Skip to content

fix: bump normalize-package-data to 7.0.1#9784

Merged
zkochan merged 3 commits intopnpm:mainfrom
SuperchupuDev:fix/bump-normalize-package-data
Jul 23, 2025
Merged

fix: bump normalize-package-data to 7.0.1#9784
zkochan merged 3 commits intopnpm:mainfrom
SuperchupuDev:fix/bump-normalize-package-data

Conversation

@SuperchupuDev
Copy link
Contributor

@SuperchupuDev SuperchupuDev commented Jul 22, 2025

While this technically fixes #9529 (the warning no longer shows up when installing, which is what the issue was technically about), pnpm still makes usage of url.parse in other places, via @pnpm/nopt and @pnpm/npm-package-arg, and they haven't seen any commits in 3/4 years. Should I send PRs there too?

normalize-package-data is about to be deprecated though, efforts should be made to switch to @npmcli/package-json, but that's unrelated to the PR 👍

Fixes #9529

Ref: npm/normalize-package-data#247

@SuperchupuDev SuperchupuDev requested a review from zkochan as a code owner July 22, 2025 16:31
@welcome
Copy link

welcome bot commented Jul 22, 2025

💖 Thanks for opening this pull request! 💖
Please be patient and we will get back to you as soon as we can.

@zkochan
Copy link
Member

zkochan commented Jul 23, 2025

Feel free to submit PRs to the other projects.

@SuperchupuDev
Copy link
Contributor Author

it looks like we can't use URL.canParse and therefore we can't update normalize-package-data, as pnpm supports node 18.12.0 and URL.canParse was added in node 18.17.0 🤔 what should i do?

@zkochan
Copy link
Member

zkochan commented Jul 23, 2025

In theory dropping Node.js up until 18.17 shouldn't affect a lot of users but it would be still considered a breaking change. But we are not ready yet to bump pnpm to v11

@SuperchupuDev
Copy link
Contributor Author

should i polyfill URL.canParse if not present until a new major is being worked on? should be easy to do

@zkochan
Copy link
Member

zkochan commented Jul 23, 2025

I created a poll to see what the community thinks: https://x.com/pnpmjs/status/1947911204833272163

@zkochan
Copy link
Member

zkochan commented Jul 23, 2025

In order to avoid creating new PRs for the polyfill, you can create patches: https://pnpm.io/cli/patch

@SuperchupuDev
Copy link
Contributor Author

pushed a patch with a simple polyfill 👍

@SuperchupuDev
Copy link
Contributor Author

Feel free to submit PRs to the other projects.

done: pnpm/npm-package-arg#1 pnpm/nopt#1

@zkochan zkochan merged commit adb097c into pnpm:main Jul 23, 2025
8 of 11 checks passed
@welcome
Copy link

welcome bot commented Jul 23, 2025

Congrats on merging your first pull request! 🎉🎉🎉

@SuperchupuDev SuperchupuDev deleted the fix/bump-normalize-package-data branch July 23, 2025 22:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

pnpm install for packages with "bugs" or "homepage" fields incurs a deprecation warning in Node.js v24

2 participants