@pnpm/releasing.commands 1100.5.5 → 1100.6.1

package/CHANGELOG.md

@@ -1,5 +1,78 @@
 # @pnpm/releasing.commands
 
+## 1100.6.1
+
+### Patch Changes
+
+- Fixed `pnpm pack` applying workspace-root ignore rules when a workspace package has its own `.npmignore` file.
+
+- Updated dependencies:
+  - @pnpm/cli.utils@1101.0.15
+  - @pnpm/config.reader@1101.12.1
+  - @pnpm/engine.runtime.commands@1100.1.12
+  - @pnpm/engine.runtime.node-resolver@1101.1.14
+  - @pnpm/exec.lifecycle@1100.1.4
+  - @pnpm/fetching.directory-fetcher@1100.0.21
+  - @pnpm/fs.indexed-pkg-importer@1100.0.19
+  - @pnpm/fs.packlist@1100.0.3
+  - @pnpm/installing.client@1100.2.15
+  - @pnpm/installing.commands@1100.10.6
+  - @pnpm/network.fetch@1100.1.6
+  - @pnpm/releasing.exportable-manifest@1100.1.11
+  - @pnpm/releasing.versioning@1100.1.1
+  - @pnpm/resolving.npm-resolver@1102.1.4
+  - @pnpm/workspace.projects-filter@1100.0.28
+
+## 1100.6.0
+
+### Minor Changes
+
+- Added native workspace release management [#12952](https://github.com/pnpm/pnpm/issues/12952): the new `pnpm change` command records change intents as changesets-compatible `.changeset/*.md` files (`pnpm change status` shows the pending release plan), and the bare `pnpm version -r` consumes them — bumping versions across the workspace with dependent propagation through `workspace:` ranges, fixed groups, a `maxBump` cap, `--filter` narrowing, and `--dry-run` — writing changelogs, and recording consumed intents in a committed ledger that keeps cherry-picks and merge-backs between release branches safe. Packages can be moved onto per-package release lanes with the new `pnpm lane <name> --filter <pkg>` command and back with `pnpm lane main --filter <pkg>` (`pnpm lane` shows the membership), releasing `X.Y.Z-lane.N` prereleases from the same runs that release stable versions of the packages on the main lane. Configuration lives under the new `versioning` key of `pnpm-workspace.yaml` (`fixed`, `ignore`, `maxBump`, `lanes`, `changelog`). When two workspace projects publish the same name, intent files, `versioning.lanes`, and `versioning.fixed`/`ignore` may reference a project by its workspace-relative directory path (e.g. `"./pnpm/npm/pnpm"`) — the one additive extension to the changesets format, applied automatically by `pnpm change`.
+
+  Release changelogs default to `registry` storage (`versioning.changelog.storage`): no `CHANGELOG.md` is committed. Each release's section is composed at publish time and packed into the published tarball on top of the previously published version's changelog, and the consumed change intents are garbage-collected by a later `pnpm version -r` only once the registry confirms the version is published with its section. Set `versioning.changelog.storage: repository` to keep committed `CHANGELOG.md` files instead.
+
+### Patch Changes
+
+- `pnpm deploy` now supports workspaces that use catalogs.
+
+- Fixed `pnpm deploy` with a shared lockfile so local `file:` tarball dependencies keep their package name in the generated deploy lockfile. This prevents warm-store deploys from failing with `ERR_PNPM_UNEXPECTED_PKG_CONTENT_IN_STORE` when the tarball filename includes the version.
+
+- Fixed `pnpm publish --otp` and `pnpm publish --batch --otp` to send the configured OTP to the registry.
+
+- `pnpm publish` again sends the package's README to the registry as metadata, so registries can render it on the package page. The readme is always included in the published metadata (matching the npm CLI), while the `embed-readme` setting continues to control only whether the readme is written into the `package.json` inside the tarball. This restores the behavior that was lost when publishing became fully native. Closes pnpm/pnpm#12966.
+
+- Limit modern deploy lockfiles and localized virtual stores to dependencies reachable from the selected dependency groups.
+
+- `pnpm pack` now respects workspace-root `.npmignore` and `.gitignore` files when packing workspace packages.
+
+- Updated dependencies:
+  - @pnpm/bins.resolver@1100.0.9
+  - @pnpm/cli.utils@1101.0.14
+  - @pnpm/config.pick-registry-for-package@1100.0.10
+  - @pnpm/config.reader@1101.12.0
+  - @pnpm/deps.path@1100.0.9
+  - @pnpm/engine.runtime.commands@1100.1.11
+  - @pnpm/engine.runtime.node-resolver@1101.1.13
+  - @pnpm/exec.lifecycle@1100.1.3
+  - @pnpm/fetching.directory-fetcher@1100.0.20
+  - @pnpm/fs.indexed-pkg-importer@1100.0.18
+  - @pnpm/fs.packlist@1100.0.2
+  - @pnpm/installing.client@1100.2.14
+  - @pnpm/installing.commands@1100.10.5
+  - @pnpm/lockfile.fs@1100.1.11
+  - @pnpm/lockfile.types@1100.0.14
+  - @pnpm/network.auth-header@1101.1.4
+  - @pnpm/network.fetch@1100.1.5
+  - @pnpm/releasing.exportable-manifest@1100.1.10
+  - @pnpm/releasing.versioning@1100.1.0
+  - @pnpm/resolving.npm-resolver@1102.1.3
+  - @pnpm/resolving.registry.types@1100.1.4
+  - @pnpm/resolving.resolver-base@1100.5.2
+  - @pnpm/types@1101.4.0
+  - @pnpm/workspace.projects-filter@1100.0.27
+  - @pnpm/workspace.projects-sorter@1100.0.9
+  - @pnpm/workspace.workspace-manifest-writer@1100.0.16
+
 ## 1100.5.5
 
 ### Patch Changes

package/lib/index.js

@@ -1,4 +1,6 @@
+export { change } from './change/index.js';
 export { deploy } from './deploy/index.js';
+export { lane } from './lane/index.js';
 export { packApp } from './pack-app/index.js';
 export { pack, publish } from './publish/index.js';
 export * as stage from './stage/index.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/releasing.commands",
-  "version": "1100.5.5",
+  "version": "1100.6.1",
   "description": "Commands for deploy, pack, and publish",
   "keywords": [
     "pnpm",
@@ -28,36 +28,42 @@
   ],
   "dependencies": {
     "@inquirer/prompts": "^8.4.3",
-    "@pnpm/bins.resolver": "1100.0.8",
+    "@pnpm/bins.resolver": "1100.0.9",
     "@pnpm/catalogs.types": "1100.0.0",
     "@pnpm/cli.common-cli-options-help": "1100.0.2",
-    "@pnpm/cli.utils": "1101.0.13",
-    "@pnpm/config.pick-registry-for-package": "1100.0.9",
-    "@pnpm/config.reader": "1101.11.2",
+    "@pnpm/cli.utils": "1101.0.15",
+    "@pnpm/config.pick-registry-for-package": "1100.0.10",
+    "@pnpm/config.reader": "1101.12.1",
     "@pnpm/constants": "1100.0.0",
-    "@pnpm/deps.path": "1100.0.8",
-    "@pnpm/engine.runtime.commands": "1100.1.10",
-    "@pnpm/engine.runtime.node-resolver": "1101.1.12",
+    "@pnpm/deps.path": "1100.0.9",
+    "@pnpm/engine.runtime.commands": "1100.1.12",
+    "@pnpm/engine.runtime.node-resolver": "1101.1.14",
     "@pnpm/error": "1100.0.1",
-    "@pnpm/exec.lifecycle": "1100.1.2",
+    "@pnpm/exec.lifecycle": "1100.1.4",
     "@pnpm/exec.pnpm-cli-runner": "1100.0.1",
-    "@pnpm/fetching.directory-fetcher": "1100.0.19",
-    "@pnpm/fs.indexed-pkg-importer": "1100.0.17",
+    "@pnpm/fetching.directory-fetcher": "1100.0.21",
+    "@pnpm/fetching.types": "1100.0.2",
+    "@pnpm/fs.indexed-pkg-importer": "1100.0.19",
     "@pnpm/fs.is-empty-dir-or-nothing": "1100.0.0",
-    "@pnpm/fs.packlist": "1100.0.1",
-    "@pnpm/installing.client": "1100.2.13",
-    "@pnpm/installing.commands": "1100.10.4",
-    "@pnpm/lockfile.fs": "1100.1.10",
-    "@pnpm/lockfile.types": "1100.0.13",
-    "@pnpm/network.auth-header": "1101.1.3",
-    "@pnpm/network.fetch": "1100.1.4",
+    "@pnpm/fs.packlist": "1100.0.3",
+    "@pnpm/installing.client": "1100.2.15",
+    "@pnpm/installing.commands": "1100.10.6",
+    "@pnpm/lockfile.fs": "1100.1.11",
+    "@pnpm/lockfile.types": "1100.0.14",
+    "@pnpm/network.auth-header": "1101.1.4",
+    "@pnpm/network.fetch": "1100.1.6",
     "@pnpm/network.git-utils": "1100.0.2",
     "@pnpm/network.web-auth": "1101.2.0",
     "@pnpm/npm-package-arg": "^2.0.0",
-    "@pnpm/releasing.exportable-manifest": "1100.1.9",
-    "@pnpm/resolving.resolver-base": "1100.5.1",
-    "@pnpm/types": "1101.3.2",
-    "@pnpm/workspace.projects-sorter": "1100.0.8",
+    "@pnpm/releasing.exportable-manifest": "1100.1.11",
+    "@pnpm/releasing.versioning": "1100.1.1",
+    "@pnpm/resolving.npm-resolver": "1102.1.4",
+    "@pnpm/resolving.registry.types": "1100.1.4",
+    "@pnpm/resolving.resolver-base": "1100.5.2",
+    "@pnpm/types": "1101.4.0",
+    "@pnpm/workspace.projects-filter": "1100.0.28",
+    "@pnpm/workspace.projects-sorter": "1100.0.9",
+    "@pnpm/workspace.workspace-manifest-writer": "1100.0.16",
     "@types/normalize-path": "^3.0.2",
     "@zkochan/rimraf": "^4.0.0",
     "chalk": "^5.6.2",
@@ -87,17 +93,16 @@
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/assert-project": "1100.0.18",
+    "@pnpm/assert-project": "1100.0.20",
     "@pnpm/catalogs.config": "1100.0.2",
-    "@pnpm/hooks.pnpmfile": "1100.0.18",
+    "@pnpm/hooks.pnpmfile": "1100.0.20",
     "@pnpm/logger": "1100.0.0",
-    "@pnpm/prepare": "1100.0.18",
-    "@pnpm/releasing.commands": "1100.5.5",
+    "@pnpm/prepare": "1100.0.20",
+    "@pnpm/releasing.commands": "1100.6.1",
     "@pnpm/test-fixtures": "1100.0.0",
     "@pnpm/test-ipc-server": "1100.0.0",
-    "@pnpm/testing.command-defaults": "1100.0.8",
-    "@pnpm/testing.registry-mock": "1100.0.8",
-    "@pnpm/workspace.projects-filter": "1100.0.26",
+    "@pnpm/testing.command-defaults": "1100.0.10",
+    "@pnpm/testing.registry-mock": "1100.0.10",
     "@types/cross-spawn": "^6.0.6",
     "@types/is-windows": "^1.0.2",
     "@types/libnpmpublish": "^11.2.0",

package/lib/deploy/createDeployFiles.d.ts

@@ -1,23 +0,0 @@
-import type { LockfileObject } from '@pnpm/lockfile.types';
-import type { PnpmSettings, Project, ProjectId, ProjectManifest } from '@pnpm/types';
-export interface CreateDeployFilesOptions {
-    allProjects: Array<Pick<Project, 'manifest' | 'rootDirRealPath'>>;
-    deployDir: string;
-    lockfile: LockfileObject;
-    lockfileDir: string;
-    patchedDependencies?: PnpmSettings['patchedDependencies'];
-    selectedProjectManifest: ProjectManifest;
-    projectId: ProjectId;
-    rootProjectManifestDir: string;
-    allowBuilds?: Record<string, boolean | string>;
-}
-export interface DeployWorkspaceManifest {
-    allowBuilds?: Record<string, boolean | string>;
-    patchedDependencies?: Record<string, string>;
-}
-export interface DeployFiles {
-    lockfile: LockfileObject;
-    manifest: ProjectManifest;
-    workspaceManifest?: DeployWorkspaceManifest;
-}
-export declare function createDeployFiles({ allProjects, deployDir, lockfile, lockfileDir, patchedDependencies, selectedProjectManifest, projectId, rootProjectManifestDir, allowBuilds, }: CreateDeployFilesOptions): DeployFiles;

package/lib/deploy/createDeployFiles.js

@@ -1,218 +0,0 @@
-import path from 'node:path';
-import url from 'node:url';
-import * as dp from '@pnpm/deps.path';
-import normalizePath from 'normalize-path';
-const DEPENDENCIES_FIELD = ['dependencies', 'devDependencies', 'optionalDependencies'];
-export function createDeployFiles({ allProjects, deployDir, lockfile, lockfileDir, patchedDependencies, selectedProjectManifest, projectId, rootProjectManifestDir, allowBuilds, }) {
-    const deployedProjectRealPath = path.resolve(lockfileDir, projectId);
-    const inputSnapshot = lockfile.importers[projectId];
-    const targetSnapshot = {
-        ...inputSnapshot,
-        specifiers: {},
-        dependencies: {},
-        devDependencies: {},
-        optionalDependencies: {},
-    };
-    const targetPackageSnapshots = {};
-    for (const name in lockfile.packages) {
-        const inputDepPath = name;
-        const inputSnapshot = lockfile.packages[inputDepPath];
-        const resolveResult = resolveLinkOrFile(inputDepPath, {
-            lockfileDir,
-            projectRootDirRealPath: rootProjectManifestDir,
-        });
-        const outputDepPath = resolveResult
-            ? createFileUrlDepPath(resolveResult, allProjects)
-            : inputDepPath;
-        targetPackageSnapshots[outputDepPath] = convertPackageSnapshot(inputSnapshot, {
-            allProjects,
-            deployDir,
-            deployedProjectRealPath,
-            lockfileDir,
-            projectRootDirRealPath: rootProjectManifestDir,
-        });
-    }
-    for (const importerPath in lockfile.importers) {
-        if (importerPath === projectId)
-            continue;
-        const projectSnapshot = lockfile.importers[importerPath];
-        const projectRootDirRealPath = path.resolve(lockfileDir, importerPath);
-        const packageSnapshot = convertProjectSnapshotToPackageSnapshot(projectSnapshot, {
-            allProjects,
-            deployDir,
-            lockfileDir,
-            deployedProjectRealPath,
-            projectRootDirRealPath,
-        });
-        const depPath = createFileUrlDepPath({ resolvedPath: projectRootDirRealPath }, allProjects);
-        targetPackageSnapshots[depPath] = packageSnapshot;
-    }
-    for (const field of DEPENDENCIES_FIELD) {
-        const targetDependencies = targetSnapshot[field] ?? {};
-        const targetSpecifiers = targetSnapshot.specifiers;
-        const inputDependencies = inputSnapshot[field] ?? {};
-        for (const name in inputDependencies) {
-            const version = inputDependencies[name];
-            const resolveResult = resolveLinkOrFile(version, {
-                lockfileDir,
-                projectRootDirRealPath: path.resolve(lockfileDir, projectId),
-            });
-            if (!resolveResult) {
-                targetSpecifiers[name] = targetDependencies[name] = version;
-                continue;
-            }
-            targetSpecifiers[name] = targetDependencies[name] =
-                resolveResult.resolvedPath === deployedProjectRealPath ? 'link:.' : createFileUrlDepPath(resolveResult, allProjects);
-        }
-    }
-    const result = {
-        lockfile: {
-            ...lockfile,
-            patchedDependencies: undefined,
-            overrides: undefined, // the effects of the overrides should already be part of the package snapshots
-            packageExtensionsChecksum: undefined, // the effects of the package extensions should already be part of the package snapshots
-            pnpmfileChecksum: undefined, // the effects of the pnpmfile should already be part of the package snapshots
-            settings: {
-                ...lockfile.settings,
-                injectWorkspacePackages: undefined, // the effects of injecting workspace packages should already be part of the lockfile
-            },
-            importers: {
-                ['.']: targetSnapshot,
-            },
-            packages: targetPackageSnapshots,
-        },
-        manifest: {
-            ...selectedProjectManifest,
-            dependencies: targetSnapshot.dependencies,
-            devDependencies: targetSnapshot.devDependencies,
-            optionalDependencies: targetSnapshot.optionalDependencies,
-        },
-    };
-    if (lockfile.patchedDependencies && patchedDependencies) {
-        result.lockfile.patchedDependencies = { ...lockfile.patchedDependencies };
-        const deployManifestPatchedDeps = {};
-        for (const name in patchedDependencies) {
-            const absolutePath = patchedDependencies[name];
-            const relativePath = normalizePath(path.relative(deployDir, absolutePath));
-            deployManifestPatchedDeps[name] = relativePath;
-        }
-        result.workspaceManifest = {
-            ...result.workspaceManifest,
-            patchedDependencies: deployManifestPatchedDeps,
-        };
-    }
-    if (allowBuilds) {
-        result.workspaceManifest = {
-            ...result.workspaceManifest,
-            allowBuilds,
-        };
-    }
-    return result;
-}
-function convertPackageSnapshot(inputSnapshot, opts) {
-    const inputResolution = inputSnapshot.resolution;
-    let outputResolution;
-    if ('integrity' in inputResolution) {
-        outputResolution = inputResolution;
-    }
-    else if ('tarball' in inputResolution && typeof inputResolution.tarball === 'string') {
-        outputResolution = { ...inputResolution };
-        if (inputResolution.tarball.startsWith('file:')) {
-            const inputPath = inputResolution.tarball.slice('file:'.length);
-            const resolvedPath = path.resolve(opts.lockfileDir, inputPath);
-            const outputPath = normalizePath(path.relative(opts.deployDir, resolvedPath));
-            outputResolution.tarball = `file:${outputPath}`;
-            if ('path' in inputResolution && typeof inputResolution.path === 'string') {
-                outputResolution.path = outputPath;
-            }
-        }
-    }
-    else if (inputResolution.type === 'directory') {
-        const dirResolution = inputResolution;
-        const resolvedPath = path.resolve(opts.lockfileDir, dirResolution.directory);
-        const directory = normalizePath(path.relative(opts.deployDir, resolvedPath));
-        outputResolution = { ...dirResolution, directory };
-    }
-    else if (inputResolution.type === 'git' || inputResolution.type === 'variations') {
-        outputResolution = inputResolution;
-    }
-    else if (inputResolution.type && typeof inputResolution.type === 'string') {
-        // Custom resolution type - pass through as-is
-        outputResolution = inputResolution;
-    }
-    else {
-        throw new Error(`Unknown resolution type: ${JSON.stringify(inputResolution)}`);
-    }
-    return {
-        ...inputSnapshot,
-        resolution: outputResolution,
-        dependencies: convertResolvedDependencies(inputSnapshot.dependencies, opts),
-        optionalDependencies: convertResolvedDependencies(inputSnapshot.optionalDependencies, opts),
-    };
-}
-function convertProjectSnapshotToPackageSnapshot(projectSnapshot, opts) {
-    const resolution = {
-        type: 'directory',
-        directory: normalizePath(path.relative(opts.deployDir, opts.projectRootDirRealPath)),
-    };
-    const dependencies = convertResolvedDependencies(projectSnapshot.dependencies, opts);
-    const optionalDependencies = convertResolvedDependencies(projectSnapshot.optionalDependencies, opts);
-    return {
-        dependencies,
-        optionalDependencies,
-        resolution,
-    };
-}
-function convertResolvedDependencies(input, opts) {
-    if (!input)
-        return undefined;
-    const output = {};
-    for (const key in input) {
-        const version = input[key];
-        const resolveResult = resolveLinkOrFile(version, opts);
-        if (!resolveResult) {
-            output[key] = version;
-            continue;
-        }
-        if (resolveResult.resolvedPath === opts.deployedProjectRealPath) {
-            output[key] = 'link:.'; // the path is relative to the lockfile dir, which means '.' would reference the deploy dir
-            continue;
-        }
-        output[key] = createFileUrlDepPath(resolveResult, opts.allProjects);
-    }
-    return output;
-}
-function resolveLinkOrFile(pkgVer, opts) {
-    const { lockfileDir, projectRootDirRealPath } = opts;
-    function resolveScheme(scheme, base) {
-        if (!pkgVer.startsWith(scheme))
-            return undefined;
-        const { id, peerDepGraphHash: suffix } = dp.parseDepPath(pkgVer.slice(scheme.length));
-        const resolvedPath = path.resolve(base, id);
-        return { scheme, resolvedPath, suffix };
-    }
-    const resolveSchemeResult = resolveScheme('file:', lockfileDir) ?? resolveScheme('link:', projectRootDirRealPath);
-    if (resolveSchemeResult)
-        return resolveSchemeResult;
-    const { nonSemverVersion, patchHash, peerDepGraphHash, version } = dp.parse(pkgVer);
-    if (!nonSemverVersion)
-        return undefined;
-    if (version) {
-        throw new Error(`Something goes wrong, version should be undefined but isn't: ${version}`);
-    }
-    const parseResult = resolveLinkOrFile(nonSemverVersion, opts);
-    if (!parseResult)
-        return undefined;
-    if (parseResult.suffix) {
-        throw new Error(`Something goes wrong, suffix should be undefined but isn't: ${parseResult.suffix}`);
-    }
-    parseResult.suffix = `${patchHash ?? ''}${peerDepGraphHash ?? ''}`;
-    return parseResult;
-}
-function createFileUrlDepPath({ resolvedPath, suffix }, allProjects) {
-    const depFileUrl = url.pathToFileURL(resolvedPath).toString();
-    const project = allProjects.find(project => project.rootDirRealPath === resolvedPath);
-    const name = project?.manifest.name ?? path.basename(resolvedPath);
-    return `${name}@${depFileUrl}${suffix ?? ''}`;
-}
-//# sourceMappingURL=createDeployFiles.js.map

package/lib/deploy/deploy.d.ts

@@ -1,12 +0,0 @@
-import { type Config } from '@pnpm/config.reader';
-import { install } from '@pnpm/installing.commands';
-export declare const shorthands: {
-    legacy: string[];
-};
-export declare function rcOptionsTypes(): Record<string, unknown>;
-export declare function cliOptionsTypes(): Record<string, unknown>;
-export declare const commandNames: string[];
-export declare const overridableByScript = true;
-export declare function help(): string;
-export type DeployOptions = Omit<install.InstallCommandOptions, 'useLockfile'> & Pick<Config, 'allowBuilds' | 'forceLegacyDeploy'>;
-export declare function handler(opts: DeployOptions, params: string[]): Promise<void>;