RobinTail / express-zod-api / 25441222595

100%

push

github

Update pnpm to v10.33.4 (#3373)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [pnpm](https://pnpm.io)
([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) |
[`10.33.3+sha512.a197443649825796747aba9bc78ac8ff489`
→ `10.33.4`](https://renovatebot.com/diffs/npm/pnpm/10.33.3/10.33.4) |
![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/10.33.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/10.33.3/10.33.4?slim=true)
|

---

### Release Notes

<details>
<summary>pnpm/pnpm (pnpm)</summary>

###
[`v10.33.4`](https://redirect.github.com/pnpm/pnpm/releases/tag/v10.33.4):
pnpm 10.33.4

[Compare
Source](https://redirect.github.com/pnpm/pnpm/compare/v10.33.3...v10.33.4)

#### Patch Changes

- Pin the integrity of git-hosted tarballs (codeload.github.com,
gitlab.com, bitbucket.org) in the lockfile so that subsequent installs
detect a tampered or substituted tarball and refuse to install it.
Previously the lockfile only stored the tarball URL for git
dependencies, so a compromised git host or a man-in-the-middle could
serve arbitrary code on later installs without lockfile changes.

A new `gitHosted: true` field is recorded on git-hosted tarball
resolutions in the lockfile, letting every reader/writer route them by a
single typed check instead of pattern-matching the tarball URL in each
call site. Lockfiles written by older pnpm versions are enriched on load
(URL fallback) so the field can be relied on uniformly across the
codebase.

- Fix a regression where `pnpm --recursive --filter '!<pkg>'
run/exec/test/add` would include the workspace root in the matched
projects. The workspace root is now correctly excluded by default when
only negative `--filter` argument... (continued)

946 of 986 branches covered (95.94%)

1385 of 1385 relevant lines covered (100.0%)

537.55 hits per line