Visitar URL original
verifyDepsBeforeRun rechecks an unchanged lockfile on every single-project command · Issue #16993 · pnpm/pnpm · GitHub
Skip to content

verifyDepsBeforeRun rechecks an unchanged lockfile on every single-project command #16993

Closed

Description

@alitas

pnpm version

12.14.0

Configuration

verify-deps-before-run=true
optimistic-repeat-install=true

Single project, without pnpm-workspace.yaml.

Reproduction

pnpm install
touch pnpm-lock.yaml
pnpm exec node --version
pnpm exec node --version

Expected behavior

The first command verifies that the touched lockfile still matches the installed dependencies. The second command uses the mtime fast path.

Actual behavior

Both commands treat the lockfile as modified and repeat the content check. A successful single-project check does not advance lastValidatedTimestamp, although lockfile drift is measured against that timestamp.

Activity

  1. github-actions commented on Oct 16, 2026

    @github-actions
    Contributor

    @alitas, are you planning to open a pull request for this? If so, reply here and a maintainer will assign the issue to you, so nobody else starts on the same fix.

  2. alitas commented on Oct 16, 2026

    @alitas
    ContributorAuthor

    Yes, I'm working on this and plan to open a pull request.

  3. added a commit that references this issue on Oct 16, 2026
    c4e4018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions