豆豆友情提示:这是一个非官方 GitHub 代理镜像,主要用于网络测试或访问加速。请勿在此进行登录、注册或处理任何敏感信息。进行这些操作请务必访问官方网站 github.com。 Raw 内容也通过此代理提供。
Skip to content

add support for pnpm lockfile v9.0 mapping to pnpm v10#13088

Merged
a-schur merged 6 commits intodependabot:mainfrom
a-schur:fix-dependabot-ignores-pnpm-version-constraint
Sep 29, 2025
Merged

add support for pnpm lockfile v9.0 mapping to pnpm v10#13088
a-schur merged 6 commits intodependabot:mainfrom
a-schur:fix-dependabot-ignores-pnpm-version-constraint

Conversation

@a-schur
Copy link
Copy Markdown
Contributor

@a-schur a-schur commented Sep 16, 2025

What are you trying to accomplish?

respect the version constraint and install the correct version of pnpm, dont fall back to the lockfile version guessed version

new constants of pnpm versions need to be added and mapping logic needs updating

this is a fix for 13045

Anything you want to highlight for special attention from reviewers?

How will you know you've accomplished your goal?

Added support for pnpm lockfile version 9.0 created a test that verifies pnpm lockfile version 9.0 maps to pnpm runtime version 10.

Added test fixtures - created a test fixture file (pnpm_lock_9.0_content.json) that simulates a GitHub API response containing a pnpm-lock.yaml file with lockfileVersion 9.0.

Extended version mapping logic test ensures that when Dependabot encounters a pnpm-lock.yaml file with lockfileVersion 9.0, it correctly determines it needs to use pnpm version 10+ to handle the update process.

Checklist

  • I have run the complete test suite to ensure all tests and linters pass.
  • I have thoroughly tested my code changes to ensure they work as expected, including adding additional tests for new functionality.
  • I have written clear and descriptive commit messages.
  • I have provided a detailed description of the changes in the pull request, including the problem it addresses, how it fixes the problem, and any relevant details about the implementation.
  • I have ensured that the code is well-documented and easy to understand.

@a-schur a-schur requested a review from a team as a code owner September 16, 2025 17:08
@kbukum1 kbukum1 marked this pull request as draft September 22, 2025 19:43
@a-schur a-schur changed the title adds new pnpm major versions, and update mapping logic for version co… add support for pnpm lockfile v9.0 mapping to pnpm v10 Sep 22, 2025
@a-schur a-schur marked this pull request as ready for review September 22, 2025 20:10
@a-schur a-schur enabled auto-merge (squash) September 29, 2025 18:30
@a-schur a-schur merged commit 6e50ef3 into dependabot:main Sep 29, 2025
57 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants