pnpm-settings-migrator 0.13.0 → 0.14.0

package/README.md

@@ -180,6 +180,20 @@ consumes them from workspace configuration; their v11 support is unchanged.
 Invalid values and fields unsupported by the target remain in their sources.
 The global-only `macosBackup` setting is preserved with a project-refused warning.
 
+`forceIgnoresPlatform` requires pnpm 11.28.0+ or 12.7.0+. pnpm's defaults differ
+between those majors; the migrator only moves explicit values. For v12,
+`publishWaitTimeout` and `reporter` require 12.7.0+. The timeout is a nonnegative
+safe integer in milliseconds (zero disables waiting); numeric `.npmrc` values
+are converted to YAML numbers. Reporter values are `default`, `append-only`,
+`ndjson`, and `silent`, or preserved environment placeholders.
+
+From 11.28.0 / 12.7.0, dynamic `userAgent` values remain in their sources because
+pnpm ignores project values containing environment placeholders. From 11.28.1,
+invalid `patchedDependencies` maps and non-array `packages` values are retained
+with diagnostics. From 12.8.2, `globalShims` belongs in trusted global
+configuration and is retained with an incompatibility warning. Existing
+workspaces containing these incompatible values fail validation before writes.
+
 </details>
 
 <details>
@@ -254,13 +268,16 @@ Notes:
 - The migrator does not update the `packageManager` version, CI environment variables,
   shell setup, or pnpm commands in scripts. When `packageManager` still pins pnpm 10,
   pass `--compatibility v11` explicitly and update the pin separately.
-- Compatibility checks cover pnpm 11.27.1 and 12.6.0, retaining 11.25.0,
-  11.26.0, 12.2.1, 12.3.4, 12.4.0, 12.4.2, 12.5.0, and 12.5.1 regressions.
-  As [audited on 2026-09-24](docs/research/pnpm-settings-bump-2026-09-24.md),
-  npm `latest` and the highest stable release are 12.6.0; `latest-11` is 11.27.1.
-  The project is pinned to 12.6.0. The removed `pnpm install --resolution-only` CLI
-  flag is outside this settings migrator's scope; replace it with
-  `pnpm peers check` in scripts before upgrading.
+- Compatibility checks cover pnpm 11.28.2 and 12.8.2, including 11.28.0,
+  11.28.1, 12.7.0, 12.8.0, and 12.8.1. Earlier regressions remain at 11.25.0,
+  11.26.0, 11.27.1, 12.2.1, 12.3.4, 12.4.0, 12.4.2, 12.5.0, 12.5.1, and 12.6.0.
+  As [audited on 2026-09-30](docs/research/pnpm-settings-bump-2026-09-30.md),
+  npm `latest` is 12.8.1; the highest confirmed stable release is 12.8.2 on
+  `next-12`. The project is pinned to 12.8.1. These checks verify the documented
+  fixtures, not every setting in every release. v10 has unit regressions and
+  source review through 10.34.6; real v10 consumption remains unverified.
+  The removed `pnpm install --resolution-only` CLI flag is outside this settings
+  migrator's scope; replace it with `pnpm peers check` in scripts before upgrading.
 
 </details>
 

package/dist/cli.mjs

@@ -530,11 +530,61 @@ const PNPM_V12_5_1_MINIMUM_VERSION = [
 	1
 ];
 /**
+* Release introducing forceIgnoresPlatform and filtering dynamic user agents.
+*/
+const PNPM_V11_28_MINIMUM_VERSION = [
+	11,
+	28,
+	0
+];
+/**
+* Release validating patch path maps before reading them.
+*/
+const PNPM_V11_28_1_MINIMUM_VERSION = [
+	11,
+	28,
+	1
+];
+/**
+* Release adding force, publishing, and reporter settings.
+*/
+const PNPM_V12_7_MINIMUM_VERSION = [
+	12,
+	7,
+	0
+];
+/**
+* Release restricting global shims to trusted configuration.
+*/
+const PNPM_V12_8_2_MINIMUM_VERSION = [
+	12,
+	8,
+	2
+];
+/**
+* Workspace settings first consumed by pnpm v12 in 12.7.0.
+*/
+const PNPM_V12_7_WORKSPACE_SETTINGS = [
+	"forceIgnoresPlatform",
+	"publishWaitTimeout",
+	"reporter"
+];
+/**
 * Version-gated settings. Add a release entry only when supported fields change.
 *
 * @see https://github.com/pnpm/pnpm/blob/v12.4.0/pnpm/crates/config/src/workspace_yaml.rs
 */
 const PNPM_SETTINGS_CAPABILITIES = [
+	{
+		minimumVersion: PNPM_V11_28_MINIMUM_VERSION,
+		workspaceFields: ["forceIgnoresPlatform"],
+		taskFields: []
+	},
+	{
+		minimumVersion: PNPM_V12_7_MINIMUM_VERSION,
+		workspaceFields: PNPM_V12_7_WORKSPACE_SETTINGS,
+		taskFields: []
+	},
 	{
 		minimumVersion: [
 			11,
@@ -602,7 +652,7 @@ const v11OnlyWorkspaceSettings = new Set(PNPM_V11_ONLY_WORKSPACE_SETTINGS);
 /**
 * Settings accepted by a pnpm v12 project workspace manifest.
 */
-const PNPM_V12_WORKSPACE_SETTINGS_FIELDS = [...PNPM_V11_WORKSPACE_SETTINGS_FIELDS.filter((field) => !v11OnlyWorkspaceSettings.has(field) && !PNPM_V12_6_WORKSPACE_SETTINGS.includes(field)), ...PNPM_V12_ONLY_WORKSPACE_SETTINGS];
+const PNPM_V12_WORKSPACE_SETTINGS_FIELDS = [...PNPM_V11_WORKSPACE_SETTINGS_FIELDS.filter((field) => !v11OnlyWorkspaceSettings.has(field) && !PNPM_V12_6_WORKSPACE_SETTINGS.includes(field) && !PNPM_V12_7_WORKSPACE_SETTINGS.includes(field)), ...PNPM_V12_ONLY_WORKSPACE_SETTINGS];
 //#endregion
 //#region src/constants/settings-schema.ts
 /**
@@ -982,8 +1032,19 @@ const MAX_TASK_PRIORITY = 2147483647;
 * @returns Whether a scalar value cannot be read by the target
 */
 function hasInvalidScalarValue(key, value, target) {
-	if (["autoDedupe", "saveTypes"].includes(key)) return !isBoolean(value);
+	if ([
+		"autoDedupe",
+		"saveTypes",
+		"forceIgnoresPlatform"
+	].includes(key)) return !isBoolean(value);
+	if (key === "publishWaitTimeout") return !isNumber(value) || !Number.isSafeInteger(value) || value < 0;
 	if (target.compatibility === "v12") {
+		if (key === "reporter") return !isString(value) || !value.includes("${") && ![
+			"default",
+			"append-only",
+			"ndjson",
+			"silent"
+		].includes(value);
 		if (key === "progress") return !isBoolean(value);
 		if (key === "tagVersionPrefix") return !isString(value);
 		if (key === "loglevel") return !isString(value) || !value.includes("${") && ![
@@ -997,6 +1058,22 @@ function hasInvalidScalarValue(key, value, target) {
 	return false;
 }
 /**
+* Reject settings ignored or newly validated by the September releases.
+*
+* @param key - Canonical workspace setting name
+* @param value - Untrusted source value
+* @param target - Confirmed version for release-specific restrictions
+*
+* @returns Whether the value cannot be used by the target release
+*/
+function hasInvalidReleaseValue(key, value, target) {
+	if (key === "globalShims" && supportsMinimumVersion(target.version, PNPM_V12_8_2_MINIMUM_VERSION)) return true;
+	if (key === "userAgent" && isString(value) && value.includes("${") && (supportsMinimumVersion(target.version, PNPM_V11_28_MINIMUM_VERSION) || supportsMinimumVersion(target.version, PNPM_V12_7_MINIMUM_VERSION))) return true;
+	if (key === "packages" && value !== null && value !== void 0 && supportsMinimumVersion(target.version, PNPM_V11_28_1_MINIMUM_VERSION)) return !isArray(value) || value.some((entry) => !isString(entry) || !entry);
+	if (key === "patchedDependencies" && supportsMinimumVersion(target.version, PNPM_V11_28_1_MINIMUM_VERSION)) return !value || typeof value !== "object" || isArray(value) || !Object.values(value).every(isString);
+	return false;
+}
+/**
 * Check value shapes that changed within a pnpm major release.
 *
 * Reject the whole setting so cleanup cannot discard unsupported nested values.
@@ -1008,6 +1085,7 @@ function hasInvalidScalarValue(key, value, target) {
 * @returns Whether the value uses a shape unsupported by the selected release
 */
 function hasIncompatibleSettingValue(key, value, target) {
+	if (hasInvalidReleaseValue(key, value, target)) return true;
 	if (hasInvalidScalarValue(key, value, target)) return true;
 	const supportsV12_5 = supportsMinimumVersion(target.version, PNPM_V12_5_MINIMUM_VERSION);
 	if (key === "supportedArchitectures" && isArray(value)) return !supportsV12_5;
@@ -1527,12 +1605,15 @@ function normalizeNpmrcKey(key) {
 /**
 * Convert scalar list settings to the array representation required by YAML.
 *
-* @param settings - Selected `.npmrc` settings with camelCase keys
+* @param settings - `.npmrc` settings with original or camelCase keys
 *
 * @returns Settings with each scalar list value preserved as one array item
 */
 function normalizeNpmrcSettings(settings) {
-	for (const key of NPMRC_STRING_ARRAY_SETTINGS) if (isString(settings[key])) settings[key] = [settings[key]];
+	for (const [key, value] of Object.entries(settings)) {
+		const canonicalKey = Object.keys(camelcaseKeys({ [key]: true }))[0] ?? key;
+		if (NPMRC_STRING_ARRAY_SETTINGS.includes(canonicalKey) && isString(value)) settings[key] = [value];
+	}
 	return settings;
 }
 /**
@@ -1646,7 +1727,9 @@ async function readMigratableNpmrc(path, target, options = {}) {
 			nodeDownloadMirrorKeys.push(key);
 			nodeDownloadMirrors[nodeMirrorMatch.groups.channel] = String(value);
 		} else {
-			const selected = selectPnpmSettings({ [key]: value }, target, {
+			const [canonicalKey] = Object.keys(camelcaseKeys({ [key]: true }));
+			const settingValue = canonicalKey === "publishWaitTimeout" && isString(value) && /^\d+$/u.test(value) ? Number(value) : value;
+			const selected = selectPnpmSettings(normalizeNpmrcSettings({ [key]: settingValue }), target, {
 				allowedFields: options.allowedFields,
 				npmrc: true
 			});
@@ -1655,7 +1738,7 @@ async function readMigratableNpmrc(path, target, options = {}) {
 			mergeSettingsIssues(issues, selected.issues);
 		}
 	}
-	const settings = normalizeNpmrcSettings(camelcaseKeys(migratable));
+	const settings = migratable;
 	if (Object.keys(nodeDownloadMirrors).length) {
 		const selected = selectPnpmSettings({ nodeDownloadMirrors }, target, { allowedFields: options.allowedFields });
 		if (selected.keys.length) {
@@ -2774,7 +2857,7 @@ const bold = getColor("bold");
 //#endregion
 //#region package.json
 var name = "pnpm-settings-migrator";
-var version = "0.13.0";
+var version = "0.14.0";
 //#endregion
 //#region src/cli/options.ts
 /**

package/dist/index.d.mts

@@ -206,6 +206,14 @@ interface PnpmRegistryDeclaration extends RegistryDeclaration {
  * Settings supported by pnpm v12, subject to the resolved version capabilities.
  */
 interface PnpmSettingsV12 {
+  /**
+   * Milliseconds to wait for published artifacts; zero disables waiting (12.7+).
+   */
+  publishWaitTimeout?: number;
+  /**
+   * Default terminal reporter (consumed by pnpm v12 from 12.7).
+   */
+  reporter?: 'default' | 'append-only' | 'ndjson' | 'silent';
   /**
    * Deduplicate compatible dependency versions during installation (pnpm 12.6+).
    */
@@ -248,6 +256,7 @@ interface PnpmSettingsV12 {
   externalDependencies?: string[];
   /**
    * Project-aware global shim policies, or `false` to disable global shims.
+   * Project configuration is accepted only before pnpm 12.8.2.
    */
   globalShims?: false | Record<string, GlobalShimPolicy>;
   /**
@@ -395,6 +404,11 @@ interface PnpmSettingsDeprecated {
  * Settings introduced in pnpm v11.
  */
 interface PnpmSettingsV11 {
+  /**
+   * Let --force install optional dependencies for other platforms
+   * (pnpm 11.28+ and 12.7+). Defaults remain controlled by pnpm.
+   */
+  forceIgnoresPlatform?: boolean;
   /**
    * Canonical replacement for the legacy `cleanupUnusedCatalogs` setting.
    */

package/dist/index.mjs

@@ -528,11 +528,61 @@ const PNPM_V12_5_1_MINIMUM_VERSION = [
 	1
 ];
 /**
+* Release introducing forceIgnoresPlatform and filtering dynamic user agents.
+*/
+const PNPM_V11_28_MINIMUM_VERSION = [
+	11,
+	28,
+	0
+];
+/**
+* Release validating patch path maps before reading them.
+*/
+const PNPM_V11_28_1_MINIMUM_VERSION = [
+	11,
+	28,
+	1
+];
+/**
+* Release adding force, publishing, and reporter settings.
+*/
+const PNPM_V12_7_MINIMUM_VERSION = [
+	12,
+	7,
+	0
+];
+/**
+* Release restricting global shims to trusted configuration.
+*/
+const PNPM_V12_8_2_MINIMUM_VERSION = [
+	12,
+	8,
+	2
+];
+/**
+* Workspace settings first consumed by pnpm v12 in 12.7.0.
+*/
+const PNPM_V12_7_WORKSPACE_SETTINGS = [
+	"forceIgnoresPlatform",
+	"publishWaitTimeout",
+	"reporter"
+];
+/**
 * Version-gated settings. Add a release entry only when supported fields change.
 *
 * @see https://github.com/pnpm/pnpm/blob/v12.4.0/pnpm/crates/config/src/workspace_yaml.rs
 */
 const PNPM_SETTINGS_CAPABILITIES = [
+	{
+		minimumVersion: PNPM_V11_28_MINIMUM_VERSION,
+		workspaceFields: ["forceIgnoresPlatform"],
+		taskFields: []
+	},
+	{
+		minimumVersion: PNPM_V12_7_MINIMUM_VERSION,
+		workspaceFields: PNPM_V12_7_WORKSPACE_SETTINGS,
+		taskFields: []
+	},
 	{
 		minimumVersion: [
 			11,
@@ -600,7 +650,7 @@ const v11OnlyWorkspaceSettings = new Set(PNPM_V11_ONLY_WORKSPACE_SETTINGS);
 /**
 * Settings accepted by a pnpm v12 project workspace manifest.
 */
-const PNPM_V12_WORKSPACE_SETTINGS_FIELDS = [...PNPM_V11_WORKSPACE_SETTINGS_FIELDS.filter((field) => !v11OnlyWorkspaceSettings.has(field) && !PNPM_V12_6_WORKSPACE_SETTINGS.includes(field)), ...PNPM_V12_ONLY_WORKSPACE_SETTINGS];
+const PNPM_V12_WORKSPACE_SETTINGS_FIELDS = [...PNPM_V11_WORKSPACE_SETTINGS_FIELDS.filter((field) => !v11OnlyWorkspaceSettings.has(field) && !PNPM_V12_6_WORKSPACE_SETTINGS.includes(field) && !PNPM_V12_7_WORKSPACE_SETTINGS.includes(field)), ...PNPM_V12_ONLY_WORKSPACE_SETTINGS];
 //#endregion
 //#region src/constants/settings-schema.ts
 /**
@@ -975,8 +1025,19 @@ const MAX_TASK_PRIORITY = 2147483647;
 * @returns Whether a scalar value cannot be read by the target
 */
 function hasInvalidScalarValue(key, value, target) {
-	if (["autoDedupe", "saveTypes"].includes(key)) return !isBoolean(value);
+	if ([
+		"autoDedupe",
+		"saveTypes",
+		"forceIgnoresPlatform"
+	].includes(key)) return !isBoolean(value);
+	if (key === "publishWaitTimeout") return !isNumber(value) || !Number.isSafeInteger(value) || value < 0;
 	if (target.compatibility === "v12") {
+		if (key === "reporter") return !isString(value) || !value.includes("${") && ![
+			"default",
+			"append-only",
+			"ndjson",
+			"silent"
+		].includes(value);
 		if (key === "progress") return !isBoolean(value);
 		if (key === "tagVersionPrefix") return !isString(value);
 		if (key === "loglevel") return !isString(value) || !value.includes("${") && ![
@@ -990,6 +1051,22 @@ function hasInvalidScalarValue(key, value, target) {
 	return false;
 }
 /**
+* Reject settings ignored or newly validated by the September releases.
+*
+* @param key - Canonical workspace setting name
+* @param value - Untrusted source value
+* @param target - Confirmed version for release-specific restrictions
+*
+* @returns Whether the value cannot be used by the target release
+*/
+function hasInvalidReleaseValue(key, value, target) {
+	if (key === "globalShims" && supportsMinimumVersion(target.version, PNPM_V12_8_2_MINIMUM_VERSION)) return true;
+	if (key === "userAgent" && isString(value) && value.includes("${") && (supportsMinimumVersion(target.version, PNPM_V11_28_MINIMUM_VERSION) || supportsMinimumVersion(target.version, PNPM_V12_7_MINIMUM_VERSION))) return true;
+	if (key === "packages" && value !== null && value !== void 0 && supportsMinimumVersion(target.version, PNPM_V11_28_1_MINIMUM_VERSION)) return !isArray(value) || value.some((entry) => !isString(entry) || !entry);
+	if (key === "patchedDependencies" && supportsMinimumVersion(target.version, PNPM_V11_28_1_MINIMUM_VERSION)) return !value || typeof value !== "object" || isArray(value) || !Object.values(value).every(isString);
+	return false;
+}
+/**
 * Check value shapes that changed within a pnpm major release.
 *
 * Reject the whole setting so cleanup cannot discard unsupported nested values.
@@ -1001,6 +1078,7 @@ function hasInvalidScalarValue(key, value, target) {
 * @returns Whether the value uses a shape unsupported by the selected release
 */
 function hasIncompatibleSettingValue(key, value, target) {
+	if (hasInvalidReleaseValue(key, value, target)) return true;
 	if (hasInvalidScalarValue(key, value, target)) return true;
 	const supportsV12_5 = supportsMinimumVersion(target.version, PNPM_V12_5_MINIMUM_VERSION);
 	if (key === "supportedArchitectures" && isArray(value)) return !supportsV12_5;
@@ -1520,12 +1598,15 @@ function normalizeNpmrcKey(key) {
 /**
 * Convert scalar list settings to the array representation required by YAML.
 *
-* @param settings - Selected `.npmrc` settings with camelCase keys
+* @param settings - `.npmrc` settings with original or camelCase keys
 *
 * @returns Settings with each scalar list value preserved as one array item
 */
 function normalizeNpmrcSettings(settings) {
-	for (const key of NPMRC_STRING_ARRAY_SETTINGS) if (isString(settings[key])) settings[key] = [settings[key]];
+	for (const [key, value] of Object.entries(settings)) {
+		const canonicalKey = Object.keys(camelcaseKeys({ [key]: true }))[0] ?? key;
+		if (NPMRC_STRING_ARRAY_SETTINGS.includes(canonicalKey) && isString(value)) settings[key] = [value];
+	}
 	return settings;
 }
 /**
@@ -1639,7 +1720,9 @@ async function readMigratableNpmrc(path, target, options = {}) {
 			nodeDownloadMirrorKeys.push(key);
 			nodeDownloadMirrors[nodeMirrorMatch.groups.channel] = String(value);
 		} else {
-			const selected = selectPnpmSettings({ [key]: value }, target, {
+			const [canonicalKey] = Object.keys(camelcaseKeys({ [key]: true }));
+			const settingValue = canonicalKey === "publishWaitTimeout" && isString(value) && /^\d+$/u.test(value) ? Number(value) : value;
+			const selected = selectPnpmSettings(normalizeNpmrcSettings({ [key]: settingValue }), target, {
 				allowedFields: options.allowedFields,
 				npmrc: true
 			});
@@ -1648,7 +1731,7 @@ async function readMigratableNpmrc(path, target, options = {}) {
 			mergeSettingsIssues(issues, selected.issues);
 		}
 	}
-	const settings = normalizeNpmrcSettings(camelcaseKeys(migratable));
+	const settings = migratable;
 	if (Object.keys(nodeDownloadMirrors).length) {
 		const selected = selectPnpmSettings({ nodeDownloadMirrors }, target, { allowedFields: options.allowedFields });
 		if (selected.keys.length) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pnpm-settings-migrator",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Move pnpm settings from `pnpm` field in `package.json` and `.npmrc` file to `pnpm-workspace.yaml`",
   "keywords": [
     "migrator",
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@ntnyq/utils": "^0.23.0",
-    "@pnpm/types": "^1102.1.0",
+    "@pnpm/types": "^1102.1.1",
     "cac": "^7.0.0",
     "camelcase-keys": "^10.0.3",
     "consola": "^3.4.2",
@@ -56,17 +56,17 @@
     "yaml": "^2.9.1"
   },
   "devDependencies": {
-    "@types/node": "^26.6.2",
+    "@types/node": "^26.6.3",
     "bumpp": "^12.3.0",
     "husky": "^9.1.7",
     "nano-staged": "^1.0.2",
     "npm-run-all2": "^9.0.3",
-    "oxfmt": "^0.70.0",
-    "oxlint": "^1.85.0",
+    "oxfmt": "^0.71.0",
+    "oxlint": "^1.86.0",
     "tsdown": "^0.23.0",
     "tsx": "^4.23.15",
     "typescript": "^7.0.2",
-    "vitest": "^5.0.1"
+    "vitest": "^5.0.2"
   },
   "nano-staged": {
     "*.{js,ts,mjs,tsx}": "oxlint --fix",