Skip to content

chore(deps): bump pnpm to 11.14.0 - #1032

Closed
ByronDWall wants to merge 1 commit into
mainfrom
chore/bump-pnpm-11.14.0
Closed

chore(deps): bump pnpm to 11.14.0#1032
ByronDWall wants to merge 1 commit into
mainfrom
chore/bump-pnpm-11.14.0

Conversation

@ByronDWall

Copy link
Copy Markdown
Contributor

What

Bumps the pinned packageManager field from pnpm@11.10.0 to:

pnpm@11.14.0+sha512.66c1ac4c7d4762d6d7dde44c7f3e5a73591ed0a0806e751d4ed32d4f004f25b2285a906b1fd8a9e3e621df3b4e2858bf88e50e0cf626bedbe977fe434a5caf85

Why

This matches the exact pnpm version already running cleanly in sibling repos (merchant-center-application-kit, nimbus, ui-kit, merchant-center-frontend).

When pinned to 11.10.0, this repo predates two confirmed, since-fixed upstream pnpm memory regressions:

There is no known active OOM crash evidence in this repo (unlike some siblings). This is a proactive bump to bring it in line with siblings and past both regressions.

Verification

Installed and used pnpm 11.14.0 via corepack use pnpm@11.14.0, then ran a full pnpm install (not --lockfile-only) to regenerate the lockfile against the new pnpm version.

  • pnpm-lock.yaml: no diff. Matches what sibling repos saw when they made the same bump.
  • pnpm typecheck (tsc --noEmit): passes, no errors.
  • pnpm build (preconstruct build): passes.
  • pnpm lint (jest --config jest.eslint.config.js): 2820 suites passed.
  • pnpm test (jest --config jest.test.config.js): 535 suites, 1691 tests, 42 snapshots, all passed.

Nothing broke as a result of the pnpm version bump.

Notes

  • Draft PR, not merged per convention. pnpm-lock.yaml unchanged, only package.json's packageManager field is touched.

Matches the pnpm version already running cleanly in sibling repos
(merchant-center-application-kit, nimbus, ui-kit,
merchant-center-frontend).

When on 11.10.0, two confirmed upstream memory regressions apply:
pnpm/pnpm#12868 (11 resolution using ~47% more memory than pnpm 10 on
a cold metadata cache), fixed by pnpm/pnpm#12870, and pnpm/pnpm#13077
(11.11+ OOMs by re-serializing full package metadata for concurrent
workspace cache hits), fixed by pnpm/pnpm#13079. This bump lands past
both fixes.

No active OOM crash evidence in this repo; this is a proactive bump
to bring it in line with siblings. pnpm-lock.yaml is unchanged.
@changeset-bot

changeset-bot Bot commented Aug 10, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 8ebc556

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@ByronDWall

Copy link
Copy Markdown
Contributor Author

Superseded by a consolidated PR targeting pnpm 11.17.0.

@ByronDWall ByronDWall closed this Aug 10, 2026
ByronDWall added a commit that referenced this pull request Aug 10, 2026
Bumps the packageManager field to pnpm 11.17.0, which stays below the
known bad pnpm deploy legacy regression introduced in 11.19.0/11.20.0
(pnpm/pnpm#13618). Adds a Renovate packageRule disabling pnpm updates
until pnpm/pnpm#13755 ships in a release, since that fix is merged but
not yet published.

Supersedes #1032 and #1034, which targeted an earlier pnpm version and
an earlier draft of this hold rule.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant