@pnpm/hooks.read-package-hook 1100.0.8 → 1100.1.0

package/CHANGELOG.md

@@ -0,0 +1,592 @@
+# @pnpm/hooks.read-package-hook
+
+## 1100.1.0
+
+### Minor Changes
+
+- Added a new override selector form with an empty range — `"pkg@": "<version>"` — called a convergence override. It rewrites a dependency edge only when its exact version satisfies the edge's declared range, so compatible consumers converge on one version while incompatible consumers keep their own resolution — now and for any dependent added in the future [#12794](https://github.com/pnpm/pnpm/issues/12794).
+
+  ```yaml
+  overrides:
+    "form-data@": 4.0.6
+  ```
+
+  The value must be an exact version. When a full resolution detects that every declared range also admits a newer version, pnpm warns that the override is stale and names the version to converge on. Previously an empty range in an override selector was undocumented and behaved like a bare (unscoped) override.
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.parse-overrides@1100.1.0
+  - @pnpm/types@1101.4.0
+
+## 1100.0.9
+
+### Patch Changes
+
+- Updated dependencies [852d537]
+  - @pnpm/error@1100.0.1
+  - @pnpm/config.parse-overrides@1100.0.2
+
+## 1100.0.8
+
+### Patch Changes
+
+- a31faa7: Updated dependency ranges. Notably:
+
+  - `@pnpm/logger` peer dependency range moved to `^1100.0.0`.
+  - `msgpackr` 1.11.8 → 2.0.4 (store index files remain byte-compatible in both directions).
+  - `open` ^7.4.2 → ^11.0.0, `memoize` ^10 → ^11, `cli-truncate` ^5 → ^6, `pidtree` ^0.6 → ^1.
+  - `@yarnpkg/core` 4.5.0 → 4.8.0, `@rushstack/worker-pool` 0.7.7 → 0.7.18, `@cyclonedx/cyclonedx-library` 10.0.0 → 10.1.0, `@pnpm/config.nerf-dart` ^1 → ^2, `@pnpm/log.group` 3.0.2 → 4.0.1, `@pnpm/util.lex-comparator` ^3 → ^4.
+
+- Updated dependencies [681b593]
+- Updated dependencies [a31faa7]
+  - @pnpm/types@1101.3.2
+  - @pnpm/deps.peer-range@1100.0.2
+
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [bf1b731]
+  - @pnpm/types@1101.3.1
+
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies [a017bf3]
+  - @pnpm/types@1101.3.0
+
+## 1100.0.5
+
+### Patch Changes
+
+- Updated dependencies [35d2355]
+  - @pnpm/types@1101.2.0
+
+## 1100.0.4
+
+### Patch Changes
+
+- Updated dependencies [64afc92]
+  - @pnpm/types@1101.1.1
+
+## 1100.0.3
+
+### Patch Changes
+
+- Updated dependencies [b61e268]
+  - @pnpm/types@1101.1.0
+
+## 1100.0.2
+
+### Patch Changes
+
+- Updated dependencies [184ce26]
+  - @pnpm/resolving.parse-wanted-dependency@1100.0.1
+  - @pnpm/config.parse-overrides@1100.0.1
+  - @pnpm/deps.peer-range@1100.0.1
+  - @pnpm/config.matcher@1100.0.1
+
+## 1100.0.1
+
+### Patch Changes
+
+- Updated dependencies [ff28085]
+  - @pnpm/types@1101.0.0
+
+## 1001.0.0
+
+### Major Changes
+
+- 491a84f: This package is now pure ESM.
+- 7d2fd48: Node.js v18, 19, 20, and 21 support discontinued.
+
+### Patch Changes
+
+- Updated dependencies [76718b3]
+- Updated dependencies [a8f016c]
+- Updated dependencies [cc1b8e3]
+- Updated dependencies [491a84f]
+- Updated dependencies [7d2fd48]
+- Updated dependencies [efb48dc]
+- Updated dependencies [cb367b9]
+- Updated dependencies [7b1c189]
+- Updated dependencies [8ffb1a7]
+- Updated dependencies [05fb1ae]
+- Updated dependencies [71de2b3]
+- Updated dependencies [10bc391]
+- Updated dependencies [831f574]
+- Updated dependencies [2df8b71]
+- Updated dependencies [15549a9]
+- Updated dependencies [cc7c0d2]
+- Updated dependencies [efb48dc]
+  - @pnpm/types@1001.0.0
+  - @pnpm/resolving.parse-wanted-dependency@1002.0.0
+  - @pnpm/config.parse-overrides@1002.0.0
+  - @pnpm/deps.peer-range@1001.0.0
+  - @pnpm/config.matcher@1001.0.0
+  - @pnpm/error@1001.0.0
+
+## 1000.0.15
+
+### Patch Changes
+
+- Updated dependencies [7c1382f]
+- Updated dependencies [dee39ec]
+- Updated dependencies [7c1382f]
+  - @pnpm/types@1000.9.0
+  - @pnpm/matcher@1000.1.0
+
+## 1000.0.14
+
+### Patch Changes
+
+- @pnpm/error@1000.0.5
+- @pnpm/parse-overrides@1001.0.3
+
+## 1000.0.13
+
+### Patch Changes
+
+- Updated dependencies [e792927]
+  - @pnpm/types@1000.8.0
+
+## 1000.0.12
+
+### Patch Changes
+
+- @pnpm/error@1000.0.4
+- @pnpm/parse-overrides@1001.0.2
+
+## 1000.0.11
+
+### Patch Changes
+
+- Updated dependencies [1a07b8f]
+  - @pnpm/types@1000.7.0
+  - @pnpm/error@1000.0.3
+  - @pnpm/parse-overrides@1001.0.1
+
+## 1000.0.10
+
+### Patch Changes
+
+- Updated dependencies [5ec7255]
+  - @pnpm/types@1000.6.0
+
+## 1000.0.9
+
+### Patch Changes
+
+- Updated dependencies [8a9f3a4]
+- Updated dependencies [5b73df1]
+  - @pnpm/parse-wanted-dependency@1001.0.0
+  - @pnpm/parse-overrides@1001.0.0
+  - @pnpm/types@1000.5.0
+
+## 1000.0.8
+
+### Patch Changes
+
+- Updated dependencies [750ae7d]
+  - @pnpm/types@1000.4.0
+
+## 1000.0.7
+
+### Patch Changes
+
+- Updated dependencies [5f7be64]
+- Updated dependencies [5f7be64]
+  - @pnpm/types@1000.3.0
+
+## 1000.0.6
+
+### Patch Changes
+
+- Updated dependencies [a5e4965]
+  - @pnpm/types@1000.2.1
+
+## 1000.0.5
+
+### Patch Changes
+
+- Updated dependencies [8fcc221]
+  - @pnpm/types@1000.2.0
+
+## 1000.0.4
+
+### Patch Changes
+
+- e8c2b17: Prevent `overrides` from adding invalid version ranges to `peerDependencies` by keeping the `peerDependencies` and overriding them with prod `dependencies` [#8978](https://github.com/pnpm/pnpm/issues/8978).
+- Updated dependencies [e8c2b17]
+  - @pnpm/semver.peer-range@1000.0.0
+
+## 1000.0.3
+
+### Patch Changes
+
+- Updated dependencies [b562deb]
+  - @pnpm/types@1000.1.1
+  - @pnpm/error@1000.0.2
+  - @pnpm/parse-overrides@1000.0.2
+
+## 1000.0.2
+
+### Patch Changes
+
+- Updated dependencies [9591a18]
+  - @pnpm/types@1000.1.0
+
+## 1000.0.1
+
+### Patch Changes
+
+- @pnpm/error@1000.0.1
+- @pnpm/parse-overrides@1000.0.1
+
+## 6.0.0
+
+### Major Changes
+
+- 7fb4371: Update the compatibility database (`@yarnpkg/extensions` to v2.0.3). This might change your lockfile.
+
+### Patch Changes
+
+- @pnpm/error@6.0.3
+- @pnpm/parse-overrides@5.1.2
+
+## 5.1.0
+
+### Minor Changes
+
+- b7fb704: Added the ability for `overrides` to remove dependencies by specifying `"-"` as the field value [#8572](https://github.com/pnpm/pnpm/issues/8572). For example, to remove `lodash` from the dependencies, use this configuration in `package.json`:
+
+  ```json
+  {
+    "pnpm": {
+      "overrides": {
+        "lodash": "-"
+      }
+    }
+  }
+  ```
+
+### Patch Changes
+
+- @pnpm/error@6.0.2
+- @pnpm/parse-overrides@5.1.1
+
+## 5.0.3
+
+### Patch Changes
+
+- Updated dependencies [d500d9f]
+  - @pnpm/types@12.2.0
+
+## 5.0.2
+
+### Patch Changes
+
+- Updated dependencies [7ee59a1]
+  - @pnpm/types@12.1.0
+
+## 5.0.1
+
+### Patch Changes
+
+- Updated dependencies [cb006df]
+  - @pnpm/types@12.0.0
+
+## 5.0.0
+
+### Major Changes
+
+- 0f0e441: Overrides now support catalogs [#8303](https://github.com/pnpm/pnpm/issues/8303).
+
+### Patch Changes
+
+- Updated dependencies [0f0e441]
+- Updated dependencies [0ef168b]
+  - @pnpm/parse-overrides@5.1.0
+  - @pnpm/types@11.1.0
+
+## 4.0.5
+
+### Patch Changes
+
+- Updated dependencies [dd00eeb]
+- Updated dependencies
+  - @pnpm/types@11.0.0
+
+## 4.0.4
+
+### Patch Changes
+
+- Updated dependencies [13e55b2]
+  - @pnpm/types@10.1.1
+
+## 4.0.3
+
+### Patch Changes
+
+- Updated dependencies [45f4262]
+  - @pnpm/types@10.1.0
+
+## 4.0.2
+
+### Patch Changes
+
+- b1d7f8c: Overrides with `link:` now preserves absolute path.
+- b1d7f8c: Fix incorrect path when resolving relative `file:` overrides for workspace package.
+- Updated dependencies [a7aef51]
+  - @pnpm/error@6.0.1
+  - @pnpm/parse-overrides@5.0.1
+
+## 4.0.1
+
+### Patch Changes
+
+- 04310be: Write overrides with `file:` scheme to lockfile as-is [#7858](https://github.com/pnpm/pnpm/issues/7858).
+
+## 4.0.0
+
+### Major Changes
+
+- aa33269: Peer dependency rules should only affect reporting, not data in the lockfile.
+- 43cdd87: Node.js v16 support dropped. Use at least Node.js v18.12.
+
+### Minor Changes
+
+- 730929e: Add a field named `ignoredOptionalDependencies`. This is an array of strings. If an optional dependency has its name included in this array, it will be skipped.
+
+### Patch Changes
+
+- 0963390: Link overrides should be able to use absolute path [#7749](https://github.com/pnpm/pnpm/pull/7749).
+- Updated dependencies [7733f3a]
+- Updated dependencies [3ded840]
+- Updated dependencies [43cdd87]
+- Updated dependencies [730929e]
+  - @pnpm/types@10.0.0
+  - @pnpm/error@6.0.0
+  - @pnpm/parse-wanted-dependency@6.0.0
+  - @pnpm/parse-overrides@5.0.0
+  - @pnpm/matcher@6.0.0
+
+## 3.0.10
+
+### Patch Changes
+
+- Updated dependencies [4d34684f1]
+  - @pnpm/types@9.4.2
+
+## 3.0.9
+
+### Patch Changes
+
+- Updated dependencies
+  - @pnpm/types@9.4.1
+
+## 3.0.8
+
+### Patch Changes
+
+- Updated dependencies [43ce9e4a6]
+  - @pnpm/types@9.4.0
+
+## 3.0.7
+
+### Patch Changes
+
+- Updated dependencies [d774a3196]
+  - @pnpm/types@9.3.0
+
+## 3.0.6
+
+### Patch Changes
+
+- 64bf3c860: Override peerDependencies in `pnpm.overrides` [#6759](https://github.com/pnpm/pnpm/issues/6759).
+
+## 3.0.5
+
+### Patch Changes
+
+- ec50dc98c: Compare overriding ranges with intersection instead of subset to fix override range bug [#6878](https://github.com/pnpm/pnpm/issues/6878).
+
+## 3.0.4
+
+### Patch Changes
+
+- Updated dependencies [aa2ae8fe2]
+  - @pnpm/types@9.2.0
+
+## 3.0.3
+
+### Patch Changes
+
+- @pnpm/error@5.0.2
+- @pnpm/parse-overrides@4.0.2
+
+## 3.0.2
+
+### Patch Changes
+
+- Updated dependencies [a9e0b7cbf]
+  - @pnpm/types@9.1.0
+  - @pnpm/error@5.0.1
+  - @pnpm/parse-overrides@4.0.1
+
+## 3.0.1
+
+### Patch Changes
+
+- c0760128d: bump semver to 7.4.0
+
+## 3.0.0
+
+### Major Changes
+
+- eceaa8b8b: Node.js 14 support dropped.
+
+### Patch Changes
+
+- df107f2ef: Should use most specific override rule when multiple rules match the same target [#6210](https://github.com/pnpm/pnpm/issues/6210).
+- 0a8b48f04: Update the compatibility DB.
+- Updated dependencies [eceaa8b8b]
+  - @pnpm/parse-wanted-dependency@5.0.0
+  - @pnpm/parse-overrides@4.0.0
+  - @pnpm/matcher@5.0.0
+  - @pnpm/error@5.0.0
+  - @pnpm/types@9.0.0
+
+## 2.1.1
+
+### Patch Changes
+
+- d583fbb2a: Fixed issue where allowedVersions wouldn't apply correctly if only parent>child selectors were used
+
+## 2.1.0
+
+### Minor Changes
+
+- f39d608ac: Extends the `pnpm.peerDependencyRules.allowedVersions` `package.json` option to support the `parent>child` selector syntax. This syntax allows for extending specific `peerDependencies` [#6108](https://github.com/pnpm/pnpm/pull/6108).
+
+## 2.0.12
+
+### Patch Changes
+
+- 308eb2c9b: Use Map rather than Object in `createPackageExtender` to prevent read the prototype property to native function
+
+## 2.0.11
+
+### Patch Changes
+
+- Updated dependencies [2ae1c449d]
+  - @pnpm/parse-wanted-dependency@4.1.0
+  - @pnpm/parse-overrides@3.0.3
+
+## 2.0.10
+
+### Patch Changes
+
+- @pnpm/parse-overrides@3.0.2
+
+## 2.0.9
+
+### Patch Changes
+
+- Updated dependencies [b77651d14]
+  - @pnpm/types@8.10.0
+
+## 2.0.8
+
+### Patch Changes
+
+- b11a8c363: It should be possible to use overrides with absolute file paths [#5754](https://github.com/pnpm/pnpm/issues/5754).
+
+## 2.0.7
+
+### Patch Changes
+
+- 924eca293: It should be possible to override a dependency with a local package using relative path from the workspace root directory [#5493](https://github.com/pnpm/pnpm/issues/5493).
+- Updated dependencies [a9d59d8bc]
+  - @pnpm/parse-wanted-dependency@4.0.1
+  - @pnpm/parse-overrides@3.0.1
+
+## 2.0.6
+
+### Patch Changes
+
+- Updated dependencies [969f8a002]
+  - @pnpm/matcher@4.0.1
+
+## 2.0.5
+
+### Patch Changes
+
+- Updated dependencies [702e847c1]
+  - @pnpm/types@8.9.0
+
+## 2.0.4
+
+### Patch Changes
+
+- 0da2f0412: Update dependencies.
+
+## 2.0.3
+
+### Patch Changes
+
+- da22f0c1f: Version overrider should have higher priority then custom read package hook from `.pnpmfile.cjs`.
+
+## 2.0.2
+
+### Patch Changes
+
+- 0fe927215: The custom hooks should be executed after the peer dependency patcher hook.
+
+## 2.0.1
+
+### Patch Changes
+
+- Updated dependencies [844e82f3a]
+  - @pnpm/types@8.8.0
+
+## 2.0.0
+
+### Major Changes
+
+- f884689e0: Require `@pnpm/logger` v5.
+
+### Patch Changes
+
+- Updated dependencies [f884689e0]
+  - @pnpm/matcher@4.0.0
+  - @pnpm/parse-overrides@3.0.0
+  - @pnpm/parse-wanted-dependency@4.0.0
+
+## 1.0.2
+
+### Patch Changes
+
+- f4813c487: Update @yarnpkg/extensions.
+- 8c3a0b236: The readPackageHooks should always get the project directory as the second argument.
+
+## 1.0.1
+
+### Patch Changes
+
+- @pnpm/parse-overrides@2.0.4
+
+## 1.0.0
+
+### Major Changes
+
+- 51566e34b: First release.
+
+### Patch Changes
+
+- Updated dependencies [abb41a626]
+- Updated dependencies [d665f3ff7]
+  - @pnpm/matcher@3.2.0
+  - @pnpm/types@8.7.0

package/lib/createReadPackageHook.d.ts

@@ -1,13 +1,14 @@
 import type { PackageExtension, ReadPackageHook } from '@pnpm/types';
-import { type VersionOverrideWithoutRawSelector } from './createVersionsOverrider.js';
+import { type CreateVersionsOverriderOptions, type VersionOverrideWithoutRawSelector } from './createVersionsOverrider.js';
 export declare function getEffectivePackageExtensions({ ignoreCompatibilityDb, packageExtensions, }: {
     ignoreCompatibilityDb?: boolean;
     packageExtensions?: Record<string, PackageExtension>;
 }): Record<string, PackageExtension> | undefined;
-export declare function createReadPackageHook({ ignoreCompatibilityDb, lockfileDir, overrides, ignoredOptionalDependencies, packageExtensions, readPackageHook, }: {
+export declare function createReadPackageHook({ ignoreCompatibilityDb, lockfileDir, overrides, convergeDeclaredRanges, ignoredOptionalDependencies, packageExtensions, readPackageHook, }: {
     ignoreCompatibilityDb?: boolean;
     lockfileDir: string;
     overrides?: VersionOverrideWithoutRawSelector[];
+    convergeDeclaredRanges?: CreateVersionsOverriderOptions['convergeDeclaredRanges'];
     ignoredOptionalDependencies?: string[];
     packageExtensions?: Record<string, PackageExtension>;
     readPackageHook?: ReadPackageHook[] | ReadPackageHook;

package/lib/createReadPackageHook.js

@@ -19,7 +19,7 @@ export function getEffectivePackageExtensions({ ignoreCompatibilityDb, packageEx
     }
     return isEmpty(effectivePackageExtensions) ? undefined : effectivePackageExtensions;
 }
-export function createReadPackageHook({ ignoreCompatibilityDb, lockfileDir, overrides, ignoredOptionalDependencies, packageExtensions, readPackageHook, }) {
+export function createReadPackageHook({ ignoreCompatibilityDb, lockfileDir, overrides, convergeDeclaredRanges, ignoredOptionalDependencies, packageExtensions, readPackageHook, }) {
     const hooks = [];
     const effectivePackageExtensions = getEffectivePackageExtensions({
         ignoreCompatibilityDb,
@@ -35,7 +35,7 @@ export function createReadPackageHook({ ignoreCompatibilityDb, lockfileDir, over
         hooks.push(readPackageHook);
     }
     if (!isEmpty(overrides ?? {})) {
-        hooks.push(createVersionsOverrider(overrides, lockfileDir));
+        hooks.push(createVersionsOverrider(overrides, lockfileDir, { convergeDeclaredRanges }));
     }
     if (ignoredOptionalDependencies && !isEmpty(ignoredOptionalDependencies)) {
         hooks.push(createOptionalDependenciesRemover(ignoredOptionalDependencies));

package/lib/createVersionsOverrider.d.ts

@@ -1,4 +1,14 @@
 import type { VersionOverride as VersionOverrideBase } from '@pnpm/config.parse-overrides';
 import type { ReadPackageHook } from '@pnpm/types';
 export type VersionOverrideWithoutRawSelector = Omit<VersionOverrideBase, 'selector'>;
-export declare function createVersionsOverrider(overrides: VersionOverrideWithoutRawSelector[], rootDir: string): ReadPackageHook;
+export interface CreateVersionsOverriderOptions {
+    /**
+     * Populated with every declared semver range seen for packages that have a
+     * convergence override, whether or not the override's version satisfied it.
+     * Feeds the staleness check for convergence overrides after a full
+     * resolution. Edges claimed by an explicit override are not recorded — the
+     * convergence override never governs them.
+     */
+    convergeDeclaredRanges?: Map<string, Set<string>>;
+}
+export declare function createVersionsOverrider(overrides: VersionOverrideWithoutRawSelector[], rootDir: string, opts?: CreateVersionsOverriderOptions): ReadPackageHook;

package/lib/createVersionsOverrider.js

@@ -4,17 +4,22 @@ import normalizePath from 'normalize-path';
 import { partition } from 'ramda';
 import semver from 'semver';
 import { isIntersectingRange } from './isIntersectingRange.js';
-export function createVersionsOverrider(overrides, rootDir) {
-    const [versionOverrides, genericVersionOverrides] = partition(({ parentPkg }) => parentPkg != null, overrides.map((override) => ({
+export function createVersionsOverrider(overrides, rootDir, opts) {
+    const [convergeOverrides, explicitOverrides] = partition(({ converge }) => converge === true, overrides);
+    const [versionOverrides, genericVersionOverrides] = partition(({ parentPkg }) => parentPkg != null, explicitOverrides.map((override) => ({
         ...override,
         localTarget: createLocalTarget(override, rootDir),
     })));
+    const convergeVersions = new Map(convergeOverrides.map((override) => [override.targetPkg.name, override.newBareSpecifier]));
     return ((manifest, dir) => {
         const versionOverridesWithParent = versionOverrides.filter(({ parentPkg }) => {
             return (parentPkg.name === manifest.name &&
                 (!parentPkg.bareSpecifier || semver.satisfies(manifest.version, parentPkg.bareSpecifier)));
         });
-        overrideDepsOfPkg({ manifest, dir }, versionOverridesWithParent, genericVersionOverrides);
+        overrideDepsOfPkg({ manifest, dir }, versionOverridesWithParent, genericVersionOverrides, {
+            convergeVersions,
+            convergeDeclaredRanges: opts?.convergeDeclaredRanges,
+        });
         return manifest;
     });
 }
@@ -34,9 +39,9 @@ function createLocalTarget(override, rootDir) {
     const absolutePath = specifiedViaRelativePath ? path.join(rootDir, pkgPath) : pkgPath;
     return { absolutePath, specifiedViaRelativePath, protocol };
 }
-function overrideDepsOfPkg({ manifest, dir }, versionOverrides, genericVersionOverrides) {
+function overrideDepsOfPkg({ manifest, dir }, versionOverrides, genericVersionOverrides, convergeOpts) {
     const { dependencies, optionalDependencies, devDependencies, peerDependencies } = manifest;
-    const _overrideDeps = overrideDeps.bind(null, { versionOverrides, genericVersionOverrides, dir });
+    const _overrideDeps = overrideDeps.bind(null, { versionOverrides, genericVersionOverrides, dir, convergeOpts });
     for (const deps of [dependencies, optionalDependencies, devDependencies]) {
         if (deps) {
             _overrideDeps(deps, undefined);
@@ -48,12 +53,14 @@ function overrideDepsOfPkg({ manifest, dir }, versionOverrides, genericVersionOv
         _overrideDeps(manifest.dependencies, peerDependencies);
     }
 }
-function overrideDeps({ versionOverrides, genericVersionOverrides, dir }, deps, peerDeps) {
+function overrideDeps({ versionOverrides, genericVersionOverrides, dir, convergeOpts }, deps, peerDeps) {
     for (const [name, bareSpecifier] of Object.entries(peerDeps ?? deps)) {
         const versionOverride = pickMostSpecificVersionOverride(versionOverrides.filter(({ targetPkg }) => targetPkg.name === name && isIntersectingRange(targetPkg.bareSpecifier, bareSpecifier))) ??
             pickMostSpecificVersionOverride(genericVersionOverrides.filter(({ targetPkg }) => targetPkg.name === name && isIntersectingRange(targetPkg.bareSpecifier, bareSpecifier)));
-        if (!versionOverride)
+        if (!versionOverride) {
+            convergeDep(convergeOpts, { deps, peerDeps }, name, bareSpecifier);
             continue;
+        }
         if (versionOverride.newBareSpecifier === '-') {
             if (peerDeps) {
                 delete peerDeps[versionOverride.targetPkg.name];
@@ -74,6 +81,34 @@ function overrideDeps({ versionOverrides, genericVersionOverrides, dir }, deps,
         }
     }
 }
+/**
+ * A convergence override (`"pkg@": "<version>"`) rewrites a dependency edge
+ * only when its version satisfies the edge's declared range, so incompatible
+ * consumers keep their own resolution. Only plain semver ranges participate:
+ * `workspace:`, `catalog:`, `npm:`, git/URL, and dist-tag specifiers have no
+ * defined "satisfies" relation and are left untouched.
+ */
+function convergeDep({ convergeVersions, convergeDeclaredRanges }, { deps, peerDeps }, name, bareSpecifier) {
+    const convergeVersion = convergeVersions.get(name);
+    if (convergeVersion == null || semver.validRange(bareSpecifier, true) == null)
+        return;
+    if (convergeDeclaredRanges != null) {
+        let ranges = convergeDeclaredRanges.get(name);
+        if (ranges == null) {
+            ranges = new Set();
+            convergeDeclaredRanges.set(name, ranges);
+        }
+        ranges.add(bareSpecifier);
+    }
+    if (!semver.satisfies(convergeVersion, bareSpecifier, true))
+        return;
+    if (peerDeps == null) {
+        deps[name] = convergeVersion;
+    }
+    else {
+        peerDeps[name] = convergeVersion;
+    }
+}
 function resolveLocalOverride({ specifiedViaRelativePath, absolutePath }, pkgDir) {
     return specifiedViaRelativePath && pkgDir
         ? normalizePath(path.relative(pkgDir, absolutePath))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/hooks.read-package-hook",
-  "version": "1100.0.8",
+  "version": "1100.1.0",
   "description": "Creates the default package reader hook used by pnpm",
   "keywords": [
     "pnpm",
@@ -10,9 +10,9 @@
   "funding": "https://opencollective.com/pnpm",
   "repository": {
     "type": "git",
-    "url": "https://github.com/pnpm/pnpm/tree/main/hooks/read-package-hook"
+    "url": "https://github.com/pnpm/pnpm/tree/main/pnpm11/hooks/read-package-hook"
   },
-  "homepage": "https://github.com/pnpm/pnpm/tree/main/hooks/read-package-hook#readme",
+  "homepage": "https://github.com/pnpm/pnpm/tree/main/pnpm11/hooks/read-package-hook#readme",
   "bugs": {
     "url": "https://github.com/pnpm/pnpm/issues"
   },
@@ -27,24 +27,24 @@
     "!*.map"
   ],
   "dependencies": {
+    "@pnpm/config.matcher": "1100.0.1",
+    "@pnpm/config.parse-overrides": "1100.1.0",
+    "@pnpm/deps.peer-range": "1100.0.2",
+    "@pnpm/error": "1100.0.1",
+    "@pnpm/resolving.parse-wanted-dependency": "1100.0.1",
+    "@pnpm/types": "1101.4.0",
     "@yarnpkg/extensions": "2.0.6",
     "normalize-path": "^3.0.0",
     "ramda": "npm:@pnpm/ramda@0.28.1",
-    "semver": "^7.8.4",
-    "@pnpm/config.parse-overrides": "1100.0.1",
-    "@pnpm/error": "1100.0.0",
-    "@pnpm/deps.peer-range": "1100.0.2",
-    "@pnpm/resolving.parse-wanted-dependency": "1100.0.1",
-    "@pnpm/types": "1101.3.2",
-    "@pnpm/config.matcher": "1100.0.1"
+    "semver": "^7.8.4"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
+    "@pnpm/hooks.read-package-hook": "1100.1.0",
     "@types/normalize-path": "^3.0.2",
     "@types/ramda": "0.31.1",
     "@types/semver": "7.7.1",
-    "@yarnpkg/core": "4.8.0",
-    "@pnpm/hooks.read-package-hook": "1100.0.8"
+    "@yarnpkg/core": "4.8.0"
   },
   "engines": {
     "node": ">=22.13"