From ea903fea5922038facc406a3c33e509b88680097 Mon Sep 17 00:00:00 2001 From: dominikg Date: Wed, 24 Sep 2025 16:45:05 +0200 Subject: [PATCH 1/4] chore: move pnpm settings to workspace.yml and enable minimumReleaseAge 3 days in pnpm and renovate --- .github/renovate.json5 | 3 +++ package.json | 36 +----------------------------------- pnpm-lock.yaml | 28 ++++++++++++++++++---------- pnpm-workspace.yaml | 39 ++++++++++++++++++++++++++++++++++++++- 4 files changed, 60 insertions(+), 46 deletions(-) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index 70980d821..b3c9d45e6 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -13,6 +13,9 @@ { "matchDepTypes": ["peerDependencies","engines"], "enabled": false + }, { + "matchDatasources": ["npm"], + "minimumReleaseAge": "3 days" } ] } diff --git a/package.json b/package.json index 37a4dd99b..a0655ee26 100644 --- a/package.json +++ b/package.json @@ -64,43 +64,9 @@ "*": "prettier --cache --ignore-path .gitignore --ignore-unknown --write", "packages/*/src/**/*": "pnpm generate:types-staged" }, - "packageManager": "pnpm@10.16.1", + "packageManager": "pnpm@10.17.1", "engines": { "pnpm": "^10.2.0", "node": "^20.19 || ^22.12 || >=24" - }, - "pnpm": { - "overrides": { - "@sveltejs/kit": "$@sveltejs/kit", - "@sveltejs/kit>@sveltejs/vite-plugin-svelte": "workspace:^", - "@sveltejs/vite-plugin-svelte": "workspace:^", - "@sveltejs/vite-plugin-svelte-inspector": "workspace:^", - "svelte": "$svelte", - "vite": "$vite", - "@types/node@<=20.12.0": "20.19.14", - "send@<0.19.0": "^0.19.1", - "@sveltejs/kit>cookie@<0.7.0": "^0.7.2", - "vite-plugin-inspect": "/home/dominikg/develop/vite-plugin-inspect" - }, - "onlyBuiltDependencies": [ - "esbuild" - ], - "ignoredBuiltDependencies": [ - "@parcel/watcher", - "carbon-components-svelte", - "es5-ext", - "svelte-preprocess" - ], - "auditConfig": { - "ignoreGhsas": [ - "GHSA-67mh-4wv8-2f99", - "GHSA-v6h2-p8h4-qcjw" - ] - }, - "updateConfig": { - "ignoreDependencies": [ - "execa" - ] - } } } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 7a9d50f0c..6bae9fb07 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -14,7 +14,6 @@ overrides: '@types/node@<=20.12.0': 20.19.14 send@<0.19.0: ^0.19.1 '@sveltejs/kit>cookie@<0.7.0': ^0.7.2 - vite-plugin-inspect: /home/dominikg/develop/vite-plugin-inspect importers: @@ -1299,36 +1298,42 @@ packages: engines: {node: '>= 10.0.0'} cpu: [arm] os: [linux] + libc: [glibc] '@parcel/watcher-linux-arm-musl@2.5.1': resolution: {integrity: sha512-6E+m/Mm1t1yhB8X412stiKFG3XykmgdIOqhjWj+VL8oHkKABfu/gjFj8DvLrYVHSBNC+/u5PeNrujiSQ1zwd1Q==} engines: {node: '>= 10.0.0'} cpu: [arm] os: [linux] + libc: [musl] '@parcel/watcher-linux-arm64-glibc@2.5.1': resolution: {integrity: sha512-LrGp+f02yU3BN9A+DGuY3v3bmnFUggAITBGriZHUREfNEzZh/GO06FF5u2kx8x+GBEUYfyTGamol4j3m9ANe8w==} engines: {node: '>= 10.0.0'} cpu: [arm64] os: [linux] + libc: [glibc] '@parcel/watcher-linux-arm64-musl@2.5.1': resolution: {integrity: sha512-cFOjABi92pMYRXS7AcQv9/M1YuKRw8SZniCDw0ssQb/noPkRzA+HBDkwmyOJYp5wXcsTrhxO0zq1U11cK9jsFg==} engines: {node: '>= 10.0.0'} cpu: [arm64] os: [linux] + libc: [musl] '@parcel/watcher-linux-x64-glibc@2.5.1': resolution: {integrity: sha512-GcESn8NZySmfwlTsIur+49yDqSny2IhPeZfXunQi48DMugKeZ7uy1FX83pO0X22sHntJ4Ub+9k34XQCX+oHt2A==} engines: {node: '>= 10.0.0'} cpu: [x64] os: [linux] + libc: [glibc] '@parcel/watcher-linux-x64-musl@2.5.1': resolution: {integrity: sha512-n0E2EQbatQ3bXhcH2D1XIAANAcTZkQICBPVaxMeaCVBtOpBZpWJuf7LwyWPSBDITb7In8mqQgJ7gH8CILCURXg==} engines: {node: '>= 10.0.0'} cpu: [x64] os: [linux] + libc: [musl] '@parcel/watcher-win32-arm64@2.5.1': resolution: {integrity: sha512-RFzklRvmc3PkjKjry3hLF9wD7ppR4AKcWNzH7kXR7GUe0Igb3Nz8fyPwtZCSquGrhU5HhUNDr/mKBqj7tqA2Vw==} @@ -1437,56 +1442,67 @@ packages: resolution: {integrity: sha512-54v4okehwl5TaSIkpp97rAHGp7t3ghinRd/vyC1iXqXMfjYUTm7TfYmCzXDoHUPTTf36L8pr0E7YsD3CfB3ZDg==} cpu: [arm] os: [linux] + libc: [glibc] '@rollup/rollup-linux-arm-musleabihf@4.50.1': resolution: {integrity: sha512-p/LaFyajPN/0PUHjv8TNyxLiA7RwmDoVY3flXHPSzqrGcIp/c2FjwPPP5++u87DGHtw+5kSH5bCJz0mvXngYxw==} cpu: [arm] os: [linux] + libc: [musl] '@rollup/rollup-linux-arm64-gnu@4.50.1': resolution: {integrity: sha512-2AbMhFFkTo6Ptna1zO7kAXXDLi7H9fGTbVaIq2AAYO7yzcAsuTNWPHhb2aTA6GPiP+JXh85Y8CiS54iZoj4opw==} cpu: [arm64] os: [linux] + libc: [glibc] '@rollup/rollup-linux-arm64-musl@4.50.1': resolution: {integrity: sha512-Cgef+5aZwuvesQNw9eX7g19FfKX5/pQRIyhoXLCiBOrWopjo7ycfB292TX9MDcDijiuIJlx1IzJz3IoCPfqs9w==} cpu: [arm64] os: [linux] + libc: [musl] '@rollup/rollup-linux-loongarch64-gnu@4.50.1': resolution: {integrity: sha512-RPhTwWMzpYYrHrJAS7CmpdtHNKtt2Ueo+BlLBjfZEhYBhK00OsEqM08/7f+eohiF6poe0YRDDd8nAvwtE/Y62Q==} cpu: [loong64] os: [linux] + libc: [glibc] '@rollup/rollup-linux-ppc64-gnu@4.50.1': resolution: {integrity: sha512-eSGMVQw9iekut62O7eBdbiccRguuDgiPMsw++BVUg+1K7WjZXHOg/YOT9SWMzPZA+w98G+Fa1VqJgHZOHHnY0Q==} cpu: [ppc64] os: [linux] + libc: [glibc] '@rollup/rollup-linux-riscv64-gnu@4.50.1': resolution: {integrity: sha512-S208ojx8a4ciIPrLgazF6AgdcNJzQE4+S9rsmOmDJkusvctii+ZvEuIC4v/xFqzbuP8yDjn73oBlNDgF6YGSXQ==} cpu: [riscv64] os: [linux] + libc: [glibc] '@rollup/rollup-linux-riscv64-musl@4.50.1': resolution: {integrity: sha512-3Ag8Ls1ggqkGUvSZWYcdgFwriy2lWo+0QlYgEFra/5JGtAd6C5Hw59oojx1DeqcA2Wds2ayRgvJ4qxVTzCHgzg==} cpu: [riscv64] os: [linux] + libc: [musl] '@rollup/rollup-linux-s390x-gnu@4.50.1': resolution: {integrity: sha512-t9YrKfaxCYe7l7ldFERE1BRg/4TATxIg+YieHQ966jwvo7ddHJxPj9cNFWLAzhkVsbBvNA4qTbPVNsZKBO4NSg==} cpu: [s390x] os: [linux] + libc: [glibc] '@rollup/rollup-linux-x64-gnu@4.50.1': resolution: {integrity: sha512-MCgtFB2+SVNuQmmjHf+wfI4CMxy3Tk8XjA5Z//A0AKD7QXUYFMQcns91K6dEHBvZPCnhJSyDWLApk40Iq/H3tA==} cpu: [x64] os: [linux] + libc: [glibc] '@rollup/rollup-linux-x64-musl@4.50.1': resolution: {integrity: sha512-nEvqG+0jeRmqaUMuwzlfMKwcIVffy/9KGbAGyoa26iu6eSngAYQ512bMXuqqPrlTyfqdlB9FVINs93j534UJrg==} cpu: [x64] os: [linux] + libc: [musl] '@rollup/rollup-openharmony-arm64@4.50.1': resolution: {integrity: sha512-RDsLm+phmT3MJd9SNxA9MNuEAO/J2fhW8GXk62G/B4G7sLVumNFbRwDL6v5NrESb48k+QMqdGbHgEtfU0LCpbA==} @@ -4428,14 +4444,6 @@ snapshots: chai: 5.2.0 tinyrainbow: 2.0.0 - '@vitest/mocker@3.2.4(vite@7.1.5(@types/node@20.19.14)(sass@1.92.1)(stylus@0.64.0)(yaml@2.8.1))': - dependencies: - '@vitest/spy': 3.2.4 - estree-walker: 3.0.3 - magic-string: 0.30.19 - optionalDependencies: - vite: 7.1.5(@types/node@20.19.14)(sass@1.92.1)(stylus@0.64.0)(yaml@2.8.1) - '@vitest/mocker@3.2.4(vite@7.1.5(@types/node@22.18.3)(sass@1.92.1)(stylus@0.64.0)(yaml@2.8.1))': dependencies: '@vitest/spy': 3.2.4 @@ -6217,7 +6225,7 @@ snapshots: dependencies: '@types/chai': 5.2.2 '@vitest/expect': 3.2.4 - '@vitest/mocker': 3.2.4(vite@7.1.5(@types/node@20.19.14)(sass@1.92.1)(stylus@0.64.0)(yaml@2.8.1)) + '@vitest/mocker': 3.2.4(vite@7.1.5(@types/node@22.18.3)(sass@1.92.1)(stylus@0.64.0)(yaml@2.8.1)) '@vitest/pretty-format': 3.2.4 '@vitest/runner': 3.2.4 '@vitest/snapshot': 3.2.4 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 74cf1ced2..5624dcaba 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -3,7 +3,44 @@ packages: - 'packages/e2e-tests/*' - 'packages/e2e-tests/_test_dependencies/*' -# settings +# package resolution settings +minimumReleaseAge: 4320 #3 days + +minimumReleaseAgeExclude: + - 'vite' + - 'create-vite' + - '@vitejs/*' + - 'svelte' + - '@sveltejs/*' + +onlyBuiltDependencies: + - esbuild +ignoredBuiltDependencies: + - '@parcel/watcher' + - 'carbon-components-svelte' + - 'es5-ext' + - 'svelte-preprocess' + +auditConfig: + ignoreGhsas: + - 'GHSA-67mh-4wv8-2f99' + - 'GHSA-v6h2-p8h4-qcjw' + +updateConfig: + ignoreDependencies: + - 'execa' # v9 is larger than v8 and doesn't work the same, we only use it in testing + +overrides: + # $ prefixed package names take their version from root package.json - this is like catalogs but without them + '@sveltejs/kit': '$@sveltejs/kit' + '@sveltejs/kit>@sveltejs/vite-plugin-svelte': 'workspace:^' + '@sveltejs/vite-plugin-svelte': 'workspace:^' + '@sveltejs/vite-plugin-svelte-inspector': 'workspace:^' + 'svelte': '$svelte' + 'vite': '$vite' + '@types/node@<=20.12.0': '20.19.14' + 'send@<0.19.0': '^0.19.1' + '@sveltejs/kit>cookie@<0.7.0': '^0.7.2' #cli output aggregateOutput: true From 1bd3a7a5a1c337c576177acc3e2397a77573e095 Mon Sep 17 00:00:00 2001 From: dominikg Date: Wed, 24 Sep 2025 16:50:26 +0200 Subject: [PATCH 2/4] fix: allow immediate update of rolldown-vite related deps --- pnpm-workspace.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 5624dcaba..fc62d363a 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -12,6 +12,9 @@ minimumReleaseAgeExclude: - '@vitejs/*' - 'svelte' - '@sveltejs/*' + - 'rolldown-vite' + - 'rolldown' + - '@oxc-project/runtime' onlyBuiltDependencies: - esbuild From 0d4aa9672c139646503520c383d961901d92acee Mon Sep 17 00:00:00 2001 From: dominikg Date: Wed, 24 Sep 2025 16:52:32 +0200 Subject: [PATCH 3/4] fix: allow all of oxc-project because of rolldown --- pnpm-workspace.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index fc62d363a..6ea4b3fad 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -14,7 +14,7 @@ minimumReleaseAgeExclude: - '@sveltejs/*' - 'rolldown-vite' - 'rolldown' - - '@oxc-project/runtime' + - '@oxc-project/*' onlyBuiltDependencies: - esbuild From 385c29385efb9dcd9947910eee6c6dc1b9eb6b01 Mon Sep 17 00:00:00 2001 From: dominikg Date: Wed, 24 Sep 2025 21:04:35 +0200 Subject: [PATCH 4/4] one more --- pnpm-workspace.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 6ea4b3fad..48cd3fd1b 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -14,6 +14,7 @@ minimumReleaseAgeExclude: - '@sveltejs/*' - 'rolldown-vite' - 'rolldown' + - '@rolldown/*' - '@oxc-project/*' onlyBuiltDependencies: