@pnpm/resolving.git-resolver 1100.1.13 → 1100.1.14

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/git-resolver
 
+## 1100.1.14
+
+### Patch Changes
+
+- `pnpm outdated --include-github-actions` no longer blocks on an interactive git credential prompt when a workflow uses a private action repo.
+
+- Updated dependencies:
+  - @pnpm/network.fetch@1100.1.10
+  - @pnpm/resolving.resolver-base@1101.0.0
+
 ## 1100.1.13
 
 ### Patch Changes

package/lib/index.js

@@ -1,7 +1,7 @@
 import { PnpmError } from '@pnpm/error';
-import { gracefulGit as git } from 'graceful-git';
 import semver from 'semver';
 import { createGitHostedPkgId } from './createGitHostedPkgId.js';
+import { lsRemote } from './lsRemote.js';
 import { parseBareSpecifier } from './parseBareSpecifier.js';
 export { createGitHostedPkgId };
 export function createGitResolver(opts) {
@@ -100,7 +100,7 @@ export async function getRepoRefs(repo, ref) {
         gitArgs.push(`${ref}^{}`);
     }
     // graceful-git by default retries 10 times, reduce to single retry
-    const result = await git(['ls-remote', ...gitArgs], { retries: 1 });
+    const result = await lsRemote(gitArgs, { retries: 1 });
     const refs = {};
     for (const line of result.stdout.split('\n')) {
         const [commit, refName] = line.split('\t');

package/lib/lsRemote.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Runs `git ls-remote` with interactive credential prompts disabled, so it
+ * fails fast on private repos instead of blocking on user input. All
+ * ls-remote invocations must go through this function to keep that guarantee.
+ */
+export declare function lsRemote(args: string[], opts: {
+    retries: number;
+}): Promise<{
+    stdout: string;
+}>;

package/lib/lsRemote.js

@@ -0,0 +1,15 @@
+import { gracefulGit as git } from 'graceful-git';
+/**
+ * Runs `git ls-remote` with interactive credential prompts disabled, so it
+ * fails fast on private repos instead of blocking on user input. All
+ * ls-remote invocations must go through this function to keep that guarantee.
+ */
+export async function lsRemote(args, opts) {
+    return git(['ls-remote', ...args], {
+        retries: opts.retries,
+        // Snapshotted per call so changes to auth/proxy env vars made by a
+        // long-lived host process are picked up.
+        env: { ...process.env, GIT_TERMINAL_PROMPT: '0' },
+    });
+}
+//# sourceMappingURL=lsRemote.js.map

package/lib/parseBareSpecifier.js

@@ -1,8 +1,8 @@
 // cspell:ignore sshurl
 import urlLib, { URL } from 'node:url';
 import { fetchWithDispatcher } from '@pnpm/network.fetch';
-import { gracefulGit as git } from 'graceful-git';
 import HostedGit from 'hosted-git-info';
+import { lsRemote } from './lsRemote.js';
 const gitProtocols = new Set([
     'git',
     'git+http',
@@ -127,7 +127,7 @@ async function isRepoPublic(httpsUrl, dispatcherOptions) {
 }
 async function accessRepository(repository) {
     try {
-        await git(['ls-remote', '--exit-code', repository, 'HEAD'], { retries: 0 });
+        await lsRemote(['--exit-code', repository, 'HEAD'], { retries: 0 });
         return true;
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/resolving.git-resolver",
-  "version": "1100.1.13",
+  "version": "1100.1.14",
   "description": "Resolver for git-hosted packages",
   "keywords": [
     "pnpm",
@@ -30,15 +30,15 @@
   ],
   "dependencies": {
     "@pnpm/error": "1100.1.0",
-    "@pnpm/network.fetch": "1100.1.9",
-    "@pnpm/resolving.resolver-base": "1100.5.5",
+    "@pnpm/network.fetch": "1100.1.10",
+    "@pnpm/resolving.resolver-base": "1101.0.0",
     "graceful-git": "^5.0.0",
     "hosted-git-info": "npm:@pnpm/hosted-git-info@1.0.0",
     "semver": "^7.8.5"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/resolving.git-resolver": "1100.1.13",
+    "@pnpm/resolving.git-resolver": "1100.1.14",
     "@types/hosted-git-info": "^3.0.5",
     "@types/is-windows": "^1.0.2",
     "@types/semver": "7.7.1",