@rushstack/rush-sdk 5.121.0 → 5.122.0

package/dist/rush-lib.d.ts

@@ -1902,7 +1902,10 @@ export declare interface IPnpmLockfilePolicies {
     /**
      * Forbid sha1 hashes in `pnpm-lock.yaml`
      */
-    disallowInsecureSha1?: boolean;
+    disallowInsecureSha1?: {
+        enabled: boolean;
+        exemptPackageVersions: Record<string, string[]>;
+    };
 }
 
 /**

package/lib/cli/RushPnpmCommandLineParser.d.ts

@@ -14,6 +14,7 @@ export declare class RushPnpmCommandLineParser {
     private readonly _pnpmArgs;
     private _commandName;
     private readonly _debugEnabled;
+    private _subspace;
     private constructor();
     static initializeAsync(options: IRushPnpmCommandLineParserOptions): Promise<RushPnpmCommandLineParser>;
     executeAsync(): Promise<void>;

package/lib/logic/Git.d.ts

@@ -99,5 +99,10 @@ export declare class Git {
      * @internal
      */
     _executeGitCommandAndCaptureOutput(gitPath: string, args: string[], repositoryRoot?: string): string;
+    /**
+     *
+     * @param ref Given a ref which can be branch name, commit hash, tag name, etc, check if it is a commit hash
+     */
+    isRefACommit(ref: string): boolean;
 }
 //# sourceMappingURL=Git.d.ts.map

package/lib/logic/pnpm/PnpmOptionsConfiguration.d.ts

@@ -26,7 +26,10 @@ export interface IPnpmLockfilePolicies {
     /**
      * Forbid sha1 hashes in `pnpm-lock.yaml`
      */
-    disallowInsecureSha1?: boolean;
+    disallowInsecureSha1?: {
+        enabled: boolean;
+        exemptPackageVersions: Record<string, string[]>;
+    };
 }
 /**
  * @public

package/lib/logic/pnpm/PnpmShrinkwrapFile.d.ts

@@ -143,6 +143,17 @@ export declare class PnpmShrinkwrapFile extends BaseShrinkwrapFile {
     validateShrinkwrapAfterUpdate(rushConfiguration: RushConfiguration, terminal: ITerminal): void;
     /** @override */
     validate(packageManagerOptionsConfig: PackageManagerOptionsConfigurationBase, policyOptions: IShrinkwrapFilePolicyValidatorOptions, experimentsConfig?: IExperimentsJson): void;
+    /**
+     * This operation exactly mirrors the behavior of PNPM's own implementation:
+     * https://github.com/pnpm/pnpm/blob/73ebfc94e06d783449579cda0c30a40694d210e4/lockfile/lockfile-file/src/experiments/inlineSpecifiersLockfileConverters.ts#L162
+     */
+    private _convertLockfileV6DepPathToV5DepPath;
+    /**
+     * Normalize dependency paths for PNPM shrinkwrap files.
+     * Example: "/eslint-utils@3.0.0(eslint@8.23.1)" --> "/eslint-utils@3.0.0"
+     * Example: "/@typescript-eslint/experimental-utils/5.9.1_eslint@8.6.0+typescript@4.4.4" --> "/@typescript-eslint/experimental-utils/5.9.1"
+     */
+    private _parseDependencyPath;
     /** @override */
     getTempProjectNames(): ReadonlyArray<string>;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-sdk",
-  "version": "5.121.0",
+  "version": "5.122.0",
   "description": "An API for interacting with the Rush engine",
   "repository": {
     "type": "git",
@@ -25,14 +25,14 @@
   "dependencies": {
     "@types/node-fetch": "2.6.2",
     "tapable": "2.2.1",
-    "@rushstack/node-core-library": "4.1.0",
-    "@rushstack/terminal": "0.10.1"
+    "@rushstack/terminal": "0.10.1",
+    "@rushstack/node-core-library": "4.1.0"
   },
   "devDependencies": {
     "@types/semver": "7.5.0",
     "@types/webpack-env": "1.18.0",
-    "@microsoft/rush-lib": "5.121.0",
     "@rushstack/heft": "0.66.3",
+    "@microsoft/rush-lib": "5.122.0",
     "local-node-rig": "1.0.0",
     "@rushstack/stream-collator": "4.1.41",
     "@rushstack/ts-command-line": "4.19.2"