PNpM CLI

Minor Changes

• Ignore packages listed in package.json > pnpm.updateConfig.ignoreDependencies fields on update/outdated command #5358

  For instance, if you don't want webpack automatically to be updated when you run pnpm update --latest, put this to your package.json:

  {
    "pnpm": {
      "updateConfig": {
        "ignoreDependencies": ["webpack"]
      }
    }
  }
  

  Patterns are also supported, so you may ignore for instance any packages from a scope: @babel/*.

• It is possible now to update all dependencies except the listed ones using !. For instance, update all dependencies, except lodash:

    pnpm update !lodash
  

  It also works with pattends, for instance:

    pnpm update !@babel/*
  

  And it may be combined with other patterns:

    pnpm update @babel/* !@babel/core
  

Patch Changes

• Hooks should be applied on pnpm deploy #5306.

• Stop --filter-prod option to run command on all the projects when used on workspace. --filter-prod option now only filter from dependencies and omit devDependencies instead of including all the packages when used on workspace. So what was happening is that if you use --filter-prod on workspace root like this:

  pnpm --filter-prod ...build-modules exec node -e 'console.log(require(`./package.json`).name)'
  

  it was printing all the package of workspace, where it should only print the package name of itself and packages where it has been added as dependency (not as devDependencies)

• Don't override the root dependency when auto installing peer dependencies #5412.

Our Gold Sponsors

<table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://bit.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80"></a> </td> <td align="center" valign="middle"> <a href="https://nhost.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/nhost.svg" width="180"></a> </td> <td align="center" valign="middle"> <a href="https://novu.co/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/novu.svg" width="180"></a> </td> </tr> </tbody> </table>

Our Silver Sponsors

<table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://prisma.io/?utm_source=pnpm&utm_medium=readme" target="_blank"> <img src="https://pnpm.io/img/users/prisma.svg" width="180"> </a> </td> <td align="center" valign="middle"> <a href="https://leniolabs.com/?utm_source=pnpm&utm_medium=readme" target="_blank"> <img src="https://pnpm.io/img/users/leniolabs.jpg" width="80"> </a> </td> <td align="center" valign="middle"> <a href="https://vercel.com/?utm_source=pnpm&utm_medium=readme" target="_blank"> <img src="https://pnpm.io/img/users/vercel.svg" width="180"> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://www.takeshape.io/?utm_source=pnpm&utm_medium=readme" target="_blank"> <img src="https://pnpm.io/img/users/takeshape.svg" width="280"> </a> </td> <td align="center" valign="middle"> <a href="https://doppler.com/?utm_source=pnpm&utm_medium=readme#gh-light-mode-only" target="_blank"> <img src="https://pnpm.io/img/users/doppler.svg" width="280"> </a> </td> </tr> </tbody> </table>

What's Changed

• GitHub Workflows security hardening by @sashashura in https://github.com/pnpm/pnpm/pull/5405
• feat: merge readPackage hook from opts and pnpmfile by @AGrzes in https://github.com/pnpm/pnpm/pull/5403
• feat: excluding deps from update by @zkochan in https://github.com/pnpm/pnpm/pull/5432
• fix: dir path repeated join in link global by @lvqq in https://github.com/pnpm/pnpm/pull/5434
• fix: filter-prod flag including all workspace pkgs by @noorulh06 in https://github.com/pnpm/pnpm/pull/5437
• Feature: ignore packages listed in package.json > pnpm.updateConfig.ignoreDependencies on update/outdated commands by @Shinyaigeek in https://github.com/pnpm/pnpm/pull/5408
• fix: don't override root deps when auto installing peers by @zkochan in https://github.com/pnpm/pnpm/pull/5442

New Contributors

• @sashashura made their first contribution in https://github.com/pnpm/pnpm/pull/5405
• @AGrzes made their first contribution in https://github.com/pnpm/pnpm/pull/5403
• @noorulh06 made their first contribution in https://github.com/pnpm/pnpm/pull/5437

Full Changelog: https://github.com/pnpm/pnpm/compare/v7.12.2...v7.13.0