# renv 1.2.3 * `renv::record()` now enriches each resolved record with the same DESCRIPTION-derived fields that `renv::snapshot()` writes (e.g. `Depends`, `Imports`, `Suggests`, `LinkingTo`, `License`), instead of producing a minimal record with only `Package`, `Version`, `Source`, and `Repository`. The metadata is fetched from the active package repositories (and crandb, when enabled, for CRAN packages) without reading the local library. Set `enrich = FALSE` to opt out and keep the previous minimal-record behavior. The `Hash` field is not computed for enriched records. Enriched records also store `Repository` as the named form (e.g. `CRAN`) that `renv::snapshot()` writes, rather than the contrib URL returned by `available.packages()`, so `renv::status()` no longer reports a spurious repository mismatch after a version-pinned `record()` call. (#2294) * `renv::vulns()` now returns one record per requested package, with a `vulns` field that is an empty list when the package has no known vulnerabilities. Previously the `vulns` field was only present for vulnerable packages. (#2292) * Fixed a regression where `renv::restore()` and `renv::install()` would re-download packages that were already installed in the user or site library, instead of reusing the existing installation. (#2288) * Fixed an issue where `renv::snapshot()` would fail to install missing packages when `pak` was enabled and the user selected the "Install the packages, then snapshot" option at the prompt. `renv::install()` now forwards its `include` and `exclude` arguments to the pak backend, so `install(include = missing)` reliably installs the requested packages rather than falling through to a no-op project update. (#2281) * Fixed an issue where `renv::init()` did not use pak to install missing dependencies, even when `pak.enabled = TRUE`. The install path used during init now delegates to pak when it is enabled. (#2282) * Fixed an issue where `renv::hydrate()` could leak the raw pak return value into its `missing` field on the pak install path, instead of preserving the documented `NULL`-on-success contract. * Fixed an issue where `renv::restore(clean = TRUE)` did not remove unused packages when `RENV_CONFIG_PAK_ENABLED=TRUE` (or `config$pak.enabled()` was otherwise set). The pak code path now honors `clean = TRUE` and drops packages from the project library that are not recorded in the lockfile, before delegating installs to pak. (#2280) * New `install.keep.source` configuration option controls whether renv invokes `R CMD INSTALL` with `--with-keep.source`. Defaults to `TRUE`, matching existing behaviour; set to `FALSE` to install with `--without-keep.source`, which can significantly reduce the serialized size of functions defined by installed packages. (#1713) * Fixed an issue where `renv::install()` could misreport packages as "built from source" when they were actually pre-built binaries served from a Posit Package Manager "binary" repository. The graph installer now classifies packages by inspecting the downloaded archive, rather than trusting the `type` passed to `available.packages()`. * Fixed an issue where `renv::restore()` and `renv::install()` could resolve dependency constraints against the wrong version's `DESCRIPTION`. When a lockfile-pinned version was not available from the configured repositories (e.g. only the latest version is indexed, as on `packagemanager.posit.co/cran/latest`), the graph resolver substituted the latest version's `Depends`/`Imports`/`LinkingTo` fields in place of the pinned version's, which could force spurious upgrades of unrelated dependencies. The resolver now consults crandb for the pinned version's actual requirements before falling back to the latest entry. (#2278) * Fixed an issue where setting `options(pkgType = "both")` on Linux could cause `renv::restore()` to extract a source tarball into the library as if it were a pre-built binary, skipping `R CMD INSTALL` and producing "has no 'package.rds' in Meta/" load-test failures. (#2275) # renv 1.2.2 * Fixed an issue where `renv::install()` failed with named remotes in `DESCRIPTION` (e.g. `skeleton=kevinushey/skeleton`). The lazy remote resolution was not fully unwrapped, causing "object of type 'closure' is not subsettable" errors during dependency graph resolution. (#2272) * Fixed an issue where binary packages could be installed before their dependencies during `renv::restore()`, causing load-test failures. Binary and source packages now participate in the same dependency-ordered installation. (#2268) # renv 1.2.1 * `RENV_PATHS_LOCKFILE` now resolves relative paths against the project directory rather than the working directory. Previously, the effective lockfile path could change as the working directory changed within an R session. (#2238) * `renv::install()` no longer upgrades transitive dependencies when the installed version already satisfies all dependency requirements. Previously, transitive dependencies were always upgraded to the latest available version, even when the existing library version was compatible. (#2232) * Fixed an issue where `renv::update()` and `renv::install()` did not handle `RemoteSubdir` correctly for Bitbucket and GitLab packages. The subdirectory was not passed through during remote resolution, causing DESCRIPTION lookups to fail for packages that live in a repository subdirectory. (#2229) * Fixed an issue where repository URLs from the lockfile could have `/src/contrib` appended twice, producing download URLs like `.../src/contrib/src/contrib/PACKAGES`. * Fixed an issue where `renv::install(..., type = "binary")` was not respected during dependency graph resolution, causing renv to resolve source-only versions even when binaries were requested. (#2264, #2266) * Fixed an infinite recursion in the JSON writer when encountering `numeric_version` objects. * Packages installed from local sources can now fall back to repository sources when the local source is no longer available. * `renv::install()` and `renv::restore()` now display progress when installing binary packages. * `renv::use(repos = NULL)` now correctly resolves and installs transitive dependencies from the cache. Previously, only explicitly requested packages were installed. (#2254) * The slow-dependency-discovery message during `renv::snapshot()` now accounts for whether an `.renvignore` file already exists, and adjusts the suggested action accordingly. (#2193, #2261) * Fixed an error during `restore()` when a package from a custom repository could not be found in available packages, and the lockfile used the v2 format. (#2263) * The new `lockfile.sanitize` project setting controls whether renv strips embedded credentials from repository URLs when writing the lockfile. Set to `FALSE` to preserve credentials in the lockfile. See `?renv::settings` for more details. (#2262) * Fixed an error when calling `renv::use()` multiple times in a single session. (#2248) * Fixed an issue where GitLab packages with an empty `RemoteSubdir` field caused restore and install failures. (#2249) * Fixed an error in the install report when a package record had no version, e.g. when a dependency could not be found in any configured repository. (#2251) * Fixed an issue where `renv_record_source()` returned `"unknown"` for lockfile records that had a `Repository` field but no `Source` field. * Fixed an issue where `renv::checkout()` could produce a broken `activate.R` script (e.g. `object '..md5..' not found` on session restart) when upgrading `renv` itself during checkout. (#2257) * Fixed an issue where `renv::restore(packages = ...)` did not install transitive dependencies of the requested packages. (#2259) # renv 1.2.0 * `renv::install()` and `renv::restore()` now download and install packages in parallel. Package downloads are batched into a single `curl --parallel` invocation, and source packages are compiled concurrently (up to `install.jobs` workers, default 4) using ready-queue scheduling that launches each package as soon as its dependencies finish. Binary packages are installed up front as they require no build-time ordering. Requires R >= 4.0 for full parallelism; older versions fall back to sequential installation. * PPM is now enabled by default on arm64 Linux, as Posit Package Manager now serves binaries for that platform. (#2241) * New function `renv::plan()` resolves the packages required by a project and generates a lockfile, without installing any packages. This can be used to preview what `renv::restore()` would install. Similarly, `renv::checkout()` with `actions = "snapshot"` now writes the resolved lockfile directly from repository metadata, rather than requiring packages to be installed first. Both functions accept a `dependencies` parameter (defaulting to `"strong"`) to control which dependency types are included in the recursive dependency tree. * `renv::restore()` now consults the per-package `Repository` URL recorded in the lockfile when resolving and downloading packages. Previously, only the global repository list was used. The new `strict` parameter controls whether packages with a URL-valued `Repository` field must be retrieved from that exact repository (`strict = TRUE`) or merely prefer it (`strict = FALSE`, the default). * Bootstrap failures during `.Rprofile` processing now emit a warning instead of an error. * `renv::embed()` now warns when required packages are not found in the resolved lockfile. Previously, dependencies missing from the project lockfile were silently omitted from the generated `renv::use()` call. (#2178) * `renv::embed()` gains support for `lockfile = NA`, which resolves package versions from the active package repositories rather than from installed packages or a lockfile. (#2178) * `renv::dependencies()` now detects packages referenced via `system.file(..., package = "pkg")` calls. (#2236) * The `renv.bioconductor.version` option is now respected as a global override during `renv::restore()` and `renv::load()`. Previously, the Bioconductor version recorded in the lockfile would take precedence, preventing users from overriding the Bioconductor version when needed. (#2218) * renv now strips embedded credentials from repository URLs when writing the lockfile. URLs of the form `https://user:token@host/path` are sanitized to `https://host/path`, preventing accidental credential leakage when sharing `renv.lock` files. (#2191) * The renv watchdog is now automatically disabled in child processes launched by parallel frameworks (e.g. `future::multisession`, `parallel::makePSOCKcluster()`, `callr`). (#2223) * `renv::use(repos = NULL)` now uses a cache-only install path, ensuring packages are only installed from the renv cache and no external sources (repositories, GitHub, etc.) are queried. Previously, `restore()` and `install()` could still reach external sources through internal fallback logic. * `renv::init(bioconductor = "devel")` now resolves symbolic Bioconductor version names (e.g. `"devel"`, `"release"`) to their numeric equivalents before writing to the lockfile. Previously, the literal string `"devel"` was written, causing `renv::restore()` to fail. (#2170) * renv gains the configuration option `renv.config.crandb.enabled`. When enabled, renv will query the [crandb](https://github.com/r-hub/crandb) service to find the newest version of a package compatible with the current version of R. This can be useful when using an older version of R, where the latest version of a package on CRAN requires a newer R version. (#1735) # renv 1.1.8 * Update to conform with changes to the R API. # renv 1.1.7 * Fixed an issue where `.renvignore` files were not read when the project root was the filesystem root `/`. (#2203) * Fixed an issue where `renv` would incorrectly warn about the version of `renv` being used on project load. (#2207) * The renv version mismatch warning is now suppressed during bootstrap when `RENV_CONFIG_STARTUP_QUIET=TRUE` or `RENV_CONFIG_SYNCHRONIZED_CHECK=FALSE` is set. (#2214) * Fixed an issue where `RENV_CONFIG_REPOS_OVERRIDE` with multiple named repositories (e.g., `NAME1=URL1;NAME2=URL2`) was not properly decoded by the configuration system, causing functions like `renv::install()` and `renv::restore()` to not use the specified repositories. (#2209) # renv 1.1.6 * A new setting, `snapshot.dev`, has been added to control whether development dependencies are included by default when calling `renv::snapshot()` or `renv::status()`. This setting defaults to `FALSE`. (#2190) * `RENV_CONFIG_REPOS_OVERRIDE` now supports multiple named repositories using the syntax `NAME1=URL1;NAME2=URL2`. Single repository URLs continue to be supported. * Fixed an issue where `renv::sysreqs()` could fail on operating systems which don't declare a VERSION_ID in `/etc/os-release`. (#2197) * `renv::dependencies()` now detects packages used in e.g. `data(, package = )`. (#2181) * Fixed an issue where cache callbacks (e.g. those run by setting `RENV_CACHE_USER` and `RENV_CACHE_MODE`, or via the `renv.cache.callback` option) were not run after `renv::hydrate()`. (#2179) * `renv::embed()` now errs if one or more of the package dependencies to be included within a file are not available. (#2178) * `renv` gains the function `renv::vulns()`, which can be used to query vulnerability information from a Posit Package Manager instance. This information can be queried either for a specific set of packages, or for all packages defined in a lockfile. * `renv` now also supports `RENV_LOCKFILE_VERSION = 1` as an alternate way to request the older, compact lockfiles. (#2175) * The version check in `renv::status()` can now be disabled by setting `options(renv.status.check_version = FALSE)`. (#2167) * Fixed an issue where the package manager URL was computed incorrectly with RHEL 10. * `renv` now prints the version numbers of the packages it downloads during install and restore. (#1925) * The `renv` configuration option `bioconductor.init` can now be used to control the default argument passed for the `bioconductor` parameter in calls to `renv::init()`. (#2128) * `renv` now supports bootstrapping itself from the global package cache. (#1799) * `renv` now prefers appending, rather than prepending, Bioconductor repositories to the current set of repositories when installing packages. This implies that if you're using a repository that also provides Bioconductor packages, this repository will be preferred as opposed to the "default" Bioconductor repositories. (#2128) * `renv::restore()` now ignores the `Repository` field on lockfile entries when the `repos.override` configuration option is set. (#2127) * `renv::restore()` now transforms binary repository URLs appropriately, for installed packages which were recorded as installed from an alternate binary repository URL. (#2127) # renv 1.1.5 * Fixed an issue where `renv::dependencies()` could fail for chunks which had a `label` which was not a length-one character vector. (#2144) * Fixed an issue where `file.rename()` could fail when unpacking a package during installation in certain Windows environments. (#2156) * `renv`'s dependency discovery now supports usages of `base::use()`. (#2130) * Fixed an issue where `renv` could fail to parse remote references containing an `@` character. (#2135) * Fixed an issue where `renv::sysreqs(distro = <...>)` could fail when passed an alternate distribution without a version specifier. (#2105) * Fixed an issue where multimode R documents containing chunk headers which did not parse to an R list could cause dependency inference to fail. (#2110) # renv 1.1.4 * Fixed an issue where `renv` could erroneously record packages installed from Posit Package Manager snapshots as being installed from CRAN. (#2104) * `renv` now only checks for archived packages during installation when `options(renv.install.allowArchivedPackages = TRUE)` is set. This fixes an issue where `renv` could erroneously discover that Rcpp 1.3 was available when using the Posit Package Manager repository. * Fixed an issue where `renv::dependencies()` could fail with an unhelpful error message if the scanned document contained a YAML header whose contents was not a map. (#2117) # renv 1.1.3 * Fixed an issue where `renv::hydrate()` could fail to install packages discovered in the user library during `renv::init()`. (#2109) * `renv::update()` now only updates the packages installed in the project library by default. `renv::update(all = TRUE)` can be used to also check if packages installed in the default library are out-of-date, and install updated copies into the project library. (#2108) * Fixed an issue where package installation could fail on Arch Linux with the error message "don't know how to check sysreqs on this system". (#2107) * `renv` now supports profile-specific comments within `.gitignore` and `.renvignore` files. These are comments of the form `#| `, where `` is R code which should indicate if the `.renvignore` rules should apply. Typically, this should be of the form `#| profile == "extra"`, or `#| profile %in% c("extra", "other")`. Note that only a small subset of base R functions are available for evaluation in this context. Note that the first section in a `.renvignore` implicitly applies to all profiles -- if you want to limit it to just the default profile, you can use `#| profile == "default"` for the first line. (#1662) * The environment variable `RENV_PATHS_VERSION` can now be used to substitute the R version component normally used in library / cache paths. The provided path can include placeholders like `%V` for the full R version including the patch level, and `%v` for the R version without the patch level. Defaults to `R-%v` when unset. (#1687) * `renv::install()` gains the `transactional` argument, for parity with `renv::restore()`. (#1109) # renv 1.1.2 * `renv` gains the `sysreqs()` function, which can be used to query the system packages required by a set of R packages. Functionality is currently available for Debian-based distributions, as well as Red Hat distributions. * On Linux, `renv` now uses the database from when determining if an R package's required system libraries are installed, and notifies the user which packages (if any) are missing during install / restore. * Fixed an issue where `renv` could fail to retrieve credentials registered for 'github.com' when querying URLs at 'api.github.com'. * Fixed an issue where `renv` could stall when loading a project and validating that the configured version of Bioconductor is compatible with the version of R currently in use. * `renv::snapshot()` no longer fails to generate a new lockfile if the project contains a lockfile which could not be read or parsed. * Fixed an issue where lockfiles containing unicode characters were not correctly written or read with versions of R (< 4.2.0) on Windows. (#2091) # renv 1.1.1 * Fixed an issue where very long lockfiles could be truncated on write. (#2089) * Fixed an issue where `renv` inadvertently made web requests in tests during `R CMD check`. # renv 1.1.0 ## Major Changes * `renv` now includes additional package DESCRIPTION fields in the lockfile. This can be useful for validating the provenance of packages recorded in the lockfile, and also for applications using `renv` which would like to recompute the hash used for package caching from the lockfile itself. If needed, old-style lockfiles can be generated by setting the option `options(renv.lockfile.version = 1)`. Note that this version of `renv` remains compatible both with the older (minimal) lockfiles, as well as with the newer lockfiles in this release. (#2057) ## Other Fixes * The `renv` sandbox is now unlocked on exit after a call to `renv::use()`. This should alleviate issues seen where R's attempts to clean up the temporary directory could fail due to inadequate permissions on the sandbox directory. (#2076) * Fixed an issue where `renv::restore()` did not respect the named repository within the lockfile when installing packages from the archives of the configured package repositories. (#2081) * Fixed an issue where `renv::snapshot()` could fail if invoked within a project containing empty or invalid `.ipynb` files. (#2073) * Fixed an issue where R package installation could fail if the project depended on a package whose current version available from the configured package repositories required on a newer version of R than what was currently installed, even if that package need not be updated. (#2071) * Fixed an issue where `RENV_CONFIG_EXTERNAL_LIBRARIES` was incorrectly split when using Windows paths. (#2069) * Fixed an issue where `renv` failed to restore packages installed from r-universe when the associated lockfile record had no `RemoteRef` field. (#2068) * `renv` now detects dependencies from usages of `utils::citation()`. (#2047) * Fixed an issue where packages installed from r-universe via an explicit URL remote could not be restored. (#2060) * Fixed an issue where the repositories provided to `renv::init()` were ignored when also initializing `renv` with a specific version of Bioconductor. * `renv::install()` gains the `include` parameter, which can be useful when you'd like to install a subset of dependencies within a project while also respecting any declared remotes in that project's `DESCRIPTION` file. (#2055) * Fixed an issue where `renv` could fail to check for updates for packages installed using `pak` without an explicit branch specified. (#2040) * `renv::use()` no longer re-installs packages which are already installed and compatible with the requested packages. (#2044) * Fixed an issue where `renv::init()` could fail when using named remotes in a DESCRIPTION file's `Remotes:` field. (#2055) * Fixed an issue where ignore rules of the form `!*.*` were not parsed and handled correctly during dependency discovery. (#2052) * Fixed an issue where `renv` erroneously reported that installed packages were cached when the cache was not writable. (#2041). * `renv` now supports updating of currently-installed packages via `renv::install()` when configured to use `pak`. (#2037) * Fixed an issue where `renv` library paths were not properly reset following a suspend / resume in RStudio Server. (#2036) * `renv::run()` gains the `args` parameter, which can be used to pass command-line arguments to a script. (#2015) * `renv` now infers a dependency on `rmarkdown` and `knitr` for R scripts which include YAML front-matter. (#2023) * The performance of `renv`'s built-in JSON reader has been improved. (#2021) * Fixed an issue where `renv` could erroneously create a binding called 'object' in the global environment on startup. (#2017) # renv 1.0.11 * Fixed an issue where headers were not properly passed to `available.packages()` during `renv` bootstrap. (#1942) * `renv` now assumes that Artifactory package repositories will use a CRAN-like layout of packages for packages in the archive. (#1996) * `renv` now includes compiled extensions on Linux + macOS. These extensions are primarily used to improve the performance of `renv::dependencies()` and other static analysis code. Support for Windows may come in a future release. * Fixed an issue where `renv::snapshot()` could fail if the project contained a call to `module()` with no arguments. (#2007) * On Linux, `renv` now emits a message on load if the R temporary directory is within a folder that has been mounted as 'noexec'. This message can be suppressed by setting the `RENV_TEMPDIR_NOEXEC_CHECK=FALSE` environment variable. # renv 1.0.10 * Fixed a performance regression in `renv::dependencies()`. (#1999) * Fixed an issue where `renv` tests could fail if the `parallel` package was loaded during test execution. * `renv` now determines a package repository's type through the HTTP headers provided when accessing `src/contrib/PACKAGES`. This is mainly relevant when detecting Nexus and Artifactory repositories. # renv 1.0.9 * Fixed an issue where repository URLs were inappropriately transformed into binary repository URLs on Linux. (#1991) * Fixed an issue where code following `source("renv/activate.R")` in the project `.Rprofile` was not invoked for projects using RStudio. (#1990) # renv 1.0.8 * `renv` now infers a dependency on the `ragg` package when the `ragg_png` device is used in R Markdown / Quarto documents, for documents using the code `knitr::opts_chunk$set(dev = "ragg_png")`. (#1985) * `renv` now automatically generates a lockfile when loading a project containing a `manifest.json` file (typical for application bundles published to Posit Connect). (#1980, @toph-allen) * `renv::install()` now errs if an incompatible `type` argument is provided. * `renv::checkout()` now also checks out the version of `renv` available and associated with the requested snapshot date. (#1966) * Fixed an issue where `renv::hydrate()` did not hydrate packages which were also listed as dependencies within a project's `DESCRIPTION` file. (#1970) * Fixed an issue where `renv::checkout()` omitted some fields from lockfile records when using `actions = c("snapshot", "restore")`. (#1969) * `renv` gains the function `renv::retrieve()`, which can be used to download packages without installing them. This is primarily useful in CI / CD scenarios, where you might want to download packages in a single stage before attempting to install / restore them. (#1965) * `renv` now preserves `Remote` fields present on packages installed from public package repositories (e.g. ). (#1961) * Fixed an issue where `renv::load()` could fail to load an alternate project when `options(renv.config.autoloader.enabled = FALSE)` was set. (#1959) * `renv` now emits clickable hyperlinks for runnable code snippets and help, for front-ends which support the `ide:run` and `ide:help` ANSI escapes. * `renv::init(bioc = "")` now prompts the user in interactive sessions when requesting a version of Bioconductor which is not compatible with the current version of R. (#1943) * `renv::restore()` gains the `transactional` argument, which can be used to control whether `renv` will allow successfully-installed packages remain in the project library even if a package fails to install during a later step. (#1109) * `renv` now infers a dependency on the `xml2` package for projects using the `testthat::JunitReporter` for tests. (#1936) * Fixed an issue where `renv::dependencies()` could emit a warning when attempting to parse chunks using chunk options like `#| eval: c(1, 2)`. (#1906) * `renv::install()` now properly delegates the `type` and `rebuild` arguments to `pak` when `options(renv.config.pak.enabled = TRUE)` is set. (#1924) * `renv` now infers a dependency on the `svglite` package if it detects calls of the form `ggsave(filename = "path.svg")`. (#1930) * `renv` now supports setting of GitHub authentication credentials via any of `GITHUB_TOKEN`, `GITHUB_PAT`, and `GH_TOKEN`. (#1937) * `renv` now also passes any custom headers available to `utils::available.packages()` during bootstrap. (#1942) * Fixed an issue where `renv` could fail during installation of packages stored within repository sub-directories, if that repository also contained a top-level DESCRIPTION file. (#1941) * `renv` now normalizes lockfile entries for Bioconductor packages installed via `pak::pkg_install()`, to help prevent spurious diffs being produced via `renv::status()`. (#1920) * `renv::install()` now respects the `prompt` parameter when `pak` is enabled, as via `options(renv.config.pak.enabled = TRUE)`. (#1907) * Fixed an issue with `renv`'s `pak` integration where `renv` could install the wrong version of a GitHub package during restore if `options(renv.config.pak.enabled = TRUE)` was set. (#1883) * `renv` no longer interacts with the user during autoloading, which coincides with R startup. If the IDE offers a session init hook (RStudio does), loading is deferred until startup is complete and interaction is possible. Otherwise, any suggested renv actions, such as `renv::restore()`, are emitted as a message for the user to act on. (#1879, #1915). * Fixed an issue where installation of packages from local sources, as via `install("", repos = NULL, type = "source")`, could fail. (#1880) * A new function, `renv::lockfile_validate()`, can be used to validate your `renv.lock` against a default or custom schema. (#1889) # renv 1.0.7 * Fixed an issue where `renv`'s activate script failed to report version conflict errors when starting up. (#1874) # renv 1.0.6 * Fixed an issue where downloads could fail with curl >= 8.7.1. (#1869) * Fixed an issue where `renv::snapshot()` did not properly normalize package records generated from packages installed using the `pak` package, e.g. via `pak::pkg_install("cran::")`. * Fixed an issue where `renv` could incorrectly prompt the user to record a version of `renv` installed from GitHub in some cases. (#1857) * `renv::load()` now delegates to `base::load()` when it detects that the call was likely intended for `base::load()`, but `renv::load()` was used instead (e.g. because `base::load()` was masked by `renv::load()`). * `renv::update()` gains the `lock` argument, which can be used to instruct `renv` to automatically update the lockfile after the requested packages have been updated. (#1849) * Fixed an issue where `renv` could fail to update the project autoloader after calling `renv::upgrade()`. (#1837) * Fixed an issue where attempts to install binary packages from older PPM snapshots could fail. (#1839) * `renv` now uses a platform-specific prefix on Linux for library and cache paths by default with R (>= 4.4.0). This is equivalent to setting `RENV_PATHS_PREFIX_AUTO = TRUE`. If necessary, this behavior can be disabled by setting `RENV_PATHS_PREFIX_AUTO = FALSE` in an appropriate R startup file. (#1211) # renv 1.0.5 * `renv` now only writes a `.renvignore` file into the cache directory if the cache appears to be part of the current project. * `renv` now reports missing system libraries as part of its ABI checks in `renv::diagnostics()`. * Fixed an issue where `renv::install(lock = TRUE)` produced lockfiles containing records with extraneous data. (#1828) # renv 1.0.4 * `renv::install()` gains the `lock` argument. When `TRUE`, the project lockfile will be updated after the requested packages have been successfully installed. (#1811) * `renv` now supports the use of GitHub Enterprise servers with the `gitcreds` package for authentication credentials. (#1814) * `renv::dependencies()` now treats `#| eval: !expr <...>` chunk options as truthy by default, implying that such chunks are scanned for their R package dependencies. (#1816) * `renv::dependencies()` now requires usages of the [import](https://cran.r-project.org/package=import) package to be namespace-qualified in order to be handled via static analysis; that is, `import::from()` is parsed for dependencies, but `from(pkg)` is not. (#1815) * `renv::load()` gains the `profile` argument, allowing one to explicitly load a specific profile associated with an `renv` project. See `vignette("profiles", package = "renv")` or https://rstudio.github.io/renv/articles/profiles.html for more details. * `renv::dependencies()` no longer includes `R` dependency versions declared from a `DESCRIPTION` file in its output. (#1806) * Fixed an issue where `renv` could fail to infer dependencies from R Markdown code chunks using engine 'R' (upper-case) rather than 'r' (lower-case). (#1803) * Fixed an issue where `renv` did not report out-of-sync packages when one or more packages used in the project were not installed. (#1788) * Fixed an issue where `renv` could over-aggressively activate P3M repositories when initializing a project. (#1782) * `renv::status()` now notifies the user if the version of R recorded in the lockfile does not match the version of R currently in use. (#1779) * Fixed an issue where packages could appear multiple times in the lockfile, if that package was installed into multiple library paths. (#1781) * Installation of historical binaries of packages is once again enabled, now using the [Posit Public Package Manager (P3M)](https://packagemanager.posit.co) service instead of Microsoft's (now defunct) MRAN service. * `renv::init()` now respects the `Remotes:` field declared in a project's `DESCRIPTION` file, if any. (#1522) * `renv::embed()` now supports Quarto Markdown (`.qmd`) files. (#1700) * renv now sets the `R_INSTALL_TAR` environment variable to match the default `tar` executable (if any) when installing packages. (#1724) * renv now uses `--ssl-revoke-best-effort` by default when downloading files using `curl` on Windows. (#1739) * Fixed an issue where `renv::install()` could fail to detect incompatible recursive package dependencies. (#1671) * `renv::install()` now records remote information for packages installed from CRAN-like repositories, and uses that information when generating a lockfile and restoring those packages. This helps ensure that packages installed within an renv project via calls like `renv::install("", repos = "")` can still be successfully restored in future sessions. (#1765) * `renv::install()` now lazily resolves project remotes. (#1755) * `renv::init()` now respects Remotes declared within a project's `DESCRIPTION` file, if any. * Calling `renv::activate()` without explicitly providing the `profile` argument now preserves the current profile, if any. Use `renv::activate(profile = "default")` if you'd like to re-activate a project using the default profile. (#1217) * Fixed an issue where `renv` would try to prompt for the installation of `BiocManager` when activating a project using Bioconductor. (#1754) * Fixed an issue where directories containing a large number of files could cause `renv` to fail to activate a project. (#1733) * Expanded the set of Linux distributions detected for automatic transformation of Posit Package Manager URLs to install binary packages. `renv` now correctly detects Red Hat Enterprise Linux 9, Rocky Linux 8 and 9, SLES 15 SP4 and SP5, Debian 11 and 12, AlmaLinux 8 and 9, and Amazon Linux 2. (#1720, #1721) # renv 1.0.3 * Fixed an issue where `renv` could warn the project appeared to be out-of-sync when using packages installed without an explicit source recorded. (#1683) * `renv::install()` gains the `exclude` argument, which can be useful when installing a subset of project dependencies. * Fixed an issue where PPM repositories were not appropriately transformed into the correct binary repository in `renv::restore()` when using pak. * `renv::init()` no longer prompts the user for the intended action for projects containing a library with only renv installed. (#1668) * Fixed an issue where non-interactive usages of `renv::init()` could fail with projects containing a DESCRIPTION file. (#1663) * Fixed an issue that could cause code within a project `.Rprofile` to execute before the project had been loaded in RStudio. (#1650) * `renv::snapshot()` and `renv::status()` gain the `dev` argument. This can be used when you'd like to capture package dependencies from the *Suggests* field of your package's DESCRIPTION file. (#1019) # renv 1.0.2 * renv now parses package `NAMESPACE` files for imported dependencies. (#1637) * renv no longer locks the sandbox by default. * Fixed an issue where renv used the wrong library paths when attempting to activate the watchdog. This could cause a 10 second delay when activating the sandbox. # renv 1.0.1 * Fixed an issue where authentication headers could be duplicated when using the `libcurl` download method. (#1605) * `renv::use()` now defaults to setting `isolate = TRUE` when `sandbox = TRUE`. * Fixed an issue where the renv watchdog could fail to load, leading to slowness in activating the sandbox on startup. (#1617) * Fixed an issue where renv did not display warnings / errors from `renv::snapshot()` when `options(renv.verbose = FALSE)` was set. The display of these messages is now controlled via the `renv.caution.verbose` R option. (#1607, #1608) * `renv::load()` now notifies the user if the synchronization check took an excessive amount of time due to the number of files being scanned in the project. (#1573) * `renv::init()` gains the `load` argument, making it possible to initialize a project without explicitly loading it. (#1583) * renv now uses a lock when synchronizing installed packages with the cache. This should help alleviate issues that can arise when multiple R processes are installing and caching packages concurrently. (#1571) * Fixed a regression in parsing expressions within R Markdown chunk options. (#1558) * Fixed an issue that prevented `renv::install()` from functioning when source-only repositories were included. (#1578) * Fixed a logic error in reading `RENV_AUTOLOAD_ENABLED`. (#1580) * `renv::restore()` no longer runs without prompting on load if the library is empty. (#1543) * `renv::repair()` now checks for installed packages which lack a known remote source, and updates their `DESCRIPTION` files if it can infer an appropriate remote source. This typically occurs when a package is installed from local sources, but appears to be maintained or published on a remote repository (e.g. GitHub). This was previously done in `renv::snapshot()`, but we've rolled back that change as the prompting was over-aggressive. (#1574) * `renv::status()` now first reports on uninstalled packages, before reporting on used <-> installed mismatches. (#1538) * When the `RENV_STARTUP_DIAGNOSTICS` environment variable is set to `TRUE`, renv now displays a short diagnostics report after a project's autoloader has been run. This can be useful when diagnosing why renv is slow to load in certain projects. (#1557) * renv now ensures the sandbox is activated on load, for R processes which are launched with the renv sandbox on the library paths. (#1565) * `renv::restore()` no longer erroneously prompts when determining the packages which need to be installed. (#1544) * `renv::update()` now ensures the `prompt` parameter is properly respected during package installation. (#1540) * `renv::activate()` no longer erroneously preserves the previous library paths after restarting the session within RStudio. (#1530) * Use correct spelling of IRkernel package (#1528). * Honor `R_LIBCURL_SSL_REVOKE_BEST_EFFORT` when using an external `curl.exe` binary to download files. (#1624) # renv 1.0.0 ## New features * New `renv::checkout()` installings the latest-available packages from a repository. For example, `renv::checkout(date = "2023-02-08")` will install the packages available on 2023-02-08 from the Posit [Package Manager](https://packagemanager.rstudio.com/) repository. The `actions` argument allows you choose whether a lockfile is generated from the provided repositories ("snapshot"), or whether packages are installed from the provided repositories ("restore"). * `renv::deactivate()` gains a `clean` argument: when `TRUE` it will delete all renv files/directories, leaving the project the way it was found. * `renv::init()` now uses [Posit Public Package Manager](https://packagemanager.posit.co) by default, for new projects where the repositories have not already been configured externally. See the options `renv.config.ppm.enabled`, `renv.config.ppm.default`, and `renv.config.ppm.url` in `?config` for more details (#430). * `renv::lockfile_create()`, `renv::lockfile_read()`, `renv::lockfile_write()` and `renv::lockfile_modify()` provide a small family of functions for interacting with renv lockfiles programmatically (#1438). * Handling of development dependencies has been refined. `renv::snapshot()` and `renv::status()` no longer track development dependencies, while `install()` continues to install them (#1019). `Suggested` packages listed in `DESCRIPTION` files are declared as development dependencies regardless of whether or not they're a "package" project. * MRAN integration is now disabled by default, pending the upcoming shutdown of Microsoft's MRAN service. Users who require binaries of older R packages on Windows + macOS can consider using the instance of CRAN mirrored by the [Posit Public Package Manager](https://packagemanager.posit.co) (#1343). ## Bug fixes and minor improvements * Development versions of renv are now tracked using the Git SHA of the current commit, rather than a version number that's incremented on every change (#1327). This shouldn't have any user facing impact, but makes renv maintenance a little easier. * Fixed an issue causing "restarting interrupted promise evaluation" warnings to be displayed when querying available packages failed. (#1260) * `renv::activate()` uses a three option menu that hopefully make your choices more clear (#1372). * `renv::dependencies()` now discovers R package dependencies inside Jupyter notebooks (#929). * `renv::dependencies()` includes packages used by user profile (`~/.Rprofile`) if `renv::config$user.profile()` is `TRUE`. They are set as development dependencies, which means that they will be installed by `install()` but not recorded in the snapshot. * `renv::dependencies()` only extracts dependencies from text in YAML headers that looks like valid R code (#1288). * `renv::dependencies()` no longer treats `box::use(module/file)` as using package `module` (#1377). * `renv::init()` now prompts the user to select a snapshot type if the project contains a top-level DESCRIPTION file (#1485). * `renv::install(type = "source")` now ensures source repositories are used in projects using [PPM](https://packagemanager.posit.co/). (#927) * `renv::install()` activates Bioconductor repositories when installing a package from a remote (e.g. GitHub) which declares a Bioconductor dependency (via a non-empty 'biocViews' field) (#934). * `renv::install()` respects the project snapshot type, if set. * `renv::install()` now keeps source when installing packages from source (#522). * `renv::install()` now validates that binary packages can be loaded after installation, in a manner similar to source packages (#1275). * `renv::install()` now supports Bioconductor remotes of the form `bioc::/`, for installing packages from a particular version of Bioconductor. Aliases like 'release' and 'devel' are also supported (#1195). * `renv::install()` now requires interactive confirmation that you want to install packages (#587). * `renv::load()` gives a more informative message if a lockfile is present but no packages are installed (#353). * `renv::load()` no longer attempts to query package repositories when checking if a project is synchronized (#812). * `renv::load()` no longer duplicates entries on the `PATH` environment variable (#1095). * `renv::restore()` can now use `pak::pkg_install()` to install packages when `pak` integration is enabled. Set `RENV_CONFIG_PAK_ENABLED = TRUE` in your project's `.Renviron` if you'd like to opt-in to this behavior. Note that this requires a nightly build of `pak` (>= 0.4.0-9000); see https://pak.r-lib.org/dev/reference/install.html for more details. * `renv::restore()` now emits an error if called within a project that does not contain a lockfile (#1474). * `renv::restore()` correctly restores packages downloaded and installed from [r-universe](https://r-universe.dev/) (#1359). * `renv::snapshot()` now standardises pak metadata so CRAN packages installed via pak look the same as CRAN packages installed with renv or `install.packages()` (#1239). * If `renv::snapshot()` finds missing packages, a new prompt allows you to install them before continuing (#1198). * `renv::snapshot()` no longer requires confirmation when writing the first snapshot, since that's an action that can easily be undone (by deleting `renv.lock`) (#1281). * `renv::snapshot()` reports if the R version changes, even if no packages change (#962). * `renv::snapshot(exclude = <...>)` no longer warns when attempting to exclude a package that is not installed (#1396). * `renv::status()` now uses a more compact display when packages have some inconsistent combination of being installed, used, and recorded. * `renv::status()` now works more like `renv::restore()` when package versions are different (#675). * `renv::update()` can now update packages installed from GitLab (#136) and BitBucket (#1194). * `renv::settings$package.dependency.fields()` now only affects packages installed directly by the user, not downstream dependencies of those packages. * renv functions give a clearer error if `renv.lock` has somehow become corrupted (#1027). # renv 0.17.3 * Fixed an issue where `renv::install("bioc::")` could fail if `BiocManager` was not already installed. (#1184) * Fixed an issue where package names were not included in the output of `renv::diagnostics()`. (#1182) * The clarity of the message printed by `renv::status()` has been improved; in particular, renv should better report the recommended actions when a package required by the project is not installed. * `renv::snapshot()` gains the `exclude` argument, for explicitly excluding certain packages from the generated lockfile. * Fixed an issue where renv was passing the wrong argument name to `installed.packages()`, causing usages of renv to fail with R (<= 3.4.0). (#1173) * renv now sets the `SDKROOT` environment variable on macOS if it detects that R was built using an LLVM build of `clang` on macOS. * `renv::install()` now parses the remotes included within, for example, a `DESCRIPTION` file's `Config/Needs/...` field. * renv now checks that the index directory is writable before attempting to use it, e.g. for the `R` available packages index maintained by renv. (#1171) * renv now checks that the version of `curl` used for downloads appears to be functional, and reports a warning if it does not (for example, because a requisite system library is missing). The version of `curl` used for downloads can also be configured via the `RENV_CURL_EXECUTABLE` environment variable. # renv 0.17.2 * Fixed a regression that caused package hashes to be computed incorrectly in some cases. This was a regression in the 0.17.1 release. (#1168) # renv 0.17.1 * renv gains the configuration option `install.remotes`, which can be used to control whether renv attempts to read and use the `Remotes:` field included with installed packages. This can be set to `FALSE` if you'd like to ignore this field; e.g. because you know they will not be accessible. (#1133) * General performance optimizations. In particular, `renv::update(check = TRUE)` should now execute much faster. * renv now stores project settings within `renv/settings.json` rather than `renv/settings.dcf`. Old settings will be automatically migrated. * The renv sandbox is now placed within the renv cache directory. (#1158) * Fixed an issue where `renv::status()` could erroneously report a project was out-of-sync when using explicit snapshots. (#1159) * Fixed an issue where `renv::hydrate()` would print spurious warnings. (#1160) * `renv::status()` now suggests running `renv::restore()` if there are no packages installed in the project library. (#1060) * Fixed an issue where renv would fail to query [r-universe](https://r-universe.dev/) repositories. (#1156) * renv no longer tries to set the `SDKROOT` environment variable on macOS for R (>= 4.0.0). * Fixed an issue where installation of Bioconductor packages could fail when `BiocManager` was not installed. (#1156, #1155) * Fixed an issue where the amount of time elapsed reported by `renv::install()` failed to include the time spent retrieving packages. # renv 0.17.0 * The performance of `renv::snapshot()` has improved. * renv now maintains an index of available packages, as retrieved from the active package repositories, that is shared across `R` sessions. This should improve renv's performance when querying for available packages across multiple different `R` sessions. * `renv::hydrate()` gains the `prompt` parameter. When `TRUE` (the default), renv will prompt for confirmation before attempting to hydrate the active library. * Improved handling of package installation via SSH URLs with `git`. (#667) * Improved handling of R version validation when using projects with Bioconductor. If you find renv is erroneously reporting that your version of R is incompatible with the version of Bioconductor you are using, you can set `options(renv.bioconductor.validate = FALSE)` to disable this validation behaviour. (#1148) * Package names can now be associated with remotes in `renv::install()`; for example, you can use `renv::install("igraph=igraph/rigraph")` to install the `igraph` package. This is mainly important when using the `renv.auth` authentication tools, where the package name of a remote needs to be declared explicitly. (#667) * Fixed an issue that could prevent `renv::restore()` from functioning when attempting to install packages which had been archived on CRAN. (#1141) * `renv::install()` gains the `dependencies` argument, which behaves similarly to the equivalent argument in `remotes::install_*()`. In particular, this can be set to fields like `Config/Needs/dev` to tell renv to use custom DESCRIPTION fields for dependency resolution in installation. * Fixed an issue where the function variant of the `renv.auth` option was not resolved correctly. (#667) * `renv::install()` now supports remotes with a trailing slash -- such slashes are now removed. (#1135) * Integration with the RStudio (Posit) Package Manager is now disabled by default on aarch64 Linux instances. * The `RENV_CACHE_MODE` environment variable can now also be used to adjust the permissions set on downloaded package tarballs / binaries. (#988) * Fixed an issue where fields of the form `Remotes.1` could enter lockfile records for older versions of R. (#736) * Fixed the performance of `renv::update()` in cases where integration with MRAN is enabled. * Fixed an issue where package installation using `pak` could fail in some cases. * `renv_file_find()` can now scan up to the root directory in Docker containers. (#1115) * renv no longer uses the R temporary directory on Windows for the sandbox. The sandbox directory can be customized via the `RENV_PATHS_SANDBOX` environment variable if required. (#835) * renv now reports the elapsed time when installing packages. (#1104) * For projects using "explicit" snapshots, renv now reports if a package is required by the project, but the package is not currently installed. (#949) * Fixed an issue where `renv::snapshot()` could fail to detect when no changes had been made to the lockfile. * Fixed an issue where renv could emit JSON lockfiles which could not be parsed by external JSON readers. (#1102) * renv now marks the sandbox as non-writable, which should hopefully alleviate issues where attempts to update installed packages would inadvertently install the updated package into the sandbox. (#1090) * `renv::use()` gains the `sandbox` argument, which allows one to control whether the system library is sandboxed after a call to `renv::use()`. (#1083) * The path to the Conda `environment.yml` file created by renv can now be customized via the `RENV_PATHS_CONDA_EXPORT` environment variable. We recommend setting this within your project-local `.Renviron` file as appropriate. (#1089) * Fixed an issue where the renv sandbox location did not respect the active renv profile. (#1088) # renv 0.16.0 * renv now supports installation of packages with remotes of the form `=`. However, the provided package name is ignored and is instead parsed from the remote itself. (#1064) * renv now passes along the headers produced by the `renv.download.headers` option when bootstrapping itself in the call to `utils::download.file()`. (#1084) * renv now reports if `renv::snapshot()` will change or update the version of R recorded in the lockfile. (#1069) * renv now supports the `install.packages.check.source` R option, which is used to allow R to query source repositories even if the option `options(pkgType = "binary")` is set. (#1074) * renv better handles packages containing git submodules when installed from GitHub remotes. (#1075) * renv now handles local sources within the current working directory. (#1079) * The renv sandbox is once again enabled by default. On Unix, the sandbox is now created by default within the project's `renv/sandbox` library. On Windows, the sandbox is created within the R session's `tempdir()`. The path to the renv sandbox can be customized via the `RENV_PATHS_SANDBOX` environment variable if required. * Fixed an issue where `renv::status()` could report spurious changes when comparing packages installed using `pak` in some cases. (#1070) * `renv::restore()` now also ensures the project activate script is updated after a successful restore. (#1066) * Fixed an issue where renv could attempt to install a package from the repository archives even when `type = "binary"` was set. (#1046) * Fixed an issue where package installation could fail when the R session is configured to use multiple repositories, some of which do not provide any information on available packages for certain binary arms of the repository. (#1045) * renv now uses `jsonlite` for reading lockfiles when loaded. This should help ensure useful errors are provided for manually-edited lockfiles which contain a JSON parsing error. If the `jsonlite` package is not loaded, renv will fall back to its own internal JSON parser. (#1027) * Fixed an issue that would cause renv to fail to source the user `~/.Rprofile` if it attempted to register global calling handlers, e.g. as `prompt::set_prompt()` does. (#1036) * (Linux only) renv now resets ACLs on packages copied to the cache, to avoid persisting default ACLs that might have been inherited on packages installed into a local project library. If desired, this behavior can be disabled by setting the `RENV_CACHE_ACLS` environment variable to `FALSE`. If you need finer control over ACLs set on packages moved into the cache, consider defining a custom callback via the `renv.cache.callback` R option. (#1025) * Fixed an issue where `.gitignore` inclusion rules for sub-directories were not parsed correctly by renv for dependency discovery. (#403) * Fixed an issue where renv could report spurious diffs within `renv::status()` when comparing package records installed from `pak` versus the default R package installer. (#998) * Fixed an issue where `renv::use_python()` could cause the Requirements field for packages in the lockfile to be unintentionally dropped. (#974) * The R option `renv.cache.callback` can now be set, to run a user-defined callback after a package has been copied into the cache. This can be useful if you'd like to take some action on the cached package's contents after the package has been moved into the cache. * (Unix only) The `RENV_CACHE_MODE` environment variable can now be used to change the access permissions of packages copied into the cache. When set, after a package is copied into the cache, renv will use `chmod -Rf` to try and change the permissions of the cache entry to the requested permissions. * (Unix only) The `RENV_CACHE_USER` environment variable can now be used to change the ownership of folders copied into the cache. When set, after a package is copied into the cache, renv will use `chown -Rf` to try and change the ownership of that cache entry to the requested user account. * Fixed an issue where repositories containing multiple packages in sub-directories could fail to install. (#1016) # renv 0.15.5 * Fixed an issue where indexing of packages in the package cellar could be slow. (#1014) * Fixed an issue where installation of packages from Bioconductor's binary Linux package repositories could fail. (#1013) * `renv::restore()` now supports restoration of packages installed from [R-Forge](https://r-forge.r-project.org/). (#671) * Fixed an issue where `renv::init(bioconductor = TRUE)` would not update the version of Bioconductor used if a project setting had already been set. * It is now possible to "update" an existing lockfile by using `renv::snapshot(update = TRUE)`. When set, any records existing in the old lockfile, but not the new lockfile, will be preserved. (#727) * Fixed an issue where renv could fail to parse Git remotes for users whose username contains a number. (#1004) * renv no longer infers a dependency on the "quarto" R package in projects containing a `_quarto.yml` file. (#995) * Fixed an issue where renv could fail to download a package from MRAN if a compatible source package of the same version was available from the active R repositories. (#990) * renv now reports permission errors during download more clearly. (#985) * Fixed an issue where `RENV_PATHS_LIBRARY_ROOT_ASIS` was not interpreted correctly. (#976) * `renv::modify()` gains the `changes` argument, which can be used to modify a project lockfile non-interactively. * `renv::clean()` now returns the project directory, as documented. (#922) * Fixed an issue where renv could fail to parse embedded YAML chunk options in R Markdown documents. (#963) * renv now sets default placeholder names for the `repos` R option, for any repository URLs which happen to be unnamed. (#964) * Fixed an issue where renv didn't respect the `PATH` ordering when discovering Python installations via `renv_python_discover()`. (#961) * Fixed an issue where renv could fail to install packages containing multibyte unicode characters in their DESCRIPTION file. (#956) * Fixed detection of Rtools 4.2 (#1002) # renv 0.15.4 * Fixed an issue where package installation could fail when referencing the cache via a tilde-aliased path, e.g. `~/.local/share/renv`. (#953) # renv 0.15.3 * A variety of fixes for R CMD check. * renv gains an experimental function, `renv::autoload()`, to be used as a helper for automatically loading a project for R processes launched within a sub-directory of that project. See `?renv::autoload` for more details. * renv will now print a warning message when attempting to read a lockfile containing merge conflict markers (as from e.g. a git merge). (#945) * Fixed an issue where `renv::install()` could install into the wrong library path on Windows, if the R installation had a site-wide profile that mutated the library paths. (#941) * Fixed an issue where `renv::install()` would fail to find a package within the cache when using an abbreviated commit hash for installation. (#943) * Fixed an issue where renv's automatic snapshot was not run after calls to `renv::install()` in some cases. (#939) * Fixed an issue where renv would incorrectly copy a package from the cache, if the cached version of the package and the requested version of the package had the same package version, even if they were retrieved from different sources. (#938) * The path to an renv tarball can now be set via the environment variable `RENV_BOOTSTRAP_TARBALL`, to be used to help renv bootstrap from local sources. This can either be the path to a directory containing renv source tarballs, or the path to the tarball itself. * Fixed an issue where the R site library would not be appropriately masked for resumed RStudio sessions. (#936) # renv 0.15.2 * Fixed issues encountered in R CMD check. # renv 0.15.1 * Fixed an issue where renv inadvertently inserted extra newlines into a `DESCRIPTION` file when adding `Remotes` fields after install. (#914) * Fixed an issue where packages installed from a remote sub-directory would fail to install when later re-installed from the cache. (#913) * renv now recognizes YAML chunk options of the form `#| key: value` when used in R Markdown documents. (#912) * Fixed an issue where the R site library was visible in renv projects with the system library sandbox disabled. * Fixed an issue where renv could update the wrong `.gitignore` in R processes launched by `callr` (e.g. in `devtools::install`). (#910) * Fixed an issue where renv could fail to read mis-encoded DESCRIPTION files. (#908) * Fixed an issue where `config$cache.symlinks()` would report `NULL` when unset. (#906) # renv 0.15.0 * The development branch for renv has moved from master to main. * renv package records in the lockfile now include a `Requirements` entry, which gives a list of R packages this package depends on in some way. This is primarily for internal use by the `pak` package. * Fixed an issue where packages containing DESCRIPTION files using a latin1 encoding would not be read correctly by renv. * Fixed an issue that could cause `renv::dependencies()` to fail when a malformed `DESCRIPTION` file was encountered. (#892) * The path to the project-local renv folder can now be configured via the `RENV_PATHS_RENV` environment variable. This can be useful if you'd prefer to store your project's renv resources within an alternate location in the project. (#472) * renv now uses an external library by default for R package projects, with the library located within `tools::R_user_dir("renv", "cache")`. This directory can be configured via the `RENV_PATHS_LIBRARY_ROOT` environment variable if desired. See `vignette("packages", package = "renv")` for more details. (#384) * renv now uses the repositories as defined within the project lockfile (if any) when attempting to bootstrap itself in a project. (#820) * The renv sandbox is now disabled by default -- see #614 for more details. * renv gains the function `repair()`, to be used to attempt to repair the project library when links into the global package cache appear to be broken. (#378) * Fixed an issue where the staging library used during install could fail to inherit the same directory permissions as the target library itself. (#331) * Fixed an regression which caused `renv::history()` to fail. (#886) * renv gains experimental support for the [pak](https://pak.r-lib.org/) package. Set `RENV_CONFIG_PAK_ENABLED = TRUE` in an appropriate `.Renviron` file to enable `pak` integration. When enabled, calls to `renv::install()` will use `pak` to download and install packages. * `renv::init()` gains the `bioconductor` argument, to be used to initialize a project with a particular Bioconductor release. You can also use `renv::init(bioconductor = TRUE)` to initialize with the latest-available release for the version of R being used. * Project settings can now be overridden by setting an R option of the same name. For example, one could force a project to use Bioconductor 3.14 by setting `options(renv.settings.bioconductor.version = "3.14")` within the project `.Rprofile` (or similar startup R profile). * The ad-hoc package repository called "local sources" has been renamed to the "package cellar". In addition, the path to the cellar is now controlled by the `RENV_PATHS_CELLAR` environment variable, rather than `RENV_PATHS_LOCAL`. This change was made to reduce confusion between "local sources" of packages located somewhere on the filesystem, as opposed to packages explicitly placed in this ad-hoc repository. `RENV_PATHS_LOCAL` remains supported for backwards compatibility. * The `RENV_PATHS_CELLAR` environment variable can now be set to multiple paths. Use `;` as a separator between paths; for example, `RENV_PATHS_LOCAL=/path/to/sources/v1;/path/to/sources/v2`. (#550) * Packages installed via e.g. `renv::install("./path/to/package")` will now retain the relative path to that package within the lockfile. (#873) * Fixed an issue where invalid `config` option values were not properly reported. (#773) * renv now supports restoration of packages installed via one of the [r-universe](https://r-universe.dev/) repositories. * renv gains the `bioconductor.version` project setting, used to freeze the version of Bioconductor used in a particular project. When set, this will override any version that might be selected via the `BiocManager` package. (#864) * renv now infers that parameterized R Markdown documents have a dependency on the `shiny` package. In addition, R code included within the `params:` list will be parsed for dependencies. (#859) * renv now ignores hidden directories during dependency discovery by default. If you want to force a particular hidden directory to be included for discovery, you can use a `.renvignore` file with an explicit inclusion criteria; e.g. `!.hidden/`. * renv now supports the `*release` remotes specifier for GitHub repositories, for requesting installation of the latest declared release of a package from GitHub. (#792) * renv now handles packages stored within the sub-directory of a Git repository better. (#793) * Fixed an issue where `renv::history()` would fail to resolve the correct lockfile path if the working directory was changed. (#834) * Refined dependency discovery within `glue::glue()` expressions. * renv now parses packages referenced via the `base_format` field within an R Markdown document's YAML header. (#854) * Fixed an issue where renv would fail to produce the appropriate binary repository URL for RSPM repositories built using Red Hat Enterprise Linux. * Fixed an issue where `renv::snapshot()` could cause the environment name and / or path associated with a Python environment to be omitted from the lockfile. (#843) * Fixed an issue where `renv::restore()` could fail to restore packages which referred to their source via an explicit path in the `Source` field. (#849) * renv no longer requires explicit user consent when used within Singularity containers. (#824, @kiwiroy) * renv now respects the `R_PROFILE_USER` environment variable, in addition to the `user.profile` configuration option, when considering whether the user `.Rprofile` should be examined for package dependencies. (#821) * The renv auto-loader can now be disabled by setting the environment variable `RENV_AUTOLOADER_ENABLED = FALSE`. This can be useful if you'd like to explicitly control how a project is loaded, e.g. by calling `renv::load()` explicitly. * `renv::snapshot()` gains the `repos` argument, to be used to force the lockfile to be generated with the requested set of R repositories encoded within. * renv now validates that the `repos` option, as used by `renv::snapshot()`, is a named vector. (#811) * Fixed an issue where renv's shims, e.g. for `install.packages()`, failed to pass along other optional arguments to the shimmed function correctly. (#808) # renv 0.14.0 * renv now uses `tools::R_user_dir()` to resolve the default path to the global renv cache, for R installations 4.0.0 or greater. If the renv cache still exists at the old location, that location will be used instead. This change should only affect brand new installations of renv on newer versions of `R`. * Fixed an issue with renv tests failing with R (>= 4.2.0). * renv will no longer auto-activate itself within R processes launched via `R CMD INSTALL`. This behavior can be controlled if necessary via the `RENV_ACTIVATE_PROJECT` environment variable -- set this to `TRUE` to force the project in the current working directory to be activated, and `FALSE` to suppress the renv auto-loader altogether. (#804) * Added dependency discovery support for R utility scripts identified by a shebang line instead of a file extension. (#801; @klmr) * Fixed an issue where `renv::install("", type = "both")` would attempt to install the package from sources, even if the current system did not have the requisite build tools available. (#800) * `renv::scaffold()` gains the `settings` argument, used to create a project scaffolding with some default project options set. (#791) * renv now determines the default branch name for packages installed from GitLab without an explicit reference supplied; for example, as in `renv::install("gitlab::/")`. (#795) * renv now infers a dependency on the `bslib` package for R Markdown documents using custom themes. (#790) * renv will now prompt users to activate the current project when calling `renv::snapshot()` or `renv::restore()` from within a project that has not yet been activated. (#777) * renv now has improved handling for `git` remotes. (#776; @matthewstrasiotto) * `renv::restore()` gains the `exclude` argument, used to exclude a subset of packages during restore. (#746) * Fixed an issue where `renv::dependencies()` could fail to parse dependencies in calls to `glue::glue()` that used custom open and close delimiters. (#772) * Fixed an issue where `renv::init(bare = TRUE)` would unnecessarily scour the project for R package dependencies. (#771) * Fixed an issue where renv could fail to install packages located on GitHub within sub-subdirectories. (#759) * renv gains the function `embed()`, used to embed a lockfile with an R document (via a call to `renv::use()`). * `renv::use()` gains the lockfile argument. This can be useful for R Markdown documents and scripts that you'd like to run with the context for a particular lockfile applied. * `renv::rebuild()` gains the `type` parameter, for parity with `renv::install()`. * Fixed an issue where renv could incorrectly copy an incompatible version of an R package from a site library into the project library during install. (#750) * `renv::dependencies()` can now parse (some) usages of `parsnip::set_engine()`. * `renv::dependencies()` now has improved handling for piped expressions. * Fixed crash during dependency discovery when encountering `box::use()` declarations that use a trailing comma, and no longer treat `.` and `..` as package names. (@klmr) * `renv::clean()` no longer attempts to clean the system library by default. (#737) * Fixed an issue where `install.packages()` could fail when used within an renv project to install a package from local sources. (#724) * The chunk `renv.ignore` parameter can now be set to `FALSE`. When set, renv will explicitly parse dependencies from chunks even if other chunk metadata would have told renv to ignore it (e.g. because it was marked with `eval=F`). (#722) * Fixed an issue where chunks with the chunk option `eval=F` would still be scanned for dependencies. (#421) * In interactive sessions, `renv::use_python()` will now prompt for the version of Python to be used. Python installations in a set of common locations will be searched. See `?renv::use_python()` for more details. * Fixed an issue where renv would fail to retrieve packages from the archives if the lockfile entry was tagged with a `RemoteSha` field. * `renv::restore()` will now prefer restoring packages from the repository named in the `Repository` field if available. The name is matched against the repository names set in the R `repos` option, or as encoded in the renv lockfile. (#701) * renv now supports the discovery of dependencies within interpolated strings as used by the `glue` package. * `RENV_CONFIG_EXTERNAL_LIBRARIES` can now be configured to use multiple library paths, delimited by either `:`, `;`, or `,`. (#700) * renv gains the configuration option, `exported.functions`, controlling which functions and objects are placed on the R search path when renv is attached (e.g. via `library(renv)`). Set this to `NULL` to instruct renv not to place any functions on the search path. This helps avoid issues with, for example, `renv::load()` masking `base::load()`. When set, all usages of renv APIs must be explicitly qualified with the `renv::` prefix. # renv 0.13.2 * `renv::install("user/repo/subdir with spaces")` now works as expected. (#694) * renv can now parse package dependencies declared by `targets::tar_option_set(packages = <...>)`. (#698) * renv no longer performs an automatic snapshot following a user-canceled renv action -- for example, if `renv::restore()` is canceled, the next automatic snapshot will be suppressed. (#697) * Added the `vcs.ignore.local` project setting, to control whether the project's `renv/local` folder is added to renv's VCS ignore file (e.g. `renv/.gitignore`). (#696) * Fixed an issue where renv's bootstrapping code could inadvertently bootstrap with the wrong version of renv, if the source and binary versions of renv on CRAN were not in sync. (#695) * Fixed an issue where `renv::status()` could provide a misleading message for packages which are recorded in the lockfile, but not explicitly required by the project. (#684) # renv 0.13.1 * `renv::clean()` gains the `actions` argument, allowing the caller to control which specific actions are taken during a `clean()` operation. * renv no longer performs an automatic snapshot after a call to `renv::status()`. (#651) * Fixed an issue where attempts to transform RSPM repository URLs could fail if the copy of R was installed without a local `CRAN_mirrors.csv` file. * Fixed an issue where `renv::init()` could fail when passed a relative path to a directory. (#673) * Fixed an issue where `renv::dependencies()` would miss dependencies in R Markdown YAML headers containing multiple output formats. (#674) * `renv::install()` now better respects the `Remotes` field in a project `DESCRIPTION` file, if available. (#670) * `RENV_DOWNLOAD_METHOD` is now treated as an alias for `RENV_DOWNLOAD_FILE_METHOD`. * Fixed an issue where renv would fail to load if the `~/.Rprofile` existed but was an empty file. # renv 0.13.0 * `renv::snapshot()` no longer creates an `renv/activate.R` file in the project folder if one does not already exist. (#655) * The `renv::hydrate()` function gains the `update` argument, used to control whether `renv::hydrate()` chooses to update packages when invoked. When set to `TRUE`, if the version of a package installed in the source library is newer than that of the project library, then renv will copy that version of the package into the project library. (#647) * The `RENV_PATHS_PREFIX_AUTO` environment variable can now be set to instruct renv to include an OS-specific component as part of the library and cache paths. This is primarily useful for Linux systems, where one might want to share a global cache with multiple different operating systems. The path component is constructed from the `ID` and `VERSION_CODENAME` / `VERSION_ID` components of the system's `/etc/os-release` file. * renv's dependency discovery machinery now has preliminary support for packages imported via the [box](https://github.com/klmr/box) package; e.g. `box::use(dplyr[...])`. * Multiple cache paths can now be specified, with each cache path separated by either a `;` or `:`. This can be useful when you'd like to use multiple package caches within the same project; for example, because you'd like to share a read-only cache with a set of projects. (#653, @vandenman) * Fixed an issue where renv could fail to discover dependencies in directories with very large `.gitignore` or `.renvignore` files. (#652) * renv gains a new configuration option, `install.shortcuts`. When enabled, if renv discovers that a package to be installed is already available in the user or site libraries, renv will instead install a copy of that package into the project library. (#636) * renv gains a new function, `renv::use()`, used to download, install, and load a set of packages directly within an R script. `renv::use()` can make it easier to share a standalone R script, with the packages required to install that script embedded directly in the script. It is inspired in part by the [groundhog](https://groundhogr.com/) package. * `renv::install(".")` can now be used to install a package from sources within the current working directory. (#634) * Fixed an issue where `renv::update()` could fail if a package installed from GitHub was missing the `RemoteHost` field in its DESCRIPTION file. (#632) * renv now has support for custom project profiles. Profiles can be used to activate different sets of project libraries + lockfiles for different workflows in a given project. See `vignette("profiles", package = "renv")` for more details. * Fixed an issue where attempts to initialize an renv project in a path containing non-ASCII characters could fail on Windows. (#629) * Fixed an issue where `renv::install("")` could fail if renv chose to install the package from MRAN rather than from one of the active package repositories. (#627) * renv again defaults to using the project's `renv/staging` folder for staged / transactional installs. Use the `RENV_PATHS_LIBRARY_STAGING` environment variable if more granular control over the staging library path is required. This fixes issues on Windows with creating junction points to the global package cache on Windows. (#584) * renv no longer skips downloading a requested source package if an existing cached download exists and appears to be valid. This should help avoid issues when attempting to install a package whose associated tarball has changed remotely. (#504) * During bootstrap, renv will now attempt to download and unpack a binary copy of renv if available from the specified package repositories. * renv now always attempts to bootstrap itself from the R Project's Cloud package repository, as a fallback in case no other repository is available. (#613) * `renv::rebuild()` now uses the latest-available version of the requested package(s) if those packages are not currently installed. * Fixed an issue where `renv::restore(library = "/path/to/lib")` would fail to restore packages, if those packages were already installed on the active library paths (as reported by `.libPaths()`). (#612) * `renv::snapshot()` gains the `reprex` argument. Set this to `TRUE` if you'd like to embed an renv lockfile as part of a reproducible example, as generated by the [`reprex`](https://tidyverse.org/help/#reprex-pkg) package. * `renv::status()` now reports packages that are referenced in a project's scripts, but are neither installed in the project library nor recorded in the lockfile. (#588) * Fixed an issue where package installation could fail if the `configure.vars` option was set to be a named character, rather than a named list. (#609) # renv 0.12.5 * Fixed an issue where renv would fail to bootstrap. (#608) # renv 0.12.4 * renv now invalidates the available packages cache if the `https_proxy` environment variable changes. (#579) * `renv::install()` will now install the latest-available version of that package from local sources, if that package is available and newer than any package available on the active package repositories. (#591) * The configuration option `startup.quiet` has been added, allowing one to control whether renv will display the typical startup banner when a project is loaded. * renv now better handles being unloaded and reloaded within the same R session. In particular, warnings related to a corrupted lazy-load database should no longer occur. (#600) * renv no longer reinstalls packages that are already installed and up-to-date in bare calls to `renv::install()`. * renv now uses the R temporary directory for staging, when performing transactional restores / installs. If you need to control the path used for staged installs, please set the `RENV_PATHS_LIBRARY_STAGING` environment variable. * The `install.verbose` configuration option has been added. When set to `TRUE`, renv will stream the output generated by R when performing a package installation. This can be helpful in some cases when diagnosing a failed restore / install. (#330) * Fixed an issue where renv could fail to parse R Markdown chunk headers with an empty label. (#598) * The environment variable `RENV_PATHS_LIBRARY_ROOT_ASIS` can now be used to control whether the project name should be used as-is when forming the library path within the `RENV_PATHS_LIBRARY_ROOT` folder. Set this to `"TRUE"` if you would prefer renv did not append a unique identifier to your project's library path. (#593) * Fixed an issue where GitLab references were not URL encoded. (#590) * renv no longer emits warnings when parsing multi-mode R files that make use of re-used knitr chunks (those specified as `<