rules_js v3 BREAKING CHANGES

[jbedard]

BREAKING CHANGES for next major release of rules_js:

• remove pnpm < v9 (refactor: remove support for pnpm <v9 #2456)
• remove bazel v6 support (refactor: remove bazel6 support #2458)
• remove WORKSPACE support (refactor: remove WORKSPACE support #2455)
• remove npm_import/npm_package_store(dev) ([Bug]: dev = True support missing from pnpm version 9 lockfiles #2013, refactor: remove support for pnpm <v9 #2456)
• remove npm_translate_lock(root_package) (refactor: remove npm_translate_lock(root_package) #2552)
• remove npm_translate_lock(link_workspace) (refactor: remove npm_translate_lock(link_workspace) #2551)
• remove npm_translate_lock(addition_build_content) (refactor: remove npm_translate_lock(additional_file_contents) #2555)
• remove or simplify npm_link_package(root_package, link) (refactor: simplify npm_link_package() util macro #2553)
• replace aspect_bazel_lib v2 with bazel-lib v3 (refactor: directly use tar.bzl module #2460, refactor: upgrade aspect_bazel_lib to bazel_lib #2457, refactor: replace aspect_bazel_lib//lib:jq with jq.bzl module #2505, refactor: directly use yq.bzl module #2501)
• remove unsupported pnpm versions from npm/private/versions.bzl (refactor: remove support for pnpm <v9 #2456)
• remove use of pnpm lockfile requiresBuild (refactor: remove support for pnpm <v9 #2456)
• switch default pnpm to v10 (refactor: remove support for pnpm <v9 #2456 / chore: upgrade default pnpm to v9 #2220)
• remove legacy runfiles code for older versions of bazel (refactor: update legacy runfiles MANIFEST comment #2532)
• remove rules_nodejs v5 support (see: hasattr(nodeinfo, "node") calls, ...) (chore: upgrade rules_nodejs to 6.6 #2467)
• remove node < v? support (see use of abortcontroller-polyfill etc) (refactor: remove use of abortcontroller-polyfill for legacy node versions #2504, chore: remove node16+18 testing #2530)
• remove exclude_types_from_npm_packages_flag (refactor: remove exclude_types_from_npm_packages flag #2464)
• remove label_store - [v3] Remove label_store #2385
• resolve TODO(3.0) comments
• replace npm_translate_lock(dev/prod) with single "no dev" flag, see [Bug]: dev = True support missing from pnpm version 9 lockfiles #2013 (refactor: replace npm_translate_lock(prod,dev) with no_dev flag similar to no_optional #2487 ?)
• Remove ability to customize virtual store name #2196 (refactor: remove the ability to customize node_modules path  #2202)
• Simplify path existence checking refactor: improve the npmrc-exists handling #2399
• remove npm_translate_lock(defs_bzl_filename) - does this really need to be customized? (refactor: remove npm_translate_lock(defs_bzl_filename) #2466)
• replace yq_toolchain_prefix with a bzlmod alternative (refactor: directly use yq.bzl module #2501)
• delete npm_import(link_packages) - it seems to just duplicate content into the npm__${pkg}__${version}//${link_package}/{BUILD.bazel,package_json.bzl} with nothing link specific in it? these targets should be available via @npm//{link_package/:node_modules/{pkg}/package_json.bzl instead which has a more predictable location then the npm__${pkg}__${version} repo (refactor: remove npm_import(link_packages) #2486)
• simplify+reduce default runfiles (refactor: add option for optimized runfiles collection #1781 | refactor: do not duplicate js_library result JsInfo in runfiles #2615)
• enable by default yarn autoclean excludes by default (opt-in: feat: add opt-in default npm package excludes from yarn #2136) (feat: add package exclusion presets, enable default exclusion list #2652 or feat: enable default npm_exclude_package_contents #2636)

MAYBE:

• remove bazel v7 support
• simplify internal package store rules and make circular-dep handling opt-in? remove support for circular deps on packages with lifecycle hooks (this could remove some complications with /pkg vs /ref targets etc)?
• split npm_link_all_packages store vs link targets into different marcos: store targets (root only), :node_modules/{pkg} targets within each package directory such as @npm//my/project:defs.bzl
• switch reading pnpm settings from package.json to pnpm-workspace.yaml (followup to [FR]: support pnpm-workspace.yaml for pnpm settings #2469)

• remove npm_import(extract_full_archive)? used internally still, but no longer public

LARGE (but should be non-breaking):

• [FR]: provide select constraints for optional dependencies that define specific platforms #714 (feat: platform specific optional npm deps #2538)
• refactor: align pnpm package store with lockfile #2177 (partially breaking)
• double parsing of lockfiles ([Bug]: bzlmod extension performance #1563, perf: avoid double-parsing pnpm-lockfile #2480)
• do not use transitive_closure for packages with non-circular deps (refactor: do not use transitive_closure for lifecycle hooks #2559, refactor: only use transitive_closure when circular deps or lifecycle hooks exist #2543)
• cross-compilation_mode ([Bug]: BAZEL_BINDIR requirement prevents use of compilation_mode transitions #2581)
• esm sandboxing issues (fix: sandboxing and esm imports #2366)