@pnpm/pnpr 0.1.0-alpha.13 → 0.1.0-alpha.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +18 -0
- package/package.json +9 -9
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,23 @@
|
|
|
1
1
|
# @pnpm/pnpr
|
|
2
2
|
|
|
3
|
+
## 0.1.0-alpha.14
|
|
4
|
+
|
|
5
|
+
pnpr 0.1.0-alpha.14 stops its resolver from connecting to private network addresses, links workspace projects at their `publishConfig.directory`, and resolves Cargo dependencies faster.
|
|
6
|
+
|
|
7
|
+
### Minor Changes
|
|
8
|
+
|
|
9
|
+
- The pnpr resolver no longer connects to loopback, private, link-local, or other non-public addresses, such as the `169.254.169.254` cloud metadata endpoint. The check applies to the address of each connection, so an allowlisted registry host that resolves to an internal address is refused too [#12705](https://github.com/pnpm/pnpm/issues/12705).
|
|
10
|
+
|
|
11
|
+
Addresses of the `public_url` host stay reachable. List any other non-public network the resolver must reach, such as the one of an internal upstream registry, under `routes.allowedPrivateNetworks`.
|
|
12
|
+
|
|
13
|
+
pnpr now checks transitive git and tarball dependencies against the fetch allowlist before it contacts their host. With git 2.37 or later, git fetches over `http(s)` connect only to the addresses pnpr checked.
|
|
14
|
+
|
|
15
|
+
### Patch Changes
|
|
16
|
+
|
|
17
|
+
- Installing through a pnpr server now links a workspace project at the directory its `publishConfig.directory` names. Before, the project root was linked. An install through a server that does not forward the setting fails with `ERR_PNPM_PNPR_PUBLISH_DIRECTORY_MISMATCH`, and the server rejects a `publishConfig.directory` that points outside its project [#14460](https://github.com/pnpm/pnpm/issues/14460).
|
|
18
|
+
|
|
19
|
+
- Cargo dependency resolution across sparse-index registries is faster. pnpr removes expired Cargo sparse-index cache files automatically [#14611](https://github.com/pnpm/pnpm/issues/14611).
|
|
20
|
+
|
|
3
21
|
## 0.1.0-alpha.13
|
|
4
22
|
|
|
5
23
|
### Patch Changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pnpm/pnpr",
|
|
3
|
-
"version": "0.1.0-alpha.
|
|
3
|
+
"version": "0.1.0-alpha.14",
|
|
4
4
|
"description": "pnpm-compatible npm registry server, written in Rust",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pnpm",
|
|
@@ -28,14 +28,14 @@
|
|
|
28
28
|
"LICENSE.md"
|
|
29
29
|
],
|
|
30
30
|
"optionalDependencies": {
|
|
31
|
-
"@pnpm/pnpr.win32-x64": "0.1.0-alpha.
|
|
32
|
-
"@pnpm/pnpr.win32-arm64": "0.1.0-alpha.
|
|
33
|
-
"@pnpm/pnpr.darwin-x64": "0.1.0-alpha.
|
|
34
|
-
"@pnpm/pnpr.darwin-arm64": "0.1.0-alpha.
|
|
35
|
-
"@pnpm/pnpr.linux-x64": "0.1.0-alpha.
|
|
36
|
-
"@pnpm/pnpr.linux-arm64": "0.1.0-alpha.
|
|
37
|
-
"@pnpm/pnpr.linux-x64-musl": "0.1.0-alpha.
|
|
38
|
-
"@pnpm/pnpr.linux-arm64-musl": "0.1.0-alpha.
|
|
31
|
+
"@pnpm/pnpr.win32-x64": "0.1.0-alpha.14",
|
|
32
|
+
"@pnpm/pnpr.win32-arm64": "0.1.0-alpha.14",
|
|
33
|
+
"@pnpm/pnpr.darwin-x64": "0.1.0-alpha.14",
|
|
34
|
+
"@pnpm/pnpr.darwin-arm64": "0.1.0-alpha.14",
|
|
35
|
+
"@pnpm/pnpr.linux-x64": "0.1.0-alpha.14",
|
|
36
|
+
"@pnpm/pnpr.linux-arm64": "0.1.0-alpha.14",
|
|
37
|
+
"@pnpm/pnpr.linux-x64-musl": "0.1.0-alpha.14",
|
|
38
|
+
"@pnpm/pnpr.linux-arm64-musl": "0.1.0-alpha.14"
|
|
39
39
|
},
|
|
40
40
|
"scripts": {
|
|
41
41
|
"preinstall": "node install.js"
|