Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pnpm for openSUSE:Factory checked in at 2026-05-06 19:18:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pnpm (Old) and /work/SRC/openSUSE:Factory/.pnpm.new.30200 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pnpm" Wed May 6 19:18:14 2026 rev:55 rq:1351036 version:10.33.2 Changes: -------- --- /work/SRC/openSUSE:Factory/pnpm/pnpm.changes 2026-04-04 19:09:40.082661626 +0200 +++ /work/SRC/openSUSE:Factory/.pnpm.new.30200/pnpm.changes 2026-05-06 19:20:05.982529352 +0200 @@ -2,14 +2 @@ -Sun Mar 29 17:10:21 UTC 2026 - Johannes Kastl <[email protected]> - -- update to 10.33: -Minor Changes - - Added a new dedupePeers setting that reduces peer dependency duplication. When enabled, peer dependency suffixes use version-only identifiers (name@version) instead of full dep paths, eliminating nested suffixes like ([email protected]([email protected])). This dramatically reduces the number of package instances in projects with many recursive peer dependencies #11070. - -Patch Changes - - Fail on incompatible lockfiles in CI when frozen lockfile mode is enabled, while preserving non-frozen CI fallback behavior. - - When package metadata is malformed or can't be fetched, the error thrown will now show the originating error. - - Fixed intermittent failures when multiple pnpm dlx calls run concurrently for the same package. When the global virtual store is enabled, the importer now verifies file content before skipping a rename, avoiding destructive swap-renames that break concurrent processes. Also tolerates EPERM during bin creation on Windows and properly propagates enableGlobalVirtualStore through the install pipeline. +Sun Apr 26 11:04:43 UTC 2026 - Johannes Kastl <[email protected]> @@ -17 +4,34 @@ - Fixed handling of non-string version selectors in hoistPeers, preventing invalid peer dependency specifiers. +- update to 10.33.2: + * Patch Changes + - Globally-installed bins no longer fail with + ERR_PNPM_NO_IMPORTER_MANIFEST_FOUND when pnpm was installed + via the standalone @pnpm/exe binary (e.g. curl -fsSL + https://get.pnpm.io/install.sh | sh -) on a system without a + separate Node.js installation. Previously, when which('node') + failed during pnpm add --global, pnpm fell back to + process.execPath, which in @pnpm/exe is the pnpm binary + itself — and that path was baked into the generated bin shim, + causing the shim to invoke pnpm instead of Node #11291, + #4645. + - Fix an infinite fork-bomb that could happen when pnpm was + installed with one version (e.g. npm install -g pnpm@A) and + run inside a project whose package.json selected a different + pnpm version via the packageManager field (e.g. pnpm@B), + while a pnpm-workspace.yaml also existed at the project root. + - The child's environment is now forced to + manage-package-manager-versions=false (v10) and + pm-on-fail=ignore (v11+), which disables the + package-manager-version handling in whichever pnpm runs as + the child. + - Fixes #11337. +- update to 10.33.1: + * Patch Changes + - When a project's packageManager field selects pnpm v11 or + newer, commands that v10 would have passed through to npm + (version, login, logout, publish, unpublish, deprecate, + dist-tag, docs, ping, search, star, stars, unstar, whoami, + etc.) are now handed over to the wanted pnpm, which + implements them natively. Previously they silently shelled + out to npm — making, for example, pnpm version --help print + npm's help on a project with packageManager: [email protected] + #11328. @@ -19,11 +39,2 @@ - Improve the non-interactive modules purge error hint to include the confirmModulesPurge=false workaround. - - When pnpm needs to recreate node_modules but no TTY is available, the error now suggests either setting CI=true or disabling the purge confirmation prompt via confirmModulesPurge=false. - - Adds a regression test for the non-TTY flow. - - Fixed false "Command not found" errors on Windows when a command exists in PATH but exits with a non-zero code. Also fixed path resolution for --filter contexts where the command runs in a different package directory. - - When a pnpm-lock.yaml contains two documents, ignore the first one. pnpm v11 will write two lockfile documents into pnpm-lock.yaml in order to store pnpm version integrities and config dependency resolutions. - - Fixed a bug preventing the clearCache function returned by createNpmResolver from properly clearing metadata cache. +------------------------------------------------------------------- +Sun Mar 29 17:10:21 UTC 2026 - Johannes Kastl <[email protected]> @@ -30,0 +42,41 @@ +- update to 10.33: + * Minor Changes + - Added a new dedupePeers setting that reduces peer dependency + duplication. When enabled, peer dependency suffixes use + version-only identifiers (name@version) instead of full dep + paths, eliminating nested suffixes like + ([email protected]([email protected])). This dramatically reduces the number + of package instances in projects with many recursive peer + dependencies #11070. + * Patch Changes + - Fail on incompatible lockfiles in CI when frozen lockfile + mode is enabled, while preserving non-frozen CI fallback + behavior. + - When package metadata is malformed or can't be fetched, the + error thrown will now show the originating error. + - Fixed intermittent failures when multiple pnpm dlx calls run + concurrently for the same package. When the global virtual + store is enabled, the importer now verifies file content + before skipping a rename, avoiding destructive swap-renames + that break concurrent processes. Also tolerates EPERM during + bin creation on Windows and properly propagates + enableGlobalVirtualStore through the install pipeline. + - Fixed handling of non-string version selectors in hoistPeers, + preventing invalid peer dependency specifiers. + - Improve the non-interactive modules purge error hint to + include the confirmModulesPurge=false workaround. + - When pnpm needs to recreate node_modules but no TTY is + available, the error now suggests either setting CI=true or + disabling the purge confirmation prompt via + confirmModulesPurge=false. + - Adds a regression test for the non-TTY flow. + - Fixed false "Command not found" errors on Windows when a + command exists in PATH but exits with a non-zero code. Also + fixed path resolution for --filter contexts where the command + runs in a different package directory. + - When a pnpm-lock.yaml contains two documents, ignore the + first one. pnpm v11 will write two lockfile documents into + pnpm-lock.yaml in order to store pnpm version integrities and + config dependency resolutions. + - Fixed a bug preventing the clearCache function returned by + createNpmResolver from properly clearing metadata cache. Old: ---- pnpm-10.33.0.tgz New: ---- pnpm-10.33.2.tgz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pnpm.spec ++++++ --- /var/tmp/diff_new_pack.dbH78E/_old 2026-05-06 19:20:06.642556535 +0200 +++ /var/tmp/diff_new_pack.dbH78E/_new 2026-05-06 19:20:06.646556699 +0200 @@ -23,7 +23,7 @@ %global __nodejs_provides %{nil} %global __nodejs_requires %{nil} Name: pnpm -Version: 10.33.0 +Version: 10.33.2 Release: 0 Summary: Fast, disk space efficient package manager License: MIT ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.dbH78E/_old 2026-05-06 19:20:06.682558182 +0200 +++ /var/tmp/diff_new_pack.dbH78E/_new 2026-05-06 19:20:06.686558348 +0200 @@ -1,6 +1,6 @@ -mtime: 1774978971 -commit: 8f8f9edd2270e7fbb829adb4a198dba43aa2cbf0527e9489420d86e084fe2af9 -url: https://src.opensuse.org/nodejs/pnpm.git -revision: 8f8f9edd2270e7fbb829adb4a198dba43aa2cbf0527e9489420d86e084fe2af9 +mtime: 1777570102 +commit: 5b8353d4bef6a21d7313c24142232d9e3bdb8c610872ed1b1626c301c03f3b77 +url: https://src.opensuse.org/nodejs/pnpm +revision: 5b8353d4bef6a21d7313c24142232d9e3bdb8c610872ed1b1626c301c03f3b77 projectscmsync: https://src.opensuse.org/nodejs/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-04-30 19:28:22.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ pnpm-10.33.0.tgz -> pnpm-10.33.2.tgz ++++++ ++++ 4932 lines of diff (skipped)
