@pnpm/fetching.git-fetcher 1102.0.2 → 1102.0.4

package/CHANGELOG.md

@@ -0,0 +1,1350 @@
+# @pnpm/git-fetcher
+
+## 1102.0.4
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/exec.prepare-package@1100.0.22
+  - @pnpm/fetching.fetcher-base@1100.2.2
+  - @pnpm/fs.packlist@1100.0.2
+  - @pnpm/resolving.git-resolver@1100.1.9
+
+## 1102.0.3
+
+### Patch Changes
+
+- @pnpm/fetching.fetcher-base@1100.2.1
+- @pnpm/resolving.git-resolver@1100.1.8
+- @pnpm/exec.prepare-package@1100.0.21
+- @pnpm/worker@1100.2.3
+
+## 1102.0.2
+
+### Patch Changes
+
+- Updated dependencies [bae694f]
+- Updated dependencies [852d537]
+  - @pnpm/fetching.fetcher-base@1100.2.0
+  - @pnpm/error@1100.0.1
+  - @pnpm/resolving.git-resolver@1100.1.7
+  - @pnpm/exec.prepare-package@1100.0.20
+  - @pnpm/store.index@1100.2.1
+  - @pnpm/worker@1100.2.2
+
+## 1102.0.1
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.19
+- @pnpm/worker@1100.2.1
+
+## 1102.0.0
+
+### Patch Changes
+
+- a31faa7: Updated dependency ranges. Notably:
+
+  - `@pnpm/logger` peer dependency range moved to `^1100.0.0`.
+  - `msgpackr` 1.11.8 → 2.0.4 (store index files remain byte-compatible in both directions).
+  - `open` ^7.4.2 → ^11.0.0, `memoize` ^10 → ^11, `cli-truncate` ^5 → ^6, `pidtree` ^0.6 → ^1.
+  - `@yarnpkg/core` 4.5.0 → 4.8.0, `@rushstack/worker-pool` 0.7.7 → 0.7.18, `@cyclonedx/cyclonedx-library` 10.0.0 → 10.1.0, `@pnpm/config.nerf-dart` ^1 → ^2, `@pnpm/log.group` 3.0.2 → 4.0.1, `@pnpm/util.lex-comparator` ^3 → ^4.
+
+- Updated dependencies [61810aa]
+- Updated dependencies [a31faa7]
+  - @pnpm/store.index@1100.2.0
+  - @pnpm/worker@1100.2.0
+  - @pnpm/resolving.git-resolver@1100.1.6
+  - @pnpm/exec.prepare-package@1100.0.18
+  - @pnpm/fetching.fetcher-base@1100.1.9
+
+## 1101.0.13
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.17
+- @pnpm/worker@1100.1.11
+- @pnpm/resolving.git-resolver@1100.1.5
+
+## 1101.0.12
+
+### Patch Changes
+
+- bf1b731: Require trusted package identity before package-name `allowBuilds` entries can approve lifecycle scripts for git, git-hosted tarball, direct tarball, and local directory artifacts. To approve one of those artifacts explicitly, use its peer-suffix-free lockfile depPath as the `allowBuilds` key. Lockfile verification now rejects lockfiles where a registry-style dependency path (`name@semver`) is backed by a git, directory, or git-hosted tarball resolution (`ERR_PNPM_RESOLUTION_SHAPE_MISMATCH`), so the dependency path is a reliable artifact identity by the time scripts can run.
+- Updated dependencies [089484a]
+- Updated dependencies [bf1b731]
+  - @pnpm/worker@1100.1.10
+  - @pnpm/exec.prepare-package@1100.0.16
+  - @pnpm/fetching.fetcher-base@1100.1.8
+  - @pnpm/resolving.git-resolver@1100.1.4
+
+## 1101.0.11
+
+### Patch Changes
+
+- Updated dependencies [3b76b8e]
+  - @pnpm/worker@1100.1.9
+  - @pnpm/exec.prepare-package@1100.0.15
+  - @pnpm/fetching.fetcher-base@1100.1.7
+
+## 1101.0.10
+
+### Patch Changes
+
+- 90d1ce6: Reject git resolutions whose `commit` field is not a 40-character hexadecimal SHA before invoking `git`. A malicious lockfile could otherwise smuggle a value such as `--upload-pack=<command>` through `git fetch` / `git checkout`, which on SSH or local-file transports executes the supplied command.
+- Updated dependencies [aa6149d]
+  - @pnpm/worker@1100.1.8
+  - @pnpm/exec.prepare-package@1100.0.14
+  - @pnpm/fetching.fetcher-base@1100.1.6
+
+## 1101.0.9
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.13
+
+## 1101.0.8
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.12
+- @pnpm/fetching.fetcher-base@1100.1.5
+- @pnpm/worker@1100.1.7
+
+## 1101.0.7
+
+### Patch Changes
+
+- @pnpm/fetching.fetcher-base@1100.1.4
+- @pnpm/exec.prepare-package@1100.0.11
+- @pnpm/worker@1100.1.6
+
+## 1101.0.6
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.10
+- @pnpm/worker@1100.1.5
+
+## 1101.0.5
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.9
+
+## 1101.0.4
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.8
+- @pnpm/fetching.fetcher-base@1100.1.3
+- @pnpm/worker@1100.1.4
+
+## 1101.0.3
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+- Updated dependencies [dd8d5d7]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/fs.packlist@1100.0.1
+  - @pnpm/worker@1100.1.3
+  - @pnpm/exec.prepare-package@1100.0.7
+
+## 1101.0.2
+
+### Patch Changes
+
+- @pnpm/fetching.fetcher-base@1100.1.2
+- @pnpm/exec.prepare-package@1100.0.6
+- @pnpm/worker@1100.1.2
+
+## 1101.0.1
+
+### Patch Changes
+
+- 184ce26: Fix the package name in README.md.
+- Updated dependencies [184ce26]
+  - @pnpm/fetching.fetcher-base@1100.1.1
+  - @pnpm/exec.prepare-package@1100.0.5
+  - @pnpm/worker@1100.1.1
+
+## 1101.0.0
+
+### Patch Changes
+
+- Updated dependencies [421317c]
+  - @pnpm/fetching.fetcher-base@1100.1.0
+  - @pnpm/worker@1100.1.0
+  - @pnpm/exec.prepare-package@1100.0.4
+
+## 1100.0.3
+
+### Patch Changes
+
+- @pnpm/fetching.fetcher-base@1100.0.2
+- @pnpm/exec.prepare-package@1100.0.3
+- @pnpm/worker@1100.0.2
+
+## 1100.0.2
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.2
+
+## 1100.0.1
+
+### Patch Changes
+
+- @pnpm/exec.prepare-package@1100.0.1
+- @pnpm/fetching.fetcher-base@1100.0.1
+- @pnpm/worker@1100.0.1
+
+## 1004.0.0
+
+### Major Changes
+
+- 491a84f: This package is now pure ESM.
+- 7d2fd48: Node.js v18, 19, 20, and 21 support discontinued.
+
+### Minor Changes
+
+- 96704a1: Renamed `rawConfig` to `authConfig` on the `Config` interface. This field now only contains auth/registry data from `.npmrc` files. Non-auth settings are no longer written to it.
+
+  Added `nodeDownloadMirrors` setting to configure custom Node.js download mirrors in `pnpm-workspace.yaml`:
+
+  ```yaml
+  nodeDownloadMirrors:
+    release: https://my-mirror.example.com/download/release/
+    nightly: https://my-mirror.example.com/download/nightly/
+  ```
+
+  Replaced `rawConfig: object` with `userAgent?: string` in lifecycle hook options. Removed unused `rawConfig` from fetcher and prepare-package options.
+
+  Removed support for the npm `init-module` setting. Custom init scripts via `.pnpm-init.js` are no longer executed by `pnpm init`.
+
+### Patch Changes
+
+- e3b94c0: `@pnpm/fs.packlist` should be linked from the workspace.
+- c5fbdde: Always resolve git references to full commits and ensure `HEAD` points to the commit after checkout [#10310](https://github.com/pnpm/pnpm/pull/10310).
+- ba065f6: Block git-hosted dependencies from running prepare scripts unless explicitly allowed in onlyBuiltDependencies [#10288](https://github.com/pnpm/pnpm/pull/10288).
+- Updated dependencies [e2e0a32]
+- Updated dependencies [7cec347]
+- Updated dependencies [491a84f]
+- Updated dependencies [50fbeca]
+- Updated dependencies [ba065f6]
+- Updated dependencies [3bf5e21]
+- Updated dependencies [ee9fe58]
+- Updated dependencies [7d2fd48]
+- Updated dependencies [56a59df]
+- Updated dependencies [780af09]
+- Updated dependencies [96704a1]
+- Updated dependencies [4893853]
+- Updated dependencies [b7f0f21]
+- Updated dependencies [831f574]
+- Updated dependencies [98a0410]
+  - @pnpm/worker@1001.0.0
+  - @pnpm/fetching.fetcher-base@1002.0.0
+  - @pnpm/exec.prepare-package@1001.0.0
+  - @pnpm/error@1001.0.0
+  - @pnpm/fs.packlist@1001.0.0
+  - @pnpm/store.index@1000.0.0
+
+## 1003.0.0
+
+### Patch Changes
+
+- Updated dependencies [8993f68]
+  - @pnpm/worker@1000.3.0
+  - @pnpm/prepare-package@1000.0.26
+  - @pnpm/fetcher-base@1001.0.2
+
+## 1002.0.1
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.25
+
+## 1002.0.0
+
+### Patch Changes
+
+- Updated dependencies [06d2160]
+  - @pnpm/worker@1000.2.0
+
+## 1001.0.16
+
+### Patch Changes
+
+- @pnpm/worker@1000.1.14
+- @pnpm/prepare-package@1000.0.24
+
+## 1001.0.15
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.23
+- @pnpm/worker@1000.1.13
+
+## 1001.0.14
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.22
+- @pnpm/fetcher-base@1001.0.1
+- @pnpm/worker@1000.1.12
+
+## 1001.0.13
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.21
+
+## 1001.0.12
+
+### Patch Changes
+
+- Updated dependencies [d1edf73]
+  - @pnpm/fetcher-base@1001.0.0
+  - @pnpm/prepare-package@1000.0.20
+  - @pnpm/worker@1000.1.11
+
+## 1001.0.11
+
+### Patch Changes
+
+- Updated dependencies [1a07b8f]
+  - @pnpm/fetcher-base@1000.1.0
+  - @pnpm/prepare-package@1000.0.19
+  - @pnpm/worker@1000.1.10
+
+## 1001.0.10
+
+### Patch Changes
+
+- Updated dependencies [589ac1f]
+  - @pnpm/worker@1000.1.9
+  - @pnpm/prepare-package@1000.0.18
+
+## 1001.0.9
+
+### Patch Changes
+
+- @pnpm/fetcher-base@1000.0.12
+- @pnpm/prepare-package@1000.0.17
+- @pnpm/worker@1000.1.8
+
+## 1001.0.8
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.16
+- @pnpm/worker@1000.1.7
+
+## 1001.0.7
+
+### Patch Changes
+
+- 09cf46f: Update `@pnpm/logger` in peer dependencies.
+- Updated dependencies [09cf46f]
+  - @pnpm/worker@1000.1.6
+  - @pnpm/prepare-package@1000.0.15
+  - @pnpm/fetcher-base@1000.0.11
+
+## 1001.0.6
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.14
+
+## 1001.0.5
+
+### Patch Changes
+
+- Updated dependencies [8a9f3a4]
+  - @pnpm/logger@1001.0.0
+  - @pnpm/fetcher-base@1000.0.10
+  - @pnpm/prepare-package@1000.0.13
+  - @pnpm/worker@1000.1.5
+
+## 1001.0.4
+
+### Patch Changes
+
+- @pnpm/fetcher-base@1000.0.9
+- @pnpm/worker@1000.1.4
+- @pnpm/prepare-package@1000.0.12
+
+## 1001.0.3
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.11
+- @pnpm/fetcher-base@1000.0.8
+- @pnpm/worker@1000.1.3
+
+## 1001.0.2
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.10
+- @pnpm/fetcher-base@1000.0.7
+- @pnpm/worker@1000.1.2
+
+## 1001.0.1
+
+### Patch Changes
+
+- @pnpm/fetcher-base@1000.0.6
+- @pnpm/prepare-package@1000.0.9
+- @pnpm/worker@1000.1.1
+
+## 1001.0.0
+
+### Patch Changes
+
+- Updated dependencies [2e05789]
+  - @pnpm/worker@1000.1.0
+
+## 1000.0.9
+
+### Patch Changes
+
+- @pnpm/worker@1000.0.8
+
+## 1000.0.8
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.8
+- @pnpm/fetcher-base@1000.0.5
+- @pnpm/worker@1000.0.7
+
+## 1000.0.7
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.7
+- @pnpm/fetcher-base@1000.0.4
+- @pnpm/worker@1000.0.6
+
+## 1000.0.6
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.6
+
+## 1000.0.5
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.5
+- @pnpm/fetcher-base@1000.0.3
+- @pnpm/worker@1000.0.5
+
+## 1000.0.4
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.4
+- @pnpm/worker@1000.0.4
+
+## 1000.0.3
+
+### Patch Changes
+
+- @pnpm/prepare-package@1000.0.3
+- @pnpm/fetcher-base@1000.0.2
+- @pnpm/worker@1000.0.3
+
+## 1000.0.2
+
+### Patch Changes
+
+- Updated dependencies [7272992]
+  - @pnpm/worker@1000.0.2
+  - @pnpm/prepare-package@1000.0.2
+
+## 1000.0.1
+
+### Patch Changes
+
+- @pnpm/fetcher-base@1000.0.1
+- @pnpm/prepare-package@1000.0.1
+- @pnpm/worker@1000.0.1
+
+## 14.0.0
+
+### Patch Changes
+
+- Updated dependencies [099e6af]
+  - @pnpm/worker@2.0.0
+  - @pnpm/fetcher-base@16.0.7
+  - @pnpm/prepare-package@6.0.15
+
+## 13.0.16
+
+### Patch Changes
+
+- Updated dependencies [222d10a]
+  - @pnpm/worker@1.0.13
+  - @pnpm/prepare-package@6.0.14
+
+## 13.0.15
+
+### Patch Changes
+
+- @pnpm/worker@1.0.12
+- @pnpm/prepare-package@6.0.14
+
+## 13.0.14
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.14
+- @pnpm/worker@1.0.11
+
+## 13.0.13
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.13
+- @pnpm/fetcher-base@16.0.7
+- @pnpm/worker@1.0.10
+
+## 13.0.12
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.12
+- @pnpm/fetcher-base@16.0.6
+- @pnpm/worker@1.0.9
+
+## 13.0.11
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.11
+- @pnpm/fetcher-base@16.0.5
+- @pnpm/worker@1.0.8
+
+## 13.0.10
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.10
+
+## 13.0.9
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.9
+- @pnpm/fetcher-base@16.0.4
+- @pnpm/worker@1.0.7
+
+## 13.0.8
+
+### Patch Changes
+
+- @pnpm/worker@1.0.6
+- @pnpm/prepare-package@6.0.8
+
+## 13.0.7
+
+### Patch Changes
+
+- @pnpm/fetcher-base@16.0.3
+- @pnpm/prepare-package@6.0.7
+- @pnpm/worker@1.0.5
+
+## 13.0.6
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.6
+- @pnpm/fetcher-base@16.0.2
+- @pnpm/worker@1.0.4
+
+## 13.0.5
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.5
+
+## 13.0.4
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.4
+- @pnpm/worker@1.0.3
+
+## 13.0.3
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.3
+- @pnpm/fetcher-base@16.0.1
+- @pnpm/worker@1.0.2
+
+## 13.0.2
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.2
+- @pnpm/worker@1.0.1
+
+## 13.0.1
+
+### Patch Changes
+
+- @pnpm/prepare-package@6.0.1
+
+## 13.0.0
+
+### Major Changes
+
+- 43cdd87: Node.js v16 support dropped. Use at least Node.js v18.12.
+
+### Minor Changes
+
+- b13d2dc: It is now possible to install only a subdirectory from a Git repository.
+
+  For example, `pnpm add github:user/repo#path:packages/foo` will add a dependency from the `packages/foo` subdirectory.
+
+  This new parameter may be combined with other supported parameters separated by `&`. For instance, the next command will install the same package from the `dev` branch: `pnpm add github:user/repo#dev&path:packages/bar`.
+
+  Related issue: [#4765](https://github.com/pnpm/pnpm/issues/4765).
+  Related PR: [#7487](https://github.com/pnpm/pnpm/pull/7487).
+
+### Patch Changes
+
+- 36dcaa0: When installing git-hosted dependencies, only pick the files that would be packed with the package [#7638](https://github.com/pnpm/pnpm/pull/7638).
+- Updated dependencies [3ded840]
+- Updated dependencies [43cdd87]
+- Updated dependencies [167ac4d]
+- Updated dependencies [11d9ebd]
+- Updated dependencies [36dcaa0]
+- Updated dependencies [b13d2dc]
+- Updated dependencies [730929e]
+  - @pnpm/worker@1.0.0
+  - @pnpm/fetcher-base@16.0.0
+  - @pnpm/prepare-package@6.0.0
+  - @pnpm/fs.packlist@2.0.0
+
+## 12.0.19
+
+### Patch Changes
+
+- @pnpm/fetcher-base@15.0.7
+- @pnpm/prepare-package@5.0.24
+- @pnpm/worker@0.3.14
+
+## 12.0.18
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.23
+
+## 12.0.17
+
+### Patch Changes
+
+- @pnpm/worker@0.3.13
+
+## 12.0.16
+
+### Patch Changes
+
+- @pnpm/worker@0.3.12
+- @pnpm/prepare-package@5.0.22
+- @pnpm/fetcher-base@15.0.6
+
+## 12.0.15
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.21
+- @pnpm/fetcher-base@15.0.5
+- @pnpm/worker@0.3.11
+
+## 12.0.14
+
+### Patch Changes
+
+- @pnpm/worker@0.3.10
+
+## 12.0.13
+
+### Patch Changes
+
+- Updated dependencies [1e7bd4af3]
+  - @pnpm/worker@0.3.9
+
+## 12.0.12
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.20
+- @pnpm/worker@0.3.8
+
+## 12.0.11
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.19
+
+## 12.0.10
+
+### Patch Changes
+
+- @pnpm/fetcher-base@15.0.4
+- @pnpm/worker@0.3.7
+- @pnpm/prepare-package@5.0.18
+
+## 12.0.9
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.17
+
+## 12.0.8
+
+### Patch Changes
+
+- Updated dependencies [6390033cd]
+  - @pnpm/worker@0.3.6
+  - @pnpm/prepare-package@5.0.16
+  - @pnpm/fetcher-base@15.0.3
+
+## 12.0.7
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.15
+
+## 12.0.6
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.14
+- @pnpm/worker@0.3.5
+
+## 12.0.5
+
+### Patch Changes
+
+- Updated dependencies [08b65ff78]
+  - @pnpm/worker@0.3.4
+  - @pnpm/prepare-package@5.0.13
+
+## 12.0.4
+
+### Patch Changes
+
+- @pnpm/worker@0.3.3
+
+## 12.0.3
+
+### Patch Changes
+
+- @pnpm/worker@0.3.2
+
+## 12.0.2
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.13
+- @pnpm/fetcher-base@15.0.2
+- @pnpm/worker@0.3.1
+
+## 12.0.1
+
+### Patch Changes
+
+- Updated dependencies [17d2ddb05]
+  - @pnpm/prepare-package@5.0.12
+
+## 12.0.0
+
+### Patch Changes
+
+- Updated dependencies [9caa33d53]
+  - @pnpm/worker@0.3.0
+  - @pnpm/fetcher-base@15.0.1
+  - @pnpm/prepare-package@5.0.11
+
+## 11.0.1
+
+### Patch Changes
+
+- @pnpm/worker@0.2.1
+
+## 11.0.0
+
+### Patch Changes
+
+- Updated dependencies [03cdccc6e]
+- Updated dependencies [48dcd108c]
+  - @pnpm/worker@0.2.0
+  - @pnpm/fetcher-base@15.0.1
+  - @pnpm/prepare-package@5.0.10
+
+## 10.0.2
+
+### Patch Changes
+
+- @pnpm/worker@0.1.2
+- @pnpm/prepare-package@5.0.9
+
+## 10.0.1
+
+### Patch Changes
+
+- Updated dependencies [4a1a9431d]
+  - @pnpm/fetcher-base@15.0.1
+  - @pnpm/worker@0.1.1
+  - @pnpm/prepare-package@5.0.9
+
+## 10.0.0
+
+### Major Changes
+
+- 083bbf590: Breaking changes to the API.
+- 70b2830ac: Breaking changes to the API.
+
+### Patch Changes
+
+- Updated dependencies [70b2830ac]
+- Updated dependencies [083bbf590]
+- Updated dependencies [083bbf590]
+  - @pnpm/fetcher-base@15.0.0
+  - @pnpm/worker@0.1.0
+  - @pnpm/prepare-package@5.0.8
+
+## 9.0.7
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.7
+
+## 9.0.6
+
+### Patch Changes
+
+- Updated dependencies [8452bb2d5]
+  - @pnpm/prepare-package@5.0.6
+
+## 9.0.5
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.5
+- @pnpm/fetcher-base@14.0.2
+
+## 9.0.4
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.4
+
+## 9.0.3
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.3
+
+## 9.0.2
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.2
+
+## 9.0.1
+
+### Patch Changes
+
+- @pnpm/prepare-package@5.0.1
+- @pnpm/fetcher-base@14.0.1
+
+## 9.0.0
+
+### Major Changes
+
+- eceaa8b8b: Node.js 14 support dropped.
+
+### Patch Changes
+
+- Updated dependencies [eceaa8b8b]
+  - @pnpm/fetcher-base@14.0.0
+  - @pnpm/prepare-package@5.0.0
+
+## 8.0.2
+
+### Patch Changes
+
+- @pnpm/prepare-package@4.1.2
+
+## 8.0.1
+
+### Patch Changes
+
+- @pnpm/fetcher-base@13.1.6
+- @pnpm/prepare-package@4.1.1
+
+## 8.0.0
+
+### Major Changes
+
+- c7b05cd9a: Added `@pnpm/logger` to the peer dependencies.
+
+### Minor Changes
+
+- c7b05cd9a: When ignoreScripts=true is passed to the fetcher, do not build git-hosted dependencies.
+
+### Patch Changes
+
+- Updated dependencies [c7b05cd9a]
+  - @pnpm/prepare-package@4.1.0
+
+## 7.0.1
+
+### Patch Changes
+
+- ec97a3105: Print more contextual information when a git-hosted package fails to be prepared for installation [#5847](https://github.com/pnpm/pnpm/pull/5847).
+- Updated dependencies [ec97a3105]
+- Updated dependencies [40a481840]
+  - @pnpm/prepare-package@4.0.1
+
+## 7.0.0
+
+### Major Changes
+
+- 339c0a704: A new required option added to the prepare package function: rawConfig. It is needed in order to create a proper environment for the package manager executed during the preparation of a git-hosted dependency.
+
+### Patch Changes
+
+- Updated dependencies [339c0a704]
+- Updated dependencies [339c0a704]
+  - @pnpm/prepare-package@4.0.0
+
+## 6.0.4
+
+### Patch Changes
+
+- @pnpm/fetcher-base@13.1.5
+- @pnpm/prepare-package@3.0.4
+
+## 6.0.3
+
+### Patch Changes
+
+- @pnpm/prepare-package@3.0.3
+
+## 6.0.2
+
+### Patch Changes
+
+- @pnpm/fetcher-base@13.1.4
+- @pnpm/prepare-package@3.0.2
+
+## 6.0.1
+
+### Patch Changes
+
+- @pnpm/fetcher-base@13.1.3
+- @pnpm/prepare-package@3.0.1
+
+## 6.0.0
+
+### Major Changes
+
+- 043d988fc: Breaking change to the API. Defaul export is not used.
+- f884689e0: Require `@pnpm/logger` v5.
+
+### Patch Changes
+
+- Updated dependencies [f884689e0]
+  - @pnpm/prepare-package@3.0.0
+
+## 5.2.4
+
+### Patch Changes
+
+- @pnpm/prepare-package@2.0.11
+
+## 5.2.3
+
+### Patch Changes
+
+- @pnpm/fetcher-base@13.1.2
+- @pnpm/prepare-package@2.0.10
+
+## 5.2.2
+
+### Patch Changes
+
+- @pnpm/fetcher-base@13.1.1
+- @pnpm/prepare-package@2.0.9
+
+## 5.2.1
+
+### Patch Changes
+
+- @pnpm/prepare-package@2.0.8
+
+## 5.2.0
+
+### Minor Changes
+
+- 23984abd1: Add hook for adding custom fetchers.
+
+### Patch Changes
+
+- Updated dependencies [32915f0e4]
+- Updated dependencies [23984abd1]
+  - @pnpm/fetcher-base@13.1.0
+
+## 5.1.7
+
+### Patch Changes
+
+- @pnpm/fetcher-base@13.0.2
+- @pnpm/prepare-package@2.0.7
+
+## 5.1.6
+
+### Patch Changes
+
+- @pnpm/fetcher-base@13.0.1
+- @pnpm/prepare-package@2.0.6
+
+## 5.1.5
+
+### Patch Changes
+
+- Updated dependencies [2a34b21ce]
+- Updated dependencies [47b5e45dd]
+  - @pnpm/fetcher-base@13.0.0
+  - @pnpm/prepare-package@2.0.5
+
+## 5.1.4
+
+### Patch Changes
+
+- Updated dependencies [0abfe1718]
+  - @pnpm/fetcher-base@12.1.0
+  - @pnpm/prepare-package@2.0.4
+
+## 5.1.3
+
+### Patch Changes
+
+- @pnpm/fetcher-base@12.0.3
+- @pnpm/prepare-package@2.0.3
+
+## 5.1.2
+
+### Patch Changes
+
+- Updated dependencies [6756c2b02]
+  - @pnpm/fetcher-base@12.0.2
+
+## 5.1.1
+
+### Patch Changes
+
+- @pnpm/fetcher-base@12.0.1
+- @pnpm/prepare-package@2.0.2
+
+## 5.1.0
+
+### Minor Changes
+
+- c6463b9fd: feat(git-fetcher): shallow clone when fetching git resource
+
+### Patch Changes
+
+- @pnpm/prepare-package@2.0.1
+
+## 5.0.0
+
+### Major Changes
+
+- 542014839: Node.js 12 is not supported.
+
+### Patch Changes
+
+- Updated dependencies [542014839]
+  - @pnpm/fetcher-base@12.0.0
+  - @pnpm/prepare-package@2.0.0
+
+## 4.1.16
+
+### Patch Changes
+
+- @pnpm/prepare-package@1.0.13
+
+## 4.1.15
+
+### Patch Changes
+
+- @pnpm/fetcher-base@11.1.6
+- @pnpm/prepare-package@1.0.12
+
+## 4.1.14
+
+### Patch Changes
+
+- @pnpm/fetcher-base@11.1.5
+- @pnpm/prepare-package@1.0.11
+
+## 4.1.13
+
+### Patch Changes
+
+- @pnpm/fetcher-base@11.1.4
+- @pnpm/prepare-package@1.0.10
+
+## 4.1.12
+
+### Patch Changes
+
+- Updated dependencies [eec4b195d]
+  - @pnpm/prepare-package@1.0.9
+  - @pnpm/fetcher-base@11.1.3
+
+## 4.1.11
+
+### Patch Changes
+
+- @pnpm/fetcher-base@11.1.2
+- @pnpm/prepare-package@1.0.8
+
+## 4.1.10
+
+### Patch Changes
+
+- b13e4b452: Fixes a regression introduced in pnpm v6.23.3 via [#4044](https://github.com/pnpm/pnpm/pull/4044).
+
+  The temporary directory to which the Git-hosted package is downloaded should not be removed prematurely [#4064](https://github.com/pnpm/pnpm/issues/4064).
+
+## 4.1.9
+
+### Patch Changes
+
+- fb1a95a6c: The temporary directory should be removed after preparing the git-hosted package.
+- Updated dependencies [fb1a95a6c]
+  - @pnpm/prepare-package@1.0.7
+
+## 4.1.8
+
+### Patch Changes
+
+- @pnpm/fetcher-base@11.1.1
+- @pnpm/prepare-package@1.0.6
+
+## 4.1.7
+
+### Patch Changes
+
+- Updated dependencies [4ab87844a]
+- Updated dependencies [4ab87844a]
+  - @pnpm/fetcher-base@11.1.0
+  - @pnpm/prepare-package@1.0.5
+
+## 4.1.6
+
+### Patch Changes
+
+- Updated dependencies [4a4d42d8f]
+  - @pnpm/prepare-package@1.0.4
+
+## 4.1.5
+
+### Patch Changes
+
+- 04b7f6086: Use safe-execa instead of execa to prevent binary planting attacks on Windows.
+
+## 4.1.4
+
+### Patch Changes
+
+- @pnpm/fetcher-base@11.0.3
+- @pnpm/prepare-package@1.0.3
+
+## 4.1.3
+
+### Patch Changes
+
+- @pnpm/fetcher-base@11.0.2
+- @pnpm/prepare-package@1.0.2
+
+## 4.1.2
+
+### Patch Changes
+
+- @pnpm/fetcher-base@11.0.1
+- @pnpm/prepare-package@1.0.1
+
+## 4.1.1
+
+### Patch Changes
+
+- 3b147ced9: Do not remove the Git temporary directory because it might still be in the process of linking to the CAFS.
+
+## 4.1.0
+
+### Minor Changes
+
+- e6a2654a2: Packages fetched from Git should have their `devDependencies` installed in case they have a `prepare` script.
+
+### Patch Changes
+
+- Updated dependencies [e6a2654a2]
+- Updated dependencies [e6a2654a2]
+- Updated dependencies [e6a2654a2]
+  - @pnpm/prepare-package@1.0.0
+  - @pnpm/fetcher-base@11.0.0
+
+## 4.0.1
+
+### Patch Changes
+
+- @pnpm/fetcher-base@10.0.1
+
+## 4.0.0
+
+### Major Changes
+
+- 97b986fbc: Node.js 10 support is dropped. At least Node.js 12.17 is required for the package to work.
+
+### Patch Changes
+
+- Updated dependencies [97b986fbc]
+  - @pnpm/fetcher-base@10.0.0
+
+## 3.0.13
+
+### Patch Changes
+
+- @pnpm/fetcher-base@9.0.4
+
+## 3.0.12
+
+### Patch Changes
+
+- 32c9ef4be: execa updated to v5.
+
+## 3.0.11
+
+### Patch Changes
+
+- @pnpm/fetcher-base@9.0.3
+
+## 3.0.10
+
+### Patch Changes
+
+- @pnpm/fetcher-base@9.0.2
+
+## 3.0.9
+
+### Patch Changes
+
+- 212671848: Update tempy to v1.
+  - @pnpm/fetcher-base@9.0.1
+
+## 3.0.8
+
+### Patch Changes
+
+- Updated dependencies [0a6544043]
+  - @pnpm/fetcher-base@9.0.0
+
+## 3.0.7
+
+### Patch Changes
+
+- 634dfd13b: tempy updated to v0.7.0.
+
+## 3.0.6
+
+### Patch Changes
+
+- a2ef8084f: Use the same versions of dependencies across the pnpm monorepo.
+
+## 3.0.5
+
+### Patch Changes
+
+- e8a853b5b: Update tempy to v0.6.0.
+
+## 3.0.4
+
+### Patch Changes
+
+- @pnpm/fetcher-base@8.0.2
+
+## 3.0.3
+
+### Patch Changes
+
+- @pnpm/fetcher-base@8.0.1
+
+## 3.0.2
+
+### Patch Changes
+
+- Updated dependencies [bcd4aa1aa]
+  - @pnpm/fetcher-base@8.0.0
+
+## 3.0.1
+
+### Patch Changes
+
+- 187615f87: Adhere to the new FetchFunction API. cafs should be the first argument of the a fetch function.
+
+## 3.0.0
+
+### Major Changes
+
+- b6a82072e: Using a content-addressable filesystem for storing packages.
+
+### Minor Changes
+
+- 42e6490d1: When a new package is being added to the store, its manifest is streamed in the memory. So instead of reading the manifest from the filesystem, we can parse the stream from the memory.
+
+### Patch Changes
+
+- Updated dependencies [f516d266c]
+- Updated dependencies [b6a82072e]
+- Updated dependencies [42e6490d1]
+  - @pnpm/fetcher-base@7.0.0
+
+## 2.0.11-alpha.4
+
+### Patch Changes
+
+- @pnpm/fetcher-base@6.0.1-alpha.3
+
+## 3.0.0-alpha.2
+
+### Minor Changes
+
+- 42e6490d1: When a new package is being added to the store, its manifest is streamed in the memory. So instead of reading the manifest from the filesystem, we can parse the stream from the memory.
+
+### Patch Changes
+
+- Updated dependencies [42e6490d1]
+  - @pnpm/fetcher-base@7.0.0-alpha.2
+
+## 3.0.0-alpha.0
+
+### Major Changes
+
+- 91c4b5954: Using a content-addressable filesystem for storing packages.
+
+### Patch Changes
+
+- Updated dependencies [91c4b5954]
+  - @pnpm/fetcher-base@7.0.0-alpha.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.git-fetcher",
-  "version": "1102.0.2",
+  "version": "1102.0.4",
   "description": "A fetcher for git-hosted packages",
   "keywords": [
     "pnpm",
@@ -28,28 +28,28 @@
     "!*.map"
   ],
   "dependencies": {
-    "@zkochan/rimraf": "^4.0.0",
-    "execa": "npm:safe-execa@0.3.0",
     "@pnpm/error": "1100.0.1",
-    "@pnpm/exec.prepare-package": "1100.0.20",
-    "@pnpm/fs.packlist": "1100.0.1",
-    "@pnpm/fetching.fetcher-base": "1100.2.0",
-    "@pnpm/resolving.git-resolver": "1100.1.7",
-    "@pnpm/store.index": "1100.2.1"
+    "@pnpm/exec.prepare-package": "1100.0.22",
+    "@pnpm/fetching.fetcher-base": "1100.2.2",
+    "@pnpm/fs.packlist": "1100.0.2",
+    "@pnpm/resolving.git-resolver": "1100.1.9",
+    "@pnpm/store.index": "1100.2.1",
+    "@zkochan/rimraf": "^4.0.0",
+    "execa": "npm:safe-execa@0.3.0"
   },
   "peerDependencies": {
     "@pnpm/logger": "^1100.0.0",
-    "@pnpm/worker": "^1100.2.2"
+    "@pnpm/worker": "^1100.2.4"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/util.lex-comparator": "^4.0.1",
-    "tempy": "3.0.0",
-    "@pnpm/fetching.git-fetcher": "1102.0.2",
+    "@pnpm/fetching.git-fetcher": "1102.0.4",
     "@pnpm/logger": "1100.0.0",
-    "@pnpm/store.cafs": "1100.1.11",
-    "@pnpm/types": "1101.3.2",
-    "@pnpm/store.create-cafs-store": "1100.0.16"
+    "@pnpm/store.cafs": "1100.1.13",
+    "@pnpm/store.create-cafs-store": "1100.0.18",
+    "@pnpm/types": "1101.4.0",
+    "@pnpm/util.lex-comparator": "^4.0.1",
+    "tempy": "3.0.0"
   },
   "engines": {
     "node": ">=22.13"