js: yarn v1 to pnpm (rollout stage 2 of 3, prod builds with pnpm)

.github/CODEOWNERS

@@ -133,7 +133,7 @@ tsconfig.*                                               @getsentry/owners-js-bu
 webpack.config.*                                         @getsentry/owners-js-build
 .volta.json                                              @getsentry/owners-js-deps
 package.json                                             @getsentry/owners-js-deps
-yarn.lock                                                @getsentry/owners-js-deps
+pnpm-lock.yaml                                           @getsentry/owners-js-deps
 
 ## Design
 /static/app/icons/                                       @getsentry/design

.github/workflows/acceptance.yml

@@ -74,6 +74,10 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: Step configurations
         id: config
         run: |
@@ -84,18 +88,18 @@ jobs:
         uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ${{ steps.config.outputs.webpack-path }}
-          key: ${{ runner.os }}-v2-webpack-cache-${{ hashFiles('rspack.config.ts', 'yarn.lock', 'package.json') }}
+          key: ${{ runner.os }}-v2-webpack-cache-${{ hashFiles('rspack.config.ts', 'pnpm-lock.yaml', 'package.json') }}
 
       - name: node_modules cache
         uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         id: nodemodulescache
         with:
           path: node_modules
-          key: ${{ runner.os }}-node-modules-${{ hashFiles('yarn.lock', 'api-docs/yarn.lock', '.volta.json') }}
+          key: ${{ runner.os }}-node-modules-${{ hashFiles('pnpm-lock.yaml', 'api-docs/pnpm-lock.yaml', '.volta.json') }}
 
       - name: Install Javascript Dependencies
         if: steps.nodemodulescache.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       - name: webpack
         env:
@@ -104,7 +108,7 @@ jobs:
           CODECOV_ENABLE_BA: ${{ needs.files-changed.outputs.frontend_all == 'true'}}
           GH_COMMIT_SHA: ${{ github.event.pull_request.head.sha }}
         run: |
-          yarn build-acceptance
+          pnpm run build-acceptance
 
       - name: Build chartcuterie configuration module
         run: |

.github/workflows/backend.yml

@@ -52,6 +52,10 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: Setup sentry python env
         uses: ./.github/actions/setup-sentry
         id: setup
@@ -63,7 +67,7 @@ jobs:
         # conflicting deps when running scripts locally
         # see: https://github.com/getsentry/sentry/pull/32328/files
         run: |
-          yarn add ts-node && make test-api-docs
+          pnpm add ts-node && make test-api-docs
 
       - name: Inspect failure
         if: failure()

.github/workflows/frontend.yml

@@ -52,16 +52,20 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: node_modules cache
         uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         id: nodemodulescache
         with:
           path: node_modules
-          key: ${{ runner.os }}-node-modules-${{ hashFiles('yarn.lock', 'api-docs/yarn.lock', '.volta.json') }}
+          key: ${{ runner.os }}-node-modules-${{ hashFiles('pnpm-lock.yaml', 'api-docs/pnpm-lock.yaml', '.volta.json') }}
 
       - name: Install Javascript Dependencies
         if: steps.nodemodulescache.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       # Setup custom tsc matcher, see https://github.com/actions/setup-node/issues/97
       - name: setup matchers
@@ -71,7 +75,7 @@ jobs:
 
       - name: tsc
         id: tsc
-        run: yarn tsc -p tsconfig.json
+        run: pnpm exec tsc -p tsconfig.json
 
   eslint:
     if: needs.files-changed.outputs.frontend_all == 'true'
@@ -86,16 +90,20 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: node_modules cache
-        uses: actions/cache@v4.2.0
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         id: nodemodulescache
         with:
           path: node_modules
-          key: ${{ runner.os }}-node-modules-${{ hashFiles('yarn.lock', 'api-docs/yarn.lock', '.volta.json') }}
+          key: ${{ runner.os }}-node-modules-${{ hashFiles('pnpm-lock.yaml', 'api-docs/pnpm-lock.yaml', '.volta.json') }}
 
       - name: Install Javascript Dependencies
         if: steps.nodemodulescache.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       # Setup custom eslint matcher, see https://github.com/actions/setup-node/issues/97
       - name: setup matchers
@@ -105,7 +113,7 @@ jobs:
 
       - name: eslint
         id: eslint
-        run: yarn run lint:js
+        run: pnpm run lint:js
 
   knip:
     if: needs.files-changed.outputs.frontend_all == 'true'
@@ -120,16 +128,20 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: node_modules cache
-        uses: actions/cache@v4.2.0
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         id: nodemodulescache
         with:
           path: node_modules
-          key: ${{ runner.os }}-node-modules-${{ hashFiles('yarn.lock', 'api-docs/yarn.lock', '.volta.json') }}
+          key: ${{ runner.os }}-node-modules-${{ hashFiles('pnpm-lock.yaml', 'api-docs/pnpm-lock.yaml', '.volta.json') }}
 
       - name: Install Javascript Dependencies
         if: steps.nodemodulescache.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       # Setup custom eslint matcher, see https://github.com/actions/setup-node/issues/97
       - name: setup matchers
@@ -139,11 +151,11 @@ jobs:
 
       - name: knip
         id: knip
-        run: yarn run knip
+        run: pnpm run knip
 
       - name: knip-prod
         id: knip-prod
-        run: yarn run knip:prod
+        run: pnpm run knip:prod
 
   frontend-jest-tests:
     if: needs.files-changed.outputs.testable_rules_changed == 'true' || needs.files-changed.outputs.testable_modified == 'true'
@@ -171,16 +183,20 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: node_modules cache
         uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         id: nodemodulescache
         with:
           path: node_modules
-          key: ${{ runner.os }}-node-modules-${{ hashFiles('yarn.lock', 'api-docs/yarn.lock', '.volta.json') }}
+          key: ${{ runner.os }}-node-modules-${{ hashFiles('pnpm-lock.yaml', 'api-docs/pnpm-lock.yaml', '.volta.json') }}
 
       - name: Install Javascript Dependencies
         if: steps.nodemodulescache.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       - name: jest
         env:
@@ -200,9 +216,9 @@ jobs:
           DEBUG_PRINT_LIMIT: 0
         run: |
           if [ ${{ github.ref }} = 'refs/heads/master' ]; then
-            yarn test-ci --forceExit --coverage
+            pnpm run test-ci --forceExit --coverage
           else
-            yarn test-ci --forceExit
+            pnpm run test-ci --forceExit
           fi
 
       # We only upload coverage data for FE changes since it conflicts with

.github/workflows/jest-balance.yml

@@ -18,22 +18,26 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: node_modules cache
         uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         id: nodemodulescache
         with:
           path: node_modules
-          key: ${{ runner.os }}-node-modules-${{ hashFiles('yarn.lock', 'api-docs/yarn.lock', '.volta.json') }}
+          key: ${{ runner.os }}-node-modules-${{ hashFiles('pnpm-lock.yaml', 'api-docs/pnpm-lock.yaml', '.volta.json') }}
 
       - name: Install Javascript Dependencies
         if: steps.nodemodulescache.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       - name: jest balancer
         env:
           GITHUB_PR_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
           GITHUB_PR_REF: ${{ github.event.pull_request.head.ref || github.ref }}
-        run: JEST_TEST_BALANCER=1 yarn test-ci
+        run: JEST_TEST_BALANCER=1 pnpm run test-ci
 
       - name: Create Pull Request
         uses: peter-evans/create-pull-request@b4d51739f96fca8047ad065eccef63442d8e99f7 # v4.2.0

.github/workflows/openapi-diff.yml

@@ -46,13 +46,17 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: Build OpenAPI Derefed JSON
         if: steps.changes.outputs.api_docs == 'true'
         # install ts-node for ts build scripts to execute properly without potentially installing
         # conflicting deps when running scripts locally
         # see: https://github.com/getsentry/sentry/pull/32328/files
         run: |
-          yarn add ts-node && make build-api-docs
+          pnpm add ts-node && make build-api-docs
 
       - name: Compare OpenAPI Derefed JSON
         if: steps.changes.outputs.api_docs == 'true'

.github/workflows/openapi.yml

@@ -50,13 +50,17 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: Build OpenAPI Derefed JSON
         if: steps.changes.outputs.api_docs == 'true'
         # install ts-node for ts build scripts to execute properly without potentially installing
         # conflicting deps when running scripts locally
         # see: https://github.com/getsentry/sentry/pull/32328/files
         run: |
-          yarn add ts-node && make build-api-docs
+          pnpm add ts-node && make build-api-docs
 
       - name: Build RPC method schema
         if: steps.changes.outputs.api_docs == 'true'

.github/workflows/pre-commit.yml

@@ -58,16 +58,20 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: node_modules cache
         uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         id: nodemodulescache
         with:
           path: node_modules
-          key: ${{ runner.os }}-node-modules-${{ hashFiles('yarn.lock', 'api-docs/yarn.lock', '.volta.json') }}
+          key: ${{ runner.os }}-node-modules-${{ hashFiles('pnpm-lock.yaml', 'api-docs/pnpm-lock.yaml', '.volta.json') }}
 
       - name: Install Javascript Dependencies
         if: steps.nodemodulescache.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       - uses: getsentry/action-setup-venv@3a832a9604b3e1a4202ae559248f26867b467cc7 # v2.1.1
         with:

.github/workflows/self-hosted.yml

@@ -29,6 +29,10 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - uses: getsentry/action-setup-venv@3a832a9604b3e1a4202ae559248f26867b467cc7 # v2.1.1
         with:
           python-version: 3.13.1
@@ -52,11 +56,11 @@ jobs:
         id: nodemodulescache
         with:
           path: node_modules
-          key: ${{ runner.os }}-self-hosted-node-modules-${{ hashFiles('yarn.lock', '.volta.json') }}
+          key: ${{ runner.os }}-self-hosted-node-modules-${{ hashFiles('pnpm-lock.yaml', '.volta.json') }}
 
       - name: Install Javascript Dependencies
         if: steps.nodemodulescache.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile --production
+        run: pnpm install --frozen-lockfile --production
 
       - run: |
           python3 -m tools.fast_editable --path .

.github/workflows/sync-labels.yml

@@ -28,12 +28,16 @@ jobs:
         with:
           node-version-file: '.volta.json'
 
+      - uses: pnpm/action-setup@36de12bed180fa130ed56a35e7344f2fa7a820ab # v4
+        with:
+          version: 10.10.0
+
       - name: Install github-label-sync
-        run: yarn global add github-label-sync@2.2.0
+        run: pnpm add github-label-sync@2.2.0
 
       - name: Run github-label-sync
         run: |
-          github-label-sync \
+          pnpm exec github-label-sync \
             --access-token ${{ secrets.GITHUB_TOKEN }} \
             --labels .github/labels.yml \
             ${{ github.event_name == 'pull_request' && '--dry-run' || '' }} \

.gitignore

@@ -51,7 +51,6 @@ Gemfile.lock
 coverage.xml
 junit.xml
 *.codestyle.xml
-package-lock.json
 .webpack.meta
 pip-wheel-metadata/
 Brewfile.lock.json
@@ -64,3 +63,5 @@ model-manifest.json
 .yalc/
 yalc.lock
 ngrok.yml
+package-lock.json
+yarn.lock

.npmrc

@@ -1 +1,2 @@
-package-lock=false
+lockfile=true
+shamefully-hoist=true

.vercelignore

@@ -17,7 +17,7 @@
 !config
 !config/tsconfig.build.json
 !webpack.config.js
-!yarn.lock
+!pnpm-lock.yaml
 !tests
 !fixtures
 !fixtures/integration-docs

.volta.json

@@ -1,6 +1,5 @@
 {
   "volta": {
-    "node": "22.11.0",
-    "yarn": "1.22.22"
+    "node": "22.11.0"
   }
 }