Skip to content

chore(deps-dev): bump pnpm from 6.32.10 to 7.27.0#265

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/pnpm-7.27.0
Closed

chore(deps-dev): bump pnpm from 6.32.10 to 7.27.0#265
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/pnpm-7.27.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 13, 2023

Copy link
Copy Markdown
Contributor

Bumps pnpm from 6.32.10 to 7.27.0.

Release notes

Sourced from pnpm's releases.

v7.27.0

Minor Changes

  • A new resolution-mode added: lowest-direct. With this resolution mode direct dependencies will be resolved to their lowest versions. So if there is foo@^1.1.0 in the dependencies, then 1.1.0 will be installed, even if the latest version of foo is 1.2.0.
  • Support script selector with RegExp such as pnpm run /build:.*/ and execute the matched scripts with the RegExp #5871.

Patch Changes

  • Fix version number replacing for namespaced workspace packages. workspace:@foo/bar@* should be replaced with npm:@foo/bar@<version> on publish #6052.

  • When resolving dependencies, prefer versions that are already used in the root of the project. This is important to minimize the number of packages that will be nested during hoisting #6054.

  • Deduplicate direct dependencies.

    Let's say there are two projects in the workspace that dependend on foo. One project has foo@1.0.0 in the dependencies while another one has foo@^1.0.0 in the dependencies. In this case, foo@1.0.0 should be installed to both projects as satisfies the version specs of both projects.

  • Use Map rather than Object in createPackageExtender to prevent read the prototype property to native function

Our Gold Sponsors

... (truncated)

Commits
  • 9120b19 chore(release): 7.27.0
  • b71c6ed fix: replace version number for namespaced workspace packages (#6052)
  • 029143c fix: give priority to packages installed in the root, when deduping (#6054)
  • 05f8354 fix: update --no-save with resolution-mode=lowest-direct
  • 2b54be3 chore(release): 7.27.0-0
  • d89d7a0 fix(dependency-path): parsing a local dep
  • 65563ae fix(npm-resolver): pick lowest version with * from prerelease versions only
  • 11886f4 docs: display filter options in deploy command help info (#6023)
  • 74b535f fix: improve deduplication (#6026)
  • 308eb2c fix: use Map to prevent odd manifest name (#6031)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pnpm](https://github.com/pnpm/pnpm) from 6.32.10 to 7.27.0.
- [Release notes](https://github.com/pnpm/pnpm/releases)
- [Commits](pnpm/pnpm@v6.32.10...v7.27.0)

---
updated-dependencies:
- dependency-name: pnpm
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 13, 2023
@netlify

netlify Bot commented Feb 13, 2023

Copy link
Copy Markdown

Deploy Preview for nexusweather failed.

Name Link
🔨 Latest commit 273dab6
🔍 Latest deploy log https://app.netlify.com/sites/nexusweather/deploys/63ea49c2fa1d1f000816a56c

@dependabot @github

dependabot Bot commented on behalf of github Feb 20, 2023

Copy link
Copy Markdown
Contributor Author

Superseded by #270.

@dependabot dependabot Bot closed this Feb 20, 2023
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/pnpm-7.27.0 branch February 20, 2023 14:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants