pnpm 10.34.2 → 10.34.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/node_modules/.modules.yaml +73 -73
- package/dist/node_modules/.pnpm/lock.yaml +5 -5
- package/dist/node_modules/.pnpm-workspace-state-v1.json +1 -1
- package/dist/node_modules/semver/classes/range.js +9 -0
- package/dist/node_modules/semver/package.json +1 -1
- package/dist/pnpm.cjs +30 -23
- package/package.json +1 -1
|
@@ -19,45 +19,36 @@
|
|
|
19
19
|
"nopt@8.1.0": [
|
|
20
20
|
"node_modules/nopt"
|
|
21
21
|
],
|
|
22
|
-
"
|
|
23
|
-
"node_modules/
|
|
24
|
-
],
|
|
25
|
-
"which@5.0.0": [
|
|
26
|
-
"node_modules/which"
|
|
22
|
+
"tar@7.5.16": [
|
|
23
|
+
"node_modules/tar"
|
|
27
24
|
],
|
|
28
25
|
"tinyglobby@0.2.17": [
|
|
29
26
|
"node_modules/tinyglobby"
|
|
30
27
|
],
|
|
28
|
+
"which@5.0.0": [
|
|
29
|
+
"node_modules/which"
|
|
30
|
+
],
|
|
31
31
|
"env-paths@2.2.1": [
|
|
32
32
|
"node_modules/env-paths"
|
|
33
33
|
],
|
|
34
34
|
"proc-log@5.0.0": [
|
|
35
35
|
"node_modules/proc-log"
|
|
36
36
|
],
|
|
37
|
-
"
|
|
38
|
-
"node_modules/
|
|
37
|
+
"exponential-backoff@3.1.3": [
|
|
38
|
+
"node_modules/exponential-backoff"
|
|
39
39
|
],
|
|
40
|
-
"
|
|
40
|
+
"graceful-fs@4.2.11": [
|
|
41
|
+
"node_modules/graceful-fs"
|
|
42
|
+
],
|
|
43
|
+
"semver@7.8.4": [
|
|
41
44
|
"node_modules/semver"
|
|
42
45
|
],
|
|
43
46
|
"make-fetch-happen@14.0.3": [
|
|
44
47
|
"node_modules/make-fetch-happen"
|
|
45
48
|
],
|
|
46
|
-
"graceful-fs@4.2.11": [
|
|
47
|
-
"node_modules/graceful-fs"
|
|
48
|
-
],
|
|
49
49
|
"abbrev@3.0.1": [
|
|
50
50
|
"node_modules/abbrev"
|
|
51
51
|
],
|
|
52
|
-
"isexe@3.1.1": [
|
|
53
|
-
"node_modules/isexe"
|
|
54
|
-
],
|
|
55
|
-
"fdir@6.5.0(picomatch@4.0.4)": [
|
|
56
|
-
"node_modules/fdir"
|
|
57
|
-
],
|
|
58
|
-
"picomatch@4.0.4": [
|
|
59
|
-
"node_modules/picomatch"
|
|
60
|
-
],
|
|
61
52
|
"chownr@3.0.0": [
|
|
62
53
|
"node_modules/chownr"
|
|
63
54
|
],
|
|
@@ -73,11 +64,14 @@
|
|
|
73
64
|
"minipass@7.1.3": [
|
|
74
65
|
"node_modules/minipass"
|
|
75
66
|
],
|
|
76
|
-
"
|
|
77
|
-
"node_modules/
|
|
67
|
+
"fdir@6.5.0(picomatch@4.0.4)": [
|
|
68
|
+
"node_modules/fdir"
|
|
78
69
|
],
|
|
79
|
-
"
|
|
80
|
-
"node_modules/
|
|
70
|
+
"picomatch@4.0.4": [
|
|
71
|
+
"node_modules/picomatch"
|
|
72
|
+
],
|
|
73
|
+
"isexe@3.1.1": [
|
|
74
|
+
"node_modules/isexe"
|
|
81
75
|
],
|
|
82
76
|
"promise-retry@2.0.1": [
|
|
83
77
|
"node_modules/promise-retry"
|
|
@@ -92,17 +86,23 @@
|
|
|
92
86
|
"node_modules/minipass-pipeline/node_modules/yallist",
|
|
93
87
|
"node_modules/minipass-sized/node_modules/yallist"
|
|
94
88
|
],
|
|
95
|
-
"
|
|
96
|
-
"node_modules/
|
|
89
|
+
"negotiator@1.0.0": [
|
|
90
|
+
"node_modules/negotiator"
|
|
97
91
|
],
|
|
98
|
-
"
|
|
99
|
-
"node_modules/
|
|
92
|
+
"minipass-fetch@4.0.1": [
|
|
93
|
+
"node_modules/minipass-fetch"
|
|
100
94
|
],
|
|
101
95
|
"@npmcli/agent@3.0.0": [
|
|
102
96
|
"node_modules/@npmcli/agent"
|
|
103
97
|
],
|
|
104
|
-
"
|
|
105
|
-
"node_modules/
|
|
98
|
+
"http-cache-semantics@4.2.0": [
|
|
99
|
+
"node_modules/http-cache-semantics"
|
|
100
|
+
],
|
|
101
|
+
"cacache@19.0.1": [
|
|
102
|
+
"node_modules/cacache"
|
|
103
|
+
],
|
|
104
|
+
"ssri@12.0.0": [
|
|
105
|
+
"node_modules/ssri"
|
|
106
106
|
],
|
|
107
107
|
"retry@0.12.0": [
|
|
108
108
|
"node_modules/retry"
|
|
@@ -110,51 +110,60 @@
|
|
|
110
110
|
"err-code@2.0.3": [
|
|
111
111
|
"node_modules/err-code"
|
|
112
112
|
],
|
|
113
|
-
"
|
|
114
|
-
"node_modules/
|
|
113
|
+
"encoding@0.1.13": [
|
|
114
|
+
"node_modules/encoding"
|
|
115
115
|
],
|
|
116
|
-
"
|
|
117
|
-
"node_modules/
|
|
116
|
+
"http-proxy-agent@7.0.2": [
|
|
117
|
+
"node_modules/http-proxy-agent"
|
|
118
|
+
],
|
|
119
|
+
"https-proxy-agent@7.0.6": [
|
|
120
|
+
"node_modules/https-proxy-agent"
|
|
121
|
+
],
|
|
122
|
+
"socks-proxy-agent@8.0.5": [
|
|
123
|
+
"node_modules/socks-proxy-agent"
|
|
124
|
+
],
|
|
125
|
+
"agent-base@7.1.4": [
|
|
126
|
+
"node_modules/agent-base"
|
|
127
|
+
],
|
|
128
|
+
"lru-cache@10.4.3": [
|
|
129
|
+
"node_modules/lru-cache"
|
|
118
130
|
],
|
|
119
131
|
"fs-minipass@3.0.3": [
|
|
120
132
|
"node_modules/fs-minipass"
|
|
121
133
|
],
|
|
134
|
+
"minipass-collect@2.0.1": [
|
|
135
|
+
"node_modules/minipass-collect"
|
|
136
|
+
],
|
|
122
137
|
"unique-filename@4.0.0": [
|
|
123
138
|
"node_modules/unique-filename"
|
|
124
139
|
],
|
|
125
|
-
"lru-cache@10.4.3": [
|
|
126
|
-
"node_modules/lru-cache"
|
|
127
|
-
],
|
|
128
140
|
"@npmcli/fs@4.0.0": [
|
|
129
141
|
"node_modules/@npmcli/fs"
|
|
130
142
|
],
|
|
143
|
+
"p-map@7.0.4": [
|
|
144
|
+
"node_modules/p-map"
|
|
145
|
+
],
|
|
131
146
|
"glob@10.5.0": [
|
|
132
147
|
"node_modules/glob"
|
|
133
148
|
],
|
|
134
|
-
"
|
|
135
|
-
"node_modules/
|
|
136
|
-
],
|
|
137
|
-
"http-proxy-agent@7.0.2": [
|
|
138
|
-
"node_modules/http-proxy-agent"
|
|
139
|
-
],
|
|
140
|
-
"socks-proxy-agent@8.0.5": [
|
|
141
|
-
"node_modules/socks-proxy-agent"
|
|
149
|
+
"iconv-lite@0.6.3": [
|
|
150
|
+
"node_modules/iconv-lite"
|
|
142
151
|
],
|
|
143
|
-
"
|
|
144
|
-
"node_modules/
|
|
152
|
+
"debug@4.4.3": [
|
|
153
|
+
"node_modules/debug"
|
|
145
154
|
],
|
|
146
|
-
"
|
|
147
|
-
"node_modules/
|
|
155
|
+
"socks@2.8.9": [
|
|
156
|
+
"node_modules/socks"
|
|
148
157
|
],
|
|
149
158
|
"unique-slug@5.0.0": [
|
|
150
159
|
"node_modules/unique-slug"
|
|
151
160
|
],
|
|
152
|
-
"package-json-from-dist@1.0.1": [
|
|
153
|
-
"node_modules/package-json-from-dist"
|
|
154
|
-
],
|
|
155
161
|
"foreground-child@3.3.1": [
|
|
156
162
|
"node_modules/foreground-child"
|
|
157
163
|
],
|
|
164
|
+
"package-json-from-dist@1.0.1": [
|
|
165
|
+
"node_modules/package-json-from-dist"
|
|
166
|
+
],
|
|
158
167
|
"jackspeak@3.4.3": [
|
|
159
168
|
"node_modules/jackspeak"
|
|
160
169
|
],
|
|
@@ -164,14 +173,17 @@
|
|
|
164
173
|
"minimatch@9.0.9": [
|
|
165
174
|
"node_modules/minimatch"
|
|
166
175
|
],
|
|
167
|
-
"
|
|
168
|
-
"node_modules/
|
|
176
|
+
"safer-buffer@2.1.2": [
|
|
177
|
+
"node_modules/safer-buffer"
|
|
169
178
|
],
|
|
170
|
-
"
|
|
171
|
-
"node_modules/
|
|
179
|
+
"ms@2.1.3": [
|
|
180
|
+
"node_modules/ms"
|
|
172
181
|
],
|
|
173
|
-
"
|
|
174
|
-
"node_modules/
|
|
182
|
+
"ip-address@10.2.0": [
|
|
183
|
+
"node_modules/ip-address"
|
|
184
|
+
],
|
|
185
|
+
"smart-buffer@4.2.0": [
|
|
186
|
+
"node_modules/smart-buffer"
|
|
175
187
|
],
|
|
176
188
|
"imurmurhash@0.1.4": [
|
|
177
189
|
"node_modules/imurmurhash"
|
|
@@ -194,24 +206,12 @@
|
|
|
194
206
|
"brace-expansion@2.1.1": [
|
|
195
207
|
"node_modules/brace-expansion"
|
|
196
208
|
],
|
|
197
|
-
"
|
|
198
|
-
"node_modules/
|
|
199
|
-
],
|
|
200
|
-
"smart-buffer@4.2.0": [
|
|
201
|
-
"node_modules/smart-buffer"
|
|
202
|
-
],
|
|
203
|
-
"ip-address@10.2.0": [
|
|
204
|
-
"node_modules/ip-address"
|
|
205
|
-
],
|
|
206
|
-
"safer-buffer@2.1.2": [
|
|
207
|
-
"node_modules/safer-buffer"
|
|
209
|
+
"shebang-command@2.0.0": [
|
|
210
|
+
"node_modules/shebang-command"
|
|
208
211
|
],
|
|
209
212
|
"path-key@3.1.1": [
|
|
210
213
|
"node_modules/path-key"
|
|
211
214
|
],
|
|
212
|
-
"shebang-command@2.0.0": [
|
|
213
|
-
"node_modules/shebang-command"
|
|
214
|
-
],
|
|
215
215
|
"strip-ansi@7.2.0": [
|
|
216
216
|
"node_modules/strip-ansi"
|
|
217
217
|
],
|
|
@@ -289,7 +289,7 @@
|
|
|
289
289
|
"packageManager": "pnpm@10.33.1",
|
|
290
290
|
"pendingBuilds": [],
|
|
291
291
|
"publicHoistPattern": [],
|
|
292
|
-
"prunedAt": "
|
|
292
|
+
"prunedAt": "Thu, 11 Jun 2026 17:03:03 GMT",
|
|
293
293
|
"registries": {
|
|
294
294
|
"default": "https://registry.npmjs.org/",
|
|
295
295
|
"@jsr": "https://npm.jsr.io/"
|
|
@@ -321,8 +321,8 @@ packages:
|
|
|
321
321
|
safer-buffer@2.1.2:
|
|
322
322
|
resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
|
|
323
323
|
|
|
324
|
-
semver@7.8.
|
|
325
|
-
resolution: {integrity: sha512-
|
|
324
|
+
semver@7.8.4:
|
|
325
|
+
resolution: {integrity: sha512-rUCObTnP32Q08R2uuIrt7r9PlEonuTmtuXYcW6s5kjdlj3xbnwe+21yXptAUYcMAABLkYYTtnmzb3w3EDZfueA==}
|
|
326
326
|
engines: {node: '>=10'}
|
|
327
327
|
hasBin: true
|
|
328
328
|
|
|
@@ -444,7 +444,7 @@ snapshots:
|
|
|
444
444
|
|
|
445
445
|
'@npmcli/fs@4.0.0':
|
|
446
446
|
dependencies:
|
|
447
|
-
semver: 7.8.
|
|
447
|
+
semver: 7.8.4
|
|
448
448
|
optional: true
|
|
449
449
|
|
|
450
450
|
'@pkgjs/parseargs@0.11.0':
|
|
@@ -696,7 +696,7 @@ snapshots:
|
|
|
696
696
|
make-fetch-happen: 14.0.3
|
|
697
697
|
nopt: 8.1.0
|
|
698
698
|
proc-log: 5.0.0
|
|
699
|
-
semver: 7.8.
|
|
699
|
+
semver: 7.8.4
|
|
700
700
|
tar: 7.5.16
|
|
701
701
|
tinyglobby: 0.2.17
|
|
702
702
|
which: 5.0.0
|
|
@@ -742,7 +742,7 @@ snapshots:
|
|
|
742
742
|
safer-buffer@2.1.2:
|
|
743
743
|
optional: true
|
|
744
744
|
|
|
745
|
-
semver@7.8.
|
|
745
|
+
semver@7.8.4:
|
|
746
746
|
optional: true
|
|
747
747
|
|
|
748
748
|
shebang-command@2.0.0:
|
|
@@ -277,6 +277,11 @@ const parseComparator = (comp, options) => {
|
|
|
277
277
|
|
|
278
278
|
const isX = id => !id || id.toLowerCase() === 'x' || id === '*'
|
|
279
279
|
|
|
280
|
+
const invalidXRangeOrder = (M, m, p) => (
|
|
281
|
+
(isX(M) && !isX(m)) ||
|
|
282
|
+
(isX(m) && p && !isX(p))
|
|
283
|
+
)
|
|
284
|
+
|
|
280
285
|
// ~, ~> --> * (any, kinda silly)
|
|
281
286
|
// ~2, ~2.x, ~2.x.x, ~>2, ~>2.x ~>2.x.x --> >=2.0.0 <3.0.0-0
|
|
282
287
|
// ~2.0, ~2.0.x, ~>2.0, ~>2.0.x --> >=2.0.0 <2.1.0-0
|
|
@@ -402,6 +407,10 @@ const replaceXRange = (comp, options) => {
|
|
|
402
407
|
const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE]
|
|
403
408
|
return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
|
|
404
409
|
debug('xRange', comp, ret, gtlt, M, m, p, pr)
|
|
410
|
+
if (invalidXRangeOrder(M, m, p)) {
|
|
411
|
+
return comp
|
|
412
|
+
}
|
|
413
|
+
|
|
405
414
|
const xM = isX(M)
|
|
406
415
|
const xm = xM || isX(m)
|
|
407
416
|
const xp = xm || isX(p)
|
package/dist/pnpm.cjs
CHANGED
|
@@ -2973,7 +2973,7 @@ var require_lib4 = __commonJS({
|
|
|
2973
2973
|
var load_json_file_1 = __importDefault2(require_load_json_file());
|
|
2974
2974
|
var defaultManifest = {
|
|
2975
2975
|
name: true ? "pnpm" : "pnpm",
|
|
2976
|
-
version: true ? "10.34.
|
|
2976
|
+
version: true ? "10.34.3" : "0.0.0"
|
|
2977
2977
|
};
|
|
2978
2978
|
var pkgJson;
|
|
2979
2979
|
if (require.main == null) {
|
|
@@ -4876,9 +4876,9 @@ var require_config_chain = __commonJS({
|
|
|
4876
4876
|
}
|
|
4877
4877
|
});
|
|
4878
4878
|
|
|
4879
|
-
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
4879
|
+
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/envKeyToSetting.js
|
|
4880
4880
|
var require_envKeyToSetting = __commonJS({
|
|
4881
|
-
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
4881
|
+
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/envKeyToSetting.js"(exports2, module2) {
|
|
4882
4882
|
module2.exports = function(x) {
|
|
4883
4883
|
const colonIndex = x.indexOf(":");
|
|
4884
4884
|
if (colonIndex === -1) {
|
|
@@ -4948,9 +4948,9 @@ var require_dist2 = __commonJS({
|
|
|
4948
4948
|
}
|
|
4949
4949
|
});
|
|
4950
4950
|
|
|
4951
|
-
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
4951
|
+
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/util.js
|
|
4952
4952
|
var require_util = __commonJS({
|
|
4953
|
-
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
4953
|
+
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/util.js"(exports2) {
|
|
4954
4954
|
"use strict";
|
|
4955
4955
|
var fs = require("fs");
|
|
4956
4956
|
var path2 = require("path");
|
|
@@ -5058,9 +5058,9 @@ var require_util = __commonJS({
|
|
|
5058
5058
|
}
|
|
5059
5059
|
});
|
|
5060
5060
|
|
|
5061
|
-
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
5061
|
+
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/types.js
|
|
5062
5062
|
var require_types = __commonJS({
|
|
5063
|
-
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
5063
|
+
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/types.js"(exports2) {
|
|
5064
5064
|
"use strict";
|
|
5065
5065
|
var path2 = require("path");
|
|
5066
5066
|
var Stream = require("stream").Stream;
|
|
@@ -5197,9 +5197,9 @@ var require_types = __commonJS({
|
|
|
5197
5197
|
}
|
|
5198
5198
|
});
|
|
5199
5199
|
|
|
5200
|
-
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
5200
|
+
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/conf.js
|
|
5201
5201
|
var require_conf = __commonJS({
|
|
5202
|
-
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
5202
|
+
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/conf.js"(exports2, module2) {
|
|
5203
5203
|
"use strict";
|
|
5204
5204
|
var { readCAFileSync } = require_dist();
|
|
5205
5205
|
var fs = require("fs");
|
|
@@ -5357,9 +5357,9 @@ var require_conf = __commonJS({
|
|
|
5357
5357
|
}
|
|
5358
5358
|
});
|
|
5359
5359
|
|
|
5360
|
-
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
5360
|
+
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/defaults.js
|
|
5361
5361
|
var require_defaults = __commonJS({
|
|
5362
|
-
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
5362
|
+
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/lib/defaults.js"(exports2) {
|
|
5363
5363
|
"use strict";
|
|
5364
5364
|
var os = require("os");
|
|
5365
5365
|
var path2 = require("path");
|
|
@@ -5525,9 +5525,9 @@ var require_defaults = __commonJS({
|
|
|
5525
5525
|
}
|
|
5526
5526
|
});
|
|
5527
5527
|
|
|
5528
|
-
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
5528
|
+
// ../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/index.js
|
|
5529
5529
|
var require_npm_conf = __commonJS({
|
|
5530
|
-
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.
|
|
5530
|
+
"../node_modules/.pnpm/@pnpm+npm-conf@3.0.3/node_modules/@pnpm/npm-conf/index.js"(exports2, module2) {
|
|
5531
5531
|
"use strict";
|
|
5532
5532
|
var path2 = require("path");
|
|
5533
5533
|
var Conf = require_conf();
|
|
@@ -5551,8 +5551,16 @@ var require_npm_conf = __commonJS({
|
|
|
5551
5551
|
}
|
|
5552
5552
|
conf.addEnv();
|
|
5553
5553
|
conf.loadPrefix();
|
|
5554
|
+
const trustedUserconfig = conf.get("userconfig");
|
|
5555
|
+
const trustedPrefix = conf.get("prefix");
|
|
5556
|
+
if (trustedPrefix) {
|
|
5557
|
+
const etc = path2.resolve(trustedPrefix, "etc");
|
|
5558
|
+
conf.root.globalconfig = path2.resolve(etc, "npmrc");
|
|
5559
|
+
conf.root.globalignorefile = path2.resolve(etc, "npmignore");
|
|
5560
|
+
}
|
|
5561
|
+
const trustedGlobalconfig = conf.get("globalconfig");
|
|
5554
5562
|
const projectConf = path2.resolve(conf.localPrefix, ".npmrc");
|
|
5555
|
-
const userConf =
|
|
5563
|
+
const userConf = trustedUserconfig;
|
|
5556
5564
|
if (!conf.get("global") && projectConf !== userConf) {
|
|
5557
5565
|
warnings.push(conf.addFile(projectConf, "project"));
|
|
5558
5566
|
} else {
|
|
@@ -5562,13 +5570,8 @@ var require_npm_conf = __commonJS({
|
|
|
5562
5570
|
const workspaceConf = path2.resolve(conf.get("workspace-prefix"), ".npmrc");
|
|
5563
5571
|
warnings.push(conf.addFile(workspaceConf, "workspace"));
|
|
5564
5572
|
}
|
|
5565
|
-
warnings.push(conf.addFile(
|
|
5566
|
-
|
|
5567
|
-
const etc = path2.resolve(conf.get("prefix"), "etc");
|
|
5568
|
-
conf.root.globalconfig = path2.resolve(etc, "npmrc");
|
|
5569
|
-
conf.root.globalignorefile = path2.resolve(etc, "npmignore");
|
|
5570
|
-
}
|
|
5571
|
-
warnings.push(conf.addFile(conf.get("globalconfig"), "global"));
|
|
5573
|
+
warnings.push(conf.addFile(trustedUserconfig, "user"));
|
|
5574
|
+
warnings.push(conf.addFile(trustedGlobalconfig, "global"));
|
|
5572
5575
|
conf.loadUser();
|
|
5573
5576
|
const caFile = conf.get("cafile");
|
|
5574
5577
|
if (caFile) {
|
|
@@ -16931,11 +16934,15 @@ var require_dropUntrustedEnvExpansions = __commonJS({
|
|
|
16931
16934
|
function hasEnvPlaceholder(value) {
|
|
16932
16935
|
return /\$\{[^}]+\}/.test(value);
|
|
16933
16936
|
}
|
|
16937
|
+
var DOCS_URL = "https://pnpm.io/npmrc";
|
|
16938
|
+
function configSetExample(key) {
|
|
16939
|
+
return hasEnvPlaceholder(key) ? "" : ` (for example, run: pnpm config set "${key}" <value>)`;
|
|
16940
|
+
}
|
|
16934
16941
|
function warnIgnoredRequestDestinationEnv(filePath, key, warnings) {
|
|
16935
|
-
warnings.push(`Ignored project-level request destination "${key}" in "${filePath}": environment variables are not expanded in repository-
|
|
16942
|
+
warnings.push(`Ignored project-level request destination "${key}" in "${filePath}": environment variables are not expanded in registry or proxy URLs that come from a project .npmrc, because that file is committed to the repository and a malicious value could redirect requests or leak secrets. Move this setting to a trusted source that pnpm still expands \u2014 put it in your user-level ~/.npmrc, or set it with pnpm config set${configSetExample(key)}. If the value is not secret, you can also write it literally in the project .npmrc. See ${DOCS_URL}`);
|
|
16936
16943
|
}
|
|
16937
16944
|
function warnIgnoredAuthValueEnv(filePath, key, warnings) {
|
|
16938
|
-
warnings.push(`Ignored project-level auth setting "${key}" in "${filePath}": environment variables are not expanded in repository-controlled registry
|
|
16945
|
+
warnings.push(`Ignored project-level auth setting "${key}" in "${filePath}": environment variables are not expanded in registry credentials that come from a project .npmrc, because that file is committed to the repository and could leak the secret to an attacker-controlled registry. Move this credential to a trusted source that pnpm still expands \u2014 put the line in your user-level ~/.npmrc, or set it with pnpm config set${configSetExample(key)}. See ${DOCS_URL}`);
|
|
16939
16946
|
}
|
|
16940
16947
|
}
|
|
16941
16948
|
});
|