chore(deps): update pnpm to v8.15.9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pnpm (source)	8.9.2 -> 8.15.9

---

Release Notes

pnpm/pnpm (pnpm)

v8.15.9: pnpm 8.15.9

Compare Source

Patch Changes

• Deduplicate bin names to prevent race condition and corrupted bin scripts #​7833.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.8

Compare Source

Patch Changes

• Upgrade tar to v6.2.1 in the dependences #​7939.
• If the script-shell option is configured to a .bat/.cmd file on Windows, pnpm will now error with ERR_PNPM_INVALID_SCRIPT_SHELL_WINDOWS. Newer versions of Node.js released in April 2024 do not support executing these files directly without behavior differences. If the script-shell option is necessary for your use-case, please set a .exe file instead.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.7

Compare Source

Patch Changes

• pnpm config get prints a comma-separated list for an array value instead of nothing.
• It should be possible to publish a tarball with custom dist-tag #​7845.
• Print the list of packages that were not built because they are ignored by configuration settings.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.6

Compare Source

Patch Changes

• The exit code of the child process should be preserved on pnpm run #​7817.
• When sorting packages in a workspace, take into account workspace dependencies specified as peerDependencies #​7813.
• Add --ignore-scripts argument to prune command #​7836.

Platinum Sponsors

Gold Sponsors

Silver Sponsors

v8.15.5

Compare Source

Patch Changes

• Correctly detect the active Node.js version during headless installation #​7801.
• The npm CLI executed from pnpm should not use Corepack #​7747.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.4

Compare Source

Patch Changes

• Print the right error code when a package fails to be added to the store #​7679.
• Don't fail on a tarball that appears to be not a USTAR or GNU TAR archive. Still try to unpack the tarball #​7120.
• Always add a name and version field to the index files in the store #​7115.
• Deleting a dependencies field via a readPackage hook should work #​7704.
• Symlinks should be resolved and uploaded to the side-effects cache #​7691.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.3

Compare Source

Patch Changes

• Remove vulnerable "ip" package from the dependencies #​7652.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.2

Compare Source

Patch Changes

• When purging multiple node_modules directories, pnpm will no longer print multiple prompts simultaneously.
• Don't print an unnecessary warning when adding new dependencies to a project that uses hoisted node_modules.
• Linking globally the command of a package that has no name in package.json #​4761.
• Installation should work with lockfile created by pnpm v9.0.0-alpha.4

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎