From 6693d754a17d2a772bd302a26f9c562b8691acbd Mon Sep 17 00:00:00 2001
From: Andrew Mikofalvy <5668128+amikofalvy@users.noreply.github.com>
Date: Sat, 3 Oct 2026 05:46:34 +0000
Subject: [PATCH] Move Visimer to pnpm 12.8.1 (PRD-8254) (#5490)

* Move Visimer to pnpm 12.8.1

Visimer was the last mirrored root still on pnpm 10.33. Its pin moves
to 12.8.1 and the package.json pnpm field, which pnpm 11 and later
never read, becomes an allowBuilds map in pnpm-workspace.yaml. The
lockfile is unchanged under pnpm 12.

Its three workflows install pnpm with pnpm/setup, since
pnpm/action-setup cannot install pnpm 11 or later, and the site's
Vercel config runs pnpm through the pinned Corepack, as every other
Vercel config under a pnpm 12 pin does.

* Drop the prose comments the Visimer move added

The guard tests and the runbook already hold each fact: the workspace
roots test requires pmOnFail and verifyDepsBeforeRun, the runbook
explains allowBuilds, and the action-pin guard rejects a version input
beside packageManager.

GitOrigin-RevId: 80852d85c65276b827577c5dfc3e5f612719dfde
---
 .github/workflows/release.yml | 4 +++-
 apps/site/vercel.json         | 4 ++--
 package.json                  | 7 +------
 pnpm-workspace.yaml           | 7 +++++++
 4 files changed, 13 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ab882ab..0bdbdc8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,7 +45,9 @@ jobs:
           fetch-depth: 0
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
+        uses: pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2 # v2.0.2
+        with:
+          install: false
 
       - name: Setup Node for OIDC publishing
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
diff --git a/apps/site/vercel.json b/apps/site/vercel.json
index 7739127..9a40862 100644
--- a/apps/site/vercel.json
+++ b/apps/site/vercel.json
@@ -1,8 +1,8 @@
 {
   "$schema": "https://openapi.vercel.sh/vercel.json",
   "framework": "vite",
-  "installCommand": "pnpm install --frozen-lockfile",
-  "buildCommand": "pnpm build",
+  "installCommand": "npx --yes corepack@0.35.0 pnpm install --frozen-lockfile",
+  "buildCommand": "npx --yes corepack@0.35.0 pnpm build",
   "outputDirectory": "dist",
   "rewrites": [
     {
diff --git a/package.json b/package.json
index 0aaac4d..6fd359c 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "visimer-monorepo",
   "private": true,
-  "packageManager": "pnpm@10.33.0",
+  "packageManager": "pnpm@12.8.1",
   "scripts": {
     "check:agent": "node scripts/check-agent.mjs test",
     "dev": "pnpm --filter playground dev",
@@ -19,10 +19,5 @@
     "tsup": "^8.5.1",
     "typescript": "^5.6.3",
     "@changesets/cli": "^2.27.10"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "esbuild"
-    ]
   }
 }
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 6f00273..8370ddb 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,3 +1,10 @@
 packages:
   - packages/*
   - apps/*
+
+pmOnFail: ignore
+verifyDepsBeforeRun: false
+
+allowBuilds:
+  core-js: false
+  esbuild: true