chore: migrate from pnpm to npm#47
Merged
Merged
Conversation
Switch package manager to resolve a known Dependabot bug where pnpm projects with GitHub Packages registries route all package lookups through the private registry, causing @types/* resolution failures (dependabot/dependabot-core#8242). With npm, Dependabot correctly uses locked_registry from the lockfile for per-package routing. Changes: - Replace pnpm-lock.yaml with package-lock.json - Remove .npmrc (CI workflows, Dependabot and Capawesome Cloud handle GitHub Packages auth separately) - Update CI workflows to use npm (keep GitHub Packages auth step) - Configure Dependabot registries for GitHub Packages - Update husky, capawesome cloud config, vite chunk splitting - Pin vite to ~7.2.4 (7.3.x pulls esbuild 0.27 which breaks @vitejs/plugin-legacy) - Pin vitest to ~4.0 (4.1.x has a regression appending &v= hash to module paths, vitest-dev/vitest#9887) - Update all documentation
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
@types/*resolution failures (dependabot/dependabot-core#8242)locked_registryfrom the lockfile for per-package routingviteto~7.2.4(7.3.x brings esbuild 0.27 which breaks@vitejs/plugin-legacy)vitestto~4.0to avoid a 4.1.x regression where the module evaluator appends&v=<hash>to file pathsWhat changed
pnpm-lock.yaml→package-lock.json.npmrcremoved (CI, Dependabot, and Capawesome Cloud handle GitHub Packages auth separately)pnpm/action-setupremoved,pnpm install→npm ci(auth step kept)~/.npmrcauth independencyInstallCommandpnpm lint-staged→npx lint-stagedmanualChunks(removed.pnpm/path handling)cap syncfor flatnode_modules/Supersedes #45 and #46.