mirror of
https://github.com/go-gitea/gitea.git
synced 2026-05-26 06:48:20 +00:00
1c130d2eb6
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [pnpm](https://pnpm.io) ([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) | [`11.1.3` → `11.2.1`](https://renovatebot.com/diffs/npm/pnpm/11.1.3/11.2.1) |  |  | | [stylelint](https://stylelint.io) ([source](https://redirect.github.com/stylelint/stylelint)) | [`17.11.1` → `17.12.0`](https://renovatebot.com/diffs/npm/stylelint/17.11.1/17.12.0) |  |  | --- ### Release Notes <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v11.2.1`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1121) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v11.2.0...v11.2.1) ##### Patch Changes - Mark optional subdependency snapshots of config dependencies with `optional: true` in the env lockfile, matching how optional dependencies are recorded elsewhere in `pnpm-lock.yaml`. Previously, snapshots for the platform-specific subdeps pulled in via a config dep's `optionalDependencies` were written as empty objects, which was inconsistent with the rest of the lockfile and made it look like those non-host platform variants were required. - Fix `pickRegistryForPackage` returning the wrong registry for an unscoped `npm:` alias under a scoped local name. A manifest entry like `"@​private/foo": "npm:lodash@^1"` was routing the `lodash` fetch through `registries["@​private"]`, even though `lodash` is unscoped and doesn't live on that registry. The npm-alias branch now returns the alias target's own scope (or `null` for an unscoped target, falling through to `registries.default`) instead of leaking into the local key's scope. - Don't print "Installing config dependencies..." when config dependencies are already installed and nothing needs to be fetched, re-linked, or removed. ### [`v11.2.0`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1120) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v11.1.3...v11.2.0) ##### Minor Changes - **Experimental:** Adding [`@pnpm/pacquet`](https://npmx.dev/package/@​pnpm/pacquet) (the Rust port of pnpm) to `configDependencies` in `pnpm-workspace.yaml` now delegates the materialization phase of `pnpm install` to the pacquet binary. pnpm still owns dependency resolution; pacquet only fetches and imports from the freshly-written lockfile. This is an opt-in preview of the Rust install engine [#​11723](https://redirect.github.com/pnpm/pnpm/issues/11723). To configure pacquet in a project, run: ``` pnpm add @​pnpm/pacquet --config ``` You'll see changes in `pnpm-workspace.yaml` and `pnpm-lock.yaml` that should be committed. If you experience any issues with pacquet, please let us know by mentioning this in the GitHub issue you create. - `configDependencies` now resolve and install one level of `optionalDependencies` declared by the config dependency, with `os`/`cpu`/`libc` platform filtering applied at install time. This unlocks the esbuild/swc-style pattern where a package ships platform-specific binaries via `optionalDependencies` — a config dependency can now do the same and have the matching binary symlinked next to it in the global virtual store, so `require('pkg-platform-arch')` from inside the config dependency resolves correctly. The env lockfile records all platform variants regardless of host platform, so it remains portable across machines. Each entry in a config dependency's `optionalDependencies` must declare an exact version — ranges and tags are rejected to keep installs reproducible. - Implement the documented `pnpm login --scope <scope>` flag. The scope is normalized (a leading `@` is added if missing; blank values are ignored) and an `@<scope>:registry=<registry>` mapping is written to the pnpm auth file alongside the auth token. Subsequent installs of `@<scope>/*` packages then route to the chosen registry. Previously `pnpm login --scope foo` errored with `Unknown option: 'scope'` despite the flag being listed in the online documentation [#​11716](https://redirect.github.com/pnpm/pnpm/issues/11716). - `pnpm outdated` and `pnpm update --interactive` now report Node.js, Deno, and Bun runtimes installed as project dependencies (`runtime:` specifiers). Previously these were silently skipped. ##### Patch Changes - Fix `cafile=<relative-path>` in `.npmrc` being read from the wrong directory when pnpm is invoked from a different cwd (e.g. `pnpm --dir <project> install` from a CI wrapper or monorepo script). The path is now resolved against the directory of the `.npmrc` that declared it, not `process.cwd()`. Before this fix the CA file silently failed to load — the install proceeded without the configured CA and the user only saw TLS errors against a private registry, with no log line tying back to the wrongly resolved path [#​11624](https://redirect.github.com/pnpm/pnpm/issues/11624). - Fix `config.registry` getting a trailing slash appended when `registry` is set in `.npmrc` and no `registries.default` is provided by `pnpm-workspace.yaml`. The sync from `registries.default` to `config.registry` introduced in [#​11744](https://redirect.github.com/pnpm/pnpm/issues/11744) now only fires when the workspace manifest actually contributes a different default. - Fix global add/update to handle minimumReleaseAge policy violations instead of surfacing an internal resolver guardrail error. - Fix two crashes with `injectWorkspacePackages: true` when the lockfile has been pruned (e.g. by `turbo prune --docker`): - `Cannot use 'in' operator to search for 'directory' in undefined`: a peer-dependency-variant injected snapshot inherits its `resolution` from the base `packages:` entry; when a pruner drops that base entry the readers crash. `convertToLockfileObject` now reconstructs the directory resolution from the `file:` depPath at load time — a single normalization point, so every reader sees a fully-formed snapshot. - `ERR_PNPM_ENOENT` on `node_modules/.bin/<tool>`: after `prepare`/`postinstall`, `runLifecycleHooksConcurrently` re-imported each injected workspace package; the `scanDir`-into-`filesMap` workaround fed target-internal paths to the importer, which the `makeEmptyDir` fast path ([#​11088](https://redirect.github.com/pnpm/pnpm/issues/11088)) then wiped. Drop the workaround and pass `keepModulesDir: true` so the importer preserves the target's existing `node_modules` (bin links + transitive deps) and source files keep their hardlinks. - Fixed `pnpm login` and `pnpm logout` ignoring `registries.default` from `pnpm-workspace.yaml` [#​10099](https://redirect.github.com/pnpm/pnpm/issues/10099). - Fix the `minimumReleaseAge` (publishedBy) maturity shortcut to be inclusive at the cutoff. Previously, abbreviated metadata whose `modified` field equalled the cutoff fell off the fast path and triggered a full-metadata re-fetch (or a `MISSING_TIME` error when full metadata wasn't permitted). Since `modified` is an upper bound on every version's publish time, `modified == publishedBy` already implies every version passes the per-version `<=` filter in `filterPkgMetadataByPublishDate`, so the shortcut now accepts the boundary case directly. Strictly `>` (was `>=`) at the rejection branch. - Honor `publishConfig.access` when publishing packages. </details> <details> <summary>stylelint/stylelint (stylelint)</summary> ### [`v17.12.0`](https://redirect.github.com/stylelint/stylelint/blob/HEAD/CHANGELOG.md#17120---2026-05-20) [Compare Source](https://redirect.github.com/stylelint/stylelint/compare/17.11.1...17.12.0) It fixes 3 bugs, including a false negative one. - Fixed: `block-no-empty` reported range when using comments ([#​9294](https://redirect.github.com/stylelint/stylelint/pull/9294)) ([@​romainmenke](https://redirect.github.com/romainmenke)). - Fixed: `declaration-property-value-no-unknown` false negatives for custom properties defined in reference files ([#​9292](https://redirect.github.com/stylelint/stylelint/pull/9292)) ([@​romainmenke](https://redirect.github.com/romainmenke)). - Fixed: `value-keyword-layout-mappings` false positives for `caption-side` ([#​9293](https://redirect.github.com/stylelint/stylelint/pull/9293)) ([@​romainmenke](https://redirect.github.com/romainmenke)). </details> --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuNSIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
129 lines
4.1 KiB
JSON
129 lines
4.1 KiB
JSON
{
|
|
"type": "module",
|
|
"packageManager": "pnpm@11.2.1",
|
|
"engines": {
|
|
"node": ">= 22.18.0",
|
|
"pnpm": ">= 11.0.0"
|
|
},
|
|
"dependencies": {
|
|
"@citation-js/core": "0.7.21",
|
|
"@citation-js/plugin-bibtex": "0.7.21",
|
|
"@citation-js/plugin-csl": "0.7.22",
|
|
"@citation-js/plugin-software-formats": "0.6.2",
|
|
"@codemirror/autocomplete": "6.20.2",
|
|
"@codemirror/commands": "6.10.3",
|
|
"@codemirror/lang-json": "6.0.2",
|
|
"@codemirror/lang-markdown": "6.5.0",
|
|
"@codemirror/language": "6.12.3",
|
|
"@codemirror/language-data": "6.5.2",
|
|
"@codemirror/legacy-modes": "6.5.3",
|
|
"@codemirror/lint": "6.9.6",
|
|
"@codemirror/search": "6.7.0",
|
|
"@codemirror/state": "6.6.0",
|
|
"@codemirror/view": "6.43.0",
|
|
"@deltablot/dropzone": "7.4.3",
|
|
"@github/markdown-toolbar-element": "2.2.3",
|
|
"@github/paste-markdown": "1.5.3",
|
|
"@github/text-expander-element": "2.9.4",
|
|
"@lezer/highlight": "1.2.3",
|
|
"@mcaptcha/vanilla-glue": "0.1.0-rc2",
|
|
"@mermaid-js/layout-elk": "0.2.1",
|
|
"@primer/octicons": "19.26.0",
|
|
"@replit/codemirror-indentation-markers": "6.5.3",
|
|
"@replit/codemirror-lang-nix": "6.0.1",
|
|
"@replit/codemirror-lang-svelte": "6.0.0",
|
|
"@replit/codemirror-vscode-keymap": "6.0.2",
|
|
"@resvg/resvg-wasm": "2.6.2",
|
|
"@vitejs/plugin-vue": "6.0.7",
|
|
"ansi_up": "6.0.6",
|
|
"asciinema-player": "3.15.1",
|
|
"chart.js": "4.5.1",
|
|
"chartjs-adapter-dayjs-4": "1.0.4",
|
|
"chartjs-plugin-zoom": "2.2.0",
|
|
"clippie": "4.2.0",
|
|
"codemirror-lang-elixir": "4.0.1",
|
|
"colord": "2.9.3",
|
|
"compare-versions": "6.1.1",
|
|
"cropperjs": "1.6.2",
|
|
"dayjs": "1.11.20",
|
|
"easymde": "2.21.0",
|
|
"esbuild": "0.28.0",
|
|
"idiomorph": "0.7.4",
|
|
"jquery": "4.0.0",
|
|
"js-yaml": "4.1.1",
|
|
"katex": "0.16.47",
|
|
"mermaid": "11.15.0",
|
|
"online-3d-viewer": "0.18.0",
|
|
"pdfobject": "2.3.1",
|
|
"perfect-debounce": "2.1.0",
|
|
"postcss": "8.5.15",
|
|
"rolldown-license-plugin": "3.0.7",
|
|
"sortablejs": "1.15.7",
|
|
"swagger-ui-dist": "5.32.6",
|
|
"tailwindcss": "3.4.19",
|
|
"throttle-debounce": "5.0.2",
|
|
"tippy.js": "6.3.7",
|
|
"toastify-js": "1.12.0",
|
|
"tributejs": "5.1.3",
|
|
"uint8-to-base64": "0.2.1",
|
|
"vanilla-colorful": "0.7.2",
|
|
"vite": "8.0.13",
|
|
"vite-string-plugin": "2.0.4",
|
|
"vue": "3.5.34",
|
|
"vue-bar-graph": "2.2.0",
|
|
"vue-chartjs": "5.3.3"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint-community/eslint-plugin-eslint-comments": "4.7.1",
|
|
"@eslint/json": "1.2.0",
|
|
"@playwright/test": "1.60.0",
|
|
"@stylistic/eslint-plugin": "5.10.0",
|
|
"@stylistic/stylelint-plugin": "5.1.0",
|
|
"@types/codemirror": "5.60.17",
|
|
"@types/jquery": "4.0.0",
|
|
"@types/js-yaml": "4.0.9",
|
|
"@types/katex": "0.16.8",
|
|
"@types/node": "25.9.1",
|
|
"@types/pdfobject": "2.2.5",
|
|
"@types/sortablejs": "1.15.9",
|
|
"@types/swagger-ui-dist": "3.30.6",
|
|
"@types/throttle-debounce": "5.0.2",
|
|
"@types/toastify-js": "1.12.4",
|
|
"@typescript-eslint/parser": "8.59.4",
|
|
"@vitejs/plugin-vue": "6.0.7",
|
|
"@vitest/eslint-plugin": "1.6.17",
|
|
"eslint": "10.4.0",
|
|
"eslint-import-resolver-typescript": "4.4.4",
|
|
"eslint-plugin-array-func": "5.1.1",
|
|
"eslint-plugin-de-morgan": "2.1.2",
|
|
"eslint-plugin-github": "6.0.0",
|
|
"eslint-plugin-import-x": "4.16.2",
|
|
"eslint-plugin-playwright": "2.10.4",
|
|
"eslint-plugin-regexp": "3.1.0",
|
|
"eslint-plugin-sonarjs": "4.0.3",
|
|
"eslint-plugin-unicorn": "64.0.0",
|
|
"eslint-plugin-vue": "10.9.1",
|
|
"eslint-plugin-vue-scoped-css": "3.1.0",
|
|
"eslint-plugin-wc": "3.1.0",
|
|
"globals": "17.6.0",
|
|
"happy-dom": "20.9.0",
|
|
"jiti": "2.7.0",
|
|
"markdownlint-cli": "0.48.0",
|
|
"material-icon-theme": "5.34.0",
|
|
"nolyfill": "1.0.44",
|
|
"postcss-html": "1.8.1",
|
|
"spectral-cli-bundle": "1.0.8",
|
|
"stylelint": "17.12.0",
|
|
"stylelint-config-recommended": "18.0.0",
|
|
"stylelint-declaration-block-no-ignored-properties": "3.0.0",
|
|
"stylelint-declaration-strict-value": "1.11.1",
|
|
"stylelint-value-no-unknown-custom-properties": "6.1.1",
|
|
"svgo": "4.0.1",
|
|
"typescript": "6.0.3",
|
|
"typescript-eslint": "8.59.4",
|
|
"updates": "17.16.13",
|
|
"vitest": "4.1.7",
|
|
"vue-tsc": "3.3.1"
|
|
}
|
|
}
|