@@ -22417,7 +22417,7 @@ function String2(descriptor, ...args) { |
22417 | 22417 | } |
22418 | 22418 |
|
22419 | 22419 | // package.json |
22420 | | -var version = "0.28.0"; |
| 22420 | +var version = "0.28.1"; |
22421 | 22421 |
|
22422 | 22422 | // sources/Engine.ts |
22423 | 22423 | var import_fs4 = __toESM(require("fs")); |
@@ -22429,7 +22429,7 @@ var import_semver4 = __toESM(require_semver2()); |
22429 | 22429 | var config_default = { |
22430 | 22430 | definitions: { |
22431 | 22431 | npm: { |
22432 | | - default: "10.5.2+sha1.0e9b72afaf5ecf8249b2abb4b7417db6739c1475", |
| 22432 | + default: "10.7.0+sha1.c87e0bbb7a53422670e423d0198120760f67c3b7", |
22433 | 22433 | fetchLatestFrom: { |
22434 | 22434 | type: "npm", |
22435 | 22435 | package: "npm" |
@@ -22466,7 +22466,7 @@ var config_default = { |
22466 | 22466 | } |
22467 | 22467 | }, |
22468 | 22468 | pnpm: { |
22469 | | - default: "9.0.3+sha1.ff3ad37177cbd0843e533aab13d5e40a05803b47", |
| 22469 | + default: "9.1.0+sha1.217063ce3fcbf44f3051666f38b810f1ddefee4a", |
22470 | 22470 | fetchLatestFrom: { |
22471 | 22471 | type: "npm", |
22472 | 22472 | package: "pnpm" |
@@ -22530,7 +22530,7 @@ var config_default = { |
22530 | 22530 | package: "yarn" |
22531 | 22531 | }, |
22532 | 22532 | transparent: { |
22533 | | - default: "4.1.1+sha224.00f08619463229f8ba40c4ee90e8c2e4ced1f11c3115c26f3b98432e", |
| 22533 | + default: "4.2.2+sha224.1e50daf19e5e249a025569752c60b88005fddf57d10fcde5fc68b88f", |
22534 | 22534 | commands: [ |
22535 | 22535 | [ |
22536 | 22536 | "yarn", |
@@ -22702,7 +22702,7 @@ ${key.key} |
22702 | 22702 | async function fetchLatestStableVersion(packageName) { |
22703 | 22703 | const metadata = await fetchAsJson2(packageName, `latest`); |
22704 | 22704 | const { version: version2, dist: { integrity, signatures } } = metadata; |
22705 | | - if (process.env.COREPACK_INTEGRITY_KEYS !== ``) { |
| 22705 | + if (!shouldSkipIntegrityCheck()) { |
22706 | 22706 | verifySignature({ |
22707 | 22707 | packageName, |
22708 | 22708 | version: version2, |
@@ -22736,8 +22736,8 @@ async function fetch(input, init) { |
22736 | 22736 | if (typeof input === `string`) |
22737 | 22737 | input = new URL(input); |
22738 | 22738 | let headers = init?.headers; |
22739 | | - const username = input.username ?? process.env.COREPACK_NPM_USERNAME; |
22740 | | - const password = input.password ?? process.env.COREPACK_NPM_PASSWORD; |
| 22739 | + const username = input.username || process.env.COREPACK_NPM_USERNAME; |
| 22740 | + const password = input.password || process.env.COREPACK_NPM_PASSWORD; |
22741 | 22741 | if (username || password) { |
22742 | 22742 | headers = { |
22743 | 22743 | ...headers, |
@@ -23031,7 +23031,7 @@ async function installVersion(installTarget, locator, { spec }) { |
23031 | 23031 | } |
23032 | 23032 | if (!build[1]) { |
23033 | 23033 | const registry = getRegistryFromPackageManagerSpec(spec); |
23034 | | - if (registry.type === `npm` && !registry.bin && process.env.COREPACK_INTEGRITY_KEYS !== ``) { |
| 23034 | + if (registry.type === `npm` && !registry.bin && !shouldSkipIntegrityCheck()) { |
23035 | 23035 | if (signatures == null || integrity == null) |
23036 | 23036 | ({ signatures, integrity } = await fetchTarballURLAndSignature(registry.package, version2)); |
23037 | 23037 | verifySignature({ signatures, integrity, packageName: registry.package, version: version2 }); |
@@ -23136,6 +23136,9 @@ async function runVersion(locator, installSpec, binName, args) { |
23136 | 23136 | process.mainModule = void 0; |
23137 | 23137 | process.nextTick(import_module.default.runMain, binPath); |
23138 | 23138 | } |
| 23139 | +function shouldSkipIntegrityCheck() { |
| 23140 | + return process.env.COREPACK_INTEGRITY_KEYS === `` || process.env.COREPACK_INTEGRITY_KEYS === `0`; |
| 23141 | +} |
23139 | 23142 |
|
23140 | 23143 | // sources/semverUtils.ts |
23141 | 23144 | var import_semver2 = __toESM(require_semver2()); |
|