Skip to content

[codex] update pnpm pin#6

Merged
xdanger merged 1 commit into
mainfrom
codex/dependency-sweep-pnpm-10-33-3
May 5, 2026
Merged

[codex] update pnpm pin#6
xdanger merged 1 commit into
mainfrom
codex/dependency-sweep-pnpm-10-33-3

Conversation

@xdanger

@xdanger xdanger commented May 5, 2026

Copy link
Copy Markdown
Member

Summary

  • updated the project packageManager pin from pnpm@10.33.0 to pnpm@10.33.3
  • left declared dependencies and pnpm-lock.yaml unchanged because the direct dependency sweep found no available upgrades

Dependency scan

  • Current repo versions before changes: @eslint/js@10.0.1, autocorrect-node@2.14.0, eslint@10.3.0, globals@17.6.0, husky@9.1.7, lint-staged@16.4.0, prettier@3.8.3, typescript-eslint@8.59.2, pnpm@10.33.0
  • pnpm outdated --format json reported no outdated declared dependencies after the sweep ({})
  • pnpm update --lockfile-only produced no lockfile changes

Risk

  • Breaking-change risk is low: this is a patch-level pnpm runtime pin update and does not change the dependency graph
  • No migration is expected; consumers only need Corepack to hydrate the pinned pnpm version

Validation

  • pnpm install --frozen-lockfile
  • pnpm run lint
  • git diff --check

- 🔧 keep dependency graph unchanged while using the latest patch pnpm release
@github-actions github-actions Bot requested a review from Copilot May 5, 2026 08:57
@xdanger xdanger removed the request for review from Copilot May 5, 2026 08:57
@xdanger xdanger added the dependencies Pull requests that update a dependency file label May 5, 2026
@xdanger xdanger requested a review from Copilot May 5, 2026 08:58
@xdanger xdanger self-assigned this May 5, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repository’s Corepack packageManager pin to a newer patch release of pnpm to keep the toolchain current without changing the dependency graph.

Changes:

  • Bumped packageManager from pnpm@10.33.0 to pnpm@10.33.3 (including the integrity hash) in package.json.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@greptile-apps

greptile-apps Bot commented May 5, 2026

Copy link
Copy Markdown

Greptile Summary

package.json 中的 packageManager 字段从 pnpm@10.33.0 升级到 pnpm@10.33.3,同时更新了对应的 SHA512 完整性哈希,未涉及任何依赖项或 lockfile 的变动。

  • package.jsonpackageManager 字段中版本号与 SHA512 哈希均已同步更新,格式正确(128 位十六进制字符 = 512 位)。
  • 依赖项(devDependencies)与 pnpm-lock.yaml 保持不变,变更范围极小。

Confidence Score: 5/5

此 PR 仅更新 pnpm 的 runtime pin,不涉及任何依赖项或 lockfile,可安全合并。

变更范围极小,仅修改一行 packageManager 字段,SHA512 哈希格式正确(128 位十六进制),Corepack 会在运行时自动验证哈希完整性,若哈希有误会明确报错而非静默失败。

无需特别关注的文件。

Important Files Changed

Filename Overview
package.json 将 packageManager 的 pnpm pin 从 10.33.0 更新至 10.33.3,并同步更新了 SHA512 完整性哈希

Sequence Diagram

sequenceDiagram
    participant Dev as 开发者
    participant Corepack
    participant npm as npm Registry
    participant pnpm as pnpm@10.33.3

    Dev->>Corepack: 执行 pnpm 命令
    Corepack->>Corepack: 读取 package.json#packageManager
    Corepack->>npm: 下载 pnpm@10.33.3 tarball
    npm-->>Corepack: 返回 tarball
    Corepack->>Corepack: 验证 SHA512 哈希
    alt 哈希匹配
        Corepack->>pnpm: 激活 pnpm@10.33.3
        pnpm-->>Dev: 正常运行
    else 哈希不匹配
        Corepack-->>Dev: 报错,拒绝执行
    end
Loading

Reviews (1): Last reviewed commit: "🔧 chore(deps): update pnpm pin" | Re-trigger Greptile

@xdanger xdanger merged commit acb8675 into main May 5, 2026
9 checks passed
@xdanger xdanger deleted the codex/dependency-sweep-pnpm-10-33-3 branch May 5, 2026 09:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants