Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Comments

fixed #4430 exclude dev pnpm pkg#4487

Merged
wagoodman merged 4 commits intoanchore:mainfrom
rezmoss:exclude-dev-pnpm
Jan 7, 2026
Merged

fixed #4430 exclude dev pnpm pkg#4487
wagoodman merged 4 commits intoanchore:mainfrom
rezmoss:exclude-dev-pnpm

Conversation

@rezmoss
Copy link
Contributor

@rezmoss rezmoss commented Dec 19, 2025

Description

Exclude development or test dependencies for PNPM Package type

Type of change

  • Bug fix (non-breaking change which fixes an issue)

Checklist

  • I have added unit tests that cover changed behavior
  • I have tested my code in common scenarios and confirmed there are no regressions
  • I have added comments to my code, particularly in hard-to-understand sections

Issue references

Signed-off-by: Alex Goodman <[email protected]>
Copy link
Contributor

@wagoodman wagoodman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've pushed a code change to use the existing option -- can you add a test to ensure we're honoring the option in the parser?

@rezmoss
Copy link
Contributor Author

rezmoss commented Jan 6, 2026

@wagoodman done

@wagoodman wagoodman merged commit 3a3a86e into anchore:main Jan 7, 2026
10 checks passed
type pnpmV9PackageEntry struct {
Resolution map[string]string `yaml:"resolution"`
PeerDependencies map[string]string `yaml:"peerDependencies"`
Dev bool `yaml:"dev"`
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This flag does not exist in any of my lockfiles created by PNPM v9 or v10. I don't think this PR works!

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@levrik youre right, this PR just works for pnpm dev exclude for ver before v9,im working on exclusion for v9 and after, which needs a different approach, and will send a PR later

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Exclude development or test dependencies for PNPM Package type

4 participants