chore: merge dev into main - #25
Merged
Merged
Conversation
pnpm 12 is the Rust rewrite, stable since 2026-08-26 and installed from the next-12 tag because npm's latest still points at the 11 line. None of its breaking changes touch this estate: no repository has a git dependency to re-resolve, --resolution-only is used nowhere, and Node 16 is long gone. It runs here alone on purpose. pnpm 12 records itself in the lockfile, which turns pnpm-lock.yaml into a two-document YAML carrying @pnpm/exe.* for every platform — a format seven days old that Dependabot may or may not parse, and Dependabot is what keeps the SHA pins fresh in twenty-five repositories. Reverting one repository is cheap; reverting twenty-five is not. BREAKING CHANGE: this repository now requires pnpm 12.
kirchDev/app's dev deploy failed on the Forge server: .local/share/pnpm/.tools/pnpm/12.2.1/bin/pnpm: 4: Syntax error: ")" unexpected pnpm 12's launcher is not POSIX-sh compatible and the deploy runs it through the server's /bin/sh, which is dash. This repository was the pilot, and the pilot was the wrong shape: it has no deploy, so the only paths pnpm 12 was ever proven on were CI and Dependabot. A pilot has to cover the riskiest consumer, not the most convenient one.
The Rust rewrite, stable since 2026-08-26. kirchDev/app is deliberately excluded and stays on 11.25.0: it is the only repository in the estate that deploys to a server we run, and pnpm 12 breaks exactly that path. When pnpm provisions ITSELF from the packageManager field it follows the `bin` entry of the `pnpm` npm package, which ships a prose placeholder that a preinstall script is supposed to replace with the native binary — and no preinstall runs during that provisioning. The placeholder's fourth line ends in `)`, so dash reports `Syntax error: ")" unexpected`. Upstream: pnpm/pnpm#14346. Every other path is unaffected and was verified: corepack keeps its own cache and starts bin/pnpm.mjs through Node, pnpm/action-setup installs regularly with scripts, and Dependabot read the two-document lockfile and produced a full dependency snapshot from it.
TitusKirch
marked this pull request as ready for review
September 2, 2026 18:57
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated rollup PR for changes accumulated on
dev. Mark ready when you want it to land — and use a merge commit, not squash, so individualfeat:/fix:commits stay visible to release-please.