pnpm · Mar 15, 2023 · Mar 15, 2023 · Mar 16, 2023 · Mar 16, 2023 · Mar 16, 2023
diff --git a/.npmrc b/.npmrc
@@ -13,3 +13,4 @@ save-prefix=
 resolution-mode=time-based
 auto-install-peers=true
 resolve-peers-from-workspace-root=true
+extend-node-path=false
diff --git a/cli/cli-utils/CHANGELOG.md b/cli/cli-utils/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @pnpm/cli-utils
 
+## 1.1.7
+
+### Patch Changes
+
+- @pnpm/config@17.0.2
+- @pnpm/default-reporter@11.0.42
+
 ## 1.1.6
 
 ### Patch Changes

diff --git a/cli/cli-utils/package.json b/cli/cli-utils/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cli-utils",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "description": "Utils for pnpm commands",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/cli/default-reporter/CHANGELOG.md b/cli/default-reporter/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @pnpm/default-reporter
 
+## 11.0.42
+
+### Patch Changes
+
+- @pnpm/config@17.0.2
+
 ## 11.0.41
 
 ### Patch Changes

diff --git a/cli/default-reporter/package.json b/cli/default-reporter/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/default-reporter",
-  "version": "11.0.41",
+  "version": "11.0.42",
   "description": "The default reporter of pnpm",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/config/config/CHANGELOG.md b/config/config/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @pnpm/config
 
+## 17.0.2
+
+### Patch Changes
+
+- @pnpm/pnpmfile@4.0.40
+
 ## 17.0.1
 
 ### Patch Changes

diff --git a/config/config/package.json b/config/config/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/config",
-  "version": "17.0.1",
+  "version": "17.0.2",
   "description": "Gets configuration options for pnpm",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/config/config/src/Config.ts b/config/config/src/Config.ts
@@ -157,6 +157,7 @@ export interface Config {
   legacyDirFiltering?: boolean
   onlyBuiltDependencies?: string[]
   dedupePeerDependents?: boolean
+  patchesDir?: string
 
   registries: Registries
   ignoreWorkspaceRootCheck: boolean

diff --git a/config/config/src/dirs.ts b/config/config/src/dirs.ts
@@ -46,6 +46,9 @@ export function getDataDir (
     platform: string
   }
 ) {
+  if (opts.env.PNPM_HOME) {
+    return opts.env.PNPM_HOME
+  }
   if (opts.env.XDG_DATA_HOME) {
     return path.join(opts.env.XDG_DATA_HOME, 'pnpm')
   }

diff --git a/config/config/src/index.ts b/config/config/src/index.ts
@@ -83,6 +83,7 @@ export const types = Object.assign({
   offline: Boolean,
   'only-built-dependencies': [String],
   'package-import-method': ['auto', 'hardlink', 'clone', 'copy'],
+  'patches-dir': String,
   pnpmfile: String,
   'prefer-frozen-lockfile': Boolean,
   'prefer-offline': Boolean,
@@ -311,7 +312,7 @@ export async function getConfig (
     }
     return undefined
   })()
-  pnpmConfig.pnpmHomeDir = process.env.PNPM_HOME ?? getDataDir(process)
+  pnpmConfig.pnpmHomeDir = getDataDir(process)
 
   if (cliOptions['global']) {
     let globalDirRoot

diff --git a/config/config/test/dirs.test.ts b/config/config/test/dirs.test.ts
@@ -57,6 +57,12 @@ test('getStateDir()', () => {
 })
 
 test('getDataDir()', () => {
+  expect(getDataDir({
+    env: {
+      PNPM_HOME: '/home/foo/data',
+    },
+    platform: 'linux',
+  })).toBe('/home/foo/data')
   expect(getDataDir({
     env: {
       XDG_DATA_HOME: '/home/foo/data',

diff --git a/config/plugin-commands-config/CHANGELOG.md b/config/plugin-commands-config/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @pnpm/plugin-commands-config
 
+## 1.0.25
+
+### Patch Changes
+
+- @pnpm/config@17.0.2
+- @pnpm/cli-utils@1.1.7
+
 ## 1.0.24
 
 ### Patch Changes

diff --git a/config/plugin-commands-config/package.json b/config/plugin-commands-config/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-commands-config",
-  "version": "1.0.24",
+  "version": "1.0.25",
   "description": "Commands for reading and writing settings to/from config files",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/env/plugin-commands-env/CHANGELOG.md b/env/plugin-commands-env/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @pnpm/plugin-commands-env
 
+## 3.1.36
+
+### Patch Changes
+
+- 685b3a7ea: New directories should be prepended to NODE_PATH in command shims, not appended.
+  - @pnpm/config@17.0.2
+  - @pnpm/cli-utils@1.1.7
+
 ## 3.1.35
 
 ### Patch Changes

diff --git a/env/plugin-commands-env/package.json b/env/plugin-commands-env/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-commands-env",
-  "version": "3.1.35",
+  "version": "3.1.36",
   "description": "pnpm commands for managing Node.js",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -39,7 +39,7 @@
     "@pnpm/node.resolver": "workspace:*",
     "@pnpm/remove-bins": "workspace:*",
     "@pnpm/store-path": "workspace:*",
-    "@zkochan/cmd-shim": "^5.4.1",
+    "@zkochan/cmd-shim": "^6.0.0",
     "@zkochan/rimraf": "^2.1.2",
     "load-json-file": "^6.2.0",
     "render-help": "^1.0.3",

diff --git a/exec/build-modules/CHANGELOG.md b/exec/build-modules/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @pnpm/build-modules
 
+## 10.1.9
+
+### Patch Changes
+
+- Updated dependencies [685b3a7ea]
+  - @pnpm/link-bins@8.0.11
+
 ## 10.1.8
 
 ### Patch Changes

diff --git a/exec/build-modules/package.json b/exec/build-modules/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/build-modules",
-  "version": "10.1.8",
+  "version": "10.1.9",
   "description": "Build packages in node_modules",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/exec/plugin-commands-rebuild/CHANGELOG.md b/exec/plugin-commands-rebuild/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @pnpm/plugin-commands-rebuild
 
+## 7.1.7
+
+### Patch Changes
+
+- Updated dependencies [685b3a7ea]
+  - @pnpm/link-bins@8.0.11
+  - @pnpm/config@17.0.2
+  - @pnpm/cli-utils@1.1.7
+  - @pnpm/store-connection-manager@5.2.20
+  - @pnpm/find-workspace-packages@5.0.42
+
 ## 7.1.6
 
 ### Patch Changes

diff --git a/exec/plugin-commands-rebuild/package.json b/exec/plugin-commands-rebuild/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-commands-rebuild",
-  "version": "7.1.6",
+  "version": "7.1.7",
   "description": "Commands for rebuilding dependencies",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/exec/plugin-commands-script-runners/CHANGELOG.md b/exec/plugin-commands-script-runners/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @pnpm/plugin-commands-script-runners
 
+## 6.5.7
+
+### Patch Changes
+
+- @pnpm/plugin-commands-installation@11.5.7
+- @pnpm/config@17.0.2
+- @pnpm/cli-utils@1.1.7
+
 ## 6.5.6
 
 ### Patch Changes

diff --git a/exec/plugin-commands-script-runners/package.json b/exec/plugin-commands-script-runners/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-commands-script-runners",
-  "version": "6.5.6",
+  "version": "6.5.7",
   "description": "Commands for running scripts",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/fs/graceful-fs/package.json b/fs/graceful-fs/package.json
@@ -28,7 +28,7 @@
   },
   "homepage": "https://github.com/pnpm/pnpm/blob/main/fs/graceful-fs#readme",
   "dependencies": {
-    "graceful-fs": "^4.2.10"
+    "graceful-fs": "^4.2.11"
   },
   "funding": "https://opencollective.com/pnpm",
   "devDependencies": {

diff --git a/fs/read-modules-dir/package.json b/fs/read-modules-dir/package.json
@@ -29,7 +29,7 @@
   },
   "funding": "https://opencollective.com/pnpm",
   "dependencies": {
-    "graceful-fs": "^4.2.10"
+    "graceful-fs": "^4.2.11"
   },
   "devDependencies": {
     "@pnpm/read-modules-dir": "workspace:*",

diff --git a/hooks/pnpmfile/CHANGELOG.md b/hooks/pnpmfile/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @pnpm/pnpmfile
 
+## 4.0.40
+
+### Patch Changes
+
+- @pnpm/core@8.0.4
+
 ## 4.0.39
 
 ### Patch Changes

diff --git a/hooks/pnpmfile/package.json b/hooks/pnpmfile/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/pnpmfile",
-  "version": "4.0.39",
+  "version": "4.0.40",
   "description": "Reading a .pnpmfile.cjs",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/lockfile/plugin-commands-audit/CHANGELOG.md b/lockfile/plugin-commands-audit/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @pnpm/plugin-commands-audit
 
+## 7.2.15
+
+### Patch Changes
+
+- @pnpm/config@17.0.2
+- @pnpm/cli-utils@1.1.7
+
 ## 7.2.14
 
 ### Patch Changes

diff --git a/lockfile/plugin-commands-audit/package.json b/lockfile/plugin-commands-audit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-commands-audit",
-  "version": "7.2.14",
+  "version": "7.2.15",
   "description": "pnpm commands for dependencies audit",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/package.json b/package.json
@@ -167,6 +167,9 @@
         "write-json-file",
         "write-pkg"
       ]
+    },
+    "auditConfig": {
+      "ignoreCves": ["CVE-2023-28155"]
     }
   }
 }
diff --git a/packages/mount-modules/CHANGELOG.md b/packages/mount-modules/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @pnpm/mount-modules
 
+## 0.3.42
+
+### Patch Changes
+
+- @pnpm/config@17.0.2
+
 ## 0.3.41
 
 ### Patch Changes

diff --git a/packages/mount-modules/package.json b/packages/mount-modules/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/mount-modules",
-  "version": "0.3.41",
+  "version": "0.3.42",
   "description": "Mounts a node_modules directory with FUSE",
   "main": "lib/index.js",
   "bin": "bin/mount-modules.js",

diff --git a/packages/plugin-commands-doctor/CHANGELOG.md b/packages/plugin-commands-doctor/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @pnpm/plugin-commands-doctor
 
+## 1.0.40
+
+### Patch Changes
+
+- @pnpm/config@17.0.2
+- @pnpm/cli-utils@1.1.7
+
 ## 1.0.39
 
 ### Patch Changes

diff --git a/packages/plugin-commands-doctor/package.json b/packages/plugin-commands-doctor/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-commands-doctor",
-  "version": "1.0.39",
+  "version": "1.0.40",
   "description": "Commands for checks of known common issues ",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/packages/plugin-commands-init/CHANGELOG.md b/packages/plugin-commands-init/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @pnpm/plugin-commands-init
 
+## 2.0.42
+
+### Patch Changes
+
+- @pnpm/config@17.0.2
+- @pnpm/cli-utils@1.1.7
+
 ## 2.0.41
 
 ### Patch Changes

diff --git a/packages/plugin-commands-init/package.json b/packages/plugin-commands-init/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-commands-init",
-  "version": "2.0.41",
+  "version": "2.0.42",
   "description": "Create a package.json file",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

diff --git a/packages/plugin-commands-setup/CHANGELOG.md b/packages/plugin-commands-setup/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @pnpm/plugin-commands-setup
 
+## 3.0.42
+
+### Patch Changes
+
+- @pnpm/cli-utils@1.1.7
+
 ## 3.0.41
 
 ### Patch Changes

diff --git a/packages/plugin-commands-setup/package.json b/packages/plugin-commands-setup/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-commands-setup",
-  "version": "3.0.41",
+  "version": "3.0.42",
   "description": "pnpm commands for setting up pnpm",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",