@pnpm/error 1100.1.1 → 1100.1.2

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/error
 
+## 1100.1.2
+
+### Patch Changes
+
+- A git dependency whose clone (or shallow fetch) fails now reports which package it belongs to, under the `ERR_PNPM_GIT_FETCH_FAILED` code, with credentials in the repository URL redacted. When the lockfile records an SSH remote, the error also explains that fetching it needs an SSH key for that host, and that a lockfile entry written before pnpm v11.21 can be re-recorded over HTTPS with `pnpm update <package>` [#13743](https://github.com/pnpm/pnpm/issues/13743).
+
 ## 1100.1.1
 
 ### Patch Changes

package/lib/index.d.ts

@@ -49,6 +49,17 @@ export declare function redactUrlCredentials(text: string): string;
  * or inject terminal output via raw escapes / `\r` / `\n`.
  */
 export declare function redactAndSanitize(text: string): string;
+/**
+ * {@link redactAndSanitize} for text whose line breaks are worth keeping, such
+ * as a subprocess's multi-line stderr.
+ *
+ * Line breaks are kept only when doing so redacts exactly as much as
+ * collapsing the text would: a newline can fall inside a `user:pass@`
+ * authority — git echoes such a URL back verbatim, password included — and
+ * redacting each line separately would leave the credentials split but
+ * readable. Whenever the two disagree, the collapsed form wins.
+ */
+export declare function redactAndSanitizeMultiline(text: string): string;
 export declare class LockfileMissingDependencyError extends PnpmError {
     constructor(depPath: string);
 }

package/lib/index.js

@@ -103,6 +103,21 @@ export function redactAndSanitize(text) {
     }
     return redactUrlCredentials(sanitized);
 }
+/**
+ * {@link redactAndSanitize} for text whose line breaks are worth keeping, such
+ * as a subprocess's multi-line stderr.
+ *
+ * Line breaks are kept only when doing so redacts exactly as much as
+ * collapsing the text would: a newline can fall inside a `user:pass@`
+ * authority — git echoes such a URL back verbatim, password included — and
+ * redacting each line separately would leave the credentials split but
+ * readable. Whenever the two disagree, the collapsed form wins.
+ */
+export function redactAndSanitizeMultiline(text) {
+    const collapsed = redactAndSanitize(text);
+    const perLine = text.split('\n').map(redactAndSanitize).join('\n');
+    return perLine.replaceAll('\n', '') === collapsed ? perLine : collapsed;
+}
 function isSchemeTailChar(code) {
     return (code >= 0x30 && code <= 0x39) || (code >= 0x41 && code <= 0x5a) || (code >= 0x61 && code <= 0x7a);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/error",
-  "version": "1100.1.1",
+  "version": "1100.1.2",
   "description": "An error class for pnpm errors",
   "keywords": [
     "pnpm",
@@ -32,7 +32,7 @@
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/error": "1100.1.1"
+    "@pnpm/error": "1100.1.2"
   },
   "engines": {
     "node": ">=22.13"