Commit b1f27ad
authored
chore(deps): update pnpm to v10.29.1 (#285)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [pnpm](https://pnpm.io)
([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) |
[`10.28.2` →
`10.29.1`](https://renovatebot.com/diffs/npm/pnpm/10.28.2/10.29.1) |

|

|
---
### Release Notes
<details>
<summary>pnpm/pnpm (pnpm)</summary>
###
[`v10.29.1`](https://redirect.github.com/pnpm/pnpm/releases/tag/v10.29.1):
pnpm 10.29.1
[Compare
Source](https://redirect.github.com/pnpm/pnpm/compare/v10.28.2...v10.29.1)
#### Minor Changes
- The `pnpm dlx` / `pnpx` command now supports the `catalog:` protocol.
Example: `pnpm dlx shx@catalog:`.
- Support configuring `auditLevel` in the `pnpm-workspace.yaml` file
[#​10540](https://redirect.github.com/pnpm/pnpm/issues/10540).
- Support bare `workspace:` protocol without version specifier. It is
now treated as `workspace:*` and resolves to the concrete version during
publish
[#​10436](https://redirect.github.com/pnpm/pnpm/pull/10436).
#### Patch Changes
- Fixed `pnpm list --json` returning incorrect paths when using global
virtual store
[#​10187](https://redirect.github.com/pnpm/pnpm/issues/10187).
- Fix `pnpm store path` and `pnpm store status` using workspace root for
path resolution when `storeDir` is relative
[#​10290](https://redirect.github.com/pnpm/pnpm/issues/10290).
- Fixed `pnpm run -r` failing with "No projects matched the filters"
when an empty `pnpm-workspace.yaml` exists
[#​10497](https://redirect.github.com/pnpm/pnpm/issues/10497).
- Fixed a bug where `catalogMode: strict` would write the literal string
`"catalog:"` to `pnpm-workspace.yaml` instead of the resolved version
specifier when re-adding an existing catalog dependency
[#​10176](https://redirect.github.com/pnpm/pnpm/issues/10176).
- Fixed the documentation URL shown in `pnpm completion --help` to point
to the correct page at <https://pnpm.io/completion>
[#​10281](https://redirect.github.com/pnpm/pnpm/issues/10281).
- Skip local `file:` protocol dependencies during `pnpm fetch`. This
fixes an issue where `pnpm fetch` would fail in Docker builds when local
directory dependencies were not available
[#​10460](https://redirect.github.com/pnpm/pnpm/issues/10460).
- Fixed `pnpm audit --json` to respect the `--audit-level` setting for
both exit code and output filtering
[#​10540](https://redirect.github.com/pnpm/pnpm/issues/10540).
- update tar to version 7.5.7 to fix security issue
Updating the version of dependency tar to 7.5.7 because the previous one
have a security vulnerability reported here: <a
href="https://redirect.github.com/advisories/GHSA-34x7-hfp2-rc4v">CVE-2026-24842</a>
- Fix `pnpm audit --fix` replacing reference overrides (e.g. `$foo`)
with concrete versions
[#​10325](https://redirect.github.com/pnpm/pnpm/issues/10325).
- Fix `shamefullyHoist` set via `updateConfig` in `.pnpmfile.cjs` not
being converted to `publicHoistPattern`
[#​10271](https://redirect.github.com/pnpm/pnpm/issues/10271).
- `pnpm help` should correctly report if the currently running pnpm CLI
is bundled with Node.js
[#​10561](https://redirect.github.com/pnpm/pnpm/issues/10561).
- Add a warning when the current directory contains the PATH delimiter
character. On macOS, folder names containing forward slashes (/) appear
as colons (:) at the Unix layer. Since colons are PATH separators in
POSIX systems, this breaks PATH injection for `node_modules/.bin`,
causing binaries to not be found when running commands like `pnpm exec`
[#​10457](https://redirect.github.com/pnpm/pnpm/issues/10457).
#### Platinum Sponsors
<table>
<tbody>
<tr>
<td align="center" valign="middle">
<a href="https://bit.dev/?utm_source=pnpm&utm_medium=release_notes"
target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80"
alt="Bit"></a>
</td>
</tr>
</tbody>
</table>
#### Gold Sponsors
<table>
<tbody>
<tr>
<td align="center" valign="middle">
<a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank">
<picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/discord.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/discord_light.svg" />
<img src="https://pnpm.io/img/users/discord.svg" width="220"
alt="Discord" />
</picture>
</a>
</td>
<td align="center" valign="middle">
<a
href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes"
target="_blank">
<picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/coderabbit.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
<img src="https://pnpm.io/img/users/coderabbit.svg" width="220"
alt="CodeRabbit" />
</picture>
</a>
</td>
<td align="center" valign="middle">
<a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank">
<picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/workleap.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/workleap_light.svg" />
<img src="https://pnpm.io/img/users/workleap.svg" width="190"
alt="Workleap" />
</picture>
</a>
</td>
</tr>
<tr>
<td align="center" valign="middle">
<a
href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank">
<picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/stackblitz.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
<img src="https://pnpm.io/img/users/stackblitz.svg" width="190"
alt="Stackblitz" />
</picture>
</a>
</td>
<td align="center" valign="middle">
<a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes"
target="_blank">
<img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite">
</a>
</td>
</tr>
</tbody>
</table>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/yjl9903/vite-plugin-inline).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent 77b468b commit b1f27ad
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
67 | 67 | | |
68 | 68 | | |
69 | 69 | | |
70 | | - | |
| 70 | + | |
71 | 71 | | |
0 commit comments