chore(deps): update pnpm to v10.30.2 by renovate[bot] · Pull Request #44 · allthingslinux/portal

renovate · 2026-02-16T05:51:56Z

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF
pnpm (source)	engines	minor	`10.28.2` → `10.30.2`	`10.30.3`

Release Notes

pnpm/pnpm (pnpm)

`v10.30.2`

Compare Source

`v10.30.1`: pnpm 10.30.1

Compare Source

Patch Changes

Use the /-/npm/v1/security/audits/quick endpoint as the primary audit endpoint, falling back to /-/npm/v1/security/audits when it fails #10649.

Platinum Sponsors

Gold Sponsors

`v10.30.0`: pnpm 10.30

Compare Source

Minor Changes

pnpm why now shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.

Patch Changes

Revert pnpm why dependency pruning to prefer correctness over memory consumption. Reverted PR: #7122.
Optimize pnpm why and pnpm list performance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #10596.

Platinum Sponsors

Gold Sponsors

Minor Changes

The pnpm dlx / pnpx command now supports the catalog: protocol. Example: pnpm dlx shx@catalog:.
Support configuring auditLevel in the pnpm-workspace.yaml file #10540.
Support bare workspace: protocol without version specifier. It is now treated as workspace:* and resolves to the concrete version during publish #10436.

Patch Changes

Fixed pnpm list --json returning incorrect paths when using global virtual store #10187.
Fix pnpm store path and pnpm store status using workspace root for path resolution when storeDir is relative #10290.
Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #10497.
Fixed a bug where catalogMode: strict would write the literal string "catalog:" to pnpm-workspace.yaml instead of the resolved version specifier when re-adding an existing catalog dependency #10176.
Fixed the documentation URL shown in pnpm completion --help to point to the correct page at https://pnpm.io/completion #10281.
Skip local file: protocol dependencies during pnpm fetch. This fixes an issue where pnpm fetch would fail in Docker builds when local directory dependencies were not available #10460.
Fixed pnpm audit --json to respect the --audit-level setting for both exit code and output filtering #10540.
update tar to version 7.5.7 to fix security issue

Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842
Fix pnpm audit --fix replacing reference overrides (e.g. $foo) with concrete versions #10325.
Fix shamefullyHoist set via updateConfig in .pnpmfile.cjs not being converted to publicHoistPattern #10271.
pnpm help should correctly report if the currently running pnpm CLI is bundled with Node.js #10561.
Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for node_modules/.bin, causing binaries to not be found when running commands like pnpm exec #10457.

Platinum Sponsors

Gold Sponsors

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-02-16T05:51:58Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

 ERR_PNPM_UNSUPPORTED_ENGINE  Unsupported environment (bad pnpm and/or Node.js version)

Your pnpm version is incompatible with "/tmp/renovate/repos/github/allthingslinux/portal".

Expected version: 10.30.2
Got: 10.28.2

This is happening because the package's manifest has an engines.pnpm field specified.
To fix this issue, install the required pnpm version globally.

To install the latest version of pnpm, run "pnpm i -g pnpm".
To check your pnpm version, run "pnpm -v".

cubic-dev-ai

No issues found across 1 file

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

package.json

sentry · 2026-02-24T15:12:21Z

package.json

  "packageManager": "pnpm@10.28.2",
  "engines": {
-    "pnpm": "10.28.2",
+    "pnpm": "10.30.0",


Bug: The PR description claims to update several dependencies, but these changes are missing from package.json. The packageManager version is also not updated, creating an inconsistency.
_{Severity: MEDIUM}

Suggested Fix

Ensure the dependency versions in package.json match the versions specified in the PR description. Update @base-ui/react, dotenv, react-resizable-panels, and undici. Also, update the packageManager field to pnpm@10.30.0 to match the engines.pnpm version. Finally, run pnpm install to regenerate the pnpm-lock.yaml file.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not valid. Location: package.json#L143 Potential issue: The pull request description indicates updates for four dependencies (`@base-ui/react`, `dotenv`, `react-resizable-panels`, `undici`), but these version changes are not reflected in the `package.json` file. The application will continue to use the old, un-updated versions of these packages. Additionally, there is a mismatch between the `engines.pnpm` version, which was updated to `10.30.0`, and the `packageManager` field, which remains at `10.28.2`. This inconsistency could lead to issues for developers. The `pnpm-lock.yaml` file also remains unchanged, confirming the dependencies were not updated.

| datasource | package | from | to | | ---------- | ------- | ------- | ------- | | npm | pnpm | 10.28.2 | 10.30.2 |

renovate bot added the deps: minor label Feb 16, 2026

cubic-dev-ai bot reviewed Feb 16, 2026

View reviewed changes

renovate bot force-pushed the renovate/minor branch from 93f7efc to b920e60 Compare February 17, 2026 16:01

renovate bot changed the title ~~chore(deps): update minor~~ chore(deps): update minor - autoclosed Feb 18, 2026

renovate bot closed this Feb 18, 2026

renovate bot deleted the renovate/minor branch February 18, 2026 02:57

renovate bot changed the title ~~chore(deps): update minor - autoclosed~~ chore(deps): update minor Feb 23, 2026

renovate bot reopened this Feb 23, 2026

renovate bot force-pushed the renovate/minor branch 2 times, most recently from b920e60 to 9af3fbc Compare February 23, 2026 05:12

sentry bot reviewed Feb 23, 2026

View reviewed changes

package.json Show resolved Hide resolved

renovate bot force-pushed the renovate/minor branch from 9af3fbc to ca23315 Compare February 24, 2026 15:09

sentry bot reviewed Feb 24, 2026

View reviewed changes

renovate bot force-pushed the renovate/minor branch 2 times, most recently from b219d1b to 5cb6a9e Compare March 3, 2026 01:37

chore(deps): update pnpm to v10.30.2

867b93b

| datasource | package | from | to | | ---------- | ------- | ------- | ------- | | npm | pnpm | 10.28.2 | 10.30.2 |

renovate bot force-pushed the renovate/minor branch from 5cb6a9e to 867b93b Compare March 3, 2026 20:31

renovate bot changed the title ~~chore(deps): update minor~~ chore(deps): update pnpm to v10.30.2 Mar 3, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update pnpm to v10.30.2#44

chore(deps): update pnpm to v10.30.2#44
renovate[bot] wants to merge 1 commit intomainfrom
renovate/minor

renovate bot commented Feb 16, 2026 •

edited

Loading

Uh oh!

renovate bot commented Feb 16, 2026 •

edited

Loading

Uh oh!

cubic-dev-ai bot left a comment

Uh oh!

Uh oh!

sentry bot Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.30.2

v10.30.1: pnpm 10.30.1

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.30.0: pnpm 10.30

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.29.3

v10.29.2

v10.29.1: pnpm 10.29.1

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

Configuration

Uh oh!

renovate bot commented Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

sentry bot Feb 24, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Feb 16, 2026 •

edited

Loading

`v10.30.2`

`v10.30.1`: pnpm 10.30.1

`v10.30.0`: pnpm 10.30

`v10.29.3`

`v10.29.2`

`v10.29.1`: pnpm 10.29.1

renovate bot commented Feb 16, 2026 •

edited

Loading