Skip to content

Comments

build: update pnpm to v10.29.3 (main)#32755

Merged
crisbeto merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/main-pnpm-10-x
Feb 18, 2026
Merged

build: update pnpm to v10.29.3 (main)#32755
crisbeto merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/main-pnpm-10-x

Conversation

@angular-robot
Copy link
Contributor

@angular-robot angular-robot commented Feb 9, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
pnpm (source) 10.28.2 → 10.29.3 age adoption passing confidence

Release Notes

pnpm/pnpm (pnpm)

v10.29.3: pnpm 10.29.3

Compare Source

Patch Changes
  • Fixed an out-of-memory error in pnpm list (and pnpm why) on large dependency graphs by replacing the recursive tree builder with a two-phase approach: a BFS dependency graph followed by cached tree materialization. Duplicate subtrees are now deduplicated in the output, shown as "deduped (N deps hidden)" #​10586.
  • Fixed allowBuilds not working when set via .pnpmfile.cjs #​10516.
  • When the enableGlobalVirtualStore option is set, the pnpm deploy command would incorrectly create symlinks to the global virtual store. To keep the deploy directory self-contained, pnpm deploy now ignores this setting and always creates a localized virtual store within the deploy directory.
  • Fixed minimumReleaseAgeExclude not being respected by pnpm dlx #​10338.
Platinum Sponsors
Bit
Gold Sponsors
Sanity Discord Vite
SerpApi CodeRabbit Workleap
Stackblitz Nx

v10.29.2: pnpm 10.29.2

Compare Source

Patch Changes
  • Reverted a fix shipped in v10.29.1, which caused another issue #​10571.
    Reverted fix: Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #​10497.
Platinum Sponsors
Bit
Gold Sponsors
Discord CodeRabbit Workleap
Stackblitz Vite

v10.29.1: pnpm 10.29.1

Compare Source

Minor Changes
  • The pnpm dlx / pnpx command now supports the catalog: protocol. Example: pnpm dlx shx@catalog:.
  • Support configuring auditLevel in the pnpm-workspace.yaml file #​10540.
  • Support bare workspace: protocol without version specifier. It is now treated as workspace:* and resolves to the concrete version during publish #​10436.
Patch Changes

  • Fixed pnpm list --json returning incorrect paths when using global virtual store #​10187.

  • Fix pnpm store path and pnpm store status using workspace root for path resolution when storeDir is relative #​10290.

  • Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #​10497.

  • Fixed a bug where catalogMode: strict would write the literal string "catalog:" to pnpm-workspace.yaml instead of the resolved version specifier when re-adding an existing catalog dependency #​10176.

  • Fixed the documentation URL shown in pnpm completion --help to point to the correct page at https://pnpm.io/completion #​10281.

  • Skip local file: protocol dependencies during pnpm fetch. This fixes an issue where pnpm fetch would fail in Docker builds when local directory dependencies were not available #​10460.

  • Fixed pnpm audit --json to respect the --audit-level setting for both exit code and output filtering #​10540.

  • update tar to version 7.5.7 to fix security issue

    Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842

  • Fix pnpm audit --fix replacing reference overrides (e.g. $foo) with concrete versions #​10325.

  • Fix shamefullyHoist set via updateConfig in .pnpmfile.cjs not being converted to publicHoistPattern #​10271.

  • pnpm help should correctly report if the currently running pnpm CLI is bundled with Node.js #​10561.

  • Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for node_modules/.bin, causing binaries to not be found when running commands like pnpm exec #​10457.

Platinum Sponsors
Bit
Gold Sponsors
Discord CodeRabbit Workleap
Stackblitz Vite
  • If you want to rebase/retry this PR, check this box

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Feb 9, 2026
@pullapprove pullapprove bot requested review from mmalerba and tjshiu February 9, 2026 06:26
@angular-robot angular-robot force-pushed the ng-renovate/main-pnpm-10-x branch from 35522a0 to 1fcea2f Compare February 10, 2026 02:19
@angular-robot angular-robot changed the title build: update pnpm to v10.29.1 (main) build: update pnpm to v10.29.2 (main) Feb 10, 2026
@angular-robot angular-robot force-pushed the ng-renovate/main-pnpm-10-x branch from 1fcea2f to 305decd Compare February 12, 2026 12:50
@angular-robot angular-robot changed the title build: update pnpm to v10.29.2 (main) build: update pnpm to v10.29.3 (main) Feb 12, 2026
@angular-robot
build: update pnpm to v10.29.3
e95a5f9 
See associated pull request for more information.
@angular-robot angular-robot force-pushed the ng-renovate/main-pnpm-10-x branch from 305decd to e95a5f9 Compare February 17, 2026 10:19
@crisbeto crisbeto merged commit 04c8716 into angular:main Feb 18, 2026
24 checks passed
@crisbeto
Copy link
Member

crisbeto commented Feb 18, 2026

This PR was merged into the repository. The changes were merged into the following branches:

jermowery added a commit to jermowery/components that referenced this pull request Feb 23, 2026
@jermowery
feat(material/button): Add support for showing a progress indicator i…
ff8daa0 
…nside the button

Add a new API, testing API, and docs for allowing progress indicators to be projected into a button and have them shown in an accessible manner

Fixes angular#13667

undo

Use more specific selector

refactor(cdk/overlay): add way to only handle specific events in overlay

We dispatch keyboard events to the different overlays depending on their attachment order and if they're listening for keyboard events. This works fine for the most part, but can lead to unexpected behavior where an overlay only cares about one type of event which ends up blocking the event from reaching other overlays.

These changes add an `eventPredicate` option that overlay can use to allow some events to pass through.

fix(material/tooltip): do not block events to other overlays

Fixes that the tooltip was blocking keyboard events to other overlays, even if it doesn't care about them.

Fixes angular#32760.

fix(multiple): change aria keyboard manager to only handle repeated events in correct places (angular#32728)

perf(aria/grid): performance when selecting in a large grid (angular#32766)

Fixes that the grid cell's host bindings were slowing down the page significantly during selection when placed in a large grid. The issue seems to come from the fact that there's a non-zero cost to the signal reads in the directive's host bindings which can add up.

These changes address the issue by batching the reads together in an effect.

Fixes angular#32759.

fix(material/radio): hide empty labels (angular#32754)

We have similar logic in the checkbox and slide toggle so these changes apply it to the radio button: hiding the label when it's empty so it doesn't affect the layout.

build: bump stackblitz template to 21.1 (angular#32752)

Updates the template for Stackblitz examples to the latest version of Angular.

docs: release notes for the v21.1.4 release

release: cut the v21.2.0-next.4 release

fix(aria/combobox): fix autocomplete examples and add comments explaining combobox selection behavior (angular#32714)

fix(material/select): disable position locking (angular#32772)

In angular#9789 we enabled locked positioning for `mat-select` due to the previous of laying out the panel. Then in angular#30628 we enabled flexible dimensions so it's able to shrink. This combination can cause the panel to shrink when the user scrolls it out of view.

These changes remove the locked positioning since it's not necessary anymore.

Fixes angular#32771.

build: update cross-repo angular dependencies (angular#32684)

See associated pull request for more information.

fix(google-maps): fix mismatch in clusterer types (angular#32778)

Fixes that the clusterer types seem to no longer match with the ones on npm, causing a type error.

Fixes angular#32696.

refactor(material/select): remove dependency on NgClass (angular#32776)

Drops the dependency on `NgClass` from the select component since we can achieve the same with class bindings.

fix(cdk/tree): no nodes focusable if data is replaced (angular#32781)

Fixes that none of the tree nodes were focusable if the data is swapped out after initialization.

Fixes angular#32779.

build: update bazel dependencies (angular#32689)

See associated pull request for more information.

build: update all github actions (angular#32722)

See associated pull request for more information.

build: lock file maintenance (angular#32737)

See associated pull request for more information.

build: update pnpm to v10.29.3 (angular#32755)

See associated pull request for more information.

build: update cross-repo angular dependencies (angular#32784)

See associated pull request for more information.

docs: release notes for the v21.1.5 release

release: cut the v21.2.0-next.5 release

release: bump the next branch to v21.3.0-next.0

docs: release notes for the v21.2.0-rc.0 release

build: update cross-repo angular dependencies (angular#32794)

See associated pull request for more information.

fix(aria/combobox): Adjust AutoComplete examples to properly announce no results text (angular#32786)

build: update pnpm to v10.30.0 (angular#32803)

See associated pull request for more information.

build: update cross-repo angular dependencies (angular#32801)

See associated pull request for more information.

build: update dependencies and resolve breaking change (angular#32799)

Takes over the dependency bump from angular#32690 and resolves a breaking change.

fix(material/core): expose strong focus indicator structural styles (angular#32808)

Exposes the structural styles for strong focus indicators so users can use them in their own components.

Fixes angular#32773.

build: set up schematics for v22 (angular#32806)

One of the pre-requisites to release the next version of v22 is to have schematics set up. These changes add them ahead of time so we don't run into any issues when we go to release.

fix(material/datepicker): drop dependency on NgClass (angular#32810)

Drops the dependency on `NgClass` from the datepicker in favor of a direct `class` binding.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mmalerba mmalerba mmalerba approved these changes

@tjshiu tjshiu tjshiu approved these changes

Assignees

No one assigned

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@angular-robot @crisbeto @mmalerba @tjshiu