v11.17.0
📦 pnpmView on GitHub →
✨ 3 features🐛 7 fixes🔧 3 symbols
Summary
This release introduces a new setting for specifying GitHub Actions server URLs and improves error handling for GitHub Actions dependencies. It also includes several bug fixes related to catalog references, Windows installations, and token polling for web-based authentication.
✨ New Features
- Added a new setting, `update.githubActionsServer`, for specifying the base URL of the GitHub server that hosts the repositories of the GitHub Actions referenced by the workflow files.
- Setting `update.githubActions` to `false` now makes `pnpm outdated` and the interactive `pnpm update` skip GitHub Actions dependencies.
- Support the `from-git` argument in the `pnpm version` command.
🐛 Bug Fixes
- `pnpm outdated` and `pnpm update` no longer fail when the refs of a GitHub Action's repository cannot be read (for example, when the action's repository is private or hosted on a different GitHub server). Such actions are now skipped with a warning.
- The token poll for web-based authentication no longer reads the body of non-OK or still-pending (HTTP 202) responses, and caps the token response body it does read at 64 KiB, so a malicious or compromised registry cannot exhaust memory through the poll.
- Fixed `catalog:` references in dependencies and overrides failing to resolve when installing through a pnpr server, which errored with "No catalog entry '<name>' was found for catalog 'default'." even though the catalog entry existed.
- Fixed a crash on Windows when installing a nested workspace member (e.g. `packages/foo`) through a pnpr server.
- Republished every package: the tarballs published by the v11.13.1 through v11.16.0 releases were missing most of their compiled files due to a packing bug.
- Revert script ordering change for `pnpm run --sequential /regex/`
- When the authentication URL cannot be rendered as a QR code (for example when it exceeds the maximum QR data capacity), web-based login now displays the URL alone with a warning instead of aborting authentication.