@rushstack/rush-sdk 5.121.0 → 5.122.1

package/dist/rush-lib.d.ts

@@ -1902,7 +1902,10 @@ export declare interface IPnpmLockfilePolicies {
     /**
      * Forbid sha1 hashes in `pnpm-lock.yaml`
      */
-    disallowInsecureSha1?: boolean;
+    disallowInsecureSha1?: {
+        enabled: boolean;
+        exemptPackageVersions: Record<string, string[]>;
+    };
 }
 
 /**
@@ -4616,6 +4619,13 @@ export declare class Subspace {
      * @beta
      */
     getCommonVersionsFilePath(): string;
+    /**
+     * Gets the path to the pnpm-config.json config file for this subspace.
+     *
+     * Example: `C:\MyRepo\common\subspaces\my-subspace\pnpm-config.json`
+     * @beta
+     */
+    getPnpmConfigFilePath(): string;
     /**
      * Gets the settings from the common-versions.json config file.
      * @beta

package/lib/api/Subspace.d.ts

@@ -81,6 +81,13 @@ export declare class Subspace {
      * @beta
      */
     getCommonVersionsFilePath(): string;
+    /**
+     * Gets the path to the pnpm-config.json config file for this subspace.
+     *
+     * Example: `C:\MyRepo\common\subspaces\my-subspace\pnpm-config.json`
+     * @beta
+     */
+    getPnpmConfigFilePath(): string;
     /**
      * Gets the settings from the common-versions.json config file.
      * @beta

package/lib/cli/RushPnpmCommandLineParser.d.ts

@@ -14,6 +14,7 @@ export declare class RushPnpmCommandLineParser {
     private readonly _pnpmArgs;
     private _commandName;
     private readonly _debugEnabled;
+    private _subspace;
     private constructor();
     static initializeAsync(options: IRushPnpmCommandLineParserOptions): Promise<RushPnpmCommandLineParser>;
     executeAsync(): Promise<void>;

package/lib/logic/Git.d.ts

@@ -99,5 +99,10 @@ export declare class Git {
      * @internal
      */
     _executeGitCommandAndCaptureOutput(gitPath: string, args: string[], repositoryRoot?: string): string;
+    /**
+     *
+     * @param ref Given a ref which can be branch name, commit hash, tag name, etc, check if it is a commit hash
+     */
+    isRefACommit(ref: string): boolean;
 }
 //# sourceMappingURL=Git.d.ts.map

package/lib/logic/base/BaseShrinkwrapFile.d.ts

@@ -21,7 +21,7 @@ export declare abstract class BaseShrinkwrapFile {
      *
      * @virtual
      */
-    validateShrinkwrapAfterUpdate(rushConfiguration: RushConfiguration, terminal: ITerminal): void;
+    validateShrinkwrapAfterUpdate(rushConfiguration: RushConfiguration, subspace: Subspace, terminal: ITerminal): void;
     /**
      * Validate the shrinkwrap using the provided policy options.
      *

package/lib/logic/pnpm/PnpmOptionsConfiguration.d.ts

@@ -26,7 +26,10 @@ export interface IPnpmLockfilePolicies {
     /**
      * Forbid sha1 hashes in `pnpm-lock.yaml`
      */
-    disallowInsecureSha1?: boolean;
+    disallowInsecureSha1?: {
+        enabled: boolean;
+        exemptPackageVersions: Record<string, string[]>;
+    };
 }
 /**
  * @public

package/lib/logic/pnpm/PnpmShrinkwrapFile.d.ts

@@ -140,9 +140,20 @@ export declare class PnpmShrinkwrapFile extends BaseShrinkwrapFile {
      */
     private _disallowInsecureSha1;
     /** @override */
-    validateShrinkwrapAfterUpdate(rushConfiguration: RushConfiguration, terminal: ITerminal): void;
+    validateShrinkwrapAfterUpdate(rushConfiguration: RushConfiguration, subspace: Subspace, terminal: ITerminal): void;
     /** @override */
     validate(packageManagerOptionsConfig: PackageManagerOptionsConfigurationBase, policyOptions: IShrinkwrapFilePolicyValidatorOptions, experimentsConfig?: IExperimentsJson): void;
+    /**
+     * This operation exactly mirrors the behavior of PNPM's own implementation:
+     * https://github.com/pnpm/pnpm/blob/73ebfc94e06d783449579cda0c30a40694d210e4/lockfile/lockfile-file/src/experiments/inlineSpecifiersLockfileConverters.ts#L162
+     */
+    private _convertLockfileV6DepPathToV5DepPath;
+    /**
+     * Normalize dependency paths for PNPM shrinkwrap files.
+     * Example: "/eslint-utils@3.0.0(eslint@8.23.1)" --> "/eslint-utils@3.0.0"
+     * Example: "/@typescript-eslint/experimental-utils/5.9.1_eslint@8.6.0+typescript@4.4.4" --> "/@typescript-eslint/experimental-utils/5.9.1"
+     */
+    private _parseDependencyPath;
     /** @override */
     getTempProjectNames(): ReadonlyArray<string>;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-sdk",
-  "version": "5.121.0",
+  "version": "5.122.1",
   "description": "An API for interacting with the Rush engine",
   "repository": {
     "type": "git",
@@ -31,10 +31,10 @@
   "devDependencies": {
     "@types/semver": "7.5.0",
     "@types/webpack-env": "1.18.0",
-    "@microsoft/rush-lib": "5.121.0",
-    "@rushstack/heft": "0.66.3",
     "local-node-rig": "1.0.0",
+    "@microsoft/rush-lib": "5.122.1",
     "@rushstack/stream-collator": "4.1.41",
+    "@rushstack/heft": "0.66.3",
     "@rushstack/ts-command-line": "4.19.2"
   },
   "scripts": {