RobinTail / merge-sx / 37778443716

100%

push

github

Update pnpm to v12.9.1 (#689)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [pnpm](https://pnpm.io)
([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm/npm/pnpm))
| [`12.9.0` →
`12.9.1`](https://renovatebot.com/diffs/npm/pnpm/12.9.0/12.9.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/12.9.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/12.9.0/12.9.1?slim=true)
|

---

### Release Notes

<details>
<summary>pnpm/pnpm (pnpm)</summary>

###
[`v12.9.1`](https://redirect.github.com/pnpm/pnpm/releases/tag/v12.9.1):
pnpm 12.9.1

[Compare
Source](https://redirect.github.com/pnpm/pnpm/compare/v12.9.0...v12.9.1)

This release moves the WebContainer build into a separate `@pnpm/wasm`
package, shrinks the `pnpm` package back to about 4 MB, and fixes `pnpm
publish` with provenance from GitLab CI.

##### Patch Changes

- The WebAssembly build for StackBlitz WebContainers now ships as a
separate `@pnpm/wasm` package. The `pnpm` and `@pnpm/exe` packages no
longer include it, which brings their unpacked size back from about 55
MB to about 4 MB. In a WebContainer, install `@pnpm/wasm` with npm to
get the `pnpm` command.

- `pnpm publish` with provenance from GitLab CI is no longer rejected by
the npm registry with a 422 error. The provenance statement now includes
the GitLab CI variables in `invocation.parameters`, as npm does
[#&#8203;16551](https://redirect.github.com/pnpm/pnpm/issues/16551).

- `pnpm audit signatures` now uses the TLS settings of the redirect
target when a registry redirects its signing-keys request, for example
to registry.npmjs.org. A `cafile` scoped to a private registry no longer
makes the redirected request fail
[#&#8203;16541](https://redirect.github.com/pnpm/pnpm/issues/16541).

- Fixed `pnpm install --frozen-lockfile` re... (continued)

4 of 4 branches covered (100.0%)

Branch coverage included in aggregate %.

8 of 8 relevant lines covered (100.0%)

24592.13 hits per line