Bump the npm group with 2 updates
Type: Pull Request
State: Merged
Association: Contributor
Comments: 2
(10 months ago)
(10 months ago)
(10 months ago)
by github-actions[bot]
dependencies javascript
poad
Bumps the npm group with 2 updates: pnpm and typescript.
Updates pnpm from 10.13.1 to 10.14.0
Release notes
Sourced from pnpm's releases.
pnpm 10.14
Minor Changes
Added support for JavaScript runtime installation
Declare Node.js, Deno, or Bun in
devEngines.runtime(insidepackage.json) and let pnpm download and pin it automatically.Usage example:
{ "devEngines": { "runtime": { "name": "node", "version": "^24.4.0", "onFail": "download" // we only support the "download" value for now } } }How it works:
pnpm installresolves your specified range to the latest matching runtime version.- The exact version (and checksum) is saved in the lockfile.
- Scripts use the local runtime, ensuring consistency across environments.
Why this is better:
- This new setting supports also Deno and Bun (vs. our Node-only settings
useNodeVersionandexecutionEnv.nodeVersion)- Supports version ranges (not just a fixed version).
- The resolved version is stored in the pnpm lockfile, along with an integrity checksum for future validation of the Node.js content's validity.
- It can be used on any workspace project (like
executionEnv.nodeVersion). So, different projects in a workspace can use different runtimes.- For now
devEngines.runtimesetting will install the runtime locally, which we will improve in future versions of pnpm by using a shared location on the computer.Related PR: #9755.
Add
--cpu,--libc, and--ostopnpm install,pnpm add, andpnpm dlxto customizesupportedArchitecturesvia the CLI #7510.Patch Changes
- Fix a bug in which
pnpm adddownloads packages whoselibcdiffer frompnpm.supportedArchitectures.libc.- The integrities of the downloaded Node.js artifacts are verified #9750.
- Allow
dlxto parse CLI flags and options between thedlxcommand and the command to run or between thedlxcommand and--#9719.pnpm install --prodshould removing hoisted dev dependencies #9782.- Fix an edge case bug causing local tarballs to not re-link into the virtual store. This bug would happen when changing the contents of the tarball without renaming the file and running a filtered install.
- Fix a bug causing
pnpm installto incorrectly assume the lockfile is up to date after changing a local tarball that has peers dependencies.Platinum Sponsors
... (truncated)
Changelog
Sourced from pnpm's changelog.
10.14.0
Minor Changes
Added support for JavaScript runtime resolution
Declare Node.js, Deno, or Bun in
devEngines.runtime(insidepackage.json) and let pnpm download and pin it automatically.Usage example:
{ "devEngines": { "runtime": { "name": "node", "version": "^24.4.0", "onFail": "download" (we only support the "download" value for now) } } }How it works:
pnpm installresolves your specified range to the latest matching runtime version.- The exact version (and checksum) is saved in the lockfile.
- Scripts use the local runtime, ensuring consistency across environments.
Why this is better:
- This new setting supports also Deno and Bun (vs. our Node-only settings
useNodeVersionandexecutionEnv.nodeVersion)- Supports version ranges (not just a fixed version).
- The resolved version is stored in the pnpm lockfile, along with an integrity checksum for future validation of the Node.js content's validity.
- It can be used on any workspace project (like
executionEnv.nodeVersion). So, different projects in a workspace can use different runtimes.- For now
devEngines.runtimesetting will install the runtime locally, which we will improve in future versions of pnpm by using a shared location on the computer.Related PR: #9755.
Add
--cpu,--libc, and--ostopnpm install,pnpm add, andpnpm dlxto customizesupportedArchitecturesvia the CLI #7510.Patch Changes
- Fix a bug in which
pnpm adddownloads packages whoselibcdiffer frompnpm.supportedArchitectures.libc.- The integrities of the downloaded Node.js artifacts are verified #9750.
- Allow
dlxto parse CLI flags and options between thedlxcommand and the command to run or between thedlxcommand and--#9719.pnpm install --prodshould removing hoisted dev dependencies #9782.- Fix an edge case bug causing local tarballs to not re-link into the virtual store. This bug would happen when changing the contents of the tarball without renaming the file and running a filtered install.
- Fix a bug causing
pnpm installto incorrectly assume the lockfile is up to date after changing a local tarball that has peers dependencies.
Commits
a4d6548chore(release): 10.14.0d1edf73feat: support installing Deno runtime (#9791)1073cecfix: downgrade@pnpm/nopt0b6264efix(deps): update@pnpm/noptto v0.3 (#9790)fb9de7achore(release): 10.14.0-04a8243achore:package.jsonadd type field (#9765)ea2d2eadocs: update sponsors6f7ac0ffeat: customizesupportedArchitecturesusing CLI (#9745)9e89c66refactor: useprepareEmptyandexpectSuccessinpnpm/test/dlx.ts(#9736)6bcfa69feat(cli): parse options afterdlx(#9735)- See full diff in compare view
Updates typescript from 5.8.3 to 5.9.2
Release notes
Sourced from typescript's releases.
TypeScript 5.9
Release notes pending.
- fixed issues query for Typescript 5.9.0 (Beta).
- fixed issues query for Typescript 5.9.1 (RC).
- [[No specific changes for TypeScript 5.9.2 (Stable)]]
Downloads are available on:
TypeScript 5.9 RC
For release notes, check out the release announcement
Downloads are available on:
TypeScript 5.9 Beta
For release notes, check out the release announcement.
Downloads are available on:
Commits
be86783Give more specific errors forverbatimModuleSyntax(#62113)22ef577LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250714...d5a414cDon't usenoErrorTruncationwhen printing types withmaximumLengthset (#...f14b5c8Remove unused and confusing dom.iterable.d.ts file (#62037)2778e84Restore AbortSignal.abort (#62086)65cb4bdLEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250710...9e20e03Clear out checker-level stacks on pop (#62016)87740bcFix for Issue 61081 (#61221)833a8d4Fix Symbol completion priority and cursor positioning (#61945)0018c9fLEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250702...- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
1
4
+86
-86
Package Dependencies
Technical Details
| ID: | 4386798 |
| UUID: | 2711707979 |
| Node ID: | PR_kwDONx1qVc6hoWFL |
| Host: | GitHub |
| Repository: | poad/solid-start-ssr-lambda |
| Merge State: | Unknown |