined with parent>child selectors`);
+    }
+    if (override.targetPkg.bareSpecifier !== '')
+        return override;
+    if (semver.valid(override.newBareSpecifier) == null) {
+        throw new PnpmError('INVALID_CONVERGENCE_OVERRIDE', `The value of the convergence override "${override.selector}" must be an exact version, but got "${override.newBareSpecifier}"`);
+    }
+    override.converge = true;
+    return override;
+}
 export function parsePkgAndParentSelector(selector) {
     let delimiterIndex = selector.search(DELIMITER_REGEX);
     if (delimiterIndex !== -1) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/config.parse-overrides",
-  "version": "1100.0.2",
+  "version": "1100.1.0",
   "description": "Parse overrides",
   "keywords": [
     "pnpm",
@@ -30,11 +30,13 @@
     "@pnpm/catalogs.resolver": "1100.0.0",
     "@pnpm/catalogs.types": "1100.0.0",
     "@pnpm/error": "1100.0.1",
-    "@pnpm/resolving.parse-wanted-dependency": "1100.0.1"
+    "@pnpm/resolving.parse-wanted-dependency": "1100.0.1",
+    "semver": "^7.8.4"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/config.parse-overrides": "1100.0.2"
+    "@pnpm/config.parse-overrides": "1100.1.0",
+    "@types/semver": "7.7.1"
   },
   "engines": {
     "node": ">=22.13"