@pnpm/exe 12.5.1 → 12.6.0

package/dist/node_modules/.pnpm-workspace-state-v1.json

@@ -1,9 +1,9 @@
 {
-  "lastValidatedTimestamp": 1789765288371,
+  "lastValidatedTimestamp": 1790093961133,
   "projects": {
     "/home/runner/_work/pnpm/pnpm/pnpm/npm/pnpm/temp-deploy": {
       "name": "pacquet",
-      "version": "12.5.1"
+      "version": "12.6.0"
     }
   },
   "pnpmfiles": [],
@@ -23,10 +23,10 @@
       "default": {
         "@babel/core": "^7.29.7",
         "@babel/plugin-transform-explicit-resource-management": "^7.29.7",
-        "@commitlint/cli": "^21.2.2",
-        "@commitlint/config-conventional": "^21.2.2",
-        "@commitlint/prompt-cli": "^21.2.2",
-        "@cyclonedx/cyclonedx-library": "10.2.0",
+        "@commitlint/cli": "^21.2.3",
+        "@commitlint/config-conventional": "^21.2.3",
+        "@commitlint/prompt-cli": "^21.2.3",
+        "@cyclonedx/cyclonedx-library": "10.3.0",
         "@eslint/js": "^10.0.1",
         "@inquirer/prompts": "^8.7.2",
         "@jest/globals": "30.4.1",
@@ -40,7 +40,6 @@
         "@pnpm/logger": "^1100.0.0",
         "@pnpm/meta-updater": "2.0.6",
         "@pnpm/nopt": "^0.3.1",
-        "@pnpm/npm-lifecycle": "^1100.1.0",
         "@pnpm/npm-package-arg": "^2.0.0",
         "@pnpm/os.env.path-extender": "^3.0.1",
         "@pnpm/patch-package": "0.0.1",
@@ -79,6 +78,7 @@
         "@types/ramda": "0.32.0",
         "@types/retry": "^0.12.5",
         "@types/semver": "7.8.0",
+        "@types/spdx-expression-parse": "4.0.0",
         "@types/ssri": "^7.1.5",
         "@types/tar-stream": "^3.1.4",
         "@types/touch": "^3.1.5",
@@ -91,9 +91,11 @@
         "@typescript/native-preview": "7.0.0-dev.20260707.2",
         "@yarnpkg/core": "4.9.1",
         "@yarnpkg/extensions": "2.0.7",
+        "@yarnpkg/fslib": "^3.1.5",
         "@yarnpkg/lockfile": "^1.1.0",
         "@yarnpkg/nm": "4.1.1",
         "@yarnpkg/pnp": "^4.1.7",
+        "@yarnpkg/shell": "4.1.3",
         "@zkochan/retry": "^0.2.0",
         "@zkochan/rimraf": "^4.0.0",
         "@zkochan/table": "^2.0.1",
@@ -107,7 +109,7 @@
         "boxen": "npm:@zkochan/boxen@5.1.2",
         "c8": "^12.0.0",
         "camelcase": "^9.0.0",
-        "camelcase-keys": "^10.0.2",
+        "camelcase-keys": "^10.0.3",
         "can-link": "^3.0.0",
         "can-write-to-dir": "^2.0.0",
         "chalk": "^6.0.0",
@@ -125,10 +127,10 @@
         "didyoumean2": "^7.0.4",
         "dint": "^5.1.0",
         "dir-is-case-sensitive": "^3.0.0",
-        "empathic": "^2.0.1",
+        "empathic": "^2.1.0",
         "esbuild": "^0.28.2",
         "escape-string-regexp": "^5.0.0",
-        "eslint": "^10.10.0",
+        "eslint": "^10.11.0",
         "eslint-plugin-import-x": "^4.17.1",
         "eslint-plugin-jest": "^29.16.6",
         "eslint-plugin-n": "^18.3.0",
@@ -168,10 +170,10 @@
         "lodash.kebabcase": "^4.1.1",
         "lodash.throttle": "4.1.1",
         "loud-rejection": "^2.2.0",
-        "lru-cache": "^11.5.2",
+        "lru-cache": "^11.5.3",
         "make-empty-dir": "^4.0.0",
         "mdast-util-to-string": "^4.0.0",
-        "memfs": "^4.78.0",
+        "memfs": "^4.78.1",
         "memoize": "^11.0.0",
         "micromatch": "^4.0.8",
         "msgpackr": "2.1.0",
@@ -189,7 +191,7 @@
         "p-defer": "^4.0.1",
         "p-every": "^2.0.0",
         "p-filter": "^4.1.0",
-        "p-limit": "^7.3.2",
+        "p-limit": "^7.3.3",
         "p-queue": "^9.3.3",
         "parse-json": "^8.3.0",
         "parse-npm-tarball-url": "^5.0.0",
@@ -228,6 +230,7 @@
         "shx": "^0.4.0",
         "socks": "^2.8.10",
         "sort-keys": "^6.0.1",
+        "spdx-expression-parse": "5.0.0",
         "split-cmd": "^1.1.0",
         "split2": "^4.2.0",
         "ssri": "13.0.1",
@@ -236,7 +239,7 @@
         "string-width": "^8.2.2",
         "strip-bom": "^5.0.0",
         "strip-comments-strings": "1.2.0",
-        "symlink-dir": "^10.0.1",
+        "symlink-dir": "^10.0.3",
         "tar": "^7.5.22",
         "tar-stream": "^3.2.1",
         "tempy": "3.0.0",
@@ -247,6 +250,7 @@
         "ts-jest-resolver": "2.0.1",
         "typescript": "6.0.3",
         "typescript-eslint": "^8.70.0",
+        "uid-number": "0.0.6",
         "undici": "^7.29.0",
         "unified": "^11.0.5",
         "validate-npm-package-name": "7.0.2",

package/package.json

@@ -9,7 +9,7 @@
       "./dist/node_modules/node-gyp/gyp/gyp"
     ]
   },
-  "version": "12.5.1",
+  "version": "12.6.0",
   "description": "Fast, disk space efficient package manager",
   "keywords": [
     "pnpm",
@@ -46,20 +46,20 @@
     "THIRD-PARTY-NOTICES.md"
   ],
   "optionalDependencies": {
-    "@pnpm/exe.win32-x64": "12.5.1",
-    "@pnpm/exe.win32-arm64": "12.5.1",
-    "@pnpm/exe.darwin-x64": "12.5.1",
-    "@pnpm/exe.darwin-arm64": "12.5.1",
-    "@pnpm/exe.linux-x64": "12.5.1",
-    "@pnpm/exe.linux-arm64": "12.5.1",
-    "@pnpm/exe.linux-riscv64": "12.5.1",
-    "@pnpm/exe.linux-ppc64": "12.5.1",
-    "@pnpm/exe.linux-s390x": "12.5.1",
-    "@pnpm/exe.linux-x64-musl": "12.5.1",
-    "@pnpm/exe.linux-arm64-musl": "12.5.1",
-    "@pnpm/exe.freebsd-x64": "12.5.1",
-    "@pnpm/exe.android-arm64": "12.5.1",
-    "@pnpm/exe.android-x64": "12.5.1"
+    "@pnpm/exe.win32-x64": "12.6.0",
+    "@pnpm/exe.win32-arm64": "12.6.0",
+    "@pnpm/exe.darwin-x64": "12.6.0",
+    "@pnpm/exe.darwin-arm64": "12.6.0",
+    "@pnpm/exe.linux-x64": "12.6.0",
+    "@pnpm/exe.linux-arm64": "12.6.0",
+    "@pnpm/exe.linux-riscv64": "12.6.0",
+    "@pnpm/exe.linux-ppc64": "12.6.0",
+    "@pnpm/exe.linux-s390x": "12.6.0",
+    "@pnpm/exe.linux-x64-musl": "12.6.0",
+    "@pnpm/exe.linux-arm64-musl": "12.6.0",
+    "@pnpm/exe.freebsd-x64": "12.6.0",
+    "@pnpm/exe.android-arm64": "12.6.0",
+    "@pnpm/exe.android-x64": "12.6.0"
   },
   "scripts": {
     "preinstall": "node install.js",

package/pn

@@ -9,6 +9,21 @@
 # hang the script. Directories come from `${self%/*}` and `readlink` runs through
 # `command -p`, so the caller's `PATH` decides nothing here.
 self=$0
+# MSYS and Cygwin can launch this with a native Windows path, which has no slash
+# for `${self%/*}` to strip. Only a drive letter or a UNC prefix marks one; a
+# backslash anywhere else is an ordinary character in a Unix file name, so the
+# path is left alone. The separators are swapped in the shell rather than through
+# `echo`, which mangles a `\t` or `\b` in a path under dash.
+case $self in
+  [A-Za-z]:\\*|\\\\*)
+    while :; do
+      case $self in
+        *\\*) self=${self%%\\*}/${self#*\\} ;;
+        *) break ;;
+      esac
+    done
+    ;;
+esac
 # `${self%/*}` needs a slash to strip. A bare name came from a `PATH` lookup and
 # stands for a file in the current directory.
 case $self in

package/pnpm

@@ -29,6 +29,21 @@ fi
 # and directories come from `${self%/*}`, which runs nothing at all. The caller's
 # PATH therefore decides only which `node` runs, which is what it is for.
 self=$0
+# MSYS and Cygwin can launch this with a native Windows path, which has no slash
+# for `${self%/*}` to strip. Only a drive letter or a UNC prefix marks one; a
+# backslash anywhere else is an ordinary character in a Unix file name, so the
+# path is left alone. The separators are swapped in the shell rather than through
+# `echo`, which mangles a `\t` or `\b` in a path under dash.
+case $self in
+  [A-Za-z]:\\*|\\\\*)
+    while :; do
+      case $self in
+        *\\*) self=${self%%\\*}/${self#*\\} ;;
+        *) break ;;
+      esac
+    done
+    ;;
+esac
 # `${self%/*}` needs a slash to strip. A bare name came from a PATH lookup and
 # stands for a file in the current directory.
 case $self in

package/pnpx

@@ -9,6 +9,21 @@
 # hang the script. Directories come from `${self%/*}` and `readlink` runs through
 # `command -p`, so the caller's `PATH` decides nothing here.
 self=$0
+# MSYS and Cygwin can launch this with a native Windows path, which has no slash
+# for `${self%/*}` to strip. Only a drive letter or a UNC prefix marks one; a
+# backslash anywhere else is an ordinary character in a Unix file name, so the
+# path is left alone. The separators are swapped in the shell rather than through
+# `echo`, which mangles a `\t` or `\b` in a path under dash.
+case $self in
+  [A-Za-z]:\\*|\\\\*)
+    while :; do
+      case $self in
+        *\\*) self=${self%%\\*}/${self#*\\} ;;
+        *) break ;;
+      esac
+    done
+    ;;
+esac
 # `${self%/*}` needs a slash to strip. A bare name came from a `PATH` lookup and
 # stands for a file in the current directory.
 case $self in

package/pnx

@@ -9,6 +9,21 @@
 # hang the script. Directories come from `${self%/*}` and `readlink` runs through
 # `command -p`, so the caller's `PATH` decides nothing here.
 self=$0
+# MSYS and Cygwin can launch this with a native Windows path, which has no slash
+# for `${self%/*}` to strip. Only a drive letter or a UNC prefix marks one; a
+# backslash anywhere else is an ordinary character in a Unix file name, so the
+# path is left alone. The separators are swapped in the shell rather than through
+# `echo`, which mangles a `\t` or `\b` in a path under dash.
+case $self in
+  [A-Za-z]:\\*|\\\\*)
+    while :; do
+      case $self in
+        *\\*) self=${self%%\\*}/${self#*\\} ;;
+        *) break ;;
+      esac
+    done
+    ;;
+esac
 # `${self%/*}` needs a slash to strip. A bare name came from a `PATH` lookup and
 # stands for a file in the current directory.
 case $self in