fix: include peer deps always for pnpm and bump lockfile parser (#28)

gemaxim · web-flow · commit 2639b20f6b0e · 2025-03-05T10:26:30.000+02:00
diff --git a/lib/lock-parser/build-dep-graph.ts b/lib/lock-parser/build-dep-graph.ts
@@ -57,6 +57,7 @@ export async function buildDepGraph(
         {
           includeDevDeps: options.includeDevDeps,
           includeOptionalDeps: options.includeOptionalDeps || true,
+          includePeerDeps: true,
           pruneWithinTopLevelDeps: true,
           strictOutOfSync: options.strictOutOfSync,
         },
diff --git a/package.json b/package.json
@@ -42,7 +42,7 @@
     "lodash.isempty": "^4.4.0",
     "lodash.sortby": "^4.7.0",
     "micromatch": "4.0.8",
-    "snyk-nodejs-lockfile-parser": "1.58.18",
+    "snyk-nodejs-lockfile-parser": "1.58.19",
     "snyk-resolve-deps": "4.8.0"
   },
   "overrides": {

Original file line number	Diff line number	Diff line change
`@@ -57,6 +57,7 @@ export async function buildDepGraph(`
`57`	`57`	`{`
`58`	`58`	`includeDevDeps: options.includeDevDeps,`
`59`	`59`	`includeOptionalDeps: options.includeOptionalDeps \|\| true,`
	`60`	`+ includePeerDeps: true,`
`60`	`61`	`pruneWithinTopLevelDeps: true,`
`61`	`62`	`strictOutOfSync: options.strictOutOfSync,`
`62`	`63`	`},`