From 715adf5886f38e38a2b3f04974d41c8901f76352 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Przemys=C5=82aw=20=C5=BBydek?= Date: Thu, 2 Jul 2026 11:31:12 +0200 Subject: [PATCH 1/4] chore: remove explicit pnpm version specification from workflows --- .github/workflows/analyze-commits.yml | 2 -- .github/workflows/build-typescript-project.yml | 2 -- .github/workflows/check-dist.yml | 2 -- .github/workflows/coverage-diff.yml | 2 -- .github/workflows/docs-and-coverage.yml | 2 -- .github/workflows/preview-changeset-release.yml | 2 -- .github/workflows/release-dx-packages.yml | 2 -- .github/workflows/release-sdk-changesets.yml | 3 --- .github/workflows/release-typescript-project.yml | 2 -- .github/workflows/update-server-side-sdk-schema.yml | 1 - 10 files changed, 20 deletions(-) diff --git a/.github/workflows/analyze-commits.yml b/.github/workflows/analyze-commits.yml index 3066d7b..10980f0 100644 --- a/.github/workflows/analyze-commits.yml +++ b/.github/workflows/analyze-commits.yml @@ -70,8 +70,6 @@ jobs: - if: ${{ env.PACKAGE_MANAGER == 'pnpm' }} name: 'Install pnpm' uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - with: - version: 9 - name: 'Install latest node version' uses: actions/setup-node@v6 with: diff --git a/.github/workflows/build-typescript-project.yml b/.github/workflows/build-typescript-project.yml index 4b972aa..addf087 100644 --- a/.github/workflows/build-typescript-project.yml +++ b/.github/workflows/build-typescript-project.yml @@ -64,8 +64,6 @@ jobs: - if: ${{ env.PACKAGE_MANAGER == 'pnpm' }} name: 'Install pnpm' uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - with: - version: 9 - name: 'Install latest node version' uses: actions/setup-node@v6 diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml index 42d40c8..dc65634 100644 --- a/.github/workflows/check-dist.yml +++ b/.github/workflows/check-dist.yml @@ -26,8 +26,6 @@ jobs: - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - with: - version: 9 - name: Install dependencies run: pnpm install --frozen-lockfile diff --git a/.github/workflows/coverage-diff.yml b/.github/workflows/coverage-diff.yml index 6a20c8a..88e8a39 100644 --- a/.github/workflows/coverage-diff.yml +++ b/.github/workflows/coverage-diff.yml @@ -43,8 +43,6 @@ jobs: - if: ${{ env.PACKAGE_MANAGER == 'pnpm' }} name: 'Install pnpm' uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - with: - version: 9 - name: 'Install latest node version' uses: actions/setup-node@v6 diff --git a/.github/workflows/docs-and-coverage.yml b/.github/workflows/docs-and-coverage.yml index de9ede1..f313f0a 100644 --- a/.github/workflows/docs-and-coverage.yml +++ b/.github/workflows/docs-and-coverage.yml @@ -46,8 +46,6 @@ jobs: - if: ${{ env.PACKAGE_MANAGER == 'pnpm' }} name: 'Install pnpm' uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - with: - version: 9 - name: 'Install latest node version' uses: actions/setup-node@v6 diff --git a/.github/workflows/preview-changeset-release.yml b/.github/workflows/preview-changeset-release.yml index b0c1b0f..39dd9cc 100644 --- a/.github/workflows/preview-changeset-release.yml +++ b/.github/workflows/preview-changeset-release.yml @@ -42,8 +42,6 @@ jobs: - if: ${{ env.PACKAGE_MANAGER == 'pnpm' }} name: 'Install pnpm' uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - with: - version: 9 - name: 'Install latest node version' uses: actions/setup-node@v6 diff --git a/.github/workflows/release-dx-packages.yml b/.github/workflows/release-dx-packages.yml index 68e4079..3dbba6e 100644 --- a/.github/workflows/release-dx-packages.yml +++ b/.github/workflows/release-dx-packages.yml @@ -23,8 +23,6 @@ jobs: - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - with: - version: 9 - name: Setup Node.js uses: actions/setup-node@v6 diff --git a/.github/workflows/release-sdk-changesets.yml b/.github/workflows/release-sdk-changesets.yml index df0b483..a39e17e 100644 --- a/.github/workflows/release-sdk-changesets.yml +++ b/.github/workflows/release-sdk-changesets.yml @@ -89,7 +89,6 @@ jobs: name: 'Setup pnpm' uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: - version: 9 run_install: 'true' - if: ${{ env.PACKAGE_MANAGER == 'yarn' }} @@ -141,7 +140,6 @@ jobs: if: ${{ inputs.language != 'node' }} uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: - version: 9 run_install: 'true' - name: 'Install changesets' @@ -195,7 +193,6 @@ jobs: if: ${{ inputs.language != 'node' }} uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: - version: 9 run_install: 'true' # Ensure npm 11.5.1 or later is installed for trusted publishing diff --git a/.github/workflows/release-typescript-project.yml b/.github/workflows/release-typescript-project.yml index a9f91ca..f2a755c 100644 --- a/.github/workflows/release-typescript-project.yml +++ b/.github/workflows/release-typescript-project.yml @@ -89,8 +89,6 @@ jobs: - if: ${{ env.PACKAGE_MANAGER == 'pnpm' }} name: 'Install pnpm' uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - with: - version: 9 - name: 'Install latest node version' uses: actions/setup-node@v6 diff --git a/.github/workflows/update-server-side-sdk-schema.yml b/.github/workflows/update-server-side-sdk-schema.yml index 2f68c8c..1c755ca 100644 --- a/.github/workflows/update-server-side-sdk-schema.yml +++ b/.github/workflows/update-server-side-sdk-schema.yml @@ -133,7 +133,6 @@ jobs: - name: 'Setup pnpm' uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: - version: 9 run_install: true - name: 'Install Node' From 53709d1361efe53f884a201312c81bb80c0ac4a3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Przemys=C5=82aw=20=C5=BBydek?= Date: Thu, 2 Jul 2026 11:34:36 +0200 Subject: [PATCH 2/4] chore: specify pnpm version in package.json --- package.json | 1 + 1 file changed, 1 insertion(+) diff --git a/package.json b/package.json index 5ba9d81..ae8b79a 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,7 @@ { "name": "@fingerprintjs/dx-team-toolkit", "version": "1.0.0", + "packageManager": "pnpm@11.5.1", "private": true, "description": "DX Team shared code and configurations like GitHub Actions reusable workflows.", "scripts": { From a9ad7ad6099940fd357790be6d5e984a951e51ae Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Przemys=C5=82aw=20=C5=BBydek?= Date: Thu, 2 Jul 2026 11:35:54 +0200 Subject: [PATCH 3/4] chore: update pnpm workspace configuration and lockfile with deprecation warnings --- pnpm-lock.yaml | 12 +++++++++--- pnpm-workspace.yaml | 2 ++ 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 1d59d45..d9bb507 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -1874,6 +1874,7 @@ packages: git-raw-commits@2.0.11: resolution: {integrity: sha512-VnctFhw+xfj8Va1xtfEqCUD2XDrbAPSJx+hSrE5K7fGdjZruW7XV+QOrN7LF/RJyvspRiD2I0asWsxFp0ya26A==} engines: {node: '>=10'} + deprecated: Deprecated and no longer maintained. Use @conventional-changelog/git-client instead. hasBin: true glob-parent@5.1.2: @@ -1886,16 +1887,18 @@ packages: glob@10.4.5: resolution: {integrity: sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==} + deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me hasBin: true glob@11.0.0: resolution: {integrity: sha512-9UiX/Bl6J2yaBbxKoEBRm4Cipxgok8kQYcOPEhScPwebu2I0HoQOuYdIO6S3hLuWoZgpDpwQZMzTFxgpkyT76g==} engines: {node: 20 || >=22} + deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me hasBin: true glob@7.2.3: resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==} - deprecated: Glob versions prior to v9 are no longer supported + deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me global-dirs@0.1.1: resolution: {integrity: sha512-NknMLn7F2J7aflwFOlGdNIuCDpN3VGoSoB+aap3KABFWbHVn1TCgFC+np23J8W2BiZbjfEw3BFBycSMv1AFblg==} @@ -2017,6 +2020,7 @@ packages: inflight@1.0.6: resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==} + deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful. inherits@2.0.4: resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==} @@ -2939,6 +2943,7 @@ packages: source-map@0.8.0-beta.0: resolution: {integrity: sha512-2ymg6oRBpebeZi9UUNsgQ89bhx01TcTkmNTGnNO88imTmbSgy4nfujrgVEFKWpMTEGA11EDkTt7mqObTPdigIA==} engines: {node: '>= 8'} + deprecated: The work that was done in this beta branch won't be included in future versions spawndamnit@2.0.0: resolution: {integrity: sha512-j4JKEcncSjFlqIwU5L/rp2N5SIPsdxaRsIv678+TZxZ0SRDJTm8JrxJMjE/XuiEZNEir3S8l0Fa3Ke339WI4qA==} @@ -3276,6 +3281,7 @@ packages: uuid@8.3.2: resolution: {integrity: sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==} + deprecated: uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028). hasBin: true v8-compile-cache-lib@3.0.1: @@ -3836,7 +3842,7 @@ snapshots: '@types/node': 20.5.1 chalk: 4.1.2 cosmiconfig: 8.3.6(typescript@5.4.2) - cosmiconfig-typescript-loader: 4.4.0(@types/node@20.5.1)(cosmiconfig@8.3.6(typescript@5.4.2))(ts-node@10.9.2(@types/node@20.5.1)(typescript@5.4.2))(typescript@5.4.2) + cosmiconfig-typescript-loader: 4.4.0(@types/node@20.5.1)(cosmiconfig@8.3.6(typescript@5.4.2))(ts-node@10.9.2(@types/node@20.11.27)(typescript@5.4.2))(typescript@5.4.2) lodash.isplainobject: 4.0.6 lodash.merge: 4.6.2 lodash.uniq: 4.5.0 @@ -4929,7 +4935,7 @@ snapshots: core-util-is@1.0.3: {} - cosmiconfig-typescript-loader@4.4.0(@types/node@20.5.1)(cosmiconfig@8.3.6(typescript@5.4.2))(ts-node@10.9.2(@types/node@20.5.1)(typescript@5.4.2))(typescript@5.4.2): + cosmiconfig-typescript-loader@4.4.0(@types/node@20.5.1)(cosmiconfig@8.3.6(typescript@5.4.2))(ts-node@10.9.2(@types/node@20.11.27)(typescript@5.4.2))(typescript@5.4.2): dependencies: '@types/node': 20.5.1 cosmiconfig: 8.3.6(typescript@5.4.2) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 18ec407..578b40f 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,2 +1,4 @@ packages: - 'packages/*' +allowBuilds: + esbuild: true From 5b00fe478c6a3e7c47b51b5fa80bc21964a76005 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Przemys=C5=82aw=20=C5=BBydek?= Date: Thu, 2 Jul 2026 13:20:19 +0200 Subject: [PATCH 4/4] chore: update pnpm version in package.json with SHA checksum --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index ae8b79a..390e496 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "@fingerprintjs/dx-team-toolkit", "version": "1.0.0", - "packageManager": "pnpm@11.5.1", + "packageManager": "pnpm@11.5.0+sha512.dbfcc4f81cf48597afd4bc391ffdf12c11f1a9fb83a395bfa6b0a2d9cc2fd8ffebafdb1ccbd529632153f793904c2615b7f09fe1a345473fd1c35845172a8eb1", "private": true, "description": "DX Team shared code and configurations like GitHub Actions reusable workflows.", "scripts": {