@pnpm/resolving.resolver-base 1101.1.1 → 1101.3.0

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # @pnpm/resolver-base
 
+## 1101.3.0
+
+### Minor Changes
+
+- Install warnings no longer carry the text of a package's deprecation notice. The warning names the deprecated package and version, and the `pnpm:deprecation` event no longer carries the notice either. `pnpm view` still shows it on request.
+
+  A deprecation warning now names the newest version of the package that is not deprecated, and says when reaching it means widening the range you declared:
+
+  ```
+  WARN  deprecated foo@1.0.0. 2.3.1 is not deprecated, outside the range you declared.
+  ```
+
+  pnpm works this out from the metadata it already fetched, so it costs no extra request. An install that reuses the lockfile without fetching metadata names no version.
+
+  pnpm strips control characters from the package name and version in a deprecation warning, and from the notice `pnpm outdated --long` prints.
+
+  The text sanitizer now also strips the Unicode line and paragraph separators U+2028 and U+2029.
+
+## 1101.2.0
+
+### Minor Changes
+
+- Added explicit registry revision selection with `<version>+rN` and `pnpm update --patches` for refreshing revision artifacts without changing package versions. Registry-backed lockfile policy checks recognize historical revisions, and pnpr now preserves safe revision histories from upstream registries.
+
+- Added support for registry replacement tarballs using standard integrity values, explicit revision fields, registry routing from the `registries` setting, non-redirecting integrity-addressed URLs, canonical safe-integer revision numbers, and pnpr proxying for immutable upstream revision artifacts.
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/types@1102.1.0
+
 ## 1101.1.1
 
 ### Patch Changes

package/lib/index.d.ts

@@ -7,6 +7,7 @@ export interface TarballResolution {
     type?: undefined;
     tarball: string;
     integrity?: string;
+    revision?: number;
     path?: string;
     /**
      * True for tarballs sourced from a git host (codeload.github.com /
@@ -181,9 +182,29 @@ export declare function resolvePlatformSelector(supportedArchitectures: Supporte
  * is nullish).
  */
 export declare function selectPlatformVariant(variants: PlatformAssetResolution[], selector: PlatformSelector): PlatformAssetResolution | undefined;
+/**
+ * A version of the same package the registry does not report as deprecated.
+ *
+ * Only the resolver can work this out, since only it holds the packument.
+ */
+export interface NonDeprecatedAlternative {
+    version: string;
+    /**
+     * Whether reaching it means widening the declared range. Only ever true
+     * for a dependency that declared a range: a tag says nothing about which
+     * versions are acceptable, so there is no range to be outside of.
+     */
+    outsideDeclaredRange: boolean;
+}
 export interface ResolveResult {
     id: PkgResolutionId;
     latest?: string;
+    /**
+     * Set only when the resolved version is deprecated, so that the
+     * deprecation warning can name a version to move to. Absent when the
+     * resolution was reused from the lockfile, which holds no packument.
+     */
+    nonDeprecatedAlternative?: NonDeprecatedAlternative;
     publishedAt?: string;
     manifest?: DependencyManifest;
     resolution: Resolution;
@@ -241,6 +262,7 @@ export interface ResolveOptions {
     preferWorkspacePackages?: boolean;
     workspacePackages?: WorkspacePackages;
     update?: false | 'compatible' | 'latest';
+    updatePatches?: boolean;
     /**
      * True only when this specific package matches the user's update target
      * (e.g. `pnpm up <name>`). Unlike `update`, this is false for unrelated

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/resolving.resolver-base",
-  "version": "1101.1.1",
+  "version": "1101.3.0",
   "description": "Types for pnpm-compatible resolvers",
   "keywords": [
     "pnpm",
@@ -28,11 +28,11 @@
     "!*.map"
   ],
   "dependencies": {
-    "@pnpm/types": "1102.0.0"
+    "@pnpm/types": "1102.1.0"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/resolving.resolver-base": "1101.1.1"
+    "@pnpm/resolving.resolver-base": "1101.3.0"
   },
   "engines": {
     "node": ">=22.13"