chore: bump pnpm to 12.4.1 - #14
Conversation
|
Warning Review limit reachedNext included review available in 34 minutes. View limit detailsLimit details: You’ve used the included review currently available. You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Review configuration: ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Advanced Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Advanced Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📝 WalkthroughWalkthroughThe package manager requirement in ChangesPackage Manager Update
Priority: ⬇️ Low Estimated code review effort: 1 (Trivial) | ~2 minutes Change: Other Merge Risk: ⚪ Minimal · up to The pnpm upgrade is compatible with the repository’s supported Node versions and CI installation workflow. 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches 💡 1🛠️ Fix failing CI checks 💡
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
🟡 Changes recommended
pnpm-lock.yaml appears to contain two YAML documents (duplicate ---/lockfileVersion), which is likely to break pnpm installs and must be regenerated/fixed.
Get a fresh assessment by requesting another Copilot review.
Pull request overview
This PR upgrades the repository’s declared pnpm version from 11.7.0 to 12.4.1 and attempts to update the lockfile accordingly so developers/CI use pnpm 12 consistently.
Changes:
- Bumped
packageManagerinpackage.jsontopnpm@12.4.1. - Updated
pnpm-lock.yamlto include pnpm 12’spackageManagerDependenciesmetadata.
File summaries
| File | Description |
|---|---|
package.json |
Updates the declared pnpm version to 12.4.1. |
pnpm-lock.yaml |
Adds pnpm 12 package-manager metadata, but currently appears to have been prepended as a second YAML document. |
Review details
Files not reviewed (1)
- pnpm-lock.yaml: Generated file
- Files reviewed: 1/2 changed files
- Comments generated: 1
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Clears the high-severity advisories that fail CI's pnpm audit: GHSA-2883-xcg3-v3hh (js-yaml <4.3.2) and, where present, the fast-uri <3.1.6 advisories. Claude-Session: https://claude.ai/code/session_01JqjTCSDPsbgreJKHcRABi9
Bumps
packageManagerfrom pnpm 11.7.0 to 12.4.1 (major).pnpm install --lockfile-only: the only change is pnpm 12's newpackageManagerDependenciesdocument pinning pnpm's own integrity. Dependency graph unchanged.pnpm-workspace.yamlsettings now error,--frozen-lockfile falseremoved (use--no-frozen-lockfile), stricterengineStrict.https://claude.ai/code/session_01JqjTCSDPsbgreJKHcRABi9
Summary by CodeRabbit