feat: migrate all dependencies to pnpm catalog

.github/workflows/release.yml

@@ -126,6 +126,8 @@ jobs:
           node-version: 24
           registry-url: https://registry.npmjs.org
 
+      - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
+
       - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           name: cli-build
@@ -134,14 +136,14 @@ jobs:
       - name: Publish to npm
         working-directory: apps/cli
         run: |
-          flags="--provenance --access public"
+          flags="--provenance --access public --no-git-checks"
           if [ "$PRERELEASE" = "true" ]; then
             flags="$flags --tag rc"
           fi
           if [ "$DRY_RUN" = "true" ]; then
             flags="$flags --dry-run"
           fi
-          npm publish $flags
+          pnpm publish $flags
 
       - name: Push tag
         if: inputs.environment != 'dry-run'

AGENTS.md

@@ -437,7 +437,7 @@ validation, internal library code) where a `ValiError` is the appropriate error
 ## Tooling
 
 - **Runtime**: Node.js 24 (managed by mise)
-- **Package manager**: pnpm (corepack-enabled)
+- **Package manager**: pnpm (corepack-enabled). External dependency versions are managed via [pnpm catalog](https://pnpm.io/catalogs) in `pnpm-workspace.yaml`. When adding dependencies, use `pnpm add --save-catalog <pkg>` (or `pnpm add --save-catalog -D <pkg>` for devDependencies) — this automatically adds the version to the catalog in `pnpm-workspace.yaml` and writes `"catalog:"` in `package.json`. Do not write version ranges directly in `package.json`.
 - **Linter**: oxlint (with plugins: import, typescript, unicorn)
 - **Formatter**: oxfmt
 - **Type checker**: `tsc --noEmit` per package (via Turborepo)

apps/cli/package.json

@@ -37,22 +37,22 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "backlog-js": "^0.16.0",
-    "commander": "^14.0.3",
-    "consola": "^3.4.2",
-    "is-unicode-supported": "^2.1.0",
-    "open": "^11.0.0",
-    "valibot": "^1.2.0"
+    "backlog-js": "catalog:",
+    "commander": "catalog:",
+    "consola": "catalog:",
+    "is-unicode-supported": "catalog:",
+    "open": "catalog:",
+    "valibot": "catalog:"
   },
   "devDependencies": {
     "@repo/backlog-utils": "workspace:*",
     "@repo/cli-utils": "workspace:*",
     "@repo/config": "workspace:*",
     "@repo/test-utils": "workspace:*",
     "@repo/tsconfigs": "workspace:*",
-    "tsx": "^4.19.0",
-    "unbuild": "^3.5.0",
-    "vitest": "^4.0.18"
+    "tsx": "catalog:",
+    "unbuild": "catalog:",
+    "vitest": "catalog:"
   },
   "engines": {
     "node": ">=20.18"

apps/docs/package.json

@@ -9,15 +9,15 @@
     "preview": "astro preview"
   },
   "dependencies": {
-    "@astrojs/starlight": "^0.37.6",
-    "astro": "^5.5.0",
-    "marked": "^17.0.3",
-    "remark-definition-list": "^2.0.0",
-    "sharp": "^0.34.5"
+    "@astrojs/starlight": "catalog:",
+    "astro": "catalog:",
+    "marked": "catalog:",
+    "remark-definition-list": "catalog:",
+    "sharp": "catalog:"
   },
   "devDependencies": {
-    "commander": "^14.0.3",
-    "jiti": "^2.6.1",
-    "starlight-links-validator": "^0.19.2"
+    "commander": "catalog:",
+    "jiti": "catalog:",
+    "starlight-links-validator": "catalog:"
   }
 }

package.json

@@ -15,15 +15,15 @@
     "test": "vitest run"
   },
   "devDependencies": {
-    "@types/node": "^25.3.3",
-    "@vitest/coverage-v8": "^4.0.18",
-    "lefthook": "^2.1.2",
-    "oxfmt": "^0.36.0",
-    "oxlint": "^1.51.0",
-    "oxlint-tsgolint": "^0.16.0",
-    "turbo": "^2.8.13",
-    "typescript": "6.0.0-dev.20260301",
-    "vitest": "^4.0.18"
+    "@types/node": "catalog:",
+    "@vitest/coverage-v8": "catalog:",
+    "lefthook": "catalog:",
+    "oxfmt": "catalog:",
+    "oxlint": "catalog:",
+    "oxlint-tsgolint": "catalog:",
+    "turbo": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
   },
   "packageManager": "pnpm@10.30.3",
   "pnpm": {

packages/backlog-utils/package.json

@@ -11,15 +11,15 @@
   "dependencies": {
     "@repo/cli-utils": "workspace:*",
     "@repo/config": "workspace:*",
-    "backlog-js": "^0.16.0",
-    "consola": "^3.4.2",
-    "open": "^11.0.0",
-    "undici": "^7.22.0",
-    "valibot": "^1.2.0"
+    "backlog-js": "catalog:",
+    "consola": "catalog:",
+    "open": "catalog:",
+    "undici": "catalog:",
+    "valibot": "catalog:"
   },
   "devDependencies": {
     "@repo/test-utils": "workspace:*",
     "@repo/tsconfigs": "workspace:*",
-    "vitest": "^4.0.18"
+    "vitest": "catalog:"
   }
 }

packages/cli-utils/package.json

@@ -9,13 +9,13 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "consola": "^3.4.2",
-    "string-width": "^8.2.0",
-    "valibot": "^1.2.0"
+    "consola": "catalog:",
+    "string-width": "catalog:",
+    "valibot": "catalog:"
   },
   "devDependencies": {
     "@repo/test-utils": "workspace:*",
     "@repo/tsconfigs": "workspace:*",
-    "vitest": "^4.0.18"
+    "vitest": "catalog:"
   }
 }

packages/config/package.json

@@ -10,13 +10,13 @@
   },
   "dependencies": {
     "@repo/cli-utils": "workspace:*",
-    "consola": "^3.4.2",
-    "rc9": "^3.0.0",
-    "valibot": "^1.0.0"
+    "consola": "catalog:",
+    "rc9": "catalog:",
+    "valibot": "catalog:"
   },
   "devDependencies": {
     "@repo/test-utils": "workspace:*",
     "@repo/tsconfigs": "workspace:*",
-    "vitest": "^4.0.18"
+    "vitest": "catalog:"
   }
 }

packages/tsconfigs/package.json

@@ -6,11 +6,11 @@
     "./base.json": "./base.json"
   },
   "dependencies": {
-    "@types/node": "^25.3.3"
+    "@types/node": "catalog:"
   },
   "devDependencies": {
-    "@tsconfig/node-lts": "^24.0.0",
-    "@tsconfig/node-ts": "^23.6.4",
-    "typescript": "^6.0.0-dev.20260301"
+    "@tsconfig/node-lts": "catalog:",
+    "@tsconfig/node-ts": "catalog:",
+    "typescript": "catalog:"
   }
 }