Skip to content

fix(deps): unpin all dependencies#8171

Draft
serhalp wants to merge 4 commits intomainfrom
fix/unpin-all
Draft

fix(deps): unpin all dependencies#8171
serhalp wants to merge 4 commits intomainfrom
fix/unpin-all

Conversation

@serhalp
Copy link
Copy Markdown
Member

@serhalp serhalp commented Apr 17, 2026

Summary

We were pinning deps to partially mimic the published npm-shrinkwrap.json for package managers like yarn and pnpm that don't support it.

Since we stopped shipping the shrinkwrap in #8163, the pinning is no longer relevant.

This will help users' dependency trees get deduped much further.

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 17, 2026

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 8508ad2e-41bf-4298-bac8-edaad710221c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/unpin-all

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 17, 2026

📊 Benchmark results

Comparing with 9bccaf9

  • Dependency count: 1,126 ⬆️ 5.77% increase vs. 9bccaf9
  • Package size: 387 MB ⬆️ 8.42% increase vs. 9bccaf9
  • Number of ts-expect-error directives: 356 (no change)

@XhmikosR
Copy link
Copy Markdown
Contributor

This would need to happen in the other netlify packages too. It's clear that the duplicate packages increase by a lot...

But assuming you guys really want to reduce your deps tree, this is a must change. Next, you'd need to start finding other places that deps need deduplication. v25.0.0 has ~100 duplicate packages. With this PR the number will increase, as it seems. Remember, updating deps blindly to the latest version, is not the right approach all the time, if one cares about the deps tree/count. Unless you can do it across all your dependencies, which isn't realistic...

Just my 2 cents as a netlify-cli user who has reported the issue for years :)

That is exactly the reason why I started contributing to dependents (precinct dependency, etc) packages in the first place.

serhalp added 3 commits April 20, 2026 13:08
We were pinning deps to partially mimic the published npm-shrinkwrap.json for package managers like
yarn and pnpm that don't support it. Since we stopped shipping the shrinkwrap in #8163, the pinning
is no longer relevant.

This will help users' dependency trees get heavily deduped as well.
`npm update` after unpinning
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants