build(deps): bump pnpm from 8.9.2 to 10.8.0

[dependabot]

Bumps pnpm from 8.9.2 to 10.8.0.

Release notes

Sourced from pnpm's releases.

pnpm 10.8

Minor Changes

• Experimental. A new hook is supported for updating configuration settings. The hook can be provided via .pnpmfile.cjs. For example:

  module.exports = {
    hooks: {
      updateConfig: (config) => ({
        ...config,
        nodeLinker: "hoisted",
      }),
    },
  };

• Now you can use the pnpm add command with the --config flag to install new configurational dependencies #9377.

Patch Changes

• Do not hang indefinitely, when there is a glob that starts with !/ in pnpm-workspace.yaml. This fixes a regression introduced by #9169.
• pnpm audit --fix should update the overrides in pnpm-workspace.yaml.
• pnpm link should update overrides in pnpm-workspace.yaml, not in package.json #9365.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.8.0

Minor Changes

• Experimental. A new hook is supported for updating configuration settings. The hook can be provided via .pnpmfile.cjs. For example:

  module.exports = {
    hooks: {
      updateConfig: (config) => ({
        ...config,
        nodeLinker: "hoisted",
      }),
    },
  };

• Now you can use the pnpm add command with the --config flag to install new configurational dependencies #9377.

Patch Changes

• Do not hang indefinitely, when there is a glob that starts with !/ in pnpm-workspace.yaml. This fixes a regression introduced by #9169.
• pnpm audit --fix should update the overrides in pnpm-workspace.yaml.
• pnpm link should update overrides in pnpm-workspace.yaml, not in package.json #9365.

10.7.1

Patch Changes

• pnpm config set should convert the settings to their correct type before adding them to pnpm-workspace.yaml #9355.
• pnpm config get should read auth related settings via npm CLI #9345.
• Replace leading ~/ in a path in .npmrc with the home directory #9217.

10.7.0

Minor Changes

• pnpm config get and list also show settings set in pnpm-workspace.yaml files #9316.

• It should be possible to use env variables in pnpm-workspace.yaml setting names and value.

• Add an ability to patch dependencies by version ranges. Exact versions override version ranges, which in turn override name-only patches. Version range * is the same as name-only, except that patch application failure will not be ignored.

  For example:

  patchedDependencies:
    foo: patches/foo-1.patch
    foo@^2.0.0: patches/foo-2.patch
    [email protected]: patches/foo-3.patch

  The above configuration would apply patches/foo-3.patch to [email protected], patches/foo-2.patch to all foo versions which satisfy ^2.0.0 except 2.1.0, and patches/foo-1.patch to the remaining foo versions.

... (truncated)

Commits

• 6574546 chore(release): 10.8.0
• 750ae7d feat(cli): installing new configurational dependencies (#9377)
• 72cff38 refactor: pass whole registries to the resolver (#9375)
• 307b2cf chore(release): 10.7.1
• 4103d0d test: using the updateConfig hook (#9367)
• 1413c25 feat: config update hook (#9325)
• 79c4466 test: remove hardcoded verdaccio registry ports (#9342)
• bd4caa5 chore(release): 10.7.0
• b82e91d Merge remote-tracking branch 'origin/v10'
• f19cbc2 chore(release): 10.6.5
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
devs-in-tech	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 7, 2025 9:10pm

[netlify]

❌ Deploy Preview for devsintech failed.

Name	Link
🔨 Latest commit	9f342b5
🔍 Latest deploy log	https://app.netlify.com/sites/devsintech/deploys/67f43f2529da680008789117

[dependabot]

Superseded by #808.