Skip to content

chore: Replace yarn with pnpm#6448

Merged
davidkna-sap merged 73 commits intomainfrom
davidkna-sap_pnpm
Apr 23, 2026
Merged

chore: Replace yarn with pnpm#6448
davidkna-sap merged 73 commits intomainfrom
davidkna-sap_pnpm

Conversation

@davidkna-sap
Copy link
Copy Markdown
Member

@davidkna-sap davidkna-sap commented Apr 1, 2026

Replaces Yarn 1 (Classic) with pnpm 10 across the entire monorepo.

Motivation: pnpm natively enforces two security properties that Yarn Classic lacks:

  • Dependency cooldown
  • Build script blocking by default (better-sqlite3 is allow-listed to make e2e tests works, but building on demand may also be possible)

Changes

  • Adds .github/actions/setup/action.yml: reusable composite action that handles pnpm set-up
  • Replaces mock-fs (semi-unmaintained) with memfs + unionfs
    • Adds test-resources/mock-fs.js: a union overlay filesystem factory (memfs on top of real fs) used across tests
    • build-packages/check-public-api/index.ts: removes mock-fs usage entirely; now compiles into a temp directory
  • turbo.json: explicit per-package compile dependency graph added for dependency cycle-resolution
  • Replace licensee with manual check using pnpm license list --json
  • Replace sqlite3 (unmaintained) with @cap-js/sqlite (uses better-sqlite3)

@davidkna-sap davidkna-sap force-pushed the davidkna-sap_pnpm branch 9 times, most recently from bc9ce1b to 3b1a5b6 Compare April 1, 2026 15:15
@davidkna-sap davidkna-sap changed the title refactor: Replace yarn with pnpm chore: Replace yarn with pnpm Apr 1, 2026
@davidkna-sap davidkna-sap force-pushed the davidkna-sap_pnpm branch 20 times, most recently from 29a2d09 to af9543c Compare April 7, 2026 13:35
@davidkna-sap davidkna-sap marked this pull request as ready for review April 22, 2026 14:58
@davidkna-sap davidkna-sap requested a review from marikaner April 23, 2026 06:48
* origin/main:
  chore: Reorder step configurations (#6521)
  chore(deps): bump bignumber.js from 10.0.2 to 11.0.0 (#6520)
  chore(deps): bump fast-xml-parser from 5.6.0 to 5.7.1 (#6519)

Co-authored-by: Copilot <[email protected]>
Copy link
Copy Markdown
Contributor

@marikaner marikaner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@davidkna-sap davidkna-sap merged commit 9b42f11 into main Apr 23, 2026
35 of 36 checks passed
@davidkna-sap davidkna-sap deleted the davidkna-sap_pnpm branch April 23, 2026 10:43
davidkna-sap added a commit that referenced this pull request Apr 23, 2026
* origin/main:
  chore: Replace yarn with pnpm (#6448)
  chore: Reorder step configurations (#6521)
  chore(deps): bump bignumber.js from 10.0.2 to 11.0.0 (#6520)
  chore(deps): bump fast-xml-parser from 5.6.0 to 5.7.1 (#6519)
  feat: Add `getIasToken()` and `getIasDestination()` convenience functions (#6431)
  chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 (#6516)
  chore: Correct merge-and-write-changelogs action path in package.json (#6479)
  chore(deps-dev): bump turbo from 2.8.10 to 2.9.6 (#6499)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants