Update pnpm to v10.34.5 by renovate[bot] · Pull Request #243 · ember-tooling/ember-eslint-parser

renovate · 2026-07-19T21:01:53Z

This PR contains the following updates:

Package	Change	Age	Confidence
pnpm (source)	`10.34.4` → `10.34.5`

Release Notes

pnpm/pnpm (pnpm)

`v10.34.5`: pnpm 10.34.5

Compare Source

Patch Changes

78e29fe: Prevent a crafted pnpm-lock.yaml from writing package content outside the virtual store. A dependency path key whose name reconstructs to a path-traversal sequence (e.g. ../../../tmp/x@1.0.0) is now rejected by the isolated (virtual-store) linker and the Plug'n'Play resolver map, matching the containment already applied to the hoisted linker. Under the global virtual store, a traversal in the version-derived path segment (e.g. a snapshot version: "../../x") is now rejected at iterateHashedGraphNodes, the single point every global-virtual-store slot path funnels through.
78e29fe: Fixed a path traversal vulnerability where a dependency whose manifest name was a scoped path traversal (e.g. @x/../../../<path>) could be written outside node_modules to an attacker-controlled location during pnpm install, even with --ignore-scripts. The isolated linker now validates the package name before using it as a directory name, matching the existing protection in the hoisted linker.
47ef6f0: Fixed switching to and self-updating to pnpm v12. pnpm v12 (the Rust port) ships as the pnpm and @pnpm/exe npm packages whose bins are placeholders replaced at install time by the host's native binary from a @pnpm/exe.<platform>-<arch>[-musl] optional dependency. Because pnpm installs its own engine with --ignore-scripts, that relinking never ran, leaving a non-executable placeholder. pnpm now relinks the native binary itself for v12 (recognizing the new platform-package naming scheme and the native pnpm package), and verifies the native binary's npm registry signature before running it.
36928be: ${...} environment-variable placeholders in the httpProxy, httpsProxy, noProxy, proxy, and noproxy settings are no longer expanded when these settings come from a project's pnpm-workspace.yaml. They now receive the same protection already applied to registry.

Platinum Sponsors

Gold Sponsors

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 9pm on sunday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-07-19T21:09:07Z

🏎️ Benchmark Comparison

Parse

	Benchmark	Control (p50)	Experiment (p50)	Δ
🟢	gts small	987.40 ms	944.18 ms	-4.4%
🔴	gts medium	1620.41 ms	1701.45 ms	+5.0%
🟢	gts large	816.99 ms	799.58 ms	-2.1%
⚪	gjs small	794.59 ms	808.89 ms	+1.8%
⚪	gjs medium	1432.14 ms	1404.69 ms	-1.9%
⚪	gjs large	661.34 ms	653.62 ms	-1.2%
⚪	hbs small	108.36 ms	108.52 ms	+0.1%
🟢	hbs medium	732.28 ms	706.18 ms	-3.6%
🟢	hbs large	833.15 ms	813.12 ms	-2.4%

🟢 faster · 🔴 slower · 🟠 slightly slower · ⚪ within 2%

Full mitata output

clk: ~2.75 GHz
cpu: AMD EPYC 9V74 80-Core Processor
runtime: node 24.19.0 (x64-linux)

benchmark                   avg (min … max) p75 / p99    (min … top 1%)
------------------------------------------- -------------------------------
gts small (control)             1.02 s/iter    1.06 s      █               
                       (839.41 ms … 1.31 s)    1.18 s ▅ ▅ ▅█   ▅▅ ▅▅    ▅ ▅
                    ( 13.17 mb …  88.91 mb)  42.61 mb █▁█▁██▁▁▁██▁██▁▁▁▁█▁█

gts small (experiment)       981.14 ms/iter    1.02 s   █                  
                       (839.38 ms … 1.27 s)    1.17 s   █                  
                    ( 13.04 mb …  84.22 mb)  42.04 mb █▁██▁▁█▁█▁███▁▁▁▁▁▁▁█

                             ┌                                            ┐
                             ╷         ┌────────────┬─────┐               ╷
         gts small (control) ├─────────┤            │     ├───────────────┤
                             ╵         └────────────┴─────┘               ╵
                             ╷   ┌──────────────┬───┐                    ╷
      gts small (experiment) ├───┤              │   ├────────────────────┤
                             ╵   └──────────────┴───┘                    ╵
                             └                                            ┘
                             839.38 ms            1.01 s             1.18 s

summary
  gts small (experiment)
   1.04x faster than gts small (control)

------------------------------------------- -------------------------------
gts medium (control)            1.67 s/iter    1.66 s          █  █        
                          (1.53 s … 2.20 s)    1.72 s ▅  ▅▅   ▅█  █ ▅   ▅ ▅
                    ( 80.02 mb …  98.73 mb)  84.33 mb █▁▁██▁▁▁██▁▁█▁█▁▁▁█▁█

gts medium (experiment)         1.73 s/iter    1.75 s     █                
                          (1.58 s … 2.19 s)    1.80 s     █      █         
                    ( 79.32 mb … 133.80 mb)  89.61 mb █▁▁▁█▁▁▁▁█▁█▁█▁█▁█▁▁█

                             ┌                                            ┐
                             ╷     ┌────────────────┬       ╷
        gts medium (control) ├─────┤                │───────┤
                             ╵     └────────────────┴       ╵
                                     ╷       ┌────────────────┬──┐        ╷
     gts medium (experiment)         ├───────┤                │  ├────────┤
                                     ╵       └────────────────┴──┘        ╵
                             └                                            ┘
                             1.53 s              1.67 s              1.80 s

summary
  gts medium (control)
   1.03x faster than gts medium (experiment)

------------------------------------------- -------------------------------
gts large (control)          875.49 ms/iter 863.25 ms  █                   
                       (778.17 ms … 1.28 s)    1.03 s  █ █   █             
                    ( 14.81 mb …  87.30 mb)  38.34 mb ██▁██▁██▁▁▁▁▁▁▁▁▁▁▁▁█

gts large (experiment)       863.39 ms/iter 863.43 ms   █                  
                       (779.93 ms … 1.22 s) 945.52 ms   █                  
                    ( 14.98 mb …  86.99 mb)  38.23 mb ▇▇█▁▇▁▁▇▁▁▇▁▁▁▁▁▁▇▁▁▇

                             ┌                                            ┐
                             ╷ ┌──────────────┬                           ╷
         gts large (control) ├─┤              │───────────────────────────┤
                             ╵ └──────────────┴                           ╵
                             ╷  ┌───────────┬              ╷
      gts large (experiment) ├──┤           │──────────────┤
                             ╵  └───────────┴              ╵
                             └                                            ┘
                             778.17 ms           904.26 ms           1.03 s

summary
  gts large (experiment)
   1.01x faster than gts large (control)

------------------------------------------- -------------------------------
gjs small (control)          831.52 ms/iter 827.70 ms       █              
                       (746.32 ms … 1.16 s) 919.68 ms ▅▅▅▅▅ █▅ ▅ ▅        ▅
                    ( 29.41 mb …  86.00 mb)  37.11 mb █████▁██▁█▁█▁▁▁▁▁▁▁▁█

gjs small (experiment)       836.06 ms/iter 842.16 ms █      █             
                       (753.71 ms … 1.12 s) 917.19 ms █ ▅▅  ▅█▅  ▅▅       ▅
                    ( 29.56 mb …  85.83 mb)  37.17 mb █▁██▁▁███▁▁██▁▁▁▁▁▁▁█

                             ┌                                            ┐
                             ╷    ┌────────────────┬                      ╷
         gjs small (control) ├────┤                │──────────────────────┤
                             ╵    └────────────────┴                      ╵
                               ╷   ┌────────────────┬─┐                  ╷
      gjs small (experiment)   ├───┤                │ ├──────────────────┤
                               ╵   └────────────────┴─┘                  ╵
                             └                                            ┘
                             746.32 ms         833.00 ms          919.68 ms

summary
  gjs small (control)
   1.01x faster than gjs small (experiment)

------------------------------------------- -------------------------------
gjs medium (control)            1.49 s/iter    1.52 s       █              
                          (1.35 s … 1.92 s)    1.55 s ▅  ▅  █▅▅  ▅ ▅   ▅▅ ▅
                    ( 20.95 mb …  90.44 mb)  71.27 mb █▁▁█▁▁███▁▁█▁█▁▁▁██▁█

gjs medium (experiment)         1.46 s/iter    1.49 s  █  █                
                          (1.34 s … 1.88 s)    1.53 s ▅█  █  ▅  ▅ ▅  ▅   ▅▅
                    ( 19.09 mb …  90.16 mb)  71.01 mb ██▁▁█▁▁█▁▁█▁█▁▁█▁▁▁██

                             ┌                                            ┐
                                ╷           ┌────────────────┬─────┐      ╷
        gjs medium (control)    ├───────────┤                │     ├──────┤
                                ╵           └────────────────┴─────┘      ╵
                             ╷  ┌──────────────────────┬─────┐        ╷
     gjs medium (experiment) ├──┤                      │     ├────────┤
                             ╵  └──────────────────────┴─────┘        ╵
                             └                                            ┘
                             1.34 s              1.44 s              1.55 s

summary
  gjs medium (experiment)
   1.02x faster than gjs medium (control)

------------------------------------------- -------------------------------
gjs large (control)          700.66 ms/iter 676.14 ms    █                 
                       (636.13 ms … 1.01 s) 787.25 ms    ██                
                    (204.80 kb …  70.20 mb)  43.93 mb ██████▁▁█▁▁▁▁▁▁▁▁▁▁▁█

gjs large (experiment)       691.55 ms/iter 661.86 ms  ████                
                    (631.75 ms … 979.35 ms) 788.01 ms ▅████    ▅          ▅
                    (415.58 kb …  70.39 mb)  43.87 mb █████▁▁▁▁█▁▁▁▁▁▁▁▁▁▁█

                             ┌                                            ┐
                              ╷   ┌──────────────┬                        ╷
         gjs large (control)  ├───┤              │────────────────────────┤
                              ╵   └──────────────┴                        ╵
                             ╷ ┌──────────────┬                           ╷
      gjs large (experiment) ├─┤              │───────────────────────────┤
                             ╵ └──────────────┴                           ╵
                             └                                            ┘
                             631.75 ms         709.88 ms          788.01 ms

summary
  gjs large (experiment)
   1.01x faster than gjs large (control)

------------------------------------------- -------------------------------
hbs small (control)          126.72 ms/iter 132.27 ms      ██          █   
                     (93.31 ms … 255.65 ms) 139.90 ms ▅  ▅ ██  ▅    ▅  █  ▅
                    ( 51.33 mb …  56.83 mb)  53.76 mb █▁▁█▁██▁▁█▁▁▁▁█▁▁█▁▁█

hbs small (experiment)       127.34 ms/iter 133.21 ms     █                
                     (90.88 ms … 269.53 ms) 140.58 ms ▅  ▅█ ▅▅ ▅      ▅▅▅ ▅
                    ( 51.24 mb …  58.86 mb)  54.57 mb █▁▁██▁██▁█▁▁▁▁▁▁███▁█

                             ┌                                            ┐
                               ╷         ┌───────────────────┬────┐      ╷
         hbs small (control)   ├─────────┤                   │    ├──────┤
                               ╵         └───────────────────┴────┘      ╵
                             ╷        ┌───────────────────────┬────┐      ╷
      hbs small (experiment) ├────────┤                       │    ├──────┤
                             ╵        └───────────────────────┴────┘      ╵
                             └                                            ┘
                             90.88 ms          115.73 ms          140.58 ms

summary
  hbs small (control)
   1x faster than hbs small (experiment)

------------------------------------------- -------------------------------
hbs medium (control)         774.11 ms/iter 756.85 ms ██ █                 
                       (717.51 ms … 1.06 s) 834.49 ms ██▅█▅  ▅       ▅    ▅
                    (  8.94 mb …  82.96 mb)  38.22 mb █████▁▁█▁▁▁▁▁▁▁█▁▁▁▁█

hbs medium (experiment)      742.26 ms/iter 725.36 ms  █                   
                    (694.77 ms … 970.56 ms) 795.82 ms  ██                  
                    (  9.02 mb …  82.87 mb)  38.19 mb █████▁█▁▁▁▁▁▁▁▁▁▁█▁▁█

                             ┌                                            ┐
                                    ╷ ┌────────────────┬                  ╷
        hbs medium (control)        ├─┤                │──────────────────┤
                                    ╵ └────────────────┴                  ╵
                             ╷ ┌────────────┬                 ╷
     hbs medium (experiment) ├─┤            │─────────────────┤
                             ╵ └────────────┴                 ╵
                             └                                            ┘
                             694.77 ms         764.63 ms          834.49 ms

summary
  hbs medium (experiment)
   1.04x faster than hbs medium (control)

------------------------------------------- -------------------------------
hbs large (control)          860.28 ms/iter 840.57 ms    █                 
                       (822.22 ms … 1.10 s) 887.96 ms   ███                
                    ( 53.37 mb …  64.85 mb)  55.46 mb █▁███▁█▁█▁▁▁▁▁▁▁▁▁▁▁█

hbs large (experiment)       836.63 ms/iter 815.93 ms     █                
                       (797.95 ms … 1.05 s) 881.75 ms    ▅█                
                    ( 53.23 mb …  64.87 mb)  55.44 mb ▇▇▇██▇▁▁▁▁▁▁▁▁▁▁▁▁▁▁▇

                             ┌                                            ┐
                                         ╷  ┌───────────────┬             ╷
         hbs large (control)             ├──┤               │─────────────┤
                                         ╵  └───────────────┴             ╵
                             ╷    ┌─────────────┬                      ╷
      hbs large (experiment) ├────┤             │──────────────────────┤
                             ╵    └─────────────┴                      ╵
                             └                                            ┘
                             797.95 ms         842.95 ms          887.96 ms

summary
  hbs large (experiment)
   1.03x faster than hbs large (control)

### Project mode (type-aware)

	Benchmark	Control (p50)	Experiment (p50)	Δ
⚪	project warm parse x150	622.54 ms	633.12 ms	+1.7%
⚪	project parse+typed x150	669.00 ms	671.75 ms	+0.4%
⚪	projectService warm parse x150	656.06 ms	655.33 ms	-0.1%
⚪	projectService parse+typed x150	713.75 ms	705.49 ms	-1.2%

🟢 faster · 🔴 slower · 🟠 slightly slower · ⚪ within 2%

Full mitata output

clk: ~2.59 GHz
cpu: AMD EPYC 9V74 80-Core Processor
runtime: node 24.19.0 (x64-linux)

benchmark                                   avg (min … max) p75 / p99    (min … top 1%)
----------------------------------------------------------- -------------------------------
project warm parse x150 (control)            625.00 ms/iter 624.91 ms          █▃▃         
                                    (596.24 ms … 649.36 ms) 648.68 ms ▆▁▁▁▁▁▁▁▆███▁▁▆▁▁▁▁▁▆
                                  gc(302.89 ms … 318.63 ms) 110.30 mb ( 99.79 mb…117.30 mb)

project warm parse x150 (experiment)         641.83 ms/iter 646.75 ms    █    ▃            
                                    (622.94 ms … 674.63 ms) 664.67 ms ▆▁▁█▆▆▁▁█▁▁▆▁▁▁▁▁▁▆▁▆
                                  gc(302.87 ms … 316.06 ms) 111.75 mb (111.24 mb…112.64 mb)

                                             ┌                                            ┐
                                             ╷               ┌──┬              ╷
           project warm parse x150 (control) ├───────────────┤  │──────────────┤
                                             ╵               └──┴              ╵
                                                               ╷   ┌───────┬──┐           ╷
        project warm parse x150 (experiment)                   ├───┤       │  ├───────────┤
                                                               ╵   └───────┴──┘           ╵
                                             └                                            ┘
                                             596.24 ms         630.46 ms          664.67 ms

summary
  project warm parse x150 (control)
   1.03x faster than project warm parse x150 (experiment)

----------------------------------------------------------- -------------------------------
project parse+typed x150 (control)           670.00 ms/iter 684.33 ms    █       █         
                                    (641.77 ms … 698.99 ms) 692.72 ms █▁▁██▁▁▁█▁▁█▁▁▁█▁█▁██
                                  gc(310.22 ms … 326.99 ms) 116.89 mb (116.16 mb…120.06 mb)

project parse+typed x150 (experiment)        673.19 ms/iter 677.80 ms            █         
                                    (653.47 ms … 700.60 ms) 697.92 ms ██▁██▁▁█████▁▁▁▁▁▁▁▁█
                                  gc(314.77 ms … 324.52 ms) 117.42 mb (116.00 mb…121.23 mb)

                                             ┌                                            ┐
                                             ╷     ┌────────────────┬──────────┐      ╷
          project parse+typed x150 (control) ├─────┤                │          ├──────┤
                                             ╵     └────────────────┴──────────┘      ╵
                                                      ╷    ┌──────────┬───┐               ╷
       project parse+typed x150 (experiment)          ├────┤          │   ├───────────────┤
                                                      ╵    └──────────┴───┘               ╵
                                             └                                            ┘
                                             641.77 ms         669.85 ms          697.92 ms

summary
  project parse+typed x150 (control)
   1x faster than project parse+typed x150 (experiment)

----------------------------------------------------------- -------------------------------
projectService warm parse x150 (control)     670.99 ms/iter 688.68 ms    █ █               
                                    (637.35 ms … 732.23 ms) 706.80 ms █▁▁███▁█▁▁█▁▁▁▁██▁▁▁█
                                  gc(319.67 ms … 333.02 ms) 110.96 mb (109.91 mb…111.94 mb)

projectService warm parse x150 (experiment)  660.39 ms/iter 670.35 ms       █        █     
                                    (637.41 ms … 683.49 ms) 681.63 ms █▁▁█▁██▁█▁▁▁██▁█▁▁▁▁█
                                  gc(321.80 ms … 334.17 ms) 111.77 mb (111.40 mb…112.33 mb)

                                             ┌                                            ┐
                                             ╷       ┌─────────────┬──────────┐           ╷
    projectService warm parse x150 (control) ├───────┤             │          ├───────────┤
                                             ╵       └─────────────┴──────────┘           ╵
                                             ╷       ┌──────┬─────┐       ╷
 projectService warm parse x150 (experiment) ├───────┤      │     ├───────┤
                                             ╵       └──────┴─────┘       ╵
                                             └                                            ┘
                                             637.35 ms         672.08 ms          706.80 ms

summary
  projectService warm parse x150 (experiment)
   1.02x faster than projectService warm parse x150 (control)

----------------------------------------------------------- -------------------------------
projectService parse+typed x150 (control)    721.84 ms/iter 738.06 ms          █      █    
                                    (680.19 ms … 771.46 ms) 751.35 ms █▁█▁██▁▁▁█▁▁▁▁▁███▁▁█
                                  gc(324.88 ms … 338.76 ms) 118.44 mb (117.07 mb…123.00 mb)

projectService parse+typed x150 (experiment) 715.50 ms/iter 724.35 ms        █             
                                    (680.54 ms … 762.33 ms) 755.40 ms █▁█▁█▁██▁██▁██▁▁▁▁▁▁█
                                  gc(333.82 ms … 347.47 ms) 118.78 mb (117.66 mb…123.58 mb)

                                             ┌                                            ┐
                                             ╷        ┌───────────────┬─────────┐       ╷
   projectService parse+typed x150 (control) ├────────┤               │         ├───────┤
                                             ╵        └───────────────┴─────────┘       ╵
                                             ╷        ┌───────────┬────┐                  ╷
projectService parse+typed x150 (experiment) ├────────┤           │    ├──────────────────┤
                                             ╵        └───────────┴────┘                  ╵
                                             └                                            ┘
                                             680.19 ms         717.80 ms          755.40 ms

summary
  projectService parse+typed x150 (experiment)
   1.01x faster than projectService parse+typed x150 (control)

renovate Bot added the dependencies label Jul 19, 2026

Update pnpm to v10.34.5

f6fa5ea

renovate Bot force-pushed the renovate/pnpm-10.x branch from 0229aee to f6fa5ea Compare August 23, 2026 22:12

Navigation Menu

Uh oh!

Update pnpm to v10.34.5 - #243

Update pnpm to v10.34.5#243
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/pnpm-10.x

renovate Bot commented Jul 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.34.5: pnpm 10.34.5

Patch Changes

Platinum Sponsors

Gold Sponsors

Configuration

Uh oh!

github-actions Bot commented Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🏎️ Benchmark Comparison

Parse

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 19, 2026 •

edited

Loading

`v10.34.5`: pnpm 10.34.5

github-actions Bot commented Jul 19, 2026 •

edited

Loading