@pnpm/global.packages 1101.1.0 → 1101.1.2

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @pnpm/global.packages
 
+## 1101.1.2
+
+### Patch Changes
+
+- Fixed `pnpm add -g`, `pnpm update -g`, and `pnpm remove -g` mutating global bins or install directories after only partially reading an installed package group. If any declared package manifest is missing, malformed, or unreadable, pnpm now fails before activation or removal and leaves the existing global installation intact [pnpm/pnpm#13796](https://github.com/pnpm/pnpm/issues/13796).
+
+- Updated dependencies:
+  - @pnpm/crypto.hash@1100.0.4
+
+## 1101.1.1
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/pkg-manifest.reader@1100.0.19
+
 ## 1101.1.0
 
 ### Minor Changes

package/lib/index.d.ts

@@ -1,3 +1,3 @@
 export { createGlobalCacheKey } from './cacheKey.js';
 export { createInstallDir, getHashLink, resolveInstallDir, } from './globalPackageDir.js';
-export { cleanOrphanedInstallDirs, findGlobalPackage, getGlobalPackageDetails, getInstalledBinNames, type GlobalPackageInfo, type InstalledGlobalPackage, isValidGlobalDependencyAlias, scanGlobalPackages, } from './scanGlobalPackages.js';
+export { cleanOrphanedInstallDirs, findGlobalPackage, getGlobalPackageDetails, getInstalledBinNames, type GlobalPackageBinSnapshot, type GlobalPackageInfo, type InstalledGlobalPackage, isValidGlobalDependencyAlias, scanGlobalPackages, } from './scanGlobalPackages.js';

package/lib/scanGlobalPackages.d.ts

@@ -5,6 +5,10 @@ export interface GlobalPackageInfo {
     installDir: string;
     dependencies: Record<string, string>;
 }
+export interface GlobalPackageBinSnapshot {
+    info: GlobalPackageInfo;
+    binNames: string[];
+}
 export interface InstalledGlobalPackage {
     alias: string;
     version: string;

package/lib/scanGlobalPackages.js

@@ -2,7 +2,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import util from 'node:util';
 import { getBinsFromPackageManifest } from '@pnpm/bins.resolver';
-import { readPackageJsonFromDirRawSync, safeReadPackageJsonFromDir } from '@pnpm/pkg-manifest.reader';
+import { readPackageJsonFromDir, readPackageJsonFromDirRawSync, safeReadPackageJsonFromDir } from '@pnpm/pkg-manifest.reader';
 const RESERVED_ALIASES = new Set(['node_modules', 'favicon.ico']);
 const isUrlFriendly = (segment) => encodeURIComponent(segment) === segment;
 // A dependency alias from a global group's package.json becomes a directory
@@ -145,9 +145,7 @@ export async function getInstalledBinNames(info) {
     const modulesDir = path.join(info.installDir, 'node_modules');
     await Promise.all(aliases.map(async (alias) => {
         const depDir = path.join(modulesDir, alias);
-        const manifest = await safeReadPackageJsonFromDir(depDir);
-        if (!manifest)
-            return;
+        const manifest = await readPackageJsonFromDir(depDir);
         const binsOfPkg = await getBinsFromPackageManifest(manifest, depDir);
         for (const bin of binsOfPkg) {
             bins.add(bin.name);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/global.packages",
-  "version": "1101.1.0",
+  "version": "1101.1.2",
   "description": "Utilities for managing isolated global packages",
   "keywords": [
     "pnpm",
@@ -29,13 +29,13 @@
   ],
   "dependencies": {
     "@pnpm/bins.resolver": "1100.0.16",
-    "@pnpm/crypto.hash": "1100.0.3",
-    "@pnpm/pkg-manifest.reader": "1100.0.18",
+    "@pnpm/crypto.hash": "1100.0.4",
+    "@pnpm/pkg-manifest.reader": "1100.0.19",
     "@pnpm/text.ordinal-comparator": "1100.0.0",
     "@pnpm/types": "1102.1.0"
   },
   "devDependencies": {
-    "@pnpm/global.packages": "1101.1.0"
+    "@pnpm/global.packages": "1101.1.2"
   },
   "engines": {
     "node": ">=22.13"