@pnpm/pkg-manifest.utils 1100.2.6 → 1100.2.8

package/CHANGELOG.md

@@ -0,0 +1,818 @@
+# @pnpm/manifest-utils
+
+## 1100.2.8
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/core-loggers@1100.2.3
+
+## 1100.2.7
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/core-loggers@1100.2.2
+  - @pnpm/types@1101.4.0
+
+## 1100.2.6
+
+### Patch Changes
+
+- 0ec878d: Removing a runtime dependency now removes the matching `devEngines.runtime` or `engines.runtime` entry that was materialized from it. Blank runtime selectors are normalized to `latest`.
+- Updated dependencies [852d537]
+  - @pnpm/error@1100.0.1
+
+## 1100.2.5
+
+### Patch Changes
+
+- a31faa7: Updated dependency ranges. Notably:
+
+  - `@pnpm/logger` peer dependency range moved to `^1100.0.0`.
+  - `msgpackr` 1.11.8 → 2.0.4 (store index files remain byte-compatible in both directions).
+  - `open` ^7.4.2 → ^11.0.0, `memoize` ^10 → ^11, `cli-truncate` ^5 → ^6, `pidtree` ^0.6 → ^1.
+  - `@yarnpkg/core` 4.5.0 → 4.8.0, `@rushstack/worker-pool` 0.7.7 → 0.7.18, `@cyclonedx/cyclonedx-library` 10.0.0 → 10.1.0, `@pnpm/config.nerf-dart` ^1 → ^2, `@pnpm/log.group` 3.0.2 → 4.0.1, `@pnpm/util.lex-comparator` ^3 → ^4.
+
+- Updated dependencies [681b593]
+- Updated dependencies [a31faa7]
+  - @pnpm/types@1101.3.2
+  - @pnpm/core-loggers@1100.2.1
+  - @pnpm/deps.peer-range@1100.0.2
+
+## 1100.2.4
+
+### Patch Changes
+
+- Updated dependencies [f11b4fc]
+  - @pnpm/core-loggers@1100.2.0
+
+## 1100.2.3
+
+### Patch Changes
+
+- Updated dependencies [bf1b731]
+  - @pnpm/types@1101.3.1
+  - @pnpm/core-loggers@1100.1.4
+
+## 1100.2.2
+
+### Patch Changes
+
+- Updated dependencies [a017bf3]
+  - @pnpm/types@1101.3.0
+  - @pnpm/core-loggers@1100.1.3
+
+## 1100.2.1
+
+### Patch Changes
+
+- Updated dependencies [35d2355]
+  - @pnpm/types@1101.2.0
+  - @pnpm/core-loggers@1100.1.2
+
+## 1100.2.0
+
+### Minor Changes
+
+- 1627943: `pnpm outdated` and `pnpm update --interactive` now report Node.js, Deno, and Bun runtimes installed as project dependencies (`runtime:` specifiers). Previously these were silently skipped because the npm specifier parser did not understand the `runtime:` protocol, so runtime versions never appeared in the outdated table or the interactive update picker.
+
+  Internally, the outdated check is now resolver-driven: `@pnpm/resolving.resolver-base` defines a `ResolveLatestFunction` shape (with `LatestQuery` input — `{ wantedDependency, compatible? }` — and `LatestInfo` result — `{ latestManifest? }`), and every protocol resolver (npm, jsr, named-registry, git, tarball, local, node/bun/deno runtimes) exports its own `resolveLatest*` function alongside its `resolve*`. `@pnpm/resolving.default-resolver` composes them into a single dispatcher, exposed through `@pnpm/installing.client` as `createResolver(...).resolveLatest`.
+
+  Each resolver decides whether it owns the dep and what "latest" means for its protocol; the outdated command derives `current` / `wanted` display values from the lockfile snapshot (`pkgSnapshot.version` for semver protocols, raw ref for URL-shaped ones) and uses raw ref equality for the "lockfile changed" check, so protocol knowledge stays inside each resolver instead of the command.
+
+### Patch Changes
+
+- Updated dependencies [64afc92]
+  - @pnpm/types@1101.1.1
+  - @pnpm/core-loggers@1100.1.1
+
+## 1100.1.4
+
+### Patch Changes
+
+- Updated dependencies [4a79336]
+  - @pnpm/core-loggers@1100.1.0
+
+## 1100.1.3
+
+### Patch Changes
+
+- 9cad827: `convertEnginesRuntimeToDependencies`: switch the runtime-dependency write to `Object.defineProperty` so the CodeQL `js/prototype-polluting-assignment` rule treats the assignment as safe regardless of the property name (follow-up to [#11609](https://github.com/pnpm/pnpm/pull/11609)).
+- 50b33c1: Address CodeQL static-analysis findings: guard manifest dependency writes against prototype-polluting keys (`__proto__`, `constructor`, `prototype`), and replace a potentially super-linear semver-detection regex in registry 404 hints with an O(n) parser.
+
+## 1100.1.2
+
+### Patch Changes
+
+- Updated dependencies [b61e268]
+  - @pnpm/types@1101.1.0
+  - @pnpm/core-loggers@1100.0.2
+
+## 1100.1.1
+
+### Patch Changes
+
+- 184ce26: Fix the package name in README.md.
+- Updated dependencies [184ce26]
+  - @pnpm/deps.peer-range@1100.0.1
+
+## 1100.1.0
+
+### Minor Changes
+
+- ff7733c: Added a new setting `runtimeOnFail` that overrides the `onFail` field of `devEngines.runtime` (and `engines.runtime`) in the root project's `package.json`. Accepted values: `ignore`, `warn`, `error`, `download`. For example, setting `runtimeOnFail=download` makes pnpm download the declared runtime version even when the manifest does not set `onFail: "download"`.
+
+## 1100.0.1
+
+### Patch Changes
+
+- Updated dependencies [ff28085]
+  - @pnpm/types@1101.0.0
+  - @pnpm/core-loggers@1100.0.1
+
+## 1002.0.0
+
+### Major Changes
+
+- 491a84f: This package is now pure ESM.
+- 7d2fd48: Node.js v18, 19, 20, and 21 support discontinued.
+- efb48dc: Added `@pnpm/logger` to peer dependencies.
+
+### Minor Changes
+
+- efb48dc: Added convertEnginesRuntimeToDependencies.
+
+### Patch Changes
+
+- cee1f58: Fix `--save-peer` to write valid semver ranges to `peerDependencies` for protocol-based installs (e.g. `jsr:`) by deriving from resolved versions when available and falling back to `*` if none is available [#10417](https://github.com/pnpm/pnpm/issues/10417).
+- Updated dependencies [76718b3]
+- Updated dependencies [a8f016c]
+- Updated dependencies [cc1b8e3]
+- Updated dependencies [491a84f]
+- Updated dependencies [7d2fd48]
+- Updated dependencies [efb48dc]
+- Updated dependencies [cb367b9]
+- Updated dependencies [7b1c189]
+- Updated dependencies [8ffb1a7]
+- Updated dependencies [05fb1ae]
+- Updated dependencies [71de2b3]
+- Updated dependencies [10bc391]
+- Updated dependencies [831f574]
+- Updated dependencies [2df8b71]
+- Updated dependencies [15549a9]
+- Updated dependencies [cc7c0d2]
+- Updated dependencies [efb48dc]
+  - @pnpm/types@1001.0.0
+  - @pnpm/core-loggers@1002.0.0
+  - @pnpm/deps.peer-range@1001.0.0
+  - @pnpm/error@1001.0.0
+
+## 1001.0.6
+
+### Patch Changes
+
+- Updated dependencies [7c1382f]
+- Updated dependencies [dee39ec]
+  - @pnpm/types@1000.9.0
+  - @pnpm/core-loggers@1001.0.4
+
+## 1001.0.5
+
+### Patch Changes
+
+- @pnpm/error@1000.0.5
+
+## 1001.0.4
+
+### Patch Changes
+
+- Updated dependencies [e792927]
+  - @pnpm/types@1000.8.0
+  - @pnpm/core-loggers@1001.0.3
+
+## 1001.0.3
+
+### Patch Changes
+
+- @pnpm/error@1000.0.4
+
+## 1001.0.2
+
+### Patch Changes
+
+- Updated dependencies [1a07b8f]
+  - @pnpm/types@1000.7.0
+  - @pnpm/core-loggers@1001.0.2
+  - @pnpm/error@1000.0.3
+
+## 1001.0.1
+
+### Patch Changes
+
+- Updated dependencies [09cf46f]
+- Updated dependencies [5ec7255]
+  - @pnpm/core-loggers@1001.0.1
+  - @pnpm/types@1000.6.0
+
+## 1001.0.0
+
+### Major Changes
+
+- 5b73df1: Moved out `createVersionSpec` to `@pnpm/npm-resolver`.
+
+### Patch Changes
+
+- Updated dependencies [8a9f3a4]
+- Updated dependencies [5b73df1]
+  - @pnpm/core-loggers@1001.0.0
+  - @pnpm/types@1000.5.0
+
+## 1000.0.8
+
+### Patch Changes
+
+- Updated dependencies [750ae7d]
+- Updated dependencies [750ae7d]
+  - @pnpm/types@1000.4.0
+  - @pnpm/core-loggers@1000.2.0
+
+## 1000.0.7
+
+### Patch Changes
+
+- Updated dependencies [5f7be64]
+- Updated dependencies [5f7be64]
+  - @pnpm/types@1000.3.0
+  - @pnpm/core-loggers@1000.1.5
+
+## 1000.0.6
+
+### Patch Changes
+
+- Updated dependencies [a5e4965]
+  - @pnpm/types@1000.2.1
+  - @pnpm/core-loggers@1000.1.4
+
+## 1000.0.5
+
+### Patch Changes
+
+- Updated dependencies [8fcc221]
+  - @pnpm/types@1000.2.0
+  - @pnpm/core-loggers@1000.1.3
+
+## 1000.0.4
+
+### Patch Changes
+
+- Updated dependencies [b562deb]
+  - @pnpm/types@1000.1.1
+  - @pnpm/error@1000.0.2
+  - @pnpm/core-loggers@1000.1.2
+
+## 1000.0.3
+
+### Patch Changes
+
+- Updated dependencies [9591a18]
+  - @pnpm/types@1000.1.0
+  - @pnpm/core-loggers@1000.1.1
+
+## 1000.0.2
+
+### Patch Changes
+
+- Updated dependencies [516c4b3]
+  - @pnpm/core-loggers@1000.1.0
+
+## 1000.0.1
+
+### Patch Changes
+
+- @pnpm/error@1000.0.1
+
+## 6.0.10
+
+### Patch Changes
+
+- @pnpm/error@6.0.3
+
+## 6.0.9
+
+### Patch Changes
+
+- @pnpm/error@6.0.2
+
+## 6.0.8
+
+### Patch Changes
+
+- Updated dependencies [d500d9f]
+  - @pnpm/types@12.2.0
+  - @pnpm/core-loggers@10.0.7
+
+## 6.0.7
+
+### Patch Changes
+
+- Updated dependencies [7ee59a1]
+  - @pnpm/types@12.1.0
+  - @pnpm/core-loggers@10.0.6
+
+## 6.0.6
+
+### Patch Changes
+
+- Updated dependencies [cb006df]
+  - @pnpm/types@12.0.0
+  - @pnpm/core-loggers@10.0.5
+
+## 6.0.5
+
+### Patch Changes
+
+- Updated dependencies [0ef168b]
+  - @pnpm/types@11.1.0
+  - @pnpm/core-loggers@10.0.4
+
+## 6.0.4
+
+### Patch Changes
+
+- Updated dependencies [dd00eeb]
+- Updated dependencies
+  - @pnpm/types@11.0.0
+  - @pnpm/core-loggers@10.0.3
+
+## 6.0.3
+
+### Patch Changes
+
+- Updated dependencies [13e55b2]
+  - @pnpm/types@10.1.1
+  - @pnpm/core-loggers@10.0.2
+
+## 6.0.2
+
+### Patch Changes
+
+- Updated dependencies [45f4262]
+  - @pnpm/types@10.1.0
+  - @pnpm/core-loggers@10.0.1
+
+## 6.0.1
+
+### Patch Changes
+
+- Updated dependencies [a7aef51]
+  - @pnpm/error@6.0.1
+
+## 6.0.0
+
+### Major Changes
+
+- 43cdd87: Node.js v16 support dropped. Use at least Node.js v18.12.
+
+### Patch Changes
+
+- Updated dependencies [7733f3a]
+- Updated dependencies [3ded840]
+- Updated dependencies [43cdd87]
+- Updated dependencies [730929e]
+  - @pnpm/types@10.0.0
+  - @pnpm/error@6.0.0
+  - @pnpm/core-loggers@10.0.0
+
+## 5.0.7
+
+### Patch Changes
+
+- Updated dependencies [4d34684f1]
+  - @pnpm/types@9.4.2
+  - @pnpm/core-loggers@9.0.6
+
+## 5.0.6
+
+### Patch Changes
+
+- Updated dependencies
+  - @pnpm/types@9.4.1
+  - @pnpm/core-loggers@9.0.5
+
+## 5.0.5
+
+### Patch Changes
+
+- Updated dependencies [43ce9e4a6]
+  - @pnpm/types@9.4.0
+  - @pnpm/core-loggers@9.0.4
+
+## 5.0.4
+
+### Patch Changes
+
+- Updated dependencies [d774a3196]
+  - @pnpm/types@9.3.0
+  - @pnpm/core-loggers@9.0.3
+
+## 5.0.3
+
+### Patch Changes
+
+- Updated dependencies [aa2ae8fe2]
+  - @pnpm/types@9.2.0
+  - @pnpm/core-loggers@9.0.2
+
+## 5.0.2
+
+### Patch Changes
+
+- @pnpm/error@5.0.2
+
+## 5.0.1
+
+### Patch Changes
+
+- a9e0b7cbf: Don't update peer dependencies.
+- Updated dependencies [a9e0b7cbf]
+  - @pnpm/types@9.1.0
+  - @pnpm/core-loggers@9.0.1
+  - @pnpm/error@5.0.1
+
+## 5.0.0
+
+### Major Changes
+
+- eceaa8b8b: Node.js 14 support dropped.
+
+### Patch Changes
+
+- Updated dependencies [eceaa8b8b]
+  - @pnpm/core-loggers@9.0.0
+  - @pnpm/error@5.0.0
+  - @pnpm/types@9.0.0
+
+## 4.1.4
+
+### Patch Changes
+
+- @pnpm/error@4.0.1
+
+## 4.1.3
+
+### Patch Changes
+
+- Updated dependencies [b77651d14]
+  - @pnpm/types@8.10.0
+  - @pnpm/core-loggers@8.0.3
+
+## 4.1.2
+
+### Patch Changes
+
+- c245edf1b: Dependencies specified via `*` should be updated to semver ranges by `pnpm update` [#5681](https://github.com/pnpm/pnpm/issues/5681).
+
+## 4.1.1
+
+### Patch Changes
+
+- Updated dependencies [702e847c1]
+  - @pnpm/types@8.9.0
+  - @pnpm/core-loggers@8.0.2
+
+## 4.1.0
+
+### Minor Changes
+
+- 844e82f3a: New function exported: `getDependencyTypeFromManifest()`.
+
+### Patch Changes
+
+- Updated dependencies [844e82f3a]
+  - @pnpm/types@8.8.0
+  - @pnpm/core-loggers@8.0.1
+
+## 4.0.0
+
+### Major Changes
+
+- f884689e0: Require `@pnpm/logger` v5.
+
+### Patch Changes
+
+- Updated dependencies [043d988fc]
+- Updated dependencies [f884689e0]
+  - @pnpm/error@4.0.0
+  - @pnpm/core-loggers@8.0.0
+
+## 3.1.6
+
+### Patch Changes
+
+- Updated dependencies [3ae888c28]
+  - @pnpm/core-loggers@7.1.0
+
+## 3.1.5
+
+### Patch Changes
+
+- Updated dependencies [e8a631bf0]
+  - @pnpm/error@3.1.0
+
+## 3.1.4
+
+### Patch Changes
+
+- Updated dependencies [d665f3ff7]
+  - @pnpm/types@8.7.0
+  - @pnpm/core-loggers@7.0.8
+
+## 3.1.3
+
+### Patch Changes
+
+- Updated dependencies [156cc1ef6]
+  - @pnpm/types@8.6.0
+  - @pnpm/core-loggers@7.0.7
+
+## 3.1.2
+
+### Patch Changes
+
+- Updated dependencies [c90798461]
+  - @pnpm/types@8.5.0
+  - @pnpm/core-loggers@7.0.6
+
+## 3.1.1
+
+### Patch Changes
+
+- e3f4d131c: getSpecFromPackageManifest should also read spec from peerDependencies.
+
+## 3.1.0
+
+### Minor Changes
+
+- f5621a42c: A new value `rolling` for option `save-workspace-protocol`. When selected, pnpm will save workspace versions using a rolling alias (e.g. `"foo": "workspace:^"`) instead of pinning the current version number (e.g. `"foo": "workspace:^1.0.0"`). Usage example:
+
+  ```
+  pnpm --save-workspace-protocol=rolling add foo
+  ```
+
+## 3.0.6
+
+### Patch Changes
+
+- Updated dependencies [8e5b77ef6]
+  - @pnpm/types@8.4.0
+  - @pnpm/core-loggers@7.0.5
+
+## 3.0.5
+
+### Patch Changes
+
+- Updated dependencies [2a34b21ce]
+  - @pnpm/types@8.3.0
+  - @pnpm/core-loggers@7.0.4
+
+## 3.0.4
+
+### Patch Changes
+
+- Updated dependencies [fb5bbfd7a]
+  - @pnpm/types@8.2.0
+  - @pnpm/core-loggers@7.0.3
+
+## 3.0.3
+
+### Patch Changes
+
+- Updated dependencies [4d39e4a0c]
+  - @pnpm/types@8.1.0
+  - @pnpm/core-loggers@7.0.2
+
+## 3.0.2
+
+### Patch Changes
+
+- Updated dependencies [18ba5e2c0]
+  - @pnpm/types@8.0.1
+  - @pnpm/core-loggers@7.0.1
+
+## 3.0.1
+
+### Patch Changes
+
+- 618842b0d: It should be possible to reference a workspace project that has no version specified in its `package.json` [#4487](https://github.com/pnpm/pnpm/pull/4487).
+  - @pnpm/error@3.0.1
+
+## 3.0.0
+
+### Major Changes
+
+- 542014839: Node.js 12 is not supported.
+
+### Patch Changes
+
+- Updated dependencies [d504dc380]
+- Updated dependencies [542014839]
+  - @pnpm/types@8.0.0
+  - @pnpm/core-loggers@7.0.0
+  - @pnpm/error@3.0.0
+
+## 2.1.9
+
+### Patch Changes
+
+- Updated dependencies [70ba51da9]
+  - @pnpm/error@2.1.0
+
+## 2.1.8
+
+### Patch Changes
+
+- Updated dependencies [b138d048c]
+  - @pnpm/types@7.10.0
+  - @pnpm/core-loggers@6.1.4
+
+## 2.1.7
+
+### Patch Changes
+
+- 8a2cad034: fix: version set be correct when set empty version
+
+## 2.1.6
+
+### Patch Changes
+
+- Updated dependencies [26cd01b88]
+  - @pnpm/types@7.9.0
+  - @pnpm/core-loggers@6.1.3
+
+## 2.1.5
+
+### Patch Changes
+
+- Updated dependencies [b5734a4a7]
+  - @pnpm/types@7.8.0
+  - @pnpm/core-loggers@6.1.2
+
+## 2.1.4
+
+### Patch Changes
+
+- Updated dependencies [6493e0c93]
+  - @pnpm/types@7.7.1
+  - @pnpm/core-loggers@6.1.1
+
+## 2.1.3
+
+### Patch Changes
+
+- Updated dependencies [ba9b2eba1]
+- Updated dependencies [ba9b2eba1]
+  - @pnpm/core-loggers@6.1.0
+  - @pnpm/types@7.7.0
+
+## 2.1.2
+
+### Patch Changes
+
+- Updated dependencies [302ae4f6f]
+  - @pnpm/types@7.6.0
+  - @pnpm/core-loggers@6.0.6
+
+## 2.1.1
+
+### Patch Changes
+
+- Updated dependencies [4ab87844a]
+  - @pnpm/types@7.5.0
+  - @pnpm/core-loggers@6.0.5
+
+## 2.1.0
+
+### Minor Changes
+
+- 553a5d840: The path to Node.js executable is added to `dependenciesMeta` when `nodeExecPath` is specified in the`PackageSpecObject`.
+
+## 2.0.4
+
+### Patch Changes
+
+- Updated dependencies [b734b45ea]
+  - @pnpm/types@7.4.0
+  - @pnpm/core-loggers@6.0.4
+
+## 2.0.3
+
+### Patch Changes
+
+- Updated dependencies [8e76690f4]
+  - @pnpm/types@7.3.0
+  - @pnpm/core-loggers@6.0.3
+
+## 2.0.2
+
+### Patch Changes
+
+- Updated dependencies [724c5abd8]
+  - @pnpm/types@7.2.0
+  - @pnpm/core-loggers@6.0.2
+
+## 2.0.1
+
+### Patch Changes
+
+- Updated dependencies [97c64bae4]
+  - @pnpm/types@7.1.0
+  - @pnpm/core-loggers@6.0.1
+
+## 2.0.0
+
+### Major Changes
+
+- 97b986fbc: Node.js 10 support is dropped. At least Node.js 12.17 is required for the package to work.
+
+### Patch Changes
+
+- Updated dependencies [97b986fbc]
+- Updated dependencies [90487a3a8]
+  - @pnpm/core-loggers@6.0.0
+  - @pnpm/error@2.0.0
+  - @pnpm/types@7.0.0
+
+## 1.1.5
+
+### Patch Changes
+
+- Updated dependencies [9ad8c27bf]
+  - @pnpm/types@6.4.0
+  - @pnpm/core-loggers@5.0.3
+
+## 1.1.4
+
+### Patch Changes
+
+- Updated dependencies [0c5f1bcc9]
+  - @pnpm/error@1.4.0
+
+## 1.1.3
+
+### Patch Changes
+
+- Updated dependencies [b5d694e7f]
+  - @pnpm/types@6.3.1
+  - @pnpm/core-loggers@5.0.2
+
+## 1.1.2
+
+### Patch Changes
+
+- Updated dependencies [d54043ee4]
+  - @pnpm/types@6.3.0
+  - @pnpm/core-loggers@5.0.1
+
+## 1.1.1
+
+### Patch Changes
+
+- Updated dependencies [86cd72de3]
+  - @pnpm/core-loggers@5.0.0
+
+## 1.1.0
+
+### Minor Changes
+
+- e2f6b40b1: `getSpecFromPackageManifest()` added.
+- e2f6b40b1: `getPref()` added.
+- e2f6b40b1: `updateProjectManifestObject()` added.
+
+## 1.0.3
+
+### Patch Changes
+
+- Updated dependencies [db17f6f7b]
+  - @pnpm/types@6.2.0
+
+## 1.0.2
+
+### Patch Changes
+
+- Updated dependencies [71a8c8ce3]
+  - @pnpm/types@6.1.0
+
+## 1.0.1
+
+### Patch Changes
+
+- Updated dependencies [da091c711]
+  - @pnpm/types@6.0.0
+
+## 1.0.1-alpha.0
+
+### Patch Changes
+
+- Updated dependencies [da091c71]
+  - @pnpm/types@6.0.0-alpha.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/pkg-manifest.utils",
-  "version": "1100.2.6",
+  "version": "1100.2.8",
   "description": "Utils for dealing with package manifest",
   "keywords": [
     "pnpm",
@@ -27,20 +27,20 @@
     "!*.map"
   ],
   "dependencies": {
-    "semver": "^7.8.4",
-    "@pnpm/core-loggers": "1100.2.1",
+    "@pnpm/core-loggers": "1100.2.3",
     "@pnpm/deps.peer-range": "1100.0.2",
     "@pnpm/error": "1100.0.1",
-    "@pnpm/types": "1101.3.2"
+    "@pnpm/types": "1101.4.0",
+    "semver": "^7.8.4"
   },
   "peerDependencies": {
     "@pnpm/logger": "^1100.0.0"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@types/semver": "7.7.1",
     "@pnpm/logger": "1100.0.0",
-    "@pnpm/pkg-manifest.utils": "1100.2.6"
+    "@pnpm/pkg-manifest.utils": "1100.2.8",
+    "@types/semver": "7.7.1"
   },
   "engines": {
     "node": ">=22.13"

package/lib/convertEnginesRuntimeToDependencies.d.ts

@@ -1,3 +0,0 @@
-import { type DependenciesField, type ProjectManifest } from '@pnpm/types';
-export declare function convertEnginesRuntimeToDependencies(manifest: ProjectManifest, enginesFieldName: 'devEngines' | 'engines', dependenciesFieldName: DependenciesField): void;
-export declare function applyRuntimeOnFailOverride(manifest: ProjectManifest, onFailOverride: 'ignore' | 'warn' | 'error' | 'download'): void;

package/lib/convertEnginesRuntimeToDependencies.js

@@ -1,64 +0,0 @@
-import { globalWarn } from '@pnpm/logger';
-import { RUNTIME_NAMES, } from '@pnpm/types';
-export function convertEnginesRuntimeToDependencies(manifest, enginesFieldName, dependenciesFieldName) {
-    for (const runtimeName of RUNTIME_NAMES) {
-        const enginesFieldRuntime = manifest[enginesFieldName]?.runtime;
-        if (enginesFieldRuntime == null || manifest[dependenciesFieldName]?.[runtimeName]) {
-            continue;
-        }
-        const runtimes = Array.isArray(enginesFieldRuntime) ? enginesFieldRuntime : [enginesFieldRuntime];
-        const runtime = runtimes.find((runtime) => runtime.name === runtimeName);
-        if (runtime?.onFail !== 'download') {
-            continue;
-        }
-        if (typeof runtime.version !== 'string') {
-            globalWarn(`Cannot download ${runtimeName} because no version is specified in ${enginesFieldName}.runtime`);
-            continue;
-        }
-        const version = runtime.version.trim();
-        if ('webcontainer' in process.versions) {
-            globalWarn(`Installation of ${runtimeName} versions is not supported in WebContainer`);
-        }
-        else {
-            const deps = (manifest[dependenciesFieldName] ??= {});
-            // Use Object.defineProperty so a future RUNTIME_NAMES entry that
-            // happens to match an inherited property name (`__proto__`,
-            // `constructor`, `prototype`) becomes a regular own data property
-            // instead of altering Object.prototype.
-            Object.defineProperty(deps, runtimeName, {
-                value: `runtime:${version}`,
-                enumerable: true,
-                writable: true,
-                configurable: true,
-            });
-        }
-    }
-}
-export function applyRuntimeOnFailOverride(manifest, onFailOverride) {
-    for (const [enginesFieldName, dependenciesFieldName] of [
-        ['devEngines', 'devDependencies'],
-        ['engines', 'dependencies'],
-    ]) {
-        const enginesFieldRuntime = manifest[enginesFieldName]?.runtime;
-        if (enginesFieldRuntime == null)
-            continue;
-        const runtimes = Array.isArray(enginesFieldRuntime) ? enginesFieldRuntime : [enginesFieldRuntime];
-        for (const runtime of runtimes) {
-            runtime.onFail = onFailOverride;
-        }
-        if (onFailOverride !== 'download') {
-            const deps = manifest[dependenciesFieldName];
-            if (deps) {
-                for (const runtimeName of RUNTIME_NAMES) {
-                    if (typeof deps[runtimeName] === 'string' && deps[runtimeName].startsWith('runtime:')) {
-                        delete deps[runtimeName];
-                    }
-                }
-            }
-        }
-        else {
-            convertEnginesRuntimeToDependencies(manifest, enginesFieldName, dependenciesFieldName);
-        }
-    }
-}
-//# sourceMappingURL=convertEnginesRuntimeToDependencies.js.map

package/lib/filterDependenciesByType.d.ts

@@ -1,2 +0,0 @@
-import type { Dependencies, IncludedDependencies, ProjectManifest } from '@pnpm/types';
-export declare function filterDependenciesByType(manifest: ProjectManifest, include: IncludedDependencies): Dependencies;

package/lib/filterDependenciesByType.js

@@ -1,8 +0,0 @@
-export function filterDependenciesByType(manifest, include) {
-    return {
-        ...(include.dependencies ? manifest.dependencies : {}),
-        ...(include.devDependencies ? manifest.devDependencies : {}),
-        ...(include.optionalDependencies ? manifest.optionalDependencies : {}),
-    };
-}
-//# sourceMappingURL=filterDependenciesByType.js.map

package/lib/getAllDependenciesFromManifest.d.ts

@@ -1,4 +0,0 @@
-import type { Dependencies, DependenciesField, ProjectManifest } from '@pnpm/types';
-export declare function getAllDependenciesFromManifest(pkg: Pick<ProjectManifest, DependenciesField | 'peerDependencies'>, opts?: {
-    autoInstallPeers?: boolean;
-}): Dependencies;

package/lib/getAllDependenciesFromManifest.js

@@ -1,9 +0,0 @@
-export function getAllDependenciesFromManifest(pkg, opts) {
-    return {
-        ...pkg.devDependencies,
-        ...pkg.dependencies,
-        ...pkg.optionalDependencies,
-        ...(opts?.autoInstallPeers ? pkg.peerDependencies : {}),
-    };
-}
-//# sourceMappingURL=getAllDependenciesFromManifest.js.map

package/lib/getAllUniqueSpecs.d.ts

@@ -1,2 +0,0 @@
-import type { DependencyManifest } from '@pnpm/types';
-export declare function getAllUniqueSpecs(manifests: DependencyManifest[]): Record<string, string>;

package/lib/getAllUniqueSpecs.js

@@ -1,20 +0,0 @@
-import { getAllDependenciesFromManifest } from './getAllDependenciesFromManifest.js';
-export function getAllUniqueSpecs(manifests) {
-    const allSpecs = {};
-    const ignored = new Set();
-    for (const manifest of manifests) {
-        const specs = getAllDependenciesFromManifest(manifest);
-        for (const [name, spec] of Object.entries(specs)) {
-            if (ignored.has(name))
-                continue;
-            if (allSpecs[name] != null && allSpecs[name] !== spec || spec.includes(':')) {
-                ignored.add(name);
-                delete allSpecs[name];
-                continue;
-            }
-            allSpecs[name] = spec;
-        }
-    }
-    return allSpecs;
-}
-//# sourceMappingURL=getAllUniqueSpecs.js.map

package/lib/getDependencyTypeFromManifest.d.ts

@@ -1,2 +0,0 @@
-import type { DependenciesOrPeersField, ProjectManifest } from '@pnpm/types';
-export declare function getDependencyTypeFromManifest(manifest: Pick<ProjectManifest, DependenciesOrPeersField>, depName: string): DependenciesOrPeersField | null;

package/lib/getDependencyTypeFromManifest.js

@@ -1,12 +0,0 @@
-export function getDependencyTypeFromManifest(manifest, depName) {
-    if (manifest.optionalDependencies?.[depName])
-        return 'optionalDependencies';
-    if (manifest.dependencies?.[depName])
-        return 'dependencies';
-    if (manifest.devDependencies?.[depName])
-        return 'devDependencies';
-    if (manifest.peerDependencies?.[depName])
-        return 'peerDependencies';
-    return null;
-}
-//# sourceMappingURL=getDependencyTypeFromManifest.js.map

package/lib/getSpecFromPackageManifest.d.ts

@@ -1,2 +0,0 @@
-import type { DependenciesOrPeersField, ProjectManifest } from '@pnpm/types';
-export declare function getSpecFromPackageManifest(manifest: Pick<ProjectManifest, DependenciesOrPeersField>, depName: string): string;

package/lib/getSpecFromPackageManifest.js

@@ -1,8 +0,0 @@
-export function getSpecFromPackageManifest(manifest, depName) {
-    return manifest.optionalDependencies?.[depName] ??
-        manifest.dependencies?.[depName] ??
-        manifest.devDependencies?.[depName] ??
-        manifest.peerDependencies?.[depName] ??
-        '';
-}
-//# sourceMappingURL=getSpecFromPackageManifest.js.map

package/lib/index.d.ts

@@ -1,11 +0,0 @@
-import type { Dependencies, IncludedDependencies, ProjectManifest } from '@pnpm/types';
-import { getAllUniqueSpecs } from './getAllUniqueSpecs.js';
-import { getSpecFromPackageManifest } from './getSpecFromPackageManifest.js';
-export * from './convertEnginesRuntimeToDependencies.js';
-export * from './getDependencyTypeFromManifest.js';
-export * from './updateProjectManifestObject.js';
-export { getAllUniqueSpecs, getSpecFromPackageManifest };
-export declare function filterDependenciesByType(manifest: ProjectManifest, include: IncludedDependencies): Dependencies;
-export declare function getAllDependenciesFromManifest(manifest: Pick<ProjectManifest, 'devDependencies' | 'dependencies' | 'optionalDependencies' | 'peerDependencies'>, opts?: {
-    autoInstallPeers?: boolean;
-}): Dependencies;

package/lib/updateProjectManifestObject.d.ts

@@ -1,12 +0,0 @@
-import { type DependenciesField, type DependenciesOrPeersField, type PinnedVersion, type ProjectManifest } from '@pnpm/types';
-export interface PackageSpecObject {
-    alias: string;
-    peer?: boolean;
-    bareSpecifier?: string;
-    resolvedVersion?: string;
-    pinnedVersion?: PinnedVersion;
-    saveType?: DependenciesField;
-}
-export declare function createVersionSpecFromResolvedVersion(resolvedVersion: string, pinnedVersion?: PinnedVersion): string | null;
-export declare function updateProjectManifestObject(prefix: string, packageManifest: ProjectManifest, packageSpecs: PackageSpecObject[]): Promise<ProjectManifest>;
-export declare function guessDependencyType(alias: string, manifest: ProjectManifest): DependenciesOrPeersField | undefined;

package/lib/updateProjectManifestObject.js

@@ -1,99 +0,0 @@
-import { packageManifestLogger } from '@pnpm/core-loggers';
-import { isValidPeerRange } from '@pnpm/deps.peer-range';
-import { DEPENDENCIES_FIELDS, DEPENDENCIES_OR_PEER_FIELDS, } from '@pnpm/types';
-import semver from 'semver';
-function getPeerSpecifier(spec, resolvedVersion, pinnedVersion) {
-    if (isValidPeerRange(spec))
-        return spec;
-    const rangeFromResolved = resolvedVersion ? createVersionSpecFromResolvedVersion(resolvedVersion, pinnedVersion) : null;
-    return rangeFromResolved ?? '*';
-}
-export function createVersionSpecFromResolvedVersion(resolvedVersion, pinnedVersion) {
-    const parsed = semver.parse(resolvedVersion);
-    if (!parsed)
-        return null;
-    if (parsed.prerelease.length)
-        return resolvedVersion;
-    switch (pinnedVersion ?? 'major') {
-        case 'none':
-        case 'major':
-            return `^${resolvedVersion}`;
-        case 'minor':
-            return `~${resolvedVersion}`;
-        case 'patch':
-            return resolvedVersion;
-        default:
-            return `^${resolvedVersion}`;
-    }
-}
-export async function updateProjectManifestObject(prefix, packageManifest, packageSpecs) {
-    for (const packageSpec of packageSpecs) {
-        if (packageSpec.saveType) {
-            const spec = packageSpec.bareSpecifier ?? findSpec(packageSpec.alias, packageManifest);
-            if (spec) {
-                packageManifest[packageSpec.saveType] = packageManifest[packageSpec.saveType] ?? {};
-                defineDepEntry(packageManifest[packageSpec.saveType], packageSpec.alias, spec);
-                for (const deptype of DEPENDENCIES_FIELDS) {
-                    if (deptype !== packageSpec.saveType) {
-                        deleteDepEntry(packageManifest[deptype], packageSpec.alias);
-                    }
-                }
-                if (packageSpec.peer === true) {
-                    packageManifest.peerDependencies = packageManifest.peerDependencies ?? {};
-                    defineDepEntry(packageManifest.peerDependencies, packageSpec.alias, getPeerSpecifier(spec, packageSpec.resolvedVersion, packageSpec.pinnedVersion));
-                }
-            }
-        }
-        else if (packageSpec.bareSpecifier) {
-            const usedDepType = guessDependencyType(packageSpec.alias, packageManifest) ?? 'dependencies';
-            if (usedDepType !== 'peerDependencies') {
-                packageManifest[usedDepType] = packageManifest[usedDepType] ?? {};
-                defineDepEntry(packageManifest[usedDepType], packageSpec.alias, packageSpec.bareSpecifier);
-            }
-        }
-    }
-    packageManifestLogger.debug({
-        prefix,
-        updated: packageManifest,
-    });
-    return packageManifest;
-}
-function findSpec(alias, manifest) {
-    const foundDepType = guessDependencyType(alias, manifest);
-    if (foundDepType == null)
-        return undefined;
-    const deps = manifest[foundDepType];
-    return Object.hasOwn(deps, alias) ? deps[alias] : undefined;
-}
-export function guessDependencyType(alias, manifest) {
-    return DEPENDENCIES_OR_PEER_FIELDS.find((depField) => {
-        const deps = manifest[depField];
-        if (deps == null || !Object.hasOwn(deps, alias))
-            return false;
-        return deps[alias] === '' || Boolean(deps[alias]);
-    });
-}
-/**
- * Write a dependency entry without risking prototype pollution: even when the
- * alias matches a name like `__proto__`, `Object.defineProperty` creates a
- * regular own data property rather than reaching through the setter.
- */
-function defineDepEntry(target, alias, value) {
-    Object.defineProperty(target, alias, {
-        value,
-        enumerable: true,
-        writable: true,
-        configurable: true,
-    });
-}
-/**
- * Mirror of `defineDepEntry` for deletes. The `Object.hasOwn` guard keeps the
- * `delete` from reaching into the prototype chain when the alias matches an
- * inherited property like `constructor`.
- */
-function deleteDepEntry(target, alias) {
-    if (target != null && Object.hasOwn(target, alias)) {
-        delete target[alias];
-    }
-}
-//# sourceMappingURL=updateProjectManifestObject.js.map