Skip to content

[YUNIKORN-3292] move to pnpm 11 for web UI build#275

Closed
wilfred-s wants to merge 1 commit into
apache:masterfrom
wilfred-s:YUNIKORN-3292
Closed

[YUNIKORN-3292] move to pnpm 11 for web UI build#275
wilfred-s wants to merge 1 commit into
apache:masterfrom
wilfred-s:YUNIKORN-3292

Conversation

@wilfred-s

Copy link
Copy Markdown
Contributor

What is this PR for?

Change pnpm version to 11 in all files. Move "pnpm" and the overrides from package.json to the pnpm-workspace.yaml file. Block post install scripts for all dependencies. Clean up pnpm-lock.yaml.

Fix install of pnpm version in Dockerfile and local build script Move to the latest node 24 release.

What type of PR is it?

  • - Improvement

What is the Jira issue?

How should this be tested?

no functional changes, build must pass as do all tests

Change pnpm version to 11 in all files. Move "pnpm" and the overrides
from package.json to the pnpm-workspace.yaml file. Block post install
scripts for all dependencies. Clean up pnpm-lock.yaml.

Fix install of pnpm version in Dockerfile and local build script
Move to the latest node 24 release.
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 41.66%. Comparing base (b9a8200) to head (d3e5ddf).

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #275   +/-   ##
=======================================
  Coverage   41.66%   41.66%           
=======================================
  Files          61       61           
  Lines        2328     2328           
  Branches      383      383           
=======================================
  Hits          970      970           
  Misses       1165     1165           
  Partials      193      193           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Comment thread package.json
"version": "0.0.0",
"private": true,
"engines": {
"node": ">=20.20.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

shall we update node version here as well?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Angular has a minimum of node 20.19, that is what it is based on. We could have left it at that in the last change but we chose 10.20 for some reason.

Comment thread package.json
Comment thread pnpm-workspace.yaml
@@ -0,0 +1,13 @@
allowBuilds:
'@parcel/watcher': false

@adityadtu5 adityadtu5 Jun 2, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what does this section do?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It blocks post install scripts from running. A security measure added in pnpm 11 to fail by default if any package has a post install script and it is not explicitly allowed or blocked. We do not need the post install scripts so they get blocked.

See: https://pnpm.io/supply-chain-security

@adityadtu5 adityadtu5 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some small questions and comments.

Overall looks good

@wilfred-s wilfred-s closed this in 80b0ec4 Jun 4, 2026
@wilfred-s wilfred-s deleted the YUNIKORN-3292 branch June 4, 2026 02:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants