@microsoft/rush/CHANGELOG.json

A professional solution for consolidating all your JavaScript projects in one Git repo

{
  "name": "@microsoft/rush",
  "entries": [
    {
      "version": "5.165.0",
      "tag": "@microsoft/rush_v5.165.0",
      "date": "Mon, 29 Dec 2025 22:43:14 GMT",
      "comments": {
        "none": [
          {
            "comment": "Forward the `parameterNamesToIgnore` `<project>/config/rush-project.json` property to child processes via a `RUSHSTACK_CLI_IGNORED_PARAMETER_NAMES` environment variable"
          },
          {
            "comment": "Fix an issue where `rush update` will error complaining that the shrinkwrap file hasn't been updated to support workspaces in a subspace with no projects."
          },
          {
            "comment": "Fix an issue where packages listed in the `pnpmLockfilePolicies.disallowInsecureSha1.exemptPackageVersions` `common/config/rush/pnpm-config.json` config file are not exempted in PNPM 9."
          },
          {
            "comment": "Add support for the `globalOnlyBuiltDependencies` PNPM 10.x option to specify an allowlist of packages permitted to run build scripts to `common/config/rush/pnpm-config.json`."
          },
          {
            "comment": "Upgrade `pnpm-sync-lib` to v0.3.3 for pnpm v10 compatibility"
          },
          {
            "comment": "Change the Git hook file shebangs to use `/usr/bin/env bash` instead of `/bin/bash` for greater platform compatability."
          }
        ]
      }
    },
    {
      "version": "5.164.0",
      "tag": "@microsoft/rush_v5.164.0",
      "date": "Tue, 16 Dec 2025 21:49:00 GMT",
      "comments": {
        "minor": [
          {
            "comment": "Hash full shrinkwrap entry to detect sub-dependency resolution changes"
          }
        ],
        "none": [
          {
            "comment": "Fix an issue where ProjectChangeAnalyzer checked the pnpm-lock.yaml file in the default subspace only, when it should consider all subspaces."
          },
          {
            "comment": "Log a warning if Git-tracked symbolic links are encountered during repo state analysis."
          },
          {
            "comment": "Add support for defining pnpm catalog config."
          }
        ]
      }
    },
    {
      "version": "5.163.0",
      "tag": "@microsoft/rush_v5.163.0",
      "date": "Tue, 25 Nov 2025 17:04:05 GMT",
      "comments": {
        "minor": [
          {
            "comment": "Added the ability to select projects via path, e.g. `rush build --to path:./my-project` or `rush build --only path:/some/absolute/path`"
          },
          {
            "comment": "Add project-level parameter ignoring to prevent unnecessary cache invalidation. Projects can now use \"parameterNamesToIgnore\" in \"rush-project.json\" to exclude custom command-line parameters that don't affect their operations."
          }
        ],
        "none": [
          {
            "comment": "Extract CredentialCache API out into \"@rushstack/credential-cache\". Reference directly in plugins to avoid pulling in all of \"@rushstack/rush-sdk\" unless necessary."
          },
          {
            "comment": "Add subspaceName to the output of the `rush list` command"
          }
        ]
      }
    },
    {
      "version": "5.162.0",
      "tag": "@microsoft/rush_v5.162.0",
      "date": "Sat, 18 Oct 2025 00:06:36 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fork npm-check to address npm audit CVE"
          }
        ]
      }
    },
    {
      "version": "5.161.0",
      "tag": "@microsoft/rush_v5.161.0",
      "date": "Fri, 17 Oct 2025 23:22:50 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add an `allowOversubscription` option to the command definitions in `common/config/rush/command-line.json` to prevent running tasks from exceeding concurrency."
          },
          {
            "comment": "Add support for PNPM's minimumReleaseAge setting to help mitigate supply chain attacks"
          },
          {
            "comment": "Enable prerelease version matching in bridge-package command"
          },
          {
            "comment": "Fix an issue where `rush add --make-consistent ...` may drop the `implicitlyPreferredVersions` and `ensureConsistentVersions` properties from `common/config/rush/common-versions.json`."
          },
          {
            "comment": "Treat intermittent ignored redis errors as warnings and allow build to continue."
          }
        ]
      }
    },
    {
      "version": "5.160.1",
      "tag": "@microsoft/rush_v5.160.1",
      "date": "Fri, 03 Oct 2025 22:25:25 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue with validation of the `pnpm-lock.yaml` `packageExtensionsChecksum` field in pnpm v10."
          }
        ]
      }
    },
    {
      "version": "5.160.0",
      "tag": "@microsoft/rush_v5.160.0",
      "date": "Fri, 03 Oct 2025 20:10:21 GMT",
      "comments": {
        "none": [
          {
            "comment": "Bump the default Node and `pnpm` versions in the `rush init` template."
          },
          {
            "comment": "Fix an issue with validation of the `pnpm-lock.yaml` `packageExtensionsChecksum` field in pnpm v10."
          },
          {
            "comment": "Fix an issue where the `$schema` property is dropped from `common/config/rush/pnpm-config.json` when running `rush-pnpm patch-commit ...`"
          }
        ],
        "minor": [
          {
            "comment": "Normalize import of builtin modules to use the `node:` protocol."
          }
        ]
      }
    },
    {
      "version": "5.159.0",
      "tag": "@microsoft/rush_v5.159.0",
      "date": "Fri, 03 Oct 2025 00:50:08 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix to allow Bridge Cache plugin be installed but not used when build cache disabled; add cache key to terminal logs"
          },
          {
            "comment": "Add `IOperationExecutionResult.problemCollector` API which matches and collects VS Code style problem matchers"
          },
          {
            "comment": "Replace uuid package dependency with Node.js built-in crypto.randomUUID"
          },
          {
            "comment": "[rush-resolver-cache] Ensure that the correct version of rush-lib is loaded when the global version doesn't match the repository version."
          },
          {
            "comment": "Upgraded `js-yaml` dependency"
          },
          {
            "comment": "Enhance logging for IPC mode by allowing IPC runners to report detailed reasons for rerun, e.g. specific changed files."
          },
          {
            "comment": "Support aborting execution in phased commands. The CLI allows aborting via the \"a\" key in watch mode, and it is available to plugin authors for more advanced scenarios."
          },
          {
            "comment": "[rush-serve-plugin] Support aborting execution via Web Socket. Include information about the dependencies of operations in messages to the client.."
          },
          {
            "comment": "Add a logging message after the 'Trying to find \"tar\" binary' message when the binary is found."
          },
          {
            "comment": "Upgrade inquirer to 8.2.7 in rush-lib"
          },
          {
            "comment": "Bump \"express\" to 4.21.1 to address reported vulnerabilities in 4.20.0."
          }
        ],
        "patch": [
          {
            "comment": "[rush-azure-storage-build-cache-plugin] Trim access token output in AdoCodespacesAuthCredential"
          }
        ]
      }
    },
    {
      "version": "5.158.1",
      "tag": "@microsoft/rush_v5.158.1",
      "date": "Fri, 29 Aug 2025 00:08:18 GMT",
      "comments": {
        "none": [
          {
            "comment": "Deduplicate parsing of dependency specifiers."
          },
          {
            "comment": "Optimize detection of local projects when collecting implicit preferred versions."
          },
          {
            "comment": "Dedupe shrinkwrap parsing by content hash."
          },
          {
            "comment": "[resolver-cache] Use shrinkwrap hash to skip resolver cache regeneration."
          }
        ]
      }
    },
    {
      "version": "5.158.0",
      "tag": "@microsoft/rush_v5.158.0",
      "date": "Tue, 26 Aug 2025 23:27:47 GMT",
      "comments": {
        "none": [
          {
            "comment": "Adds an optional safety check flag to the Bridge Cache plugin write action."
          },
          {
            "comment": "Fix a bug in \"@rushstack/rush-bridge-cache-plugin\" where the cache replay did not block the normal execution process and instead was a floating promise."
          },
          {
            "comment": "[resolver-cache-plugin] Optimize search for nested package.json files with persistent cache file keyed by integrity hash."
          },
          {
            "comment": "[rush-serve-plugin] Allow the Rush process to exit if the server is the only active handle."
          },
          {
            "comment": "Fix poor performance scaling during `rush install` when identifying projects in the lockfile that no longer exist."
          },
          {
            "comment": "[resolver-cache-plugin] Improve performance of scan for nested package.json files in external packages."
          },
          {
            "comment": "Optimize `setPreferredVersions` in install setup."
          },
          {
            "comment": "Ensure that `rush version` and `rush publish` preserve all fields in `version-policies-json`."
          }
        ]
      }
    },
    {
      "version": "5.157.0",
      "tag": "@microsoft/rush_v5.157.0",
      "date": "Fri, 25 Jul 2025 01:24:42 GMT",
      "comments": {
        "none": [
          {
            "comment": "Improve performance for publishing on filtered clones."
          }
        ]
      }
    },
    {
      "version": "5.156.0",
      "tag": "@microsoft/rush_v5.156.0",
      "date": "Wed, 23 Jul 2025 20:56:15 GMT",
      "comments": {
        "none": [
          {
            "comment": "Include \"parallelism\" in phased operation execution context. Update \"rush-bridge-cache-plugin\" to support both cache read and cache write, selectable via command line choice parameter. Fixes an issue that the options schema for \"rush-bridge-cache-plugin\" was invalid."
          },
          {
            "comment": "Add support for `RUSH_BUILD_CACHE_OVERRIDE_JSON` environment variable that takes a JSON string with the same format as the `common/config/build-cache.json` file and a `RUSH_BUILD_CACHE_OVERRIDE_JSON_FILE_PATH` environment variable that takes a file path that can be used to override the build cache configuration that is normally provided by that file."
          },
          {
            "comment": "Add support for setting environment variables via `<repo-root>/.env` and `~/.rush-user/.env` files."
          },
          {
            "comment": "[azure-storage-build-cache] Update build-cache.json schema to allow the full range of `loginFlow` options supported by the underlying authentication provider. Add `loginFlowFailover` option to customize fallback sequencing."
          },
          {
            "comment": "Add performance measures around various operations, include performance entries in telemetry payload."
          },
          {
            "comment": "Do not run afterExecuteOperation if the operation has not actually completed."
          }
        ]
      }
    },
    {
      "version": "5.155.1",
      "tag": "@microsoft/rush_v5.155.1",
      "date": "Fri, 27 Jun 2025 19:57:04 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix pnpm-sync caused .modules.yaml ENOENT during install"
          }
        ]
      }
    },
    {
      "version": "5.155.0",
      "tag": "@microsoft/rush_v5.155.0",
      "date": "Fri, 13 Jun 2025 16:10:38 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add support for PNPM v9 to the pnpm-sync feature."
          }
        ]
      }
    },
    {
      "version": "5.154.0",
      "tag": "@microsoft/rush_v5.154.0",
      "date": "Tue, 10 Jun 2025 18:45:59 GMT",
      "comments": {
        "none": [
          {
            "comment": "Introduce a `@rushstack/rush-bridge-cache-plugin` package that adds a `--set-cache-only` flag to phased commands, which sets the cache entry without performing the operation."
          },
          {
            "comment": "Update the `CredentialCache` options object to add support for custom cache file paths. This is useful if `CredentialCache` is used outside of Rush."
          },
          {
            "comment": "PNPMv10 support: SHA256 hashing for dependencies paths lookup"
          },
          {
            "comment": "Add Linux/MacOS support for new 'virtual-store-dir-max-length'"
          }
        ]
      }
    },
    {
      "version": "5.153.2",
      "tag": "@microsoft/rush_v5.153.2",
      "date": "Tue, 13 May 2025 20:33:12 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix path parsing issue when running rush bridge-package"
          },
          {
            "comment": "Operations that were cobuilt now have the cobuild time correctly reflected across all agents."
          },
          {
            "comment": "Add `hasUncommittedChanges` to `IInputSnapshot` for use by plugins."
          }
        ]
      }
    },
    {
      "version": "5.153.1",
      "tag": "@microsoft/rush_v5.153.1",
      "date": "Fri, 25 Apr 2025 01:12:48 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue with implicit phase expansion when `--include-phase-deps` is not specified."
          },
          {
            "comment": "Upgrade `rushstack/heft-config-file` to fix an incompatibility with Node 16"
          }
        ]
      }
    },
    {
      "version": "5.153.0",
      "tag": "@microsoft/rush_v5.153.0",
      "date": "Thu, 17 Apr 2025 21:59:15 GMT",
      "comments": {
        "none": [
          {
            "comment": "Update documentation for `extends`"
          },
          {
            "comment": "Bind \"q\" to gracefully exit the watcher."
          },
          {
            "comment": "Clarify registry authentication settings in \"rush init\" template for .npmrc"
          },
          {
            "comment": "Support the `--changed-projects-only` flag in watch mode and allow it to be toggled between iterations."
          },
          {
            "comment": "Fix telemetry for \"--changed-projects-only\" when toggled in watch mode."
          },
          {
            "comment": "(rush-serve-plugin) Support websocket message to enable/disable operations."
          }
        ]
      }
    },
    {
      "version": "5.152.0",
      "tag": "@microsoft/rush_v5.152.0",
      "date": "Tue, 08 Apr 2025 18:41:27 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add `ChainedCredential` to `AzureAuthenticationBase` to handle auth failover."
          },
          {
            "comment": "Add support for developer tools credentials to the Azure build cache."
          },
          {
            "comment": "Add a new CLI flag `--debug-build-cache-ids` to help with root-causing unexpected cache misses."
          },
          {
            "comment": "Sort all operations lexicographically by name for reporting purposes."
          },
          {
            "comment": "(EXPERIMENTAL) Add new commands `rush link-package` and `rush bridge-package`"
          }
        ]
      }
    },
    {
      "version": "5.151.0",
      "tag": "@microsoft/rush_v5.151.0",
      "date": "Tue, 25 Mar 2025 16:58:46 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where `--include-phase-deps` and watch mode sometimes included operations that were not required"
          },
          {
            "comment": "Fix an issue where build/rebuild can not be defined in a rush plugin command line configuration"
          },
          {
            "comment": "Use `useNodeJSResolver: true` in `Import.resolvePackage` calls."
          },
          {
            "comment": "Add missing `./package.json` export; revert `useNodeJSResolver: true`."
          },
          {
            "comment": "(plugin-api) Guaranteed `operation.associatedPhase` and `operation.associatedProject` are not undefined."
          }
        ]
      }
    },
    {
      "version": "5.150.0",
      "tag": "@microsoft/rush_v5.150.0",
      "date": "Thu, 27 Feb 2025 17:41:59 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add an `--include-phase-deps` switch that expands an unsafe project selection to include its phase dependencies"
          }
        ]
      }
    },
    {
      "version": "5.149.1",
      "tag": "@microsoft/rush_v5.149.1",
      "date": "Wed, 19 Feb 2025 18:54:06 GMT",
      "comments": {
        "none": [
          {
            "comment": "Remove the unused `RushConstants.rushAlertsStateFilename` property."
          },
          {
            "comment": "Bump `jsonpath-plus` to `~10.3.0`."
          }
        ]
      }
    },
    {
      "version": "5.149.0",
      "tag": "@microsoft/rush_v5.149.0",
      "date": "Wed, 12 Feb 2025 04:07:30 GMT",
      "comments": {
        "none": [
          {
            "comment": "Prefer `os.availableParallelism()` to `os.cpus().length`."
          },
          {
            "comment": "Add a new command line parameter `--node-diagnostic-dir=DIR` to phased commands that, when specified, tells all child build processes to write NodeJS diagnostics into `${DIR}/${packageName}/${phaseIdentifier}`. This is useful if `--cpu-prof` or `--heap-prof` are enabled, to avoid polluting workspace folders."
          },
          {
            "comment": "Add a new phased command hook `createEnvironmentForOperation` that can be used to customize the environment variables passed to individual operation subprocesses. This may be used to, for example, customize `NODE_OPTIONS` to pass `--diagnostic-dir` or other such parameters."
          },
          {
            "comment": "Allow --timeline option for all phased commands"
          },
          {
            "comment": "Fix support for \"ensureConsistentVersions\" in common-versions.json when subspaces features is not enabled."
          },
          {
            "comment": "Fix an issue where the port parameter in `@rushstack/rush-serve-plugin` was allowed to be a string parameter."
          }
        ]
      }
    },
    {
      "version": "5.148.0",
      "tag": "@microsoft/rush_v5.148.0",
      "date": "Fri, 10 Jan 2025 02:36:20 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add a configuration option to avoid manually configuring decoupledLocalDependencies across subspaces."
          },
          {
            "comment": "Improve some `rush-sdk` APIs to support future work on GitHub issue #3994"
          },
          {
            "comment": "Fix an issue where MaxListenersExceeded would get thrown when using the HTTP build cache plugin"
          }
        ]
      }
    },
    {
      "version": "5.147.2",
      "tag": "@microsoft/rush_v5.147.2",
      "date": "Mon, 06 Jan 2025 21:48:43 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue with evaluation of `shouldEnsureConsistentVersions` when the value is not constant across subspaces or variants."
          },
          {
            "comment": "Fix an issue where the lockfile object has a nullish value causing yaml.dump to report an error."
          }
        ]
      }
    },
    {
      "version": "5.147.1",
      "tag": "@microsoft/rush_v5.147.1",
      "date": "Thu, 26 Dec 2024 23:35:27 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue with the `enableSubpathScan` experiment where the set of returned hashes would result in incorrect build cache identifiers when using `--only`."
          },
          {
            "comment": "When a no-op operation is not in scope, reflect its result as no-op instead of skipped, so that downstream operations can still write to the build cache."
          },
          {
            "comment": "Allow injected dependencies without enabling subspaces."
          }
        ]
      }
    },
    {
      "version": "5.147.0",
      "tag": "@microsoft/rush_v5.147.0",
      "date": "Thu, 12 Dec 2024 01:37:25 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add a new experiment flag `enableSubpathScan` that, when invoking phased script commands with project selection parameters, such as `--to` or `--from`, only hashes files that are needed to compute the cache ids for the selected projects."
          }
        ]
      }
    },
    {
      "version": "5.146.0",
      "tag": "@microsoft/rush_v5.146.0",
      "date": "Tue, 10 Dec 2024 21:23:18 GMT",
      "comments": {
        "none": [
          {
            "comment": "Support fallback syntax in `.npmrc` files if the package manager is PNPM. See https://pnpm.io/npmrc"
          },
          {
            "comment": "Add an `.isPnpm` property to `RushConfiguration` that is set to true if the package manager for the Rush repo is PNPM."
          },
          {
            "comment": "Support pnpm lockfile v9, which is used by default starting in pnpm v9."
          }
        ]
      }
    },
    {
      "version": "5.145.0",
      "tag": "@microsoft/rush_v5.145.0",
      "date": "Tue, 10 Dec 2024 05:14:11 GMT",
      "comments": {
        "none": [
          {
            "comment": "Upgrade `@azure/identity` and `@azure/storage-blob`."
          },
          {
            "comment": "Add support for Node 22."
          },
          {
            "comment": "Remove the dependency on node-fetch."
          }
        ]
      }
    },
    {
      "version": "5.144.1",
      "tag": "@microsoft/rush_v5.144.1",
      "date": "Mon, 09 Dec 2024 20:32:01 GMT",
      "comments": {
        "none": [
          {
            "comment": "Bump `jsonpath-plus` to `~10.2.0`."
          }
        ]
      }
    },
    {
      "version": "5.144.0",
      "tag": "@microsoft/rush_v5.144.0",
      "date": "Wed, 04 Dec 2024 19:32:23 GMT",
      "comments": {
        "none": [
          {
            "comment": "Remove the `node-fetch` dependency from `@rushstack/rush-http-build-cache-plugin`."
          }
        ]
      }
    },
    {
      "version": "5.143.0",
      "tag": "@microsoft/rush_v5.143.0",
      "date": "Wed, 04 Dec 2024 03:07:08 GMT",
      "comments": {
        "none": [
          {
            "comment": "Remove the `node-fetch` dependency from @rushstack/rush-amazon-s3-build-cache-plugin."
          },
          {
            "comment": "(BREAKING API CHANGE) Remove the exported `WebClient` API from @rushstack/rush-amazon-s3-build-cache-plugin."
          }
        ]
      }
    },
    {
      "version": "5.142.0",
      "tag": "@microsoft/rush_v5.142.0",
      "date": "Tue, 03 Dec 2024 23:42:22 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where the ability to skip `rush install` may be incorrectly calculated when using the variants feature."
          },
          {
            "comment": "Add support for an `\"extends\"` property in the `common/config/rush/pnpm-config.json` and `common/config/subspace/*/pnpm-config.json` files."
          },
          {
            "comment": "Add warning when the `globalIgnoredOptionalDependencies` property is specified in `common/config/rush/pnpm-config.json` and the repo is configured to use pnpm <9.0.0."
          }
        ]
      }
    },
    {
      "version": "5.141.4",
      "tag": "@microsoft/rush_v5.141.4",
      "date": "Mon, 02 Dec 2024 20:40:41 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where Rush sometimes incorrectly reported \"fatal: could not open 'packages/xxx/.rush/temp/shrinkwrap-deps.json' for reading: No such file or directory\" when using subspaces"
          }
        ]
      }
    },
    {
      "version": "5.141.3",
      "tag": "@microsoft/rush_v5.141.3",
      "date": "Wed, 27 Nov 2024 07:16:50 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where Rush sometimes incorrectly reported \"The overrides settings doesn't match the current shrinkwrap\" when using subspaces"
          },
          {
            "comment": "Fix an issue where Rush sometimes incorrectly reported \"The package extension hash doesn't match the current shrinkwrap.\" when using subspaces"
          }
        ]
      }
    },
    {
      "version": "5.141.2",
      "tag": "@microsoft/rush_v5.141.2",
      "date": "Wed, 27 Nov 2024 03:27:26 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where filtered installs neglected to install dependencies from other subspaces"
          }
        ]
      }
    },
    {
      "version": "5.141.1",
      "tag": "@microsoft/rush_v5.141.1",
      "date": "Wed, 20 Nov 2024 00:24:34 GMT",
      "comments": {
        "none": [
          {
            "comment": "Update schema for build-cache.json to include recent updates to the @rushstack/rush-azure-storage-build-cache-plugin."
          }
        ]
      }
    },
    {
      "version": "5.141.0",
      "tag": "@microsoft/rush_v5.141.0",
      "date": "Tue, 19 Nov 2024 06:38:33 GMT",
      "comments": {
        "none": [
          {
            "comment": "Adds two new properties to the configuration for `rush-azure-storage-build-cache-plugin`: `loginFlow` selects the flow to use for interactive authentication to Entra ID, and `readRequiresAuthentication` specifies that a SAS token is required for read and therefore expired authentication is always fatal."
          },
          {
            "comment": "Adds a new `wasExecutedOnThisMachine` property to operation telemetry events, to simplify reporting about cobuilt operations."
          },
          {
            "comment": "Fix an issue where empty error logs were created for operations that did not write to standard error."
          },
          {
            "comment": "Fix an issue where incremental building (with LegacySkipPlugin) would not work when no-op operations were present in the process"
          },
          {
            "comment": "Fix lack of \"local-only\" option for cacheProvider in build-cache.schema.json"
          },
          {
            "comment": "Fix an issue where if an Operation wrote all logs to stdout, then exited with a non-zero exit code, only the non-zero exit code would show up in the summary."
          }
        ]
      }
    },
    {
      "version": "5.140.1",
      "tag": "@microsoft/rush_v5.140.1",
      "date": "Wed, 30 Oct 2024 21:50:51 GMT",
      "comments": {
        "none": [
          {
            "comment": "Update the `jsonpath-plus` indirect dependency to mitigate CVE-2024-21534."
          }
        ]
      }
    },
    {
      "version": "5.140.0",
      "tag": "@microsoft/rush_v5.140.0",
      "date": "Tue, 22 Oct 2024 23:59:54 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue when using `rush deploy` where the `node_modules/.bin` folder symlinks were not created for deployed packages when using the \"default\" link creation mode"
          },
          {
            "comment": "Add support for the `globalIgnoredOptionalDependencies` field in the `common/config/rush/pnpm-config.json` file to allow specifying optional dependencies that should be ignored by PNPM"
          }
        ]
      }
    },
    {
      "version": "5.139.0",
      "tag": "@microsoft/rush_v5.139.0",
      "date": "Thu, 17 Oct 2024 20:37:39 GMT",
      "comments": {
        "none": [
          {
            "comment": "Allow rush plugins to extend build cache entries by writing additional files to the metadata folder. Expose the metadata folder path to plugins."
          },
          {
            "comment": "[CACHE BREAK] Alter the computation of build cache IDs to depend on the graph of operations in the build and therefore account for multiple phases, rather than only the declared dependencies. Ensure that `dependsOnEnvVars` and command line parameters that affect upstream phases impact the cache IDs of downstream operations."
          },
          {
            "comment": "(BREAKING CHANGE) Replace use of `ProjectChangeAnalyzer` in phased command hooks with a new `InputsSnapshot` data structure that is completely synchronous and does not perform any disk operations. Perform all disk operations and state computation prior to executing the build graph."
          },
          {
            "comment": "Add a new property `enabled` to `Operation` that when set to false, will cause the execution engine to immediately return `OperationStatus.Skipped` instead of invoking the runner. Use this property to disable operations that are not intended to be executed in the current pass, e.g. those that did not contain changes in the most recent watch iteration, or those excluded by `--only`."
          },
          {
            "comment": "Add an optional property `cacheHashSalt` to `build-cache.json` to allow repository maintainers to globally force a hash change in build cache entries."
          }
        ]
      }
    },
    {
      "version": "5.138.0",
      "tag": "@microsoft/rush_v5.138.0",
      "date": "Thu, 03 Oct 2024 22:31:07 GMT",
      "comments": {
        "none": [
          {
            "comment": "Changes the behavior of phased commands in watch mode to, when running a phase `_phase:<name>` in all iterations after the first, prefer a script entry named `_phase:<name>:incremental` if such a script exists. The build cache will expect the outputs from the corresponding `_phase:<name>` script (with otherwise the same inputs) to be equivalent when looking for a cache hit."
          }
        ]
      }
    },
    {
      "version": "5.137.0",
      "tag": "@microsoft/rush_v5.137.0",
      "date": "Thu, 03 Oct 2024 19:46:40 GMT",
      "comments": {
        "patch": [
          {
            "comment": "Expose `getChangesByProject` to allow classes that extend ProjectChangeAnalyzer to override file change analysis"
          }
        ]
      }
    },
    {
      "version": "5.136.1",
      "tag": "@microsoft/rush_v5.136.1",
      "date": "Thu, 26 Sep 2024 22:59:11 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where the `--variant` parameter was missing from a phased command when the command's `alwaysInstall` property was set to `true`."
          }
        ]
      }
    },
    {
      "version": "5.136.0",
      "tag": "@microsoft/rush_v5.136.0",
      "date": "Thu, 26 Sep 2024 21:48:00 GMT",
      "comments": {
        "none": [
          {
            "comment": "Bring back the Variants feature that was removed in https://github.com/microsoft/rushstack/pull/4538."
          },
          {
            "comment": "Bump express dependency to 4.20.0"
          }
        ]
      }
    },
    {
      "version": "5.135.0",
      "tag": "@microsoft/rush_v5.135.0",
      "date": "Fri, 20 Sep 2024 20:23:40 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix a bug that caused rush-resolver-cache-plugin to crash on Windows."
          },
          {
            "comment": "Make individual Rush log files available via the rush-serve-plugin server at the relative URL specified by \"logServePath\" option. Annotate operations sent over the WebSocket with the URLs of their log files."
          },
          {
            "comment": "Adds a new experiment 'allowCobuildWithoutCache' for cobuilds to allow uncacheable operations to benefit from cobuild orchestration without using the build cache."
          },
          {
            "comment": "Deprecate the `sharding.shardOperationSettings` property in the project `config/rush-project.json` in favor of an `operationSettings` entry for an operation with a suffix of `:shard`."
          }
        ]
      }
    },
    {
      "version": "5.134.0",
      "tag": "@microsoft/rush_v5.134.0",
      "date": "Fri, 13 Sep 2024 01:02:46 GMT",
      "comments": {
        "none": [
          {
            "comment": "Always update shrinkwrap when `globalPackageExtensions` in `common/config/rush/pnpm-config.json` has been changed."
          },
          {
            "comment": "Pass the initialized credentials cache to `AzureAuthenticationBase._getCredentialFromTokenAsync` in `@rushstack/rush-azure-storage-build-cache-plugin`."
          },
          {
            "comment": "Support the `rush-pnpm patch-remove` command."
          }
        ]
      }
    },
    {
      "version": "5.133.4",
      "tag": "@microsoft/rush_v5.133.4",
      "date": "Sat, 07 Sep 2024 00:18:08 GMT",
      "comments": {
        "none": [
          {
            "comment": "Mark `AzureAuthenticationBase._credentialCacheId` as protected in `@rushstack/rush-azure-storage-build-cache-plugin`."
          }
        ]
      }
    },
    {
      "version": "5.133.3",
      "tag": "@microsoft/rush_v5.133.3",
      "date": "Thu, 29 Aug 2024 22:49:36 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix Windows compatibility for `@rushstack/rush-resolver-cache-plugin`."
          }
        ]
      }
    },
    {
      "version": "5.133.2",
      "tag": "@microsoft/rush_v5.133.2",
      "date": "Wed, 28 Aug 2024 20:46:32 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where running `rush install --resolution-only` followed by `rush install` would not actually install modules."
          }
        ]
      }
    },
    {
      "version": "5.133.1",
      "tag": "@microsoft/rush_v5.133.1",
      "date": "Wed, 28 Aug 2024 18:19:55 GMT",
      "comments": {
        "none": [
          {
            "comment": "In rush-resolver-cache-plugin, include the base path in the resolver cache file."
          },
          {
            "comment": "Support `bundledDependencies` in rush-resolver-cache-plugin."
          }
        ]
      }
    },
    {
      "version": "5.133.0",
      "tag": "@microsoft/rush_v5.133.0",
      "date": "Fri, 23 Aug 2024 00:40:08 GMT",
      "comments": {
        "none": [
          {
            "comment": "Always update shrinkwrap when globalOverrides has been changed"
          },
          {
            "comment": "Add `afterInstall` plugin hook, which runs after any install finishes."
          },
          {
            "comment": "Add rush.json option \"suppressRushIsPublicVersionCheck\" to allow suppressing hardcoded calls to the npmjs.org registry."
          }
        ]
      }
    },
    {
      "version": "5.132.0",
      "tag": "@microsoft/rush_v5.132.0",
      "date": "Wed, 21 Aug 2024 16:25:07 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add a new `rush install-autoinstaller` command that ensures that the specified autoinstaller is installed."
          },
          {
            "comment": "Emit an error if a `workspace:` specifier is used in a dependency that is listed in `decoupledLocalDependencies`."
          },
          {
            "comment": "Add support for `--resolution-only` to `rush install` to enforce strict peer dependency resolution."
          }
        ]
      }
    },
    {
      "version": "5.131.5",
      "tag": "@microsoft/rush_v5.131.5",
      "date": "Mon, 19 Aug 2024 20:03:03 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where PreferredVersions are ignored when a project contains an overlapping dependency entry (https://github.com/microsoft/rushstack/issues/3205)"
          }
        ]
      }
    },
    {
      "version": "5.131.4",
      "tag": "@microsoft/rush_v5.131.4",
      "date": "Sun, 11 Aug 2024 05:02:05 GMT",
      "comments": {
        "none": [
          {
            "comment": "Revert a breaking change in Rush 5.131.3 where pnpm patches were moved from `common/pnpm-patches` to `common/config/rush/pnpm-patches`."
          }
        ]
      }
    },
    {
      "version": "5.131.3",
      "tag": "@microsoft/rush_v5.131.3",
      "date": "Sat, 10 Aug 2024 02:27:14 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where `rush-pnpm patch-commit` would not correctly resolve patch files when the subspaces feature is enabled."
          }
        ]
      }
    },
    {
      "version": "5.131.2",
      "tag": "@microsoft/rush_v5.131.2",
      "date": "Thu, 08 Aug 2024 23:38:18 GMT",
      "comments": {
        "none": [
          {
            "comment": "Include a missing dependency in `@rushstack/rush-sdk`."
          }
        ]
      }
    },
    {
      "version": "5.131.1",
      "tag": "@microsoft/rush_v5.131.1",
      "date": "Thu, 08 Aug 2024 22:08:41 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where rush-sdk can't be bundled by a consuming package."
          },
          {
            "comment": "Extract LookupByPath to @rushstack/lookup-by-path and load it from there."
          }
        ]
      }
    },
    {
      "version": "5.131.0",
      "tag": "@microsoft/rush_v5.131.0",
      "date": "Fri, 02 Aug 2024 17:26:59 GMT",
      "comments": {
        "none": [
          {
            "comment": "Improve Rush alerts with a new \"rush alert\" command and snooze feature"
          }
        ]
      }
    },
    {
      "version": "5.130.3",
      "tag": "@microsoft/rush_v5.130.3",
      "date": "Wed, 31 Jul 2024 23:30:13 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where Rush does not detect an outdated lockfile if the `dependenciesMeta` `package.json` field is edited."
          },
          {
            "comment": "Include CHANGELOG.md in published releases again"
          },
          {
            "comment": "Fix a bug that caused the build cache to close its terminal writer before execution on error."
          }
        ]
      }
    },
    {
      "version": "5.130.2",
      "tag": "@microsoft/rush_v5.130.2",
      "date": "Fri, 19 Jul 2024 03:41:44 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where `rush-pnpm patch-commit` did not work correctly when subspaces are enabled."
          }
        ]
      }
    },
    {
      "version": "5.130.1",
      "tag": "@microsoft/rush_v5.130.1",
      "date": "Wed, 17 Jul 2024 07:37:13 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix a recent regression for `rush init`"
          }
        ]
      }
    },
    {
      "version": "5.130.0",
      "tag": "@microsoft/rush_v5.130.0",
      "date": "Wed, 17 Jul 2024 06:55:27 GMT",
      "comments": {
        "none": [
          {
            "comment": "(EXPERIMENTAL) Initial implementation of Rush alerts feature"
          },
          {
            "comment": "Adjusts how cobuilt operations are added and requeued to the operation graph. Removes the 'RemoteExecuting' status."
          }
        ]
      }
    },
    {
      "version": "5.129.7",
      "tag": "@microsoft/rush_v5.129.7",
      "date": "Tue, 16 Jul 2024 04:16:56 GMT",
      "comments": {
        "none": [
          {
            "comment": "Upgrade pnpm-sync-lib to fix an edge case when handling node_modules folder"
          },
          {
            "comment": "Don't interrupt the installation process if the user hasn't enabled the inject dependencies feature."
          },
          {
            "comment": "Improve `@rushtack/rush-sdk` and make it reuse `@microsoft/rush-lib` from rush global folder"
          },
          {
            "comment": "Remove the trailing slash in the `.DS_Store/` line in the `.gitignore` file generated by `rush init`. `.DS_Store` is a file, not a folder."
          },
          {
            "comment": "Support deep references to internal Apis"
          },
          {
            "comment": "Fix an issue where `rush add` would ignore the `ensureConsistentVersions` option if that option was set in `rush.json` instead of in `common/config/rush/common-versions.json`."
          },
          {
            "comment": "Fix an issue where running `rush add` in a project can generate a `package.json` file that uses JSON5 syntax. Package managers expect strict JSON."
          },
          {
            "comment": "fix spelling of \"committing\" in rush.json init template and schema"
          }
        ]
      }
    },
    {
      "version": "5.129.6",
      "tag": "@microsoft/rush_v5.129.6",
      "date": "Thu, 27 Jun 2024 00:44:32 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an edge case for workspace peer dependencies when calculating packageJsonInjectedDependenciesHash to improve its accuracy "
          },
          {
            "comment": "Update a URL in the `.pnpmfile.cjs` generated by `rush init`."
          }
        ]
      }
    },
    {
      "version": "5.129.5",
      "tag": "@microsoft/rush_v5.129.5",
      "date": "Tue, 25 Jun 2024 20:13:29 GMT",
      "comments": {
        "none": [
          {
            "comment": "Don't include package.json version field when calculating packageJsonInjectedDependenciesHash"
          }
        ]
      }
    },
    {
      "version": "5.129.4",
      "tag": "@microsoft/rush_v5.129.4",
      "date": "Mon, 24 Jun 2024 23:49:10 GMT",
      "comments": {
        "none": [
          {
            "comment": "Normalize the file permissions (644) for Rush plugin files that are committed to Git"
          }
        ]
      }
    },
    {
      "version": "5.129.3",
      "tag": "@microsoft/rush_v5.129.3",
      "date": "Fri, 21 Jun 2024 00:15:54 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fixed an issue where DependencyAnalyzer caches the same analysis for all subspaces"
          }
        ]
      }
    },
    {
      "version": "5.129.2",
      "tag": "@microsoft/rush_v5.129.2",
      "date": "Wed, 19 Jun 2024 23:59:09 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where the `rush pnpm ...` command always terminates with an exit code of 1."
          }
        ]
      }
    },
    {
      "version": "5.129.1",
      "tag": "@microsoft/rush_v5.129.1",
      "date": "Wed, 19 Jun 2024 04:20:03 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add logic to remove outdated .pnpm-sync.json files during rush install or update"
          }
        ]
      }
    },
    {
      "version": "5.129.0",
      "tag": "@microsoft/rush_v5.129.0",
      "date": "Wed, 19 Jun 2024 03:31:48 GMT",
      "comments": {
        "none": [
          {
            "comment": "Add a new `init-subspace` command to initialize a new subspace."
          },
          {
            "comment": "Move the `ensureConsistentVersions` setting from `rush.json` to `common/config/rush/common-versions.json`, or to `common/config/rush/<subspace>/common-versions.json` if subspaces are enabled."
          }
        ]
      }
    },
    {
      "version": "5.128.5",
      "tag": "@microsoft/rush_v5.128.5",
      "date": "Tue, 18 Jun 2024 04:02:54 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix a key collision for cobuild clustering for operations that share the same phase name."
          }
        ]
      }
    },
    {
      "version": "5.128.4",
      "tag": "@microsoft/rush_v5.128.4",
      "date": "Mon, 17 Jun 2024 23:22:49 GMT",
      "comments": {
        "none": [
          {
            "comment": "Bump the `@azure/identity` package to `~4.2.1` to mitigate GHSA-m5vv-6r4h-3vj9."
          }
        ]
      }
    },
    {
      "version": "5.128.3",
      "tag": "@microsoft/rush_v5.128.3",
      "date": "Mon, 17 Jun 2024 20:46:21 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fixed an issue where the --make-consistent flag would affect projects outside the current subspace."
          }
        ]
      }
    },
    {
      "version": "5.128.2",
      "tag": "@microsoft/rush_v5.128.2",
      "date": "Mon, 17 Jun 2024 17:08:00 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where rush-pnpm patch is not working for the subspace scenario"
          },
          {
            "comment": "Fix an issue where rush update can not detect package.json changes in other subspaces for the injected installation case"
          }
        ]
      }
    },
    {
      "version": "5.128.1",
      "tag": "@microsoft/rush_v5.128.1",
      "date": "Wed, 12 Jun 2024 20:07:44 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where running `rush install` in a subspace with only a `--from` selector is treated as selecting all projects."
          },
          {
            "comment": "Fix an issue where not published packages are not correctly identified as not published when querying a package feed under certain versions of NPM."
          },
          {
            "comment": "Fix an issue where selection syntax (like `--to` or `--from`) misses project dependencies declared using workspace alias syntax (i.e. - `workspace:alias@1.2.3`)."
          },
          {
            "comment": "Fix an issue where an error is thrown if a Git email address isn't configured and email validation isn't configured in `rush.json` via `allowedEmailRegExps`."
          },
          {
            "comment": "Display the name of the subspace when an error is emitted because a dependency hash uses the SHA1 algorithm and the \"disallowInsecureSha1\" option is enabled."
          }
        ]
      }
    },
    {
      "version": "5.128.0",
      "tag": "@microsoft/rush_v5.128.0",
      "date": "Fri, 07 Jun 2024 22:59:12 GMT",
      "comments": {
        "none": [
          {
            "comment": "Graduate the `phasedCommands` experiment to a standard feature."
          },
          {
            "comment": "Improve `rush init` template for `.gitignore`"
          },
          {
            "comment": "Remove an unnecessary condition in the logic for skipping operations when build cache is disabled."
          }
        ]
      }
    },
    {
      "version": "5.127.1",
      "tag": "@microsoft/rush_v5.127.1",
      "date": "Thu, 06 Jun 2024 03:05:21 GMT",
      "comments": {
        "none": [
          {
            "comment": "Remove the second instance of the project name from the project operation filenames in `<projectFolder>/rush-logs`. This restores the log filenames to their format before Rush 5.125.0."
          }
        ]
      }
    },
    {
      "version": "5.127.0",
      "tag": "@microsoft/rush_v5.127.0",
      "date": "Tue, 04 Jun 2024 00:44:18 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fixes build cache no-op and sharded operation clustering."
          },
          {
            "comment": "Updated common-veresions.json schema with ensureConsistentVersions property"
          }
        ]
      }
    },
    {
      "version": "5.126.0",
      "tag": "@microsoft/rush_v5.126.0",
      "date": "Mon, 03 Jun 2024 02:49:05 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fixes a string schema validation warning message when running `rush deploy`."
          },
          {
            "comment": "Update the functionality that runs external lifecycle processes to be async."
          },
          {
            "comment": "Move logs into the project `rush-logs` folder regardless of whether or not the `\"phasedCommands\"` experiment is enabled."
          },
          {
            "comment": "Update the `nodeSupportedVersionRange` in the `rush init` template to the LTS and current Node versions."
          },
          {
            "comment": "Update the `pnpmVersion` in the `rush init` template to the latest version of pnpm 8."
          },
          {
            "comment": "Update the `.gitignore` in the `rush init` template to include some common toolchain output files and folders."
          },
          {
            "comment": "Include missing `type` modifiers on type-only exports."
          }
        ]
      }
    },
    {
      "version": "5.125.1",
      "tag": "@microsoft/rush_v5.125.1",
      "date": "Wed, 29 May 2024 05:39:54 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fix an issue where if `missingScriptBehavior` is set to `\"error\"` and a script is present and empty, an error would be thrown."
          }
        ]
      }
    },
    {
      "version": "5.125.0",
      "tag": "@microsoft/rush_v5.125.0",
      "date": "Sat, 25 May 2024 05:12:20 GMT",
      "comments": {
        "none": [
          {
            "comment": "Fixes a bug where no-op operations were treated as having build cache disabled."
          },
          {
            "comment": "Adds support for sharding operations during task execution."
          },
          {
            "comment": "Fix an issue where warnings and errors were not shown in the build summary for all cobuild agents."
          },
          {
            "comment": "Add a `rush check --subspace` parameter to specify which subspace to analyze"
          },
          {
            "comment": "Rename the subspace level lockfile from `.pnpmfile-subspace.cjs` to `.pnpmfile.cjs`. This is a breaking change for the experimental feature."
          }
        ]
      }
    },
    {
      "version": "5.124.7",
      "tag": "@microso