Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 9, 2025

Bumps pnpm from 8.9.2 to 10.13.1.

Release notes

Sourced from pnpm's releases.

pnpm 10.13.1

Patch Changes

  • Run user defined pnpmfiles after pnpmfiles of plugins.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.13.1

Patch Changes

  • Run user defined pnpmfiles after pnpmfiles of plugins.

10.13.0

Minor Changes

  • Added the possibility to load multiple pnpmfiles. The pnpmfile setting can now accept a list of pnpmfile locations #9702.

  • pnpm will now automatically load the pnpmfile.cjs file from any config dependency named @pnpm/plugin-* or pnpm-plugin-* #9729.

    The order in which config dependencies are initialized should not matter — they are initialized in alphabetical order. If a specific order is needed, the paths to the pnpmfile.cjs files in the config dependencies can be explicitly listed using the pnpmfile setting in pnpm-workspace.yaml.

Patch Changes

  • When patching dependencies installed via pkg.pr.new, treat them as Git tarball URLs #9694.
  • Prevent conflicts between local projects' config and the global config in dangerouslyAllowAllBuilds, onlyBuiltDependencies, onlyBuiltDependenciesFile, and neverBuiltDependencies #9628.
  • Sort keys in pnpm-workspace.yaml with deep #9701.
  • The pnpm rebuild command should not add pkgs included in ignoredBuiltDependencies to ignoredBuilds in node_modules/.modules.yaml #9338.
  • Replaced shell-quote with shlex for quoting command arguments #9381.

10.12.4

Patch Changes

10.12.3

Patch Changes

10.12.2

... (truncated)

Commits
  • 8bec871 chore(release): 10.13.1
  • 168a793 chore(release): 10.13.0
  • e225310 feat: loading pnpmfiles automatically from plugins (#9729)
  • 7867896 test: using two pnpmfiles
  • cf630a8 feat: allow to set multiple pnpmfiles (#9702)
  • 623da6f fix(config): conflicts between global and local in whether to run scripts (#9...
  • 8e0db2e docs(README): remove links to the chat
  • 3aa0747 fix: package manager version autoswitch should be disable during local develo...
  • 589ac1f fix(lifecycle): replace shell-quote with shlex (#9695)
  • 337a110 chore(release): 10.12.4
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pnpm](https://github.com/pnpm/pnpm/tree/HEAD/pnpm) from 8.9.2 to 10.13.1.
- [Release notes](https://github.com/pnpm/pnpm/releases)
- [Changelog](https://github.com/pnpm/pnpm/blob/main/pnpm/CHANGELOG.md)
- [Commits](https://github.com/pnpm/pnpm/commits/v10.13.1/pnpm)

---
updated-dependencies:
- dependency-name: pnpm
  dependency-version: 10.13.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2025
@vercel
Copy link

vercel bot commented Jul 9, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
devs-in-tech ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 9, 2025 8:42pm

@netlify
Copy link

netlify bot commented Jul 9, 2025

Deploy Preview for devsintech failed. Why did it fail? →

Name Link
🔨 Latest commit c68f895
🔍 Latest deploy log https://app.netlify.com/projects/devsintech/deploys/686ed3f568b5970008905362

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 31, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/pnpm-10.13.1 branch July 31, 2025 00:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant