Skip to content

Update pnpm to v11.5.1#99

Merged
ezzatron merged 1 commit into
mainfrom
renovate/pnpm-11.x
Jun 9, 2026
Merged

Update pnpm to v11.5.1#99
ezzatron merged 1 commit into
mainfrom
renovate/pnpm-11.x

Conversation

@ghalactic-renovate

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
pnpm (source) packageManager patch 11.5.011.5.1 11.5.2

Release Notes

pnpm/pnpm (pnpm)

v11.5.1

Compare Source

Patch Changes
  • Improve pnpm audit performance by pruning non-vulnerable lockfile subtrees and stopping path enumeration once vulnerable findings reach the path cap.
  • Avoid crashing when the workspace state cache is partially written or malformed.
  • Set npm_config_user_agent for root lifecycle scripts during headless installs.
  • Preserve the integrity field of a remote (non-registry) tarball dependency when its lockfile entry is rebuilt. Re-resolving such a dependency without re-fetching it (for example via pnpm update, or when another dependency changes) produced a resolution with no integrity — URL/tarball resolvers only learn the integrity after the tarball is downloaded — so the previously recorded integrity was dropped, making later installs fail with ERR_PNPM_MISSING_TARBALL_INTEGRITY #​12067.
  • Normalize a string repository field into the { type, url } object form when creating the publish manifest, matching npm's behavior. Some registries (e.g. Gitea/Codeberg) reject a string repository with a 500 Internal Server Error during pnpm publish #​12099.
  • Preserve compatible optional peer versions already present in the lockfile when resolving dependencies.
  • Fixed inconsistent resolution of a peer dependency that is shared through a diamond. When a package peer-depends on both another package and one of that package's own peer dependencies (for example @typescript-eslint/eslint-plugin peer-depends on both @typescript-eslint/parser and typescript, and @typescript-eslint/parser peer-depends on typescript), pnpm no longer reuses a hoisted instance of the shared peer that was resolved against a different version #​12079.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@ghalactic-renovate ghalactic-renovate Bot added non-major Pull requests that update non-major dependency versions npm Pull requests that update NPM dependencies renovate Pull requests created by Renovate labels Jun 9, 2026
@ghalactic-renovate ghalactic-renovate Bot requested a review from a team June 9, 2026 09:23
@ghalactic-renovate ghalactic-renovate Bot added the non-major Pull requests that update non-major dependency versions label Jun 9, 2026
@codecov

codecov Bot commented Jun 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (8b57b98) to head (b94d7a6).

Additional details and impacted files
@@            Coverage Diff            @@
##              main       #99   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           44        44           
  Lines         1210      1210           
  Branches       283       283           
=========================================
  Hits          1210      1210           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ezzatron ezzatron merged commit a0075c3 into main Jun 9, 2026
9 checks passed
@ezzatron ezzatron deleted the renovate/pnpm-11.x branch June 9, 2026 22:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

non-major Pull requests that update non-major dependency versions npm Pull requests that update NPM dependencies renovate Pull requests created by Renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant