@pnpm/pnpr 0.1.0-alpha.12 → 0.1.0-alpha.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +32 -0
- package/package.json +9 -9
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,37 @@
|
|
|
1
1
|
# @pnpm/pnpr
|
|
2
2
|
|
|
3
|
+
## 0.1.0-alpha.14
|
|
4
|
+
|
|
5
|
+
pnpr 0.1.0-alpha.14 stops its resolver from connecting to private network addresses, links workspace projects at their `publishConfig.directory`, and resolves Cargo dependencies faster.
|
|
6
|
+
|
|
7
|
+
### Minor Changes
|
|
8
|
+
|
|
9
|
+
- The pnpr resolver no longer connects to loopback, private, link-local, or other non-public addresses, such as the `169.254.169.254` cloud metadata endpoint. The check applies to the address of each connection, so an allowlisted registry host that resolves to an internal address is refused too [#12705](https://github.com/pnpm/pnpm/issues/12705).
|
|
10
|
+
|
|
11
|
+
Addresses of the `public_url` host stay reachable. List any other non-public network the resolver must reach, such as the one of an internal upstream registry, under `routes.allowedPrivateNetworks`.
|
|
12
|
+
|
|
13
|
+
pnpr now checks transitive git and tarball dependencies against the fetch allowlist before it contacts their host. With git 2.37 or later, git fetches over `http(s)` connect only to the addresses pnpr checked.
|
|
14
|
+
|
|
15
|
+
### Patch Changes
|
|
16
|
+
|
|
17
|
+
- Installing through a pnpr server now links a workspace project at the directory its `publishConfig.directory` names. Before, the project root was linked. An install through a server that does not forward the setting fails with `ERR_PNPM_PNPR_PUBLISH_DIRECTORY_MISMATCH`, and the server rejects a `publishConfig.directory` that points outside its project [#14460](https://github.com/pnpm/pnpm/issues/14460).
|
|
18
|
+
|
|
19
|
+
- Cargo dependency resolution across sparse-index registries is faster. pnpr removes expired Cargo sparse-index cache files automatically [#14611](https://github.com/pnpm/pnpm/issues/14611).
|
|
20
|
+
|
|
21
|
+
## 0.1.0-alpha.13
|
|
22
|
+
|
|
23
|
+
### Patch Changes
|
|
24
|
+
|
|
25
|
+
- Requests to a registry or tarball server whose TLS certificate fails verification now fail at once. Such requests were retried for more than a minute without any output [#9134](https://github.com/pnpm/pnpm/issues/9134).
|
|
26
|
+
|
|
27
|
+
- On macOS, `pnpm` now uses its bundled certificate roots when macOS cannot create an SSL policy for a registry connection. It crashed on the first registry request in that case [pnpm/pnpm#14461](https://github.com/pnpm/pnpm/issues/14461).
|
|
28
|
+
|
|
29
|
+
- Installing through a pnpr server now installs a project's peer dependencies when `autoInstallPeers` is enabled. A project that declared only peer dependencies failed with `ERR_PNPM_OUTDATED_LOCKFILE` or skipped its peers [#14833](https://github.com/pnpm/pnpm/issues/14833).
|
|
30
|
+
|
|
31
|
+
- On macOS, pnpr now builds its package index faster when it starts over a storage directory that has no index yet.
|
|
32
|
+
|
|
33
|
+
- The pnpr config file now supports `${VAR?}` placeholders. They expand to the value of `VAR`, or to an empty string without a warning when `VAR` is unset [#14404](https://github.com/pnpm/pnpm/issues/14404).
|
|
34
|
+
|
|
3
35
|
## 0.1.0-alpha.12
|
|
4
36
|
|
|
5
37
|
pnpr 0.1.0-alpha.12 answers broad searches against an upstream registry instead of failing, and keeps Python resolution going when an index or a release carries metadata it cannot read.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pnpm/pnpr",
|
|
3
|
-
"version": "0.1.0-alpha.
|
|
3
|
+
"version": "0.1.0-alpha.14",
|
|
4
4
|
"description": "pnpm-compatible npm registry server, written in Rust",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pnpm",
|
|
@@ -28,14 +28,14 @@
|
|
|
28
28
|
"LICENSE.md"
|
|
29
29
|
],
|
|
30
30
|
"optionalDependencies": {
|
|
31
|
-
"@pnpm/pnpr.win32-x64": "0.1.0-alpha.
|
|
32
|
-
"@pnpm/pnpr.win32-arm64": "0.1.0-alpha.
|
|
33
|
-
"@pnpm/pnpr.darwin-x64": "0.1.0-alpha.
|
|
34
|
-
"@pnpm/pnpr.darwin-arm64": "0.1.0-alpha.
|
|
35
|
-
"@pnpm/pnpr.linux-x64": "0.1.0-alpha.
|
|
36
|
-
"@pnpm/pnpr.linux-arm64": "0.1.0-alpha.
|
|
37
|
-
"@pnpm/pnpr.linux-x64-musl": "0.1.0-alpha.
|
|
38
|
-
"@pnpm/pnpr.linux-arm64-musl": "0.1.0-alpha.
|
|
31
|
+
"@pnpm/pnpr.win32-x64": "0.1.0-alpha.14",
|
|
32
|
+
"@pnpm/pnpr.win32-arm64": "0.1.0-alpha.14",
|
|
33
|
+
"@pnpm/pnpr.darwin-x64": "0.1.0-alpha.14",
|
|
34
|
+
"@pnpm/pnpr.darwin-arm64": "0.1.0-alpha.14",
|
|
35
|
+
"@pnpm/pnpr.linux-x64": "0.1.0-alpha.14",
|
|
36
|
+
"@pnpm/pnpr.linux-arm64": "0.1.0-alpha.14",
|
|
37
|
+
"@pnpm/pnpr.linux-x64-musl": "0.1.0-alpha.14",
|
|
38
|
+
"@pnpm/pnpr.linux-arm64-musl": "0.1.0-alpha.14"
|
|
39
39
|
},
|
|
40
40
|
"scripts": {
|
|
41
41
|
"preinstall": "node install.js"
|