chore: migrate from yarn to npm

- Replace yarn.lock with package-lock.json
- Convert `resolutions` to npm `overrides` in package.json
- Drop yarn-deduplicate devDependency and remove it from the `prepare` script
- Flip .npmrc to package-lock=true so npm maintains the lockfile
- Untrack package-lock.json/yarn-error.log in .gitignore
- Switch CI workflows (testing, deploy) and the webpack-persistent-cache action to npm
- Update CONTRIBUTING.md to instruct contributors to use npm
- Update the module-federation example (lerna npmClient, README) to use npm

User-facing webpack documentation in src/content/** still mentions yarn
because webpack itself supports yarn / Yarn PnP for end users.

Author: claude

.github/CONTRIBUTING.md

@@ -8,8 +8,7 @@ page please create an issue first.
 
 Start by ensuring that you have Node.js installed and forking the repository:
 
-- Install [Node.js][1] if you have not already.
-- Install [Yarn][13] if you have not already. Yarn is an alternative to npm, and it is required for building the site as we use `yarn` specific features like `resolutions` which are not available in other package managers like `pnpm`.
+- Install [Node.js][1] if you have not already. npm ships with Node.js, so no separate package manager installation is required.
 - Fork the **webpack.js.org** repo from [the main repository][2].
 - `git clone <your-clone-url> && cd webpack.js.org`
 
@@ -21,18 +20,18 @@ Start by ensuring that you have Node.js installed and forking the repository:
 
 Once you are in the project directory, run the following commands:
 
-- `yarn` to pull all dependencies.
-- `GITHUB_TOKEN=<your-token-here> yarn fetch-all` - Fetches all updated website content from GitHub.
-- `yarn build` to create a production version of the site.
-- `yarn start` to develop on a local webpack-dev-server: [localhost:3000][3].
+- `npm install` to pull all dependencies.
+- `GITHUB_TOKEN=<your-token-here> npm run fetch-all` - Fetches all updated website content from GitHub.
+- `npm run build` to create a production version of the site.
+- `npm start` to develop on a local webpack-dev-server: [localhost:3000][3].
 
 **Note:** The `fetch` and `fetch-repos` commands must be run before building the site as they populate necessary data for the build process.
 
-> NOTE: run `yarn fetch-repos` and then `yarn fetch` before running `yarn start` command for the first time
+> NOTE: run `npm run fetch-repos` and then `npm run fetch` before running `npm start` command for the first time
 
-- `yarn fetch` to retrieve external documentation/data.
+- `npm run fetch` to retrieve external documentation/data.
 
-The final command, `yarn fetch`, is optional as both `yarn build` and `yarn start`
+The final command, `npm run fetch`, is optional as both `npm run build` and `npm start`
 will do this automatically. This step pulls in documentation for loaders/plugins hosted
 in separate repositories such as the ones found in the [webpack-contrib][4] organization.
 See the `package.json` for the full list of `scripts`.
@@ -60,13 +59,13 @@ you've [installed the plugin][7] if your text editor needs one.
 Run the full test suite (lint + Jest) with:
 
 ```bash
-yarn test
+npm test
 ```
 
 To run only Jest tests:
 
 ```bash
-yarn jest
+npm run jest
 ```
 
 To update snapshots after intentional UI changes:
@@ -148,5 +147,4 @@ any time spent fixing typos or clarifying sections in the documentation.
 [9]: https://help.github.com/articles/proposing-changes-to-your-work-with-pull-requests/
 [10]: http://conventionalcommits.org/
 [11]: https://github.com/conventional-changelog/standard-version
-[13]: https://yarnpkg.com/lang/en/docs/install
 [14]: https://dev.to/matks/what-it-means-to-rebase-a-pull-request-submitted-on-github-5717

.github/actions/webpack-persistent-cache/action.yml

@@ -13,7 +13,7 @@ runs:
       id: build-webpack-persistent-cache
       with:
         path: node_modules/.cache
-        key: build-${{ hashFiles('**/webpack.*.mjs') }}-${{ hashFiles('**/yarn.lock') }}
+        key: build-${{ hashFiles('**/webpack.*.mjs') }}-${{ hashFiles('**/package-lock.json') }}
         restore-keys: |-
-          build-${{ hashFiles('**/webpack.*.mjs') }}-${{ hashFiles('**/yarn.lock') }}
+          build-${{ hashFiles('**/webpack.*.mjs') }}-${{ hashFiles('**/package-lock.json') }}
           build-${{ hashFiles('**/webpack.*.mjs') }}-

.github/workflows/deploy.yml

@@ -21,18 +21,18 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ matrix.node-version }}
-          cache: yarn
+          cache: npm
 
       - name: Enable webpack persistent caching
         uses: ./.github/actions/webpack-persistent-cache
 
-      - run: yarn --frozen-lockfile
+      - run: npm ci
       - name: Build site
-        run: yarn build
+        run: npm run build
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
           OPENCOLLECTIVE_API_KEY: ${{secrets.OPENCOLLECTIVE_API_KEY}}
-      - run: yarn lint:links
+      - run: npm run lint:links
 
       - name: Deploy
         uses: JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # v4.8.0

.github/workflows/testing.yml

@@ -22,10 +22,10 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ matrix.node-version }}
-          cache: yarn
+          cache: npm
 
-      - run: yarn --frozen-lockfile
-      - run: yarn jest
+      - run: npm ci
+      - run: npm run jest
 
   lint:
     name: Lint
@@ -41,12 +41,12 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ matrix.node-version }}
-          cache: yarn
+          cache: npm
 
-      - run: yarn --frozen-lockfile
-      - run: yarn lint:js
-      - run: yarn lint:prettier
-      - run: yarn lint:markdown
+      - run: npm ci
+      - run: npm run lint:js
+      - run: npm run lint:prettier
+      - run: npm run lint:markdown
 
   proseLint:
     name: Proselint
@@ -62,7 +62,7 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ matrix.node-version }}
-          cache: yarn
+          cache: npm
 
       - name: Install MDX Parser
         run: npm install -g mdx2vast
@@ -88,9 +88,9 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ matrix.node-version }}
-          cache: yarn
+          cache: npm
 
-      - run: yarn --frozen-lockfile
+      - run: npm ci
 
       - name: Enable webpack persistent caching
         uses: ./.github/actions/webpack-persistent-cache
@@ -100,10 +100,10 @@ jobs:
         with:
           browser: chrome
           config-file: cypress.config.js
-          build: yarn build
-          start: yarn serve-dist
-          command: yarn cypress:run
+          build: npm run build
+          start: npm run serve-dist
+          command: npm run cypress:run
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
-      - run: yarn lint:links
+      - run: npm run lint:links

.gitignore

@@ -9,8 +9,6 @@ src/content/contribute/Governance-*.mdx
 .idea
 .DS_Store
 npm-debug.log
-yarn-error.log
-package-lock.json
 .cache
 internal-links.tap
 stats.json

.npmrc

@@ -1 +1 @@
-package-lock=false
+package-lock=true

examples/module-federation/README.md

@@ -5,8 +5,8 @@
 Run the following commands in the root directory.
 
 ```bash
-yarn
-yarn start
+npm install
+npm start
 ```
 
 Both `app1` and `app2` are independently deployed apps:

examples/module-federation/lerna.json

@@ -1,5 +1,5 @@
 {
   "version": "1.0.0",
-  "npmClient": "yarn",
+  "npmClient": "npm",
   "useWorkspaces": true
 }