Change8

v12.0.0-beta.3

📦 pnpmView on GitHub →
🐛 2 fixes

Summary

This patch release improves dependency resolution speed and reduces memory usage. It also fixes issues related to how link dependencies and registry dependencies are handled in the lockfile.

🐛 Bug Fixes

  • When `excludeLinksFromLockfile` is enabled, a `link:` dependency pointing inside the workspace is no longer treated as an external link when it resolves a peer dependency, ensuring peer suffixes remain consistent with the setting off. Injected (`file:`) workspace dependencies are also unaffected by this setting.
  • Registry dependencies are now consistently recorded in `pnpm-lock.yaml` with an integrity hash, even when using `--lockfile-only`. This resolves an issue where packages from registries without subresource-integrity metadata (like `https://node-registry.bit.cloud/`) were recorded without a hash, causing `pnpm install --frozen-lockfile` to fail with `ERR_PNPM_MISSING_TARBALL_INTEGRITY`.