Skip to content

Releases: snyk/nodejs-lockfile-parser

v2.7.0

02 Apr 13:42
d90a83a

Choose a tag to compare

2.7.0 (2026-04-02)

Bug Fixes

  • [OSM-3591] handle patches applied as resolutions (cd4a5bc)
  • [OSM-3624] Support pnpm v6 lockfile for workspaces (b61e8dd)
  • bump tar to resolve vulns (6b4a56a)

Features

  • [OSM-3591] added support for versioned scoped resolutions (2c7574e)

v2.6.1

10 Mar 13:45
e82430a

Choose a tag to compare

2.6.1 (2026-03-10)

Bug Fixes

  • patch protocol URL decoding and npm alias package creation (3b99e1e)

v2.6.0

25 Feb 11:00
1bf5d3d

Choose a tag to compare

2.6.0 (2026-02-25)

Features

  • override vulnerable 'tar' transitive dependency (#299) (1bf5d3d)

v2.5.1

24 Feb 12:08
0edd5b9

Choose a tag to compare

2.5.1 (2026-02-24)

Bug Fixes

  • [OSM-3532] yarn scoped alias fix (025898c)

v2.5.0

08 Jan 17:49
4f31996

Choose a tag to compare

2.5.0 (2026-01-08)

Features

  • add npm scope [CSENG-94] (15bf216)

v2.4.5

05 Jan 12:43
57e6278

Choose a tag to compare

2.4.5 (2026-01-05)

Bug Fixes

  • yarn protocol in versions stripped (29a78db)

v2.4.4

27 Nov 16:46
2a56305

Choose a tag to compare

2.4.4 (2025-11-27)

Bug Fixes

  • nodejs transitive with a top level alias but transitive it not (9e53a97)

v2.4.3

26 Nov 10:47
58e5716

Choose a tag to compare

2.4.3 (2025-11-26)

Bug Fixes

  • pnpm workspaces respect exclude flag (#292) (58e5716)

v2.4.2

28 Oct 16:12
6daf50a

Choose a tag to compare

2.4.2 (2025-10-28)

Bug Fixes

  • resolve OutOfSyncError for workspace nested dependencies (81f09a7)

v2.4.1

21 Oct 14:17
208dcf5

Choose a tag to compare

2.4.1 (2025-10-21)

Bug Fixes

  • handle npm aliases in resolutions field (yarn) (ea206a9)