From e1d34cf7add373c352be43147f8e759d13fde764 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Gutyina=20Gerg=C5=91?= Date: Fri, 12 Jun 2026 03:09:18 +0200 Subject: [PATCH] pnpm_10_34_0: init --- pkgs/development/tools/pnpm/default.nix | 12 ++++++++++++ pkgs/top-level/all-packages.nix | 1 + 2 files changed, 13 insertions(+) diff --git a/pkgs/development/tools/pnpm/default.nix b/pkgs/development/tools/pnpm/default.nix index 4339c86d09cb..6278253ee559 100644 --- a/pkgs/development/tools/pnpm/default.nix +++ b/pkgs/development/tools/pnpm/default.nix @@ -30,6 +30,18 @@ let "CVE-2026-55699" ]; }; + # 10.34.1 made a breaking change that causes + # ERR_PNPM_MISSING_TARBALL_INTEGRITY error for some packages. + "10_34_0" = { + version = "10.34.0"; + hash = "sha256-WOFDJYhx31FYm2UcBiBdq+xIdmpdu6PCWZm2m1C+WY4="; + knownVulnerabilities = [ + "CVE-2026-55487" + "CVE-2026-55698" + "CVE-2026-55180" + "CVE-2026-55697" + ]; + }; "10" = { version = "10.34.0"; hash = "sha256-WOFDJYhx31FYm2UcBiBdq+xIdmpdu6PCWZm2m1C+WY4="; diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index 4bb26534613f..b4ee0e370cfd 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -2813,6 +2813,7 @@ with pkgs; pnpm_8 pnpm_9 pnpm_10_29_2 + pnpm_10_34_0 pnpm_10 pnpm_11 ;