Update pnpm to v10.34.5 by renovate[bot] · Pull Request #243 · ember-tooling/ember-eslint-parser

renovate · 2026-07-19T21:01:53Z

This PR contains the following updates:

Package	Change	Age	Confidence
pnpm (source)	`10.34.4` → `10.34.5`

Release Notes

pnpm/pnpm (pnpm)

`v10.34.5`: pnpm 10.34.5

Compare Source

Patch Changes

78e29fe: Prevent a crafted pnpm-lock.yaml from writing package content outside the virtual store. A dependency path key whose name reconstructs to a path-traversal sequence (e.g. ../../../tmp/x@1.0.0) is now rejected by the isolated (virtual-store) linker and the Plug'n'Play resolver map, matching the containment already applied to the hoisted linker. Under the global virtual store, a traversal in the version-derived path segment (e.g. a snapshot version: "../../x") is now rejected at iterateHashedGraphNodes, the single point every global-virtual-store slot path funnels through.
78e29fe: Fixed a path traversal vulnerability where a dependency whose manifest name was a scoped path traversal (e.g. @x/../../../<path>) could be written outside node_modules to an attacker-controlled location during pnpm install, even with --ignore-scripts. The isolated linker now validates the package name before using it as a directory name, matching the existing protection in the hoisted linker.
47ef6f0: Fixed switching to and self-updating to pnpm v12. pnpm v12 (the Rust port) ships as the pnpm and @pnpm/exe npm packages whose bins are placeholders replaced at install time by the host's native binary from a @pnpm/exe.<platform>-<arch>[-musl] optional dependency. Because pnpm installs its own engine with --ignore-scripts, that relinking never ran, leaving a non-executable placeholder. pnpm now relinks the native binary itself for v12 (recognizing the new platform-package naming scheme and the native pnpm package), and verifies the native binary's npm registry signature before running it.
36928be: ${...} environment-variable placeholders in the httpProxy, httpsProxy, noProxy, proxy, and noproxy settings are no longer expanded when these settings come from a project's pnpm-workspace.yaml. They now receive the same protection already applied to registry.

Platinum Sponsors

Gold Sponsors

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 9pm on sunday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-07-19T21:09:07Z

🏎️ Benchmark Comparison

Parse

	Benchmark	Control (p50)	Experiment (p50)	Δ
🟢	gts small	939.41 ms	917.57 ms	-2.3%
⚪	gts medium	1609.57 ms	1605.53 ms	-0.3%
⚪	gts large	770.13 ms	775.75 ms	+0.7%
⚪	gjs small	787.22 ms	789.73 ms	+0.3%
🟠	gjs medium	1366.07 ms	1430.84 ms	+4.7%
🟠	gjs large	645.82 ms	663.84 ms	+2.8%
⚪	hbs small	132.95 ms	135.23 ms	+1.7%
🟢	hbs medium	763.51 ms	736.65 ms	-3.5%
🟢	hbs large	848.46 ms	811.66 ms	-4.3%

🟢 faster · 🔴 slower · 🟠 slightly slower · ⚪ within 2%

Full mitata output

clk: ~3.10 GHz
cpu: AMD EPYC 7763 64-Core Processor
runtime: node 24.18.0 (x64-linux)

benchmark                   avg (min … max) p75 / p99    (min … top 1%)
------------------------------------------- -------------------------------
gts small (control)          976.77 ms/iter    1.01 s     █                
                       (837.81 ms … 1.26 s)    1.13 s █   █                
                    ( 12.80 mb …  84.52 mb)  42.22 mb █▁▁▁█▁▁██▁▁██▁▁▁█▁▁▁█

gts small (experiment)       950.23 ms/iter 981.58 ms   ██                 
                       (818.02 ms … 1.24 s)    1.12 s ▅ ██   ▅▅ ▅▅ ▅      ▅
                    ( 12.97 mb …  88.32 mb)  42.36 mb █▁██▁▁▁██▁██▁█▁▁▁▁▁▁█

                             ┌                                            ┐
                                ╷       ┌───────────┬────┐                ╷
         gts small (control)    ├───────┤           │    ├────────────────┤
                                ╵       └───────────┴────┘                ╵
                             ╷   ┌──────────────┬────┐                   ╷
      gts small (experiment) ├───┤              │    ├───────────────────┤
                             ╵   └──────────────┴────┘                   ╵
                             └                                            ┘
                             818.02 ms           973.44 ms           1.13 s

summary
  gts small (experiment)
   1.03x faster than gts small (control)

------------------------------------------- -------------------------------
gts medium (control)            1.66 s/iter    1.68 s             █    █   
                          (1.53 s … 2.10 s)    1.71 s ▅  ▅▅▅▅  ▅  █    █  ▅
                    ( 80.02 mb …  98.49 mb)  84.19 mb █▁▁████▁▁█▁▁█▁▁▁▁█▁▁█

gts medium (experiment)         1.65 s/iter    1.66 s     █               █
                          (1.52 s … 2.11 s)    1.69 s ▅   █ ▅ ▅ ▅▅   ▅▅   █
                    ( 79.48 mb … 134.82 mb)  89.56 mb █▁▁▁█▁█▁█▁██▁▁▁██▁▁▁█

                             ┌                                            ┐
                                ╷       ┌─────────────────────┬─────┐     ╷
        gts medium (control)    ├───────┤                     │     ├─────┤
                                ╵       └─────────────────────┴─────┘     ╵
                             ╷       ┌──────────────────────┬─┐        ╷
     gts medium (experiment) ├───────┤                      │ ├────────┤
                             ╵       └──────────────────────┴─┘        ╵
                             └                                            ┘
                             1.52 s              1.61 s              1.71 s

summary
  gts medium (experiment)
   1x faster than gts medium (control)

------------------------------------------- -------------------------------
gts large (control)          810.45 ms/iter 808.49 ms     █ █              
                       (729.27 ms … 1.18 s) 858.48 ms ▅  ▅█▅█▅    ▅  ▅    ▅
                    ( 15.04 mb …  86.33 mb)  38.06 mb █▁▁█████▁▁▁▁█▁▁█▁▁▁▁█

gts large (experiment)       822.35 ms/iter 820.32 ms    ██                
                       (747.51 ms … 1.15 s) 889.44 ms ▅▅▅██▅    ▅       ▅ ▅
                    ( 14.89 mb …  87.11 mb)  38.06 mb ██████▁▁▁▁█▁▁▁▁▁▁▁█▁█

                             ┌                                            ┐
                             ╷     ┌────────────────┬            ╷
         gts large (control) ├─────┤                │────────────┤
                             ╵     └────────────────┴            ╵
                                  ╷   ┌────────────────┬                  ╷
      gts large (experiment)      ├───┤                │──────────────────┤
                                  ╵   └────────────────┴                  ╵
                             └                                            ┘
                             729.27 ms         809.35 ms          889.44 ms

summary
  gts large (control)
   1.01x faster than gts large (experiment)

------------------------------------------- -------------------------------
gjs small (control)          821.08 ms/iter 821.14 ms   ██      ██         
                       (738.46 ms … 1.12 s) 893.02 ms ▅ ██  ▅   ██        ▅
                    ( 29.37 mb …  86.01 mb)  37.07 mb █▁██▁▁█▁▁▁██▁▁▁▁▁▁▁▁█

gjs small (experiment)       819.67 ms/iter 823.48 ms       █              
                       (747.58 ms … 1.13 s) 893.83 ms █ █   █              
                    ( 29.42 mb …  86.20 mb)  37.02 mb ███▁▁▁█▁▁▁█▁▁█▁▁▁▁▁▁█

                             ┌                                            ┐
                             ╷    ┌──────────────────┬                    ╷
         gjs small (control) ├────┤                  │────────────────────┤
                             ╵    └──────────────────┴                    ╵
                                ╷┌───────────────────┬┐                   ╷
      gjs small (experiment)    ├┤                   │├───────────────────┤
                                ╵└───────────────────┴┘                   ╵
                             └                                            ┘
                             738.46 ms         816.15 ms          893.83 ms

summary
  gjs small (experiment)
   1x faster than gjs small (control)

------------------------------------------- -------------------------------
gjs medium (control)            1.43 s/iter    1.44 s     ██               
                          (1.33 s … 1.84 s)    1.48 s ▅▅  ██   ▅  ▅  ▅  ▅ ▅
                    ( 20.99 mb …  88.90 mb)  71.17 mb ██▁▁██▁▁▁█▁▁█▁▁█▁▁█▁█

gjs medium (experiment)         1.47 s/iter    1.49 s          █           
                          (1.36 s … 1.86 s)    1.52 s      █ █ █           
                    ( 18.12 mb …  88.99 mb)  70.45 mb █▁▁▁▁█▁█▁█▁▁▁▁▁▁█▁█▁█

                             ┌                                            ┐
                             ╷      ┌───────────────┬───┐       ╷
        gjs medium (control) ├──────┤               │   ├───────┤
                             ╵      └───────────────┴───┘       ╵
                                     ╷         ┌───────────────┬───┐      ╷
     gjs medium (experiment)         ├─────────┤               │   ├──────┤
                                     ╵         └───────────────┴───┘      ╵
                             └                                            ┘
                             1.33 s              1.42 s              1.52 s

summary
  gjs medium (control)
   1.03x faster than gjs medium (experiment)

------------------------------------------- -------------------------------
gjs large (control)          693.43 ms/iter 660.51 ms    █                 
                       (621.02 ms … 1.05 s) 800.90 ms   ▅█                 
                    (103.80 kb …  70.27 mb)  43.92 mb ▇▇██▇▁▁▁▇▁▁▁▁▁▁▁▁▁▁▁▇

gjs large (experiment)       704.27 ms/iter 695.44 ms █   █                
                       (626.65 ms … 1.01 s) 797.26 ms █ ▅▅█ ▅▅▅ ▅         ▅
                    ( 95.95 kb …  70.08 mb)  43.58 mb █▁███▁███▁█▁▁▁▁▁▁▁▁▁█

                             ┌                                            ┐
                             ╷   ┌─────────────┬                          ╷
         gjs large (control) ├───┤             │──────────────────────────┤
                             ╵   └─────────────┴                          ╵
                              ╷   ┌───────────────┬                      ╷
      gjs large (experiment)  ├───┤               │──────────────────────┤
                              ╵   └───────────────┴                      ╵
                             └                                            ┘
                             621.02 ms         710.96 ms          800.90 ms

summary
  gjs large (control)
   1.02x faster than gjs large (experiment)

------------------------------------------- -------------------------------
hbs small (control)          152.10 ms/iter 155.26 ms █ █ ████  █  █  ██  █
                    (118.23 ms … 296.57 ms) 163.46 ms █ █ ████  █  █  ██  █
                    ( 51.36 mb …  56.98 mb)  53.85 mb █▁█▁████▁▁█▁▁█▁▁██▁▁█

hbs small (experiment)       153.60 ms/iter 151.70 ms          █          █
                    (113.70 ms … 322.10 ms) 160.86 ms ▅ ▅  ▅ ▅ █ ▅   ▅▅   █
                    ( 51.23 mb …  57.08 mb)  53.99 mb █▁█▁▁█▁█▁█▁█▁▁▁██▁▁▁█

                             ┌                                            ┐
                                 ╷        ┌─────────────────────┬──┐      ╷
         hbs small (control)     ├────────┤                     │  ├──────┤
                                 ╵        └─────────────────────┴──┘      ╵
                             ╷           ┌───────────────────────┬      ╷
      hbs small (experiment) ├───────────┤                       │──────┤
                             ╵           └───────────────────────┴      ╵
                             └                                            ┘
                             113.70 ms         138.58 ms          163.46 ms

summary
  hbs small (control)
   1.01x faster than hbs small (experiment)

------------------------------------------- -------------------------------
hbs medium (control)         802.32 ms/iter 780.33 ms  █                   
                       (750.40 ms … 1.09 s) 840.44 ms  █ █                 
                    (  8.88 mb …  82.45 mb)  38.03 mb ██▁███▁█▁▁▁▁▁▁▁▁▁▁▁██

hbs medium (experiment)      768.51 ms/iter 752.81 ms █                    
                    (724.77 ms … 989.83 ms) 811.58 ms █   █                
                    (  8.84 mb …  82.18 mb)  32.69 mb █████▁█▁▁▁▁▁▁▁▁▁▁▁▁██

                             ┌                                            ┐
                                       ╷ ┌─────────────────┬              ╷
        hbs medium (control)           ├─┤                 │──────────────┤
                                       ╵ └─────────────────┴              ╵
                             ╷┌───────────────┬                ╷
     hbs medium (experiment) ├┤               │────────────────┤
                             ╵└───────────────┴                ╵
                             └                                            ┘
                             724.77 ms         782.60 ms          840.44 ms

summary
  hbs medium (experiment)
   1.04x faster than hbs medium (control)

------------------------------------------- -------------------------------
hbs large (control)          875.16 ms/iter 860.26 ms    █                 
                       (837.21 ms … 1.10 s) 909.18 ms █  █                 
                    ( 53.28 mb …  64.84 mb)  55.45 mb ██▁████▁▁█▁▁▁▁▁▁▁▁▁▁█

hbs large (experiment)       840.44 ms/iter 817.03 ms █                    
                       (810.45 ms … 1.08 s) 870.26 ms █                    
                    ( 53.36 mb …  64.85 mb)  55.47 mb █▅█▁▅▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅

                             ┌                                            ┐
                                         ╷┌───────────────┬               ╷
         hbs large (control)             ├┤               │───────────────┤
                                         ╵└───────────────┴               ╵
                             ┌─────────────┬            ╷
      hbs large (experiment) │             │────────────┤
                             └─────────────┴            ╵
                             └                                            ┘
                             810.45 ms         859.82 ms          909.18 ms

summary
  hbs large (experiment)
   1.04x faster than hbs large (control)

### Project mode (type-aware)

	Benchmark	Control (p50)	Experiment (p50)	Δ
⚪	project warm parse x150	607.67 ms	607.65 ms	-0.0%
⚪	project parse+typed x150	631.71 ms	622.31 ms	-1.5%
⚪	projectService warm parse x150	603.82 ms	597.40 ms	-1.1%
⚪	projectService parse+typed x150	645.53 ms	643.14 ms	-0.4%

🟢 faster · 🔴 slower · 🟠 slightly slower · ⚪ within 2%

Full mitata output

clk: ~2.99 GHz
cpu: AMD EPYC 7763 64-Core Processor
runtime: node 24.18.0 (x64-linux)

benchmark                                   avg (min … max) p75 / p99    (min … top 1%)
----------------------------------------------------------- -------------------------------
project warm parse x150 (control)            617.47 ms/iter 625.36 ms █  █ █              █
                                    (598.71 ms … 665.31 ms) 632.14 ms █▁▁█▁█▁█▁▁▁▁▁▁▁██▁▁▁█
                                  gc(296.36 ms … 315.70 ms) 113.16 mb (102.33 mb…121.18 mb)

project warm parse x150 (experiment)         604.50 ms/iter 613.00 ms                 █   █
                                    (581.63 ms … 628.17 ms) 614.51 ms █▁██▁▁▁▁▁▁▁█▁█▁▁█▁███
                                  gc(288.65 ms … 312.03 ms) 111.07 mb (101.03 mb…117.71 mb)

                                             ┌                                            ┐
                                                            ╷    ┌───────────┬──────┐     ╷
           project warm parse x150 (control)                ├────┤           │      ├─────┤
                                                            ╵    └───────────┴──────┘     ╵
                                             ╷   ┌───────────────┬───────┐╷
        project warm parse x150 (experiment) ├───┤               │       ├┤
                                             ╵   └───────────────┴───────┘╵
                                             └                                            ┘
                                             581.63 ms         606.88 ms          632.14 ms

summary
  project warm parse x150 (experiment)
   1.02x faster than project warm parse x150 (control)

----------------------------------------------------------- -------------------------------
project parse+typed x150 (control)           635.75 ms/iter 645.79 ms            █         
                                    (606.88 ms … 675.33 ms) 653.79 ms █▁█▁▁█▁▁█▁██▁▁▁█▁█▁██
                                  gc(295.25 ms … 321.66 ms) 119.00 mb (117.95 mb…122.50 mb)

project parse+typed x150 (experiment)        625.86 ms/iter 633.31 ms       █   █          
                                    (601.80 ms … 668.91 ms) 643.98 ms █▁█▁▁▁█▁█▁██▁▁▁█▁█▁▁█
                                  gc(299.38 ms … 308.03 ms) 117.27 mb (116.14 mb…121.01 mb)

                                             ┌                                            ┐
                                                 ╷          ┌─────────────┬────────┐      ╷
          project parse+typed x150 (control)     ├──────────┤             │        ├──────┤
                                                 ╵          └─────────────┴────────┘      ╵
                                             ╷          ┌─────────┬─────┐         ╷
       project parse+typed x150 (experiment) ├──────────┤         │     ├─────────┤
                                             ╵          └─────────┴─────┘         ╵
                                             └                                            ┘
                                             601.80 ms         627.80 ms          653.79 ms

summary
  project parse+typed x150 (experiment)
   1.02x faster than project parse+typed x150 (control)

----------------------------------------------------------- -------------------------------
projectService warm parse x150 (control)     609.38 ms/iter 615.30 ms         █            
                                    (593.32 ms … 630.28 ms) 619.63 ms ▅▁▁▁▅▁▁▁█▁▁▅▁▁▁▁▁█▁▅▅
                                  gc(300.64 ms … 316.46 ms) 115.03 mb (112.89 mb…116.42 mb)

projectService warm parse x150 (experiment)  602.24 ms/iter 603.36 ms █    █   █           
                                    (588.78 ms … 627.59 ms) 619.98 ms ██▁▁▁██▁██▁▁▁▁▁█▁▁▁▁█
                                  gc(301.19 ms … 316.40 ms) 111.60 mb (110.67 mb…112.15 mb)

                                             ┌                                            ┐
                                                    ╷             ┌────────┬───────┐     ╷
    projectService warm parse x150 (control)        ├─────────────┤        │       ├─────┤
                                                    ╵             └────────┴───────┘     ╵
                                             ╷  ┌───────────────┬─┐                       ╷
 projectService warm parse x150 (experiment) ├──┤               │ ├───────────────────────┤
                                             ╵  └───────────────┴─┘                       ╵
                                             └                                            ┘
                                             588.78 ms         604.38 ms          619.98 ms

summary
  projectService warm parse x150 (experiment)
   1.01x faster than projectService warm parse x150 (control)

----------------------------------------------------------- -------------------------------
projectService parse+typed x150 (control)    653.30 ms/iter 656.05 ms      ██              
                                    (633.65 ms … 693.34 ms) 671.03 ms █▁▁▁███▁█▁▁██▁▁▁█▁▁▁█
                                  gc(303.49 ms … 316.50 ms) 119.49 mb (118.67 mb…123.19 mb)

projectService parse+typed x150 (experiment) 646.95 ms/iter 651.13 ms     █ █              
                                    (632.17 ms … 671.17 ms) 670.55 ms ███▁█▁██▁▁█▁█▁▁▁▁▁▁▁█
                                  gc(309.81 ms … 322.47 ms) 118.09 mb (113.63 mb…122.00 mb)

                                             ┌                                            ┐
                                               ╷          ┌──────────┬───┐                ╷
   projectService parse+typed x150 (control)   ├──────────┤          │   ├────────────────┤
                                               ╵          └──────────┴───┘                ╵
                                             ╷   ┌────────────┬────┐                     ╷
projectService parse+typed x150 (experiment) ├───┤            │    ├─────────────────────┤
                                             ╵   └────────────┴────┘                     ╵
                                             └                                            ┘
                                             632.17 ms         651.60 ms          671.03 ms

summary
  projectService parse+typed x150 (experiment)
   1.01x faster than projectService parse+typed x150 (control)

Update pnpm to v10.34.5

0229aee

renovate Bot added the dependencies label Jul 19, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update pnpm to v10.34.5#243

Update pnpm to v10.34.5#243
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/pnpm-10.x

renovate Bot commented Jul 19, 2026

Uh oh!

github-actions Bot commented Jul 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 19, 2026

Release Notes

v10.34.5: pnpm 10.34.5

Patch Changes

Platinum Sponsors

Gold Sponsors

Configuration

Uh oh!

github-actions Bot commented Jul 19, 2026

🏎️ Benchmark Comparison

Parse

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v10.34.5`: pnpm 10.34.5