Aquesta és una versió anterior. La versió actual és la 2.8.3. aube 2.8.3 · Data de publicació:
Fitxers d’instal·lació 1.36.0
| Arquitectura | Tipus | Àmbit | Mida del fitxer | Baixa | SHA256 |
|---|---|---|---|---|---|
| 64 bits | ZIP → Portable | — | — | github.com | VirusTotal |
| ARM64 | ZIP → Portable | — | — | github.com | VirusTotal |
L’enllaç i l’SHA256 provenen del manifest comunitari del Gestor de paquets del Windows. Convé comparar el hash del fitxer baixat abans d’executar-lo.
Notes de la versió
This release brings aube in line with several pnpm 11.18 features — publishConfig.name and the pnpm:devPreinstall hook — while stabilizing recursive workspace updates, tightening outdated reporting, and hardening terminal output against Unicode spoofing.
Added
- publishConfig.name support (#1176 by @jdx) — Matching pnpm 11.18, a workspace package can now publish under a different registry name via publishConfig.name without renaming the project. The published name drives registry existence checks, the PUT URL, tarball filename, and embedded manifest, while the on-disk name stays the workspace/lockfile identity. Single-package publishes now run pre-publish hooks first, then re-resolve the target so hooks that change the name or version are honored.
{
"name": "my-workspace-pkg",
"publishConfig": { "name": "@scope/published-name" }
}
- pnpm:devPreinstall hook (#1177 by @jdx) — The root package's pnpm:devPreinstall script now runs once from the workspace/lockfile root before ordinary preinstall, letting a workspace prepare files that resolution or linking expects. It also runs on chained add/update installs, and is skipped on warm no-op installs, --ignore-scripts, --lockfile-only, and dry runs.
- Preserve existing package.json indentation (#1171 by @howmanysmall) — When aube rewrites manifests, tabs and nonstandard space widths now survive workspace edits, deploy rewrites, patch removal, and shared manifest writes. Read failures other than a missing file now abort the write, so an invalid UTF-8 package.json is never clobbered while aube detects its indentation.
Fixed
- Stabilize recursive workspace updates (#1180 by @jdx) — Recursive update no longer runs a full per-importer install that could wipe unrelated catalog entries from a shared lockfile. Catalog maps are now merged entry-by-entry, the chained install runs once at the workspace root after every importer is updated, interactive catalog decisions are remembered across importers so shared deps are prompted only once, and cancellation now stops the sweep instead of continuing. Closes #1174.
- Exclude auto-installed peers from outdated (#1178 by @jdx) — outdated now only checks dependencies declared directly in each importer's package.json, so auto-installed peers (e.g. esbuild pulled in for vite) no longer show up as outdated. Applies to both single-project and recursive reports. Closes #1173.
Security
- Strip Unicode formatting from terminal output (#1181 by @jdx) — Bidi overrides, isolates, and other Unicode formatting characters (the Cf set) plus control bytes are now stripped from registry- and manifest-derived text at display boundaries in list, outdated, interactive update, human-readable view, and install progress/warnings. This prevents untrusted metadata from visually reordering terminal output. Raw identifiers are preserved internally, and JSON/machine-readable output is unchanged.
New Contributors
- @howmanysmall made their first contribution in #1171
💚 Sponsor aube
aube is maintained by @jdx, an open source developer for entire.io, the title sponsor of the jdx.dev open source tools including mise. Work on aube is funded by sponsors.
If aube is saving your team install time or CI minutes, please consider sponsoring at jdx.dev. Individual and company sponsorships are what keep the project fast, free, and independent.