pnpm-settings-migrator 0.2.0 → 0.4.0

package/README.md

@@ -31,6 +31,18 @@ Current working directory.
 
 Sort keys when write `pnpm-workspace.yaml`.
 
+### `--compatibility`
+
+- **Type**: `'auto' | 'v10' | 'v11'`
+- **Default**: `'auto'`
+
+Compatibility target for migrated settings:
+
+- `auto`: infer from `packageManager` (`pnpm@11+` => `v11`, otherwise `v10`)
+- `v10`: keep legacy settings as-is
+- `v11`: normalize to v11-compatible settings (`allowBuilds`, `allowUnusedPatches`, etc.)
+  and migrate all non auth/registry `.npmrc` entries to `pnpm-workspace.yaml`
+
 ### `--strategy`
 
 - **Type**: `'discard' | 'merge' | 'overwrite'`

package/dist/cli.mjs

@@ -11,21 +11,15 @@ import { getColor } from "consola/utils";
 import camelcaseKeys from "camelcase-keys";
 import { readIniFile } from "read-ini-file";
 import { kebabCase } from "uncase";
-
 //#region package.json
 var name = "pnpm-settings-migrator";
-var version = "0.2.0";
-
+var version = "0.4.0";
 //#endregion
 //#region src/constants.ts
 const NPMRC = ".npmrc";
 const PACKAGE_JSON = "package.json";
 const PNPM_WORKSPACE_YAML = "pnpm-workspace.yaml";
 /**
-* Default indent: 2 spaces
-*/
-const DEFAULT_INDENT = 2;
-/**
 * @see {@link https://github.com/pnpm/pnpm/blob/main/packages/types/src/package.ts}
 */
 const PNPM_SETTINGS_FIELDS = [
@@ -36,21 +30,34 @@ const PNPM_SETTINGS_FIELDS = [
 	"auditConfig",
 	"configDependencies",
 	"executionEnv",
+	"httpProxy",
+	"httpsProxy",
 	"ignoredBuiltDependencies",
 	"ignoredOptionalDependencies",
 	"ignorePatchFailures",
 	"neverBuiltDependencies",
+	"nodeDownloadMirrors",
+	"noProxy",
+	"npmrcAuthFile",
 	"onlyBuiltDependencies",
 	"onlyBuiltDependenciesFile",
 	"overrides",
 	"packageExtensions",
 	"patchedDependencies",
 	"peerDependencyRules",
+	"registries",
 	"requiredScripts",
 	"supportedArchitectures",
 	"updateConfig"
 ];
-
+const PNPM_V11_REMOVED_SETTINGS = [
+	"allowNonAppliedPatches",
+	"ignorePatchFailures",
+	"ignoredBuiltDependencies",
+	"neverBuiltDependencies",
+	"onlyBuiltDependencies",
+	"onlyBuiltDependenciesFile"
+];
 //#endregion
 //#region src/options.ts
 /**
@@ -59,6 +66,7 @@ const PNPM_SETTINGS_FIELDS = [
 const DEFAULT_OPTIONS = {
 	cleanNpmrc: true,
 	cleanPackageJson: true,
+	compatibility: "auto",
 	cwd: process.cwd(),
 	newlineBetween: true,
 	sortKeys: false,
@@ -70,6 +78,11 @@ const VALID_STRATEGIES = [
 	"merge",
 	"overwrite"
 ];
+const VALID_COMPATIBILITIES = [
+	"auto",
+	"v10",
+	"v11"
+];
 /**
 * Resolve and normalize migration options with defaults.
 *
@@ -94,6 +107,7 @@ const VALID_STRATEGIES = [
 function resolveOptions(options = {}) {
 	return {
 		cleanNpmrc: options.cleanNpmrc ?? DEFAULT_OPTIONS.cleanNpmrc,
+		compatibility: resolveCompatibility(options.compatibility),
 		cwd: options.cwd ?? DEFAULT_OPTIONS.cwd,
 		newlineBetween: options.newlineBetween ?? DEFAULT_OPTIONS.newlineBetween,
 		sortKeys: options.sortKeys ?? DEFAULT_OPTIONS.sortKeys,
@@ -102,12 +116,16 @@ function resolveOptions(options = {}) {
 		cleanPackageJson: options.cleanPackageJson ?? DEFAULT_OPTIONS.cleanPackageJson
 	};
 }
+function resolveCompatibility(compatibility) {
+	if (!compatibility) return DEFAULT_OPTIONS.compatibility;
+	if (VALID_COMPATIBILITIES.includes(compatibility)) return compatibility;
+	throw new Error(`Invalid compatibility: ${compatibility}. Expected one of: ${VALID_COMPATIBILITIES.join(", ")}`);
+}
 function resolveStrategy(strategy) {
 	if (!strategy) return DEFAULT_OPTIONS.strategy;
 	if (VALID_STRATEGIES.includes(strategy)) return strategy;
 	throw new Error(`Invalid strategy: ${strategy}. Expected one of: ${VALID_STRATEGIES.join(", ")}`);
 }
-
 //#endregion
 //#region src/utils/fs.ts
 /**
@@ -134,17 +152,13 @@ async function fsReadFile(path) {
 async function fsWriteFile(path, content) {
 	await writeFile(path, `${content.trimEnd()}\n`, "utf-8");
 }
-
-//#endregion
-//#region src/utils/color.ts
-const cyan = getColor("cyan");
-const yellow = getColor("yellow");
+getColor("cyan");
+getColor("yellow");
 const dim = getColor("dim");
 const green = getColor("green");
 const red = getColor("red");
 const bold = getColor("bold");
 const magenta = getColor("magenta");
-
 //#endregion
 //#region src/utils/merge.ts
 /**
@@ -220,9 +234,24 @@ function mergeWithArrayDedupe(existing, incoming) {
 	}
 	return result;
 }
-
 //#endregion
 //#region src/utils/npmrc.ts
+const NPMRC_AUTH_OR_REGISTRY_KEYS = [
+	"_auth",
+	"_authtoken",
+	"_password",
+	"always-auth",
+	"ca",
+	"cafile",
+	"cert",
+	"certfile",
+	"email",
+	"key",
+	"keyfile",
+	"otp",
+	"tokenhelper",
+	"username"
+];
 /**
 * Remove pnpm-related settings from `.npmrc` file.
 *
@@ -241,9 +270,15 @@ function mergeWithArrayDedupe(existing, incoming) {
 * await pruneNpmrc('/path/to/.npmrc')
 * ```
 */
-async function pruneNpmrc(path) {
+async function pruneNpmrc(path, compatibility = "v10", migratedKeys = []) {
 	const pnpmSettingsFields = PNPM_SETTINGS_FIELDS.map((v) => kebabCase(v));
-	await fsWriteFile(path, (await fsReadFile(path)).split(/\r?\n/).filter((line) => !pnpmSettingsFields.some((v) => line.trim().startsWith(v))).join("\n"));
+	const migratedKeySet = new Set(migratedKeys.map(normalizeNpmrcKey));
+	await fsWriteFile(path, (await fsReadFile(path)).split(/\r?\n/).filter((line) => {
+		const key = getNpmrcLineKey(line);
+		if (!key) return true;
+		if (compatibility === "v11") return !migratedKeySet.has(normalizeNpmrcKey(key));
+		return !pnpmSettingsFields.some((v) => key.startsWith(v));
+	}).join("\n"));
 }
 /**
 * Read and parse `.npmrc` file with camelCase key conversion.
@@ -264,10 +299,57 @@ async function pruneNpmrc(path) {
 * // config.allowBuilds, config.packageExtensions, etc.
 * ```
 */
+/**
+* Read `.npmrc` and return settings that should be migrated into workspace config.
+*
+* - `v10`: returns all keys (legacy whitelist filtering happens in caller).
+* - `v11`: excludes auth/registry keys because pnpm still reads them from `.npmrc`.
+*/
+async function readMigratableNpmrc(path, compatibility) {
+	const raw = await readIniFile(path);
+	if (compatibility === "v10") return {
+		keys: Object.keys(raw),
+		settings: camelcaseKeys(raw)
+	};
+	const migratable = {};
+	const keys = [];
+	for (const [key, value] of Object.entries(raw)) if (!isNpmrcAuthOrRegistryKey(key)) {
+		migratable[key] = value;
+		keys.push(key);
+	}
+	return {
+		keys,
+		settings: camelcaseKeys(migratable)
+	};
+}
 async function readNpmrc(path) {
 	return camelcaseKeys(await readIniFile(path));
 }
-
+/**
+* Extract key name from a raw `.npmrc` line.
+*/
+function getNpmrcLineKey(line) {
+	const trimmed = line.trim();
+	if (!trimmed || trimmed.startsWith(";") || trimmed.startsWith("#")) return;
+	const index = trimmed.indexOf("=");
+	if (index <= 0) return;
+	return normalizeNpmrcKey(trimmed.slice(0, index));
+}
+/**
+* Check whether a `.npmrc` key is auth/registry-related and should stay in v11.
+*/
+function isNpmrcAuthOrRegistryKey(key) {
+	const normalized = normalizeNpmrcKey(key);
+	if (normalized.startsWith("//")) return true;
+	if (normalized === "registry" || normalized.endsWith(":registry")) return true;
+	return NPMRC_AUTH_OR_REGISTRY_KEYS.some((v) => normalized === v || normalized.endsWith(`:${v}`));
+}
+/**
+* Normalize `.npmrc` key for case-insensitive matching.
+*/
+function normalizeNpmrcKey(key) {
+	return key.trim().replace(/\[\]$/, "").toLowerCase();
+}
 //#endregion
 //#region src/core.ts
 /**
@@ -321,9 +403,9 @@ async function migratePnpmSettings(rawOptions = {}) {
 			consola.warn("No pnpm settings files to migrate");
 			return;
 		}
-		let packageJsonIndent = DEFAULT_INDENT;
+		let packageJsonIndent = 2;
 		let packageJsonObject = {};
-		let pnpmWorkspaceYamlIndent = DEFAULT_INDENT;
+		let pnpmWorkspaceYamlIndent = 2;
 		let pnpmWorkspaceYamlObject = {};
 		if (packageJsonExists) {
 			const content = await fsReadFile(packageJsonPath);
@@ -335,7 +417,15 @@ async function migratePnpmSettings(rawOptions = {}) {
 			pnpmWorkspaceYamlIndent = detectIndent(content).amount;
 			pnpmWorkspaceYamlObject = parse(content);
 		}
-		const pnpmSettingsInNpmrc = npmrcExists ? pick(await readNpmrc(npmrcPath), PNPM_SETTINGS_FIELDS) : {};
+		const compatibility = resolveCompatibilityTarget(options.compatibility, packageJsonObject.packageManager);
+		const npmrcMigratable = npmrcExists ? compatibility === "v10" ? {
+			keys: PNPM_SETTINGS_FIELDS,
+			settings: pick(await readNpmrc(npmrcPath), PNPM_SETTINGS_FIELDS)
+		} : await readMigratableNpmrc(npmrcPath, compatibility) : {
+			keys: [],
+			settings: {}
+		};
+		const pnpmSettingsInNpmrc = npmrcMigratable.settings;
 		const hasPnpmInPackageJson = !!packageJsonObject.pnpm;
 		const hasResolutions = options.yarnResolutions && !!packageJsonObject.resolutions;
 		const hasNpmrcSettings = Object.keys(pnpmSettingsInNpmrc).length > 0;
@@ -352,6 +442,7 @@ async function migratePnpmSettings(rawOptions = {}) {
 			...pnpmSettingsInNpmrc,
 			...pnpmSettingsInPackageJson
 		};
+		normalizeIncomingSettings(incomingSettings, compatibility);
 		const pnpmWorkspaceResult = mergeByStrategy(pnpmWorkspaceYamlObject, incomingSettings, options.strategy);
 		const yamlDocument = new Document({}, { sortMapEntries: options.sortKeys });
 		Object.entries(pnpmWorkspaceResult).forEach(([key, value]) => {
@@ -362,7 +453,7 @@ async function migratePnpmSettings(rawOptions = {}) {
 		});
 		const yamlContent = yamlDocument.toString({ indent: pnpmWorkspaceYamlIndent });
 		await fsWriteFile(pnpmWorkspaceYamlPath, options.newlineBetween ? yamlContent.replace(/\n(?=[^\s#][^:\n]*:)/g, "\n\n") : yamlContent);
-		if (npmrcExists && options.cleanNpmrc) await pruneNpmrc(npmrcPath);
+		if (npmrcExists && options.cleanNpmrc) await pruneNpmrc(npmrcPath, compatibility, npmrcMigratable.keys);
 		if (packageJsonExists && options.cleanPackageJson && (packageJsonObject.pnpm || packageJsonObject.resolutions)) {
 			delete packageJsonObject.pnpm;
 			if (options.yarnResolutions) delete packageJsonObject.resolutions;
@@ -373,11 +464,41 @@ async function migratePnpmSettings(rawOptions = {}) {
 		throw err;
 	}
 }
-
+/**
+* Build v11 `allowBuilds` map from legacy build-script settings.
+*/
+function collectAllowBuildsFromLegacy(incomingSettings) {
+	const allowBuilds = {};
+	for (const name of incomingSettings.onlyBuiltDependencies || []) allowBuilds[name] = true;
+	for (const name of incomingSettings.ignoredBuiltDependencies || []) allowBuilds[name] = false;
+	for (const name of incomingSettings.neverBuiltDependencies || []) allowBuilds[name] = false;
+	return Object.keys(allowBuilds).length ? allowBuilds : void 0;
+}
+/**
+* Normalize incoming settings according to compatibility target.
+*/
+function normalizeIncomingSettings(incomingSettings, compatibility) {
+	if (compatibility === "v10") return;
+	if (incomingSettings.allowNonAppliedPatches !== void 0) incomingSettings.allowUnusedPatches = incomingSettings.allowUnusedPatches ?? incomingSettings.allowNonAppliedPatches;
+	const allowBuildsFromLegacy = collectAllowBuildsFromLegacy(incomingSettings);
+	if (allowBuildsFromLegacy) incomingSettings.allowBuilds = {
+		...allowBuildsFromLegacy,
+		...incomingSettings.allowBuilds || {}
+	};
+	for (const key of PNPM_V11_REMOVED_SETTINGS) delete incomingSettings[key];
+}
+/**
+* Resolve final compatibility target from user option and package manager hint.
+*/
+function resolveCompatibilityTarget(compatibility, packageManager) {
+	if (compatibility !== "auto") return compatibility;
+	const [, major] = (packageManager || "").match(/^pnpm@(\d+)(?:\.|$)/) || [];
+	return Number(major) >= 11 ? "v11" : "v10";
+}
 //#endregion
 //#region src/cli.ts
 const cli = cac(name);
-cli.version(version).option("--cwd [cwd]", "Current working directory").option("--sort-keys", "Sort keys when write pnpm-workspace.yaml").option("--strategy <strategy>", "Strategy to handle conflicts (discard, merge, overwrite)").option("--no-yarn-resolutions", "Disable migrating resolutions field in package.json").option("--no-newline-between", "Disable adding newlines between each root keys").option("--no-clean-npmrc", "Disable removing pnpm settings in .npmrc file").option("--no-clean-package-json", "Disable removing pnpm fields in package.json").help();
+cli.version(version).option("--cwd [cwd]", "Current working directory").option("--sort-keys", "Sort keys when write pnpm-workspace.yaml").option("--compatibility <compatibility>", "Compatibility target (auto, v10, v11)").option("--strategy <strategy>", "Strategy to handle conflicts (discard, merge, overwrite)").option("--no-yarn-resolutions", "Disable migrating resolutions field in package.json").option("--no-newline-between", "Disable adding newlines between each root keys").option("--no-clean-npmrc", "Disable removing pnpm settings in .npmrc file").option("--no-clean-package-json", "Disable removing pnpm fields in package.json").help();
 cli.command("").action(async (options) => {
 	try {
 		consola$1.log(`\n${bold(magenta(name))} ${dim(`v${version}`)}`);
@@ -391,6 +512,5 @@ cli.command("").action(async (options) => {
 	}
 });
 cli.parse();
-
 //#endregion
-export {  };
+export {};

package/dist/index.d.mts

@@ -2,7 +2,11 @@ import { PnpmSettings } from "@pnpm/types";
 
 //#region src/types.d.ts
 /**
- * Merge strategy for combining pnpm settings
+ * Compatibility target used by the migrator.
+ */
+type CompatibilityTarget = 'auto' | 'v10' | 'v11';
+/**
+ * Merge strategy for combining pnpm settings.
  */
 type MergeStrategy = 'discard' | 'merge' | 'overwrite';
 /**
@@ -21,6 +25,15 @@ interface Options {
    * @default true
    */
   cleanPackageJson?: boolean;
+  /**
+   * pnpm compatibility target.
+   * - `auto`: detect from `packageManager` (fallback to `v10`)
+   * - `v10`: keep legacy v10 settings
+   * - `v11`: normalize to v11-compatible settings
+   *
+   * @default 'auto'
+   */
+  compatibility?: CompatibilityTarget;
   /**
    * Current working directory
    *
@@ -68,6 +81,10 @@ interface PackageJson {
    * @compatibility npm, bun
    */
   overrides?: Record<string, string>;
+  /**
+   * Package manager declaration, for example `pnpm@11.0.0`
+   */
+  packageManager?: string;
   /**
    * pnpm settings
    */
@@ -84,11 +101,41 @@ interface PackageJson {
  * @pg
  */
 type NpmRC = Record<string, any>;
+/**
+ * Deprecated `pnpm` settings in `package.json`
+ * @see {@link https://github.com/pnpm/pnpm/blob/main/core/types/CHANGELOG.md#major-changes}
+ */
+interface PnpmSettingsDeprecated {
+  /**
+   * @deprecated
+   */
+  allowNonAppliedPatches?: boolean;
+  /**
+   * @deprecated
+   */
+  ignoredBuiltDependencies?: string[];
+  /**
+   * @deprecated
+   */
+  ignorePatchFailures?: boolean;
+  /**
+   * @deprecated
+   */
+  neverBuiltDependencies?: string[];
+  /**
+   * @deprecated
+   */
+  onlyBuiltDependencies?: string[];
+  /**
+   * @deprecated
+   */
+  onlyBuiltDependenciesFile?: string;
+}
 /**
  * `pnpm-workspace` types
  * @pg
  */
-type PnpmWorkspace = PnpmSettings & PnpmWorkspaceLegacy;
+type PnpmWorkspace = PnpmSettings & PnpmSettingsDeprecated & PnpmWorkspaceLegacy;
 //#endregion
 //#region src/core.d.ts
 /**
@@ -151,4 +198,4 @@ declare function migratePnpmSettings(rawOptions?: Options): Promise<void>;
  */
 declare function resolveOptions(options?: Options): Required<Options>;
 //#endregion
-export { MergeStrategy, NpmRC, Options, PackageJson, PnpmWorkspace, PnpmWorkspaceLegacy, migratePnpmSettings, resolveOptions };
+export { CompatibilityTarget, MergeStrategy, NpmRC, Options, PackageJson, PnpmSettingsDeprecated, PnpmWorkspace, PnpmWorkspaceLegacy, migratePnpmSettings, resolveOptions };

package/dist/index.mjs

@@ -10,16 +10,11 @@ import { getColor } from "consola/utils";
 import camelcaseKeys from "camelcase-keys";
 import { readIniFile } from "read-ini-file";
 import { kebabCase } from "uncase";
-
 //#region src/constants.ts
 const NPMRC = ".npmrc";
 const PACKAGE_JSON = "package.json";
 const PNPM_WORKSPACE_YAML = "pnpm-workspace.yaml";
 /**
-* Default indent: 2 spaces
-*/
-const DEFAULT_INDENT = 2;
-/**
 * @see {@link https://github.com/pnpm/pnpm/blob/main/packages/types/src/package.ts}
 */
 const PNPM_SETTINGS_FIELDS = [
@@ -30,21 +25,34 @@ const PNPM_SETTINGS_FIELDS = [
 	"auditConfig",
 	"configDependencies",
 	"executionEnv",
+	"httpProxy",
+	"httpsProxy",
 	"ignoredBuiltDependencies",
 	"ignoredOptionalDependencies",
 	"ignorePatchFailures",
 	"neverBuiltDependencies",
+	"nodeDownloadMirrors",
+	"noProxy",
+	"npmrcAuthFile",
 	"onlyBuiltDependencies",
 	"onlyBuiltDependenciesFile",
 	"overrides",
 	"packageExtensions",
 	"patchedDependencies",
 	"peerDependencyRules",
+	"registries",
 	"requiredScripts",
 	"supportedArchitectures",
 	"updateConfig"
 ];
-
+const PNPM_V11_REMOVED_SETTINGS = [
+	"allowNonAppliedPatches",
+	"ignorePatchFailures",
+	"ignoredBuiltDependencies",
+	"neverBuiltDependencies",
+	"onlyBuiltDependencies",
+	"onlyBuiltDependenciesFile"
+];
 //#endregion
 //#region src/options.ts
 /**
@@ -53,6 +61,7 @@ const PNPM_SETTINGS_FIELDS = [
 const DEFAULT_OPTIONS = {
 	cleanNpmrc: true,
 	cleanPackageJson: true,
+	compatibility: "auto",
 	cwd: process.cwd(),
 	newlineBetween: true,
 	sortKeys: false,
@@ -64,6 +73,11 @@ const VALID_STRATEGIES = [
 	"merge",
 	"overwrite"
 ];
+const VALID_COMPATIBILITIES = [
+	"auto",
+	"v10",
+	"v11"
+];
 /**
 * Resolve and normalize migration options with defaults.
 *
@@ -88,6 +102,7 @@ const VALID_STRATEGIES = [
 function resolveOptions(options = {}) {
 	return {
 		cleanNpmrc: options.cleanNpmrc ?? DEFAULT_OPTIONS.cleanNpmrc,
+		compatibility: resolveCompatibility(options.compatibility),
 		cwd: options.cwd ?? DEFAULT_OPTIONS.cwd,
 		newlineBetween: options.newlineBetween ?? DEFAULT_OPTIONS.newlineBetween,
 		sortKeys: options.sortKeys ?? DEFAULT_OPTIONS.sortKeys,
@@ -96,12 +111,16 @@ function resolveOptions(options = {}) {
 		cleanPackageJson: options.cleanPackageJson ?? DEFAULT_OPTIONS.cleanPackageJson
 	};
 }
+function resolveCompatibility(compatibility) {
+	if (!compatibility) return DEFAULT_OPTIONS.compatibility;
+	if (VALID_COMPATIBILITIES.includes(compatibility)) return compatibility;
+	throw new Error(`Invalid compatibility: ${compatibility}. Expected one of: ${VALID_COMPATIBILITIES.join(", ")}`);
+}
 function resolveStrategy(strategy) {
 	if (!strategy) return DEFAULT_OPTIONS.strategy;
 	if (VALID_STRATEGIES.includes(strategy)) return strategy;
 	throw new Error(`Invalid strategy: ${strategy}. Expected one of: ${VALID_STRATEGIES.join(", ")}`);
 }
-
 //#endregion
 //#region src/utils/fs.ts
 /**
@@ -128,17 +147,13 @@ async function fsReadFile(path) {
 async function fsWriteFile(path, content) {
 	await writeFile(path, `${content.trimEnd()}\n`, "utf-8");
 }
-
-//#endregion
-//#region src/utils/color.ts
-const cyan = getColor("cyan");
-const yellow = getColor("yellow");
+getColor("cyan");
+getColor("yellow");
 const dim = getColor("dim");
-const green = getColor("green");
-const red = getColor("red");
-const bold = getColor("bold");
-const magenta = getColor("magenta");
-
+getColor("green");
+getColor("red");
+getColor("bold");
+getColor("magenta");
 //#endregion
 //#region src/utils/merge.ts
 /**
@@ -214,9 +229,24 @@ function mergeWithArrayDedupe(existing, incoming) {
 	}
 	return result;
 }
-
 //#endregion
 //#region src/utils/npmrc.ts
+const NPMRC_AUTH_OR_REGISTRY_KEYS = [
+	"_auth",
+	"_authtoken",
+	"_password",
+	"always-auth",
+	"ca",
+	"cafile",
+	"cert",
+	"certfile",
+	"email",
+	"key",
+	"keyfile",
+	"otp",
+	"tokenhelper",
+	"username"
+];
 /**
 * Remove pnpm-related settings from `.npmrc` file.
 *
@@ -235,9 +265,15 @@ function mergeWithArrayDedupe(existing, incoming) {
 * await pruneNpmrc('/path/to/.npmrc')
 * ```
 */
-async function pruneNpmrc(path) {
+async function pruneNpmrc(path, compatibility = "v10", migratedKeys = []) {
 	const pnpmSettingsFields = PNPM_SETTINGS_FIELDS.map((v) => kebabCase(v));
-	await fsWriteFile(path, (await fsReadFile(path)).split(/\r?\n/).filter((line) => !pnpmSettingsFields.some((v) => line.trim().startsWith(v))).join("\n"));
+	const migratedKeySet = new Set(migratedKeys.map(normalizeNpmrcKey));
+	await fsWriteFile(path, (await fsReadFile(path)).split(/\r?\n/).filter((line) => {
+		const key = getNpmrcLineKey(line);
+		if (!key) return true;
+		if (compatibility === "v11") return !migratedKeySet.has(normalizeNpmrcKey(key));
+		return !pnpmSettingsFields.some((v) => key.startsWith(v));
+	}).join("\n"));
 }
 /**
 * Read and parse `.npmrc` file with camelCase key conversion.
@@ -258,10 +294,57 @@ async function pruneNpmrc(path) {
 * // config.allowBuilds, config.packageExtensions, etc.
 * ```
 */
+/**
+* Read `.npmrc` and return settings that should be migrated into workspace config.
+*
+* - `v10`: returns all keys (legacy whitelist filtering happens in caller).
+* - `v11`: excludes auth/registry keys because pnpm still reads them from `.npmrc`.
+*/
+async function readMigratableNpmrc(path, compatibility) {
+	const raw = await readIniFile(path);
+	if (compatibility === "v10") return {
+		keys: Object.keys(raw),
+		settings: camelcaseKeys(raw)
+	};
+	const migratable = {};
+	const keys = [];
+	for (const [key, value] of Object.entries(raw)) if (!isNpmrcAuthOrRegistryKey(key)) {
+		migratable[key] = value;
+		keys.push(key);
+	}
+	return {
+		keys,
+		settings: camelcaseKeys(migratable)
+	};
+}
 async function readNpmrc(path) {
 	return camelcaseKeys(await readIniFile(path));
 }
-
+/**
+* Extract key name from a raw `.npmrc` line.
+*/
+function getNpmrcLineKey(line) {
+	const trimmed = line.trim();
+	if (!trimmed || trimmed.startsWith(";") || trimmed.startsWith("#")) return;
+	const index = trimmed.indexOf("=");
+	if (index <= 0) return;
+	return normalizeNpmrcKey(trimmed.slice(0, index));
+}
+/**
+* Check whether a `.npmrc` key is auth/registry-related and should stay in v11.
+*/
+function isNpmrcAuthOrRegistryKey(key) {
+	const normalized = normalizeNpmrcKey(key);
+	if (normalized.startsWith("//")) return true;
+	if (normalized === "registry" || normalized.endsWith(":registry")) return true;
+	return NPMRC_AUTH_OR_REGISTRY_KEYS.some((v) => normalized === v || normalized.endsWith(`:${v}`));
+}
+/**
+* Normalize `.npmrc` key for case-insensitive matching.
+*/
+function normalizeNpmrcKey(key) {
+	return key.trim().replace(/\[\]$/, "").toLowerCase();
+}
 //#endregion
 //#region src/core.ts
 /**
@@ -315,9 +398,9 @@ async function migratePnpmSettings(rawOptions = {}) {
 			consola.warn("No pnpm settings files to migrate");
 			return;
 		}
-		let packageJsonIndent = DEFAULT_INDENT;
+		let packageJsonIndent = 2;
 		let packageJsonObject = {};
-		let pnpmWorkspaceYamlIndent = DEFAULT_INDENT;
+		let pnpmWorkspaceYamlIndent = 2;
 		let pnpmWorkspaceYamlObject = {};
 		if (packageJsonExists) {
 			const content = await fsReadFile(packageJsonPath);
@@ -329,7 +412,15 @@ async function migratePnpmSettings(rawOptions = {}) {
 			pnpmWorkspaceYamlIndent = detectIndent(content).amount;
 			pnpmWorkspaceYamlObject = parse(content);
 		}
-		const pnpmSettingsInNpmrc = npmrcExists ? pick(await readNpmrc(npmrcPath), PNPM_SETTINGS_FIELDS) : {};
+		const compatibility = resolveCompatibilityTarget(options.compatibility, packageJsonObject.packageManager);
+		const npmrcMigratable = npmrcExists ? compatibility === "v10" ? {
+			keys: PNPM_SETTINGS_FIELDS,
+			settings: pick(await readNpmrc(npmrcPath), PNPM_SETTINGS_FIELDS)
+		} : await readMigratableNpmrc(npmrcPath, compatibility) : {
+			keys: [],
+			settings: {}
+		};
+		const pnpmSettingsInNpmrc = npmrcMigratable.settings;
 		const hasPnpmInPackageJson = !!packageJsonObject.pnpm;
 		const hasResolutions = options.yarnResolutions && !!packageJsonObject.resolutions;
 		const hasNpmrcSettings = Object.keys(pnpmSettingsInNpmrc).length > 0;
@@ -346,6 +437,7 @@ async function migratePnpmSettings(rawOptions = {}) {
 			...pnpmSettingsInNpmrc,
 			...pnpmSettingsInPackageJson
 		};
+		normalizeIncomingSettings(incomingSettings, compatibility);
 		const pnpmWorkspaceResult = mergeByStrategy(pnpmWorkspaceYamlObject, incomingSettings, options.strategy);
 		const yamlDocument = new Document({}, { sortMapEntries: options.sortKeys });
 		Object.entries(pnpmWorkspaceResult).forEach(([key, value]) => {
@@ -356,7 +448,7 @@ async function migratePnpmSettings(rawOptions = {}) {
 		});
 		const yamlContent = yamlDocument.toString({ indent: pnpmWorkspaceYamlIndent });
 		await fsWriteFile(pnpmWorkspaceYamlPath, options.newlineBetween ? yamlContent.replace(/\n(?=[^\s#][^:\n]*:)/g, "\n\n") : yamlContent);
-		if (npmrcExists && options.cleanNpmrc) await pruneNpmrc(npmrcPath);
+		if (npmrcExists && options.cleanNpmrc) await pruneNpmrc(npmrcPath, compatibility, npmrcMigratable.keys);
 		if (packageJsonExists && options.cleanPackageJson && (packageJsonObject.pnpm || packageJsonObject.resolutions)) {
 			delete packageJsonObject.pnpm;
 			if (options.yarnResolutions) delete packageJsonObject.resolutions;
@@ -367,6 +459,36 @@ async function migratePnpmSettings(rawOptions = {}) {
 		throw err;
 	}
 }
-
+/**
+* Build v11 `allowBuilds` map from legacy build-script settings.
+*/
+function collectAllowBuildsFromLegacy(incomingSettings) {
+	const allowBuilds = {};
+	for (const name of incomingSettings.onlyBuiltDependencies || []) allowBuilds[name] = true;
+	for (const name of incomingSettings.ignoredBuiltDependencies || []) allowBuilds[name] = false;
+	for (const name of incomingSettings.neverBuiltDependencies || []) allowBuilds[name] = false;
+	return Object.keys(allowBuilds).length ? allowBuilds : void 0;
+}
+/**
+* Normalize incoming settings according to compatibility target.
+*/
+function normalizeIncomingSettings(incomingSettings, compatibility) {
+	if (compatibility === "v10") return;
+	if (incomingSettings.allowNonAppliedPatches !== void 0) incomingSettings.allowUnusedPatches = incomingSettings.allowUnusedPatches ?? incomingSettings.allowNonAppliedPatches;
+	const allowBuildsFromLegacy = collectAllowBuildsFromLegacy(incomingSettings);
+	if (allowBuildsFromLegacy) incomingSettings.allowBuilds = {
+		...allowBuildsFromLegacy,
+		...incomingSettings.allowBuilds || {}
+	};
+	for (const key of PNPM_V11_REMOVED_SETTINGS) delete incomingSettings[key];
+}
+/**
+* Resolve final compatibility target from user option and package manager hint.
+*/
+function resolveCompatibilityTarget(compatibility, packageManager) {
+	if (compatibility !== "auto") return compatibility;
+	const [, major] = (packageManager || "").match(/^pnpm@(\d+)(?:\.|$)/) || [];
+	return Number(major) >= 11 ? "v11" : "v10";
+}
 //#endregion
-export { migratePnpmSettings, resolveOptions };
+export { migratePnpmSettings, resolveOptions };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pnpm-settings-migrator",
   "type": "module",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Move pnpm settings from `pnpm` field in `package.json` and `.npmrc` file to `pnpm-workspace.yaml`",
   "keywords": [
     "migrator",
@@ -27,7 +27,6 @@
   },
   "main": "./dist/index.mjs",
   "types": "./dist/index.d.mts",
-  "bin": "./bin.mjs",
   "files": [
     "bin.mjs",
     "dist"
@@ -37,31 +36,31 @@
   },
   "sideEffects": false,
   "dependencies": {
-    "@ntnyq/utils": "^0.11.0",
-    "@pnpm/types": "^1001.3.0",
+    "@ntnyq/utils": "^0.13.2",
+    "@pnpm/types": "^1101.0.0",
     "cac": "^7.0.0",
     "camelcase-keys": "^10.0.2",
     "consola": "^3.4.2",
-    "defu": "^6.1.4",
+    "defu": "^6.1.7",
     "detect-indent": "^7.0.2",
     "pathe": "^2.0.3",
-    "read-ini-file": "^4.0.0",
+    "read-ini-file": "^5.0.0",
     "uncase": "^0.2.0",
-    "yaml": "^2.8.2"
+    "yaml": "^2.8.4"
   },
   "devDependencies": {
-    "@ntnyq/eslint-config": "^6.0.0-beta.11",
-    "@types/node": "^25.3.2",
-    "@typescript/native-preview": "^7.0.0-dev.20260227.1",
-    "bumpp": "^10.4.1",
-    "eslint": "^10.0.2",
+    "@ntnyq/eslint-config": "^6.1.3",
+    "@types/node": "^25.6.2",
+    "@typescript/native-preview": "^7.0.0-dev.20260510.1",
+    "bumpp": "^11.1.0",
+    "eslint": "^10.3.0",
     "husky": "^9.1.7",
-    "nano-staged": "^0.9.0",
+    "nano-staged": "^1.0.2",
     "npm-run-all2": "^8.0.4",
-    "oxfmt": "^0.35.0",
-    "tsdown": "^0.21.0-beta.2",
-    "typescript": "^5.9.3",
-    "vitest": "^4.0.18"
+    "oxfmt": "^0.48.0",
+    "tsdown": "^0.22.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.5"
   },
   "nano-staged": {
     "*.{js,ts,mjs,tsx,md,yml,yaml,toml,json}": "eslint --fix",
@@ -78,5 +77,8 @@
     "release:version": "bumpp",
     "test": "vitest",
     "typecheck": "tsgo --noEmit"
+  },
+  "bin": {
+    "pnpm-settings-migrator": "./bin.mjs"
   }
 }