@pnpm/fetching.tarball-fetcher 1102.1.3 → 1102.1.4

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @pnpm/tarball-fetcher
 
+## 1102.1.4
+
+### Patch Changes
+
+- `pnpm install` now fails at once when a registry or tarball server presents a TLS certificate that fails verification, such as a self-signed or expired one. The error names the certificate problem. Such requests were retried for more than a minute [#9134](https://github.com/pnpm/pnpm/issues/9134).
+
+- `pnpm import` and fresh resolutions now record `integrity` for git-hosted tarballs, such as `codeload.github.com` URLs, even when the tarball is already in the store [#13338](https://github.com/pnpm/pnpm/issues/13338).
+
+- When the registry stops sending data for longer than `fetchTimeout`, pnpm now reports that the metadata or tarball request timed out. Previously the error did not mention the timeout [#3646](https://github.com/pnpm/pnpm/issues/3646).
+
+- Updated dependencies:
+  - @pnpm/core-loggers@1101.0.1
+  - @pnpm/error@1100.2.0
+  - @pnpm/exec.prepare-package@1100.0.38
+  - @pnpm/fetching.fetcher-base@1100.2.11
+  - @pnpm/fs.graceful-fs@1100.2.3
+  - @pnpm/fs.packlist@1100.0.5
+  - @pnpm/network.fetch@1100.1.18
+  - @pnpm/store.index@1100.3.2
+  - @pnpm/types@1102.1.1
+
 ## 1102.1.3
 
 ### Patch Changes

package/lib/gitHostedTarballFetcher.js

@@ -38,7 +38,9 @@ export function createGitHostedTarballFetcher(fetchRemoteTarball, fetcherOpts) {
             throw err;
         }
     };
-    return fetch;
+    return Object.assign(fetch, {
+        resolutionNeedsFetch: fetchRemoteTarball.resolutionNeedsFetch?.bind(fetchRemoteTarball),
+    });
 }
 async function prepareGitHostedPkg(filesMap, cafs, rawFilesIndexFile, filesIndexFile, opts, fetcherOpts, resolution) {
     const tempLocation = await cafs.tempDir();

package/lib/remoteTarballFetcher.js

@@ -1,8 +1,9 @@
 import { isIP } from 'node:net';
 import util from 'node:util';
 import { requestRetryLogger } from '@pnpm/core-loggers';
-import { FetchError, redactUrlForDisplay } from '@pnpm/error';
+import { FetchError, FetchTimeoutError, isFetchTimeoutError, redactUrlForDisplay } from '@pnpm/error';
 import { globalWarn } from '@pnpm/logger';
+import { isNonRetryableError } from '@pnpm/network.fetch';
 import { addFilesFromTarball } from '@pnpm/worker';
 import * as retry from '@zkochan/retry';
 import throttle from 'lodash.throttle';
@@ -31,7 +32,8 @@ export function createDownloader(fetchFromRegistry, gotOpts) {
                         error.response?.status === 401 ||
                         error.response?.status === 403 ||
                         error.response?.status === 404 ||
-                        error.code === 'ERR_PNPM_PREPARE_PKG_FAILURE') {
+                        error.code === 'ERR_PNPM_PREPARE_PKG_FAILURE' ||
+                        isNonRetryableError(error)) {
                         reject(error);
                         return;
                     }
@@ -152,7 +154,9 @@ export function createDownloader(fetchFromRegistry, gotOpts) {
                 }
             }
             catch (err) {
-                const error = util.types.isNativeError(err) ? err : new Error(String(err), { cause: err });
+                const error = isFetchTimeoutError(err)
+                    ? new FetchTimeoutError('FETCH_TIMEOUT', url, gotOpts.timeout, { cause: err })
+                    : util.types.isNativeError(err) ? err : new Error(String(err), { cause: err });
                 Object.assign(error, {
                     attempts: currentAttempt,
                     resource: url,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.tarball-fetcher",
-  "version": "1102.1.3",
+  "version": "1102.1.4",
   "description": "Fetcher for packages hosted as tarballs",
   "keywords": [
     "pnpm",
@@ -29,33 +29,33 @@
     "!*.map"
   ],
   "dependencies": {
-    "@pnpm/core-loggers": "1101.0.0",
-    "@pnpm/error": "1100.1.4",
-    "@pnpm/exec.prepare-package": "1100.0.37",
-    "@pnpm/fetching.fetcher-base": "1100.2.10",
+    "@pnpm/core-loggers": "1101.0.1",
+    "@pnpm/error": "1100.2.0",
+    "@pnpm/exec.prepare-package": "1100.0.38",
+    "@pnpm/fetching.fetcher-base": "1100.2.11",
     "@pnpm/fetching.types": "1100.0.3",
-    "@pnpm/fs.graceful-fs": "1100.2.2",
-    "@pnpm/fs.packlist": "1100.0.4",
-    "@pnpm/store.index": "1100.3.1",
-    "@pnpm/types": "1102.1.0",
+    "@pnpm/fs.graceful-fs": "1100.2.3",
+    "@pnpm/fs.packlist": "1100.0.5",
+    "@pnpm/network.fetch": "1100.1.18",
+    "@pnpm/store.index": "1100.3.2",
+    "@pnpm/types": "1102.1.1",
     "@zkochan/retry": "^0.2.0",
     "lodash.throttle": "4.1.1",
     "ramda": "npm:@pnpm/ramda@0.28.1"
   },
   "peerDependencies": {
     "@pnpm/logger": "^1100.0.0",
-    "@pnpm/worker": "^1100.4.3"
+    "@pnpm/worker": "^1100.4.4"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/fetching.tarball-fetcher": "1102.1.3",
+    "@pnpm/fetching.tarball-fetcher": "1102.1.4",
     "@pnpm/logger": "1100.0.0",
-    "@pnpm/network.fetch": "1100.1.17",
     "@pnpm/store.cafs-types": "1100.1.0",
-    "@pnpm/store.create-cafs-store": "1100.0.30",
+    "@pnpm/store.create-cafs-store": "1100.0.31",
     "@pnpm/test-fixtures": "1100.0.1",
     "@pnpm/text.ordinal-comparator": "1100.0.0",
-    "@pnpm/types": "1102.1.0",
+    "@pnpm/types": "1102.1.1",
     "@types/lodash.throttle": "4.1.9",
     "@types/ramda": "0.32.0",
     "@types/retry": "^0.12.5",