@pnpm/hooks.pnpmfile 1100.0.26 → 1100.0.28

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @pnpm/pnpmfile
 
+## 1100.0.28
+
+### Patch Changes
+
+- The `importPackage` pnpmfile hook is deprecated. pnpm now prints a warning when a pnpmfile defines it, and the hook will be removed in the next major version. It also opts the installation out of the parallel package importer, making installation slower. If you rely on this hook, comment on [#14101](https://github.com/pnpm/pnpm/issues/14101).
+
+- Updated dependencies:
+  - @pnpm/core-loggers@1100.3.3
+  - @pnpm/error@1100.1.3
+  - @pnpm/hooks.types@1101.0.0
+  - @pnpm/lockfile.types@1100.0.20
+  - @pnpm/store.controller-types@1101.1.2
+  - @pnpm/types@1102.0.0
+
+## 1100.0.27
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/error@1100.1.2
+  - @pnpm/store.controller-types@1101.1.1
+
 ## 1100.0.26
 
 ### Patch Changes

package/lib/requireHooks.d.ts

@@ -16,6 +16,13 @@ export interface CookedHooks {
     customResolvers?: CustomResolver[];
     customFetchers?: CustomFetcher[];
     calculatePnpmfileChecksum?: () => Promise<string>;
+    /**
+     * Whether a `readPackage` hook came from a pnpmfile the checksum does not
+     * cover (the global pnpmfile) — its drift is invisible to
+     * `pnpmfileChecksum` comparisons, so nothing downstream may treat the
+     * checksum as proof the hooks are unchanged.
+     */
+    hasUntrackedReadPackageHook?: boolean;
 }
 export interface RequireHooksResult {
     hooks: CookedHooks;

package/lib/requireHooks.js

@@ -1,6 +1,7 @@
 import { hookLogger } from '@pnpm/core-loggers';
 import { createHashFromMultipleFiles } from '@pnpm/crypto.hash';
-import { PnpmError } from '@pnpm/error';
+import { PnpmError, redactAndSanitize } from '@pnpm/error';
+import { globalWarn } from '@pnpm/logger';
 import { pathAbsolute } from 'path-absolute';
 import { requirePnpmfile } from './requirePnpmfile.js';
 export async function requireHooks(prefix, opts) {
@@ -73,6 +74,7 @@ export async function requireHooks(prefix, opts) {
         filterLog: [],
         updateConfig: [],
     };
+    cookedHooks.hasUntrackedReadPackageHook = entries.some((entry) => entry.hooks?.readPackage != null && !entry.includeInChecksum);
     // calculate combined checksum for all included files
     if (entries.some((entry) => entry.hooks != null)) {
         cookedHooks.calculatePnpmfileChecksum = async () => {
@@ -146,6 +148,8 @@ export async function requireHooks(prefix, opts) {
             }
             importProvider = file;
             cookedHooks.importPackage = fileHooks.importPackage;
+            globalWarn(`The "importPackage" hook (defined in ${redactAndSanitize(file)}) is deprecated and will be removed in the next major version of pnpm. ` +
+                'It keeps working until then, but it opts the installation out of the parallel package importer, making it slower.');
         }
     }
     // Process top-level resolvers and fetchers exports

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/hooks.pnpmfile",
-  "version": "1100.0.26",
+  "version": "1100.0.28",
   "description": "Reading a .pnpmfile.cjs",
   "keywords": [
     "pnpm",
@@ -27,13 +27,13 @@
     "!*.map"
   ],
   "dependencies": {
-    "@pnpm/core-loggers": "1100.3.2",
+    "@pnpm/core-loggers": "1100.3.3",
     "@pnpm/crypto.hash": "1100.0.2",
-    "@pnpm/error": "1100.1.1",
-    "@pnpm/hooks.types": "1100.2.6",
-    "@pnpm/lockfile.types": "1100.0.19",
-    "@pnpm/store.controller-types": "1101.1.0",
-    "@pnpm/types": "1101.9.0",
+    "@pnpm/error": "1100.1.3",
+    "@pnpm/hooks.types": "1101.0.0",
+    "@pnpm/lockfile.types": "1100.0.20",
+    "@pnpm/store.controller-types": "1101.1.2",
+    "@pnpm/types": "1102.0.0",
     "chalk": "^6.0.0",
     "path-absolute": "^2.0.0"
   },
@@ -42,8 +42,8 @@
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/fetching.fetcher-base": "1100.2.7",
-    "@pnpm/hooks.pnpmfile": "1100.0.26",
+    "@pnpm/fetching.fetcher-base": "1100.2.8",
+    "@pnpm/hooks.pnpmfile": "1100.0.28",
     "@pnpm/logger": "1100.0.0",
     "@pnpm/test-fixtures": "1100.0.1"
   },