From 7b6fe4023f7174f2b3075f940419b1450e43e704 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?M=C3=A9ril=20Pilon?= Date: Thu, 15 Oct 2026 04:09:46 +0100 Subject: [PATCH] Keep pnpm-lock.yaml a single document so Dependabot sees dependencies --- pnpm-lock.yaml | 158 -------------------------------------------- pnpm-workspace.yaml | 6 ++ 2 files changed, 6 insertions(+), 158 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 78d33f6..81e15c5 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -1,161 +1,3 @@ ---- -lockfileVersion: '9.0' - -importers: - - .: - configDependencies: {} - packageManagerDependencies: - pnpm: - specifier: 12.8.2 - version: 12.8.2 - -packages: - - '@pnpm/exe.android-arm64@12.8.2': - resolution: {integrity: sha512-b0gzsJQuxYCX1Pokkf9z+lvajgb5bqBExjmw4kj8H4Bwd2AfH8TkQVxDtrHGptEdkuwokEUSERdpNbRok2cc6Q==} - cpu: [arm64] - os: [android] - - '@pnpm/exe.android-x64@12.8.2': - resolution: {integrity: sha512-j7dzfFMc0XxwhbFvslb06r51tdIlaQQpHUcIrpM7b4ACRYr+LgrpQIB7fI8SdlqPLvsFrrzNYIZXLQN6Kc+xbQ==} - cpu: [x64] - os: [android] - - '@pnpm/exe.darwin-arm64@12.8.2': - resolution: {integrity: sha512-J3cmPRwOVXnPspYeQ3OwwrR8Di9GWRA1aBWD/T1go/4KiD5dvwmE1Q0nW7+F2vAz7FRDRt/91/ZaAujdLX8PIA==} - cpu: [arm64] - os: [darwin] - - '@pnpm/exe.darwin-x64@12.8.2': - resolution: {integrity: sha512-+6UGMD/E7CfzYPqePOkVtWSpDeP7YV5L2k2IwDJykYZ4HH17aYUNGH1FHJSiBTZ/GjLAtdxy0X625sj/wm0w8w==} - cpu: [x64] - os: [darwin] - - '@pnpm/exe.freebsd-x64@12.8.2': - resolution: {integrity: sha512-5fg6lDYuxaPSZawglnhtZMUJI+tgJxybI1DbrKDpQ1v6jitEOptzyMIsrisKVg1sWwO9lbIW+OnQC7OC29ZbOA==} - cpu: [x64] - os: [freebsd] - - '@pnpm/exe.linux-arm64-musl@12.8.2': - resolution: {integrity: sha512-HLOlwfubM+29gs++BDUFejTb09E9aN+4EVzOANU1V9BtoUpY0itBKXeLcxUVTtWwtfAdTUJwmgK6sNgZHC8xBg==} - cpu: [arm64] - os: [linux] - libc: [musl] - - '@pnpm/exe.linux-arm64@12.8.2': - resolution: {integrity: sha512-Q7wIusa83KRHg8MV4hbZq1Ua8pgiET2hJc6U49cd1BWxqob3lwiPg90WLZ5qqYvXM4yytLUSxsMTQlsTWjgsrA==} - cpu: [arm64] - os: [linux] - libc: [glibc] - - '@pnpm/exe.linux-ppc64@12.8.2': - resolution: {integrity: sha512-QQhbXz7q/YK/xkTarU4wv4++aZjVOTZ8BrgLopuJkGdFNtJHJWeXA8cm/SLXir4KTb+pMyc/+Ece44pobEMbkA==} - cpu: [ppc64] - os: [linux] - libc: [glibc] - - '@pnpm/exe.linux-riscv64@12.8.2': - resolution: {integrity: sha512-gfoFW48o3SHMM6hsTKYwobtGKzMR8y+8A9fuXcc0YMdJubR3BmCtzyUa98IWcxM+kE0mKwQYvzxjeaAVppX7qA==} - cpu: [riscv64] - os: [linux] - libc: [glibc] - - '@pnpm/exe.linux-s390x@12.8.2': - resolution: {integrity: sha512-O786sSXtm9Qs5BiUQMKaOGU9n7/UwGzYSTAP2+ltaNMeOTrJSkl9QszOMzlK31/JfTnV4F5dg9PQN2pWdW4aOQ==} - cpu: [s390x] - os: [linux] - libc: [glibc] - - '@pnpm/exe.linux-x64-musl@12.8.2': - resolution: {integrity: sha512-GJ9ZkN9RVlu1LGRYTFjp7c/QAbSYaaVzplP00m4ijKdiv+fGeINeIETBR5MdUZ8biPZf7MJFoKHhMnz88JIj5A==} - cpu: [x64] - os: [linux] - libc: [musl] - - '@pnpm/exe.linux-x64@12.8.2': - resolution: {integrity: sha512-2rjP1HbpSMeSyfbP2CcGG0L2+r+9gHKAjYCZZQj/3SdQBywugJ9aa5OWyPp6yz0Z5xd7tKdUtQJh09TnZOUhwA==} - cpu: [x64] - os: [linux] - libc: [glibc] - - '@pnpm/exe.win32-arm64@12.8.2': - resolution: {integrity: sha512-B1bszoDtTn4o6VGHAE/wrcjceW0zUsxIakTguK3vgbZZ4t6oCv+0d100gJzjmynxg9mHmBXH35JT87SGzyXE2g==} - cpu: [arm64] - os: [win32] - - '@pnpm/exe.win32-x64@12.8.2': - resolution: {integrity: sha512-rOZPUUTU1PHop5dsBQcdQZCnRp7Nz5/v0fnRJkL/4kgKPRONwzD809YwQ/s4mBdSgRY5CcGaYrzwOerp+pFbRg==} - cpu: [x64] - os: [win32] - - pnpm@12.8.2: - resolution: {integrity: sha512-pZQWeWY9lSxfDsw4upivmLTcAblXgDVPaJTy+HOXPO8vfimJ19s+5Tk5OK4h9i/ga832hdR13a2CmmIJXSuLEQ==} - engines: {node: '>=18.*'} - hasBin: true - -snapshots: - - '@pnpm/exe.android-arm64@12.8.2': - optional: true - - '@pnpm/exe.android-x64@12.8.2': - optional: true - - '@pnpm/exe.darwin-arm64@12.8.2': - optional: true - - '@pnpm/exe.darwin-x64@12.8.2': - optional: true - - '@pnpm/exe.freebsd-x64@12.8.2': - optional: true - - '@pnpm/exe.linux-arm64-musl@12.8.2': - optional: true - - '@pnpm/exe.linux-arm64@12.8.2': - optional: true - - '@pnpm/exe.linux-ppc64@12.8.2': - optional: true - - '@pnpm/exe.linux-riscv64@12.8.2': - optional: true - - '@pnpm/exe.linux-s390x@12.8.2': - optional: true - - '@pnpm/exe.linux-x64-musl@12.8.2': - optional: true - - '@pnpm/exe.linux-x64@12.8.2': - optional: true - - '@pnpm/exe.win32-arm64@12.8.2': - optional: true - - '@pnpm/exe.win32-x64@12.8.2': - optional: true - - pnpm@12.8.2: - optionalDependencies: - '@pnpm/exe.android-arm64': 12.8.2 - '@pnpm/exe.android-x64': 12.8.2 - '@pnpm/exe.darwin-arm64': 12.8.2 - '@pnpm/exe.darwin-x64': 12.8.2 - '@pnpm/exe.freebsd-x64': 12.8.2 - '@pnpm/exe.linux-arm64': 12.8.2 - '@pnpm/exe.linux-arm64-musl': 12.8.2 - '@pnpm/exe.linux-ppc64': 12.8.2 - '@pnpm/exe.linux-riscv64': 12.8.2 - '@pnpm/exe.linux-s390x': 12.8.2 - '@pnpm/exe.linux-x64': 12.8.2 - '@pnpm/exe.linux-x64-musl': 12.8.2 - '@pnpm/exe.win32-arm64': 12.8.2 - '@pnpm/exe.win32-x64': 12.8.2 - ---- lockfileVersion: '9.0' settings: diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 479aa4b..2d61005 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,2 +1,8 @@ # 7 days. Keep at or below the Dependabot cooldown, or pnpm rejects its updates. minimumReleaseAge: 10080 + +# pnpm 12 writes its own pinned version as a first YAML document in +# pnpm-lock.yaml, and GitHub's dependency graph reads only that document, so +# Dependabot sees no dependencies. CI installs the pinned pnpm through +# pnpm/setup. https://github.com/dependabot/dependabot-core/issues/15904 +pmOnFail: ignore