Skip to content

chore: bump pnpm to 12.4.1 - #451

Merged
btravers merged 2 commits into
mainfrom
chore/pnpm-12.4.1
Sep 14, 2026
Merged

btravers merged 2 commits into
mainfrom
chore/pnpm-12.4.1

Conversation

@btravers

@btravers btravers commented Sep 14, 2026

Copy link
Copy Markdown
Collaborator

Bumps packageManager from pnpm 11.7.0 to 12.4.1 (major).

  • Lockfile regenerated with pnpm install --lockfile-only: the only change is pnpm 12's new packageManagerDependencies document pinning pnpm's own integrity. Dependency graph unchanged.
  • pnpm 12 breaking changes to watch in CI: unrecognized pnpm-workspace.yaml settings now error, --frozen-lockfile false removed (use --no-frozen-lockfile), stricter engineStrict.

https://claude.ai/code/session_01JqjTCSDPsbgreJKHcRABi9

Summary by CodeRabbit

  • Chores
    • Updated the project’s package manager to pnpm 12.4.1 for improved consistency and reproducibility.

Copilot AI lite review requested due to automatic review settings September 14, 2026 22:44
@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

Warning

Review limit reached

Next included review available in 34 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 27dc1d98-b683-4c12-a5c5-249d62163221

📥 Commits

Reviewing files that changed from the base of the PR and between 365f5b1 and d74c435.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml, !pnpm-lock.yaml
📒 Files selected for processing (1)
  • pnpm-workspace.yaml

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: bd3a07a5-69ab-4e7a-9811-65d4ba025d71

📥 Commits

Reviewing files that changed from the base of the PR and between 5e9c398 and 365f5b1.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml, !pnpm-lock.yaml
📒 Files selected for processing (1)
  • package.json

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

The project configuration updates the required pnpm version from 11.7.0 to 12.4.1.

Changes

Package manager update

Layer / File(s) Summary
Update package manager pin
package.json
The packageManager field now requires pnpm 12.4.1 instead of pnpm 11.7.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Suggested reviewers: copilot

Merge Risk: ⚪ Minimal · up to 365f5

The pnpm version update has no supported unresolved issue that should block merging.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: updating pnpm to version 12.4.1.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/pnpm-12.4.1

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The committed pnpm-lock.yaml is malformed (two YAML documents), which is likely to break pnpm lockfile parsing/CI until regenerated into a single coherent lockfile document.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Updates this repo’s declared package manager to pnpm 12.4.1 and regenerates the lockfile to reflect pnpm 12’s new lockfile metadata (intended to improve reproducibility by pinning pnpm’s own integrity).

Changes:

  • Bump root packageManager from pnpm@11.7.0 to pnpm@12.4.1.
  • Update pnpm-lock.yaml to include pnpm 12’s packageManagerDependencies metadata.
File summaries
File Description
pnpm-lock.yaml Attempts to add pnpm 12 packageManagerDependencies, but currently results in a malformed lockfile containing two YAML documents.
package.json Bumps packageManager to pnpm@12.4.1.
Review details

Files not reviewed (1)

  • pnpm-lock.yaml: Generated file
  • Files reviewed: 1/2 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread pnpm-lock.yaml
Clears the high-severity advisories that fail CI's pnpm audit:
GHSA-2883-xcg3-v3hh (js-yaml <4.3.2) and, where present, the fast-uri
<3.1.6 advisories.

Claude-Session: https://claude.ai/code/session_01JqjTCSDPsbgreJKHcRABi9
@btravers
btravers merged commit 36573af into main Sep 14, 2026
13 checks passed
@btravers
btravers deleted the chore/pnpm-12.4.1 branch September 14, 2026 23:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants