Skip to content

chore: pnpm#1527

Merged
igalklebanov merged 12 commits intokysely-org:masterfrom
igalklebanov:pnpm
Jul 29, 2025
Merged

chore: pnpm#1527
igalklebanov merged 12 commits intokysely-org:masterfrom
igalklebanov:pnpm

Conversation

@igalklebanov
Copy link
Copy Markdown
Member

@igalklebanov igalklebanov commented Jul 28, 2025

Hey 👋

We're replacing npm with pnpm to have better protection from postinstall scripts which are a common attack vector by assholes nowadays - trojans, harddrive wipes, etc.

Introduces a pnpm lockfile to ensure consistent dependency
versions across different environments.

Also updates the pnpm version to 10.14.0 and adds a pnpm
workspace file to specify exclusively built packages, enhancing
project stability and reproducibility.
@vercel
Copy link
Copy Markdown

vercel Bot commented Jul 28, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
kysely ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 29, 2025 1:43am

Refreshes the contributing guidelines with instructions for setting up the project using Corepack and pnpm.

This change ensures contributors use the correct package manager version and streamlines the dependency installation process.
It also encourages immediate reporting of potential security concerns related to postinstall scripts.
Switches from npm to pnpm for dependency management in the preview workflow.

This change improves build speed and efficiency by leveraging pnpm's
symlinking approach for package installation.

Also updates watched files to include deno config and docker compose file.
Switches from npm to pnpm for package management. This change aims to improve dependency resolution speed and disk space utilization. Updates various script commands in package.json to use pnpm.
Removes the `@types/chai-subset` dependency as it is no longer needed.
@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented Jul 28, 2025

kysely_koa_example

npm i https://pkg.pr.new/kysely-org/kysely@1527

commit: 6d5aa11

Updates the GitHub Actions workflows to use pnpm
instead of npm for package management. This change
also updates the cache key and install commands.
It also removes the `.renovaterc.json` file from the
watched files, and adds `.node-version` to the test workflow.
Removes the `chai-subset` dependency, as its functionality is now built into Chai.

Adds a new test suite specifically for Cloudflare Workers, including `hono` and `wrangler` as dependencies.

Includes the test suite directory into the workspace.
@vercel
Copy link
Copy Markdown

vercel Bot commented Jul 29, 2025

Deployment failed with the following error:

The provided GitHub repository does not contain the requested branch or commit reference. Please ensure the repository is not empty.

@igalklebanov igalklebanov marked this pull request as ready for review July 29, 2025 01:50
@igalklebanov igalklebanov merged commit 5ac1910 into kysely-org:master Jul 29, 2025
28 checks passed
@igalklebanov igalklebanov deleted the pnpm branch July 29, 2025 02:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant