Merge branch 'main' of https://github.com/microsoft/rushstack-websites

Author: octogonz

websites/api.rushstack.io/data/api_nav.json

@@ -6452,6 +6452,21 @@
               "label": "strictPeerDependencies",
               "id": "pages/rush-lib.pnpmoptionsconfiguration.strictpeerdependencies"
             },
+            {
+              "type": "doc",
+              "label": "trustPolicy",
+              "id": "pages/rush-lib.pnpmoptionsconfiguration.trustpolicy"
+            },
+            {
+              "type": "doc",
+              "label": "trustPolicyExclude",
+              "id": "pages/rush-lib.pnpmoptionsconfiguration.trustpolicyexclude"
+            },
+            {
+              "type": "doc",
+              "label": "trustPolicyIgnoreAfterMinutes",
+              "id": "pages/rush-lib.pnpmoptionsconfiguration.trustpolicyignoreafterminutes"
+            },
             {
               "type": "doc",
               "label": "unsupportedPackageJsonSettings",
@@ -6489,6 +6504,11 @@
           "label": "PnpmStoreOptions",
           "id": "pages/rush-lib.pnpmstoreoptions"
         },
+        {
+          "type": "doc",
+          "label": "PnpmTrustPolicy",
+          "id": "pages/rush-lib.pnpmtrustpolicy"
+        },
         {
           "type": "category",
           "label": "ProjectChangeAnalyzer",
@@ -15287,6 +15307,11 @@
               "label": "pnpmInstallFolder",
               "id": "pages/package-extractor.iextractorsubspace.pnpminstallfolder"
             },
+            {
+              "type": "doc",
+              "label": "pnpmNodeModulesHoistingEnabled",
+              "id": "pages/package-extractor.iextractorsubspace.pnpmnodemoduleshoistingenabled"
+            },
             {
               "type": "doc",
               "label": "subspaceName",

websites/api.rushstack.io/docs/pages/package-extractor.iextractorsubspace.md

@@ -59,6 +59,25 @@ string
 _(Optional)_ The folder where the PNPM "node\_modules" folder is located. This is used to resolve packages linked to the PNPM virtual store.
 
 
+</td></tr>
+<tr><td>
+
+[pnpmNodeModulesHoistingEnabled?](./package-extractor.iextractorsubspace.pnpmnodemoduleshoistingenabled.md)
+
+
+</td><td>
+
+
+</td><td>
+
+boolean
+
+
+</td><td>
+
+_(Optional)_ Whether PNPM hoisting is enabled for this subspace. When set to `false`<></>, the extractor will skip looking for hoisted packages in the PNPM virtual store, since no hoisting symlinks will exist. Default is `true`<></>.
+
+
 </td></tr>
 <tr><td>
 

websites/api.rushstack.io/docs/pages/package-extractor.iextractorsubspace.pnpmnodemoduleshoistingenabled.md

@@ -0,0 +1,19 @@
+---
+hide_title: true
+custom_edit_url: null
+pagination_prev: null
+pagination_next: null
+---
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [@rushstack/package-extractor](./package-extractor.md) &gt; [IExtractorSubspace](./package-extractor.iextractorsubspace.md) &gt; [pnpmNodeModulesHoistingEnabled](./package-extractor.iextractorsubspace.pnpmnodemoduleshoistingenabled.md)
+
+## IExtractorSubspace.pnpmNodeModulesHoistingEnabled property
+
+Whether PNPM hoisting is enabled for this subspace. When set to `false`<></>, the extractor will skip looking for hoisted packages in the PNPM virtual store, since no hoisting symlinks will exist. Default is `true`<></>.
+
+**Signature:**
+
+```typescript
+pnpmNodeModulesHoistingEnabled?: boolean;
+```

websites/api.rushstack.io/docs/pages/rush-lib.md

@@ -1296,6 +1296,17 @@ This represents the available PNPM store options
 </td><td>
 
 
+</td></tr>
+<tr><td>
+
+[PnpmTrustPolicy](./rush-lib.pnpmtrustpolicy.md)
+
+
+</td><td>
+
+Possible values for the `trustPolicy` setting in Rush's pnpm-config.json file.
+
+
 </td></tr>
 </tbody></table>
 

websites/api.rushstack.io/docs/pages/rush-lib.pnpmoptionsconfiguration.md

@@ -522,6 +522,69 @@ boolean
 If true, then Rush will add the "--strict-peer-dependencies" option when invoking PNPM.
 
 
+</td></tr>
+<tr><td>
+
+[trustPolicy](./rush-lib.pnpmoptionsconfiguration.trustpolicy.md)
+
+
+</td><td>
+
+`readonly`
+
+
+</td><td>
+
+[PnpmTrustPolicy](./rush-lib.pnpmtrustpolicy.md) \| undefined
+
+
+</td><td>
+
+The trust policy controls whether pnpm should block installation of package versions where the trust level has decreased (e.g., a package previously published with provenance is now published without it). Setting this to `"no-downgrade"` enables the protection.
+
+
+</td></tr>
+<tr><td>
+
+[trustPolicyExclude](./rush-lib.pnpmoptionsconfiguration.trustpolicyexclude.md)
+
+
+</td><td>
+
+`readonly`
+
+
+</td><td>
+
+string\[\] \| undefined
+
+
+</td><td>
+
+List of package names or patterns that are excluded from the trust policy check. These packages will be allowed to install even if their trust level has decreased.
+
+
+</td></tr>
+<tr><td>
+
+[trustPolicyIgnoreAfterMinutes](./rush-lib.pnpmoptionsconfiguration.trustpolicyignoreafterminutes.md)
+
+
+</td><td>
+
+`readonly`
+
+
+</td><td>
+
+number \| undefined
+
+
+</td><td>
+
+The number of minutes after which pnpm will ignore trust level downgrades. Packages published longer ago than this threshold will not be blocked even if their trust level has decreased.
+
+
 </td></tr>
 <tr><td>
 

websites/api.rushstack.io/docs/pages/rush-lib.pnpmoptionsconfiguration.trustpolicy.md

@@ -0,0 +1,26 @@
+---
+hide_title: true
+custom_edit_url: null
+pagination_prev: null
+pagination_next: null
+---
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [@microsoft/rush-lib](./rush-lib.md) &gt; [PnpmOptionsConfiguration](./rush-lib.pnpmoptionsconfiguration.md) &gt; [trustPolicy](./rush-lib.pnpmoptionsconfiguration.trustpolicy.md)
+
+## PnpmOptionsConfiguration.trustPolicy property
+
+The trust policy controls whether pnpm should block installation of package versions where the trust level has decreased (e.g., a package previously published with provenance is now published without it). Setting this to `"no-downgrade"` enables the protection.
+
+**Signature:**
+
+```typescript
+readonly trustPolicy: PnpmTrustPolicy | undefined;
+```
+
+## Remarks
+
+(SUPPORTED ONLY IN PNPM 10.21.0 AND NEWER)
+
+PNPM documentation: https://pnpm.io/settings\#trustpolicy
+

websites/api.rushstack.io/docs/pages/rush-lib.pnpmoptionsconfiguration.trustpolicyexclude.md

@@ -0,0 +1,28 @@
+---
+hide_title: true
+custom_edit_url: null
+pagination_prev: null
+pagination_next: null
+---
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [@microsoft/rush-lib](./rush-lib.md) &gt; [PnpmOptionsConfiguration](./rush-lib.pnpmoptionsconfiguration.md) &gt; [trustPolicyExclude](./rush-lib.pnpmoptionsconfiguration.trustpolicyexclude.md)
+
+## PnpmOptionsConfiguration.trustPolicyExclude property
+
+List of package names or patterns that are excluded from the trust policy check. These packages will be allowed to install even if their trust level has decreased.
+
+**Signature:**
+
+```typescript
+readonly trustPolicyExclude: string[] | undefined;
+```
+
+## Remarks
+
+(SUPPORTED ONLY IN PNPM 10.22.0 AND NEWER)
+
+PNPM documentation: https://pnpm.io/settings\#trustpolicyexclude
+
+Example: \["webpack", "react", "<></>@<></>myorg/\*"\]
+

websites/api.rushstack.io/docs/pages/rush-lib.pnpmoptionsconfiguration.trustpolicyignoreafterminutes.md

@@ -0,0 +1,26 @@
+---
+hide_title: true
+custom_edit_url: null
+pagination_prev: null
+pagination_next: null
+---
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [@microsoft/rush-lib](./rush-lib.md) &gt; [PnpmOptionsConfiguration](./rush-lib.pnpmoptionsconfiguration.md) &gt; [trustPolicyIgnoreAfterMinutes](./rush-lib.pnpmoptionsconfiguration.trustpolicyignoreafterminutes.md)
+
+## PnpmOptionsConfiguration.trustPolicyIgnoreAfterMinutes property
+
+The number of minutes after which pnpm will ignore trust level downgrades. Packages published longer ago than this threshold will not be blocked even if their trust level has decreased.
+
+**Signature:**
+
+```typescript
+readonly trustPolicyIgnoreAfterMinutes: number | undefined;
+```
+
+## Remarks
+
+(SUPPORTED ONLY IN PNPM 10.27.0 AND NEWER)
+
+PNPM documentation: https://pnpm.io/settings\#trustpolicyignoreafter
+

websites/api.rushstack.io/docs/pages/rush-lib.pnpmtrustpolicy.md

@@ -0,0 +1,24 @@
+---
+hide_title: true
+custom_edit_url: null
+pagination_prev: null
+pagination_next: null
+---
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [@microsoft/rush-lib](./rush-lib.md) &gt; [PnpmTrustPolicy](./rush-lib.pnpmtrustpolicy.md)
+
+## PnpmTrustPolicy type
+
+Possible values for the `trustPolicy` setting in Rush's pnpm-config.json file.
+
+**Signature:**
+
+```typescript
+export type PnpmTrustPolicy = 'no-downgrade' | 'off';
+```
+
+## Remarks
+
+These values correspond to PNPM's `trust-policy` setting, which is documented here: [https://pnpm.io/settings\#trustpolicy](https://pnpm.io/settings#trustpolicy)
+

websites/rushjs.io/docs/pages/extensibility/api.md

@@ -12,17 +12,17 @@ Below are some usage examples.
 
 ## rush-lib vs rush-sdk
 
-You may notice that the NPM packages `@microsoft/rush-lib` and `rushstack/rush-sdk` export the same APIs. What is the difference?
+You may notice that the NPM packages `@microsoft/rush-lib` and `@rushstack/rush-sdk` export the same APIs. What is the difference?
 
 - `@microsoft/rush-lib` is the **engine** of Rush that implements all the core features. It is a relatively large package that also includes some built-in Rush plugins, with many NPM dependencies.
 
 - `@microsoft/rush` is the **CLI** (command-line interface) that provides the `rush` and `rushx` commands that you can invoke from your shell. `@microsoft/rush` depends on `@microsoft/rush-lib`, however if your repository's **rush.json** file requests a different `rushVersion`, the [Rush "version selector"](../contributing.md) will automatically install the requested version of the `@microsoft/rush-lib` engine and use that instead. This ensures that CLI commands always have deterministic behavior, regardless of what version of `@microsoft/rush` is installed globally.
 
-- `@microsoft/rush-sdk` is the **API** interface, which has very few NPM dependencies itself, and mainly acts as a proxy for accessing the `@microsoft/rush-lib` engine. It provides two main benefits:
+- `@rushstack/rush-sdk` is the **API** interface, which has very few NPM dependencies itself, and mainly acts as a proxy for accessing the `@microsoft/rush-lib` engine. It provides two main benefits:
 
-  - **Version selector:** If your tool imports from `@microsoft/rush-sdk`, then it will load the appropriate version of the engine based on `rushVersion` from **rush.json**. This is important, for example if your script directly imports from `@microsoft/rush-lib` and it is a different version, then the engine may fail to parse a config file whose format has changed.
+  - **Version selector:** If your tool imports from `@rushstack/rush-sdk`, then it will load the appropriate version of the engine based on `rushVersion` from **rush.json**. This is important, for example if your script directly imports from `@microsoft/rush-lib` and it is a different version, then the engine may fail to parse a config file whose format has changed.
 
-  - **Internal APIs**: `@microsoft/rush-sdk` includes stubs that enable you to import internal API's from `@microsoft/rush-lib`. Internal APIs are normally difficult to access because that package is distributed as a Webpack bundle.
+  - **Internal APIs**: `@rushstack/rush-sdk` includes stubs that enable you to import internal API's from `@microsoft/rush-lib`. Internal APIs are normally difficult to access because that package is distributed as a Webpack bundle.
 
   See the [@rushstack/rush-sdk](https://www.npmjs.com/package/@rushstack/rush-sdk) documentation for more details.