Skip to content

chore: Migrate from npm to pnpm#80

Merged
erezrokah merged 3 commits intomainfrom
chore/switch-to-pnpm
Mar 31, 2026
Merged

chore: Migrate from npm to pnpm#80
erezrokah merged 3 commits intomainfrom
chore/switch-to-pnpm

Conversation

@erezrokah
Copy link
Copy Markdown
Member

Migrate from npm to pnpm for supply chain protection and org standardization.

  • minimumReleaseAge: 10080 (7 days) prevents installing recently-published packages
  • packageManager field pins pnpm version
  • CI workflows updated to use pnpm/action-setup v5 (pinned to commit hash)

@erezrokah erezrokah changed the title chore: migrate from npm to pnpm chore: Migrate from npm to pnpm Mar 31, 2026
disq
disq previously approved these changes Mar 31, 2026
@erezrokah erezrokah force-pushed the chore/switch-to-pnpm branch 2 times, most recently from c7596ed to 32ec5e6 Compare March 31, 2026 10:39
- Replace package-lock.json with pnpm-lock.yaml
- Set packageManager to pnpm@10.23.0
- Add minimumReleaseAge: 10080 (7 days) for supply chain protection
- Update CI workflows for pnpm
@erezrokah erezrokah force-pushed the chore/switch-to-pnpm branch from 32ec5e6 to 45e9372 Compare March 31, 2026 10:53
@types/uuid is a deprecated stub (uuid ships its own types since v9).
Under pnpm's strict resolution, the @types/uuid reference caused TS2688
because the uuid package wasn't hoisted to the top-level node_modules.

Also update the Dockerfile to use pnpm instead of npm, since
package-lock.json no longer exists after the pnpm migration.
@erezrokah erezrokah added the automerge Add to automerge PRs once requirements are met label Mar 31, 2026
@erezrokah erezrokah merged commit cc9a2ff into main Mar 31, 2026
8 checks passed
@erezrokah erezrokah deleted the chore/switch-to-pnpm branch March 31, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge Add to automerge PRs once requirements are met

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants