From ce2a4d4b584025ba5836945e7f407eafdc3035fc Mon Sep 17 00:00:00 2001 From: Richard Powell Date: Tue, 16 Sep 2025 13:28:36 -0400 Subject: [PATCH 1/2] Default to Node 20 and pnpm 10.16.1 when inside this codebase We can do this now since packages in this codebase relies on Node 20.10.0 and so does CI --- dev.yml | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/dev.yml b/dev.yml index aebc48090c..3008a4f09a 100644 --- a/dev.yml +++ b/dev.yml @@ -4,8 +4,8 @@ type: node up: - node: - version: v18.19.0 - package_manager: pnpm@9.7.1 + version: v20.10.0 + package_manager: pnpm@10.16.1 packages: - . env: diff --git a/package.json b/package.json index f107aaac54..dbcf35d0e4 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,7 @@ "version": "1.0.0", "license": "UNLICENSED", "private": true, - "packageManager": "pnpm@9.7.0", + "packageManager": "pnpm@10.16.1", "scripts": { "build": "turbo build", "test": "turbo run test", From 42beaa838735c7b16f6afd82faad5f1285ac0ab0 Mon Sep 17 00:00:00 2001 From: Richard Powell Date: Tue, 10 Feb 2026 16:36:05 -0500 Subject: [PATCH 2/2] Allow native addon install scripts for pnpm 10 pnpm 10 blocks dependency lifecycle scripts by default for security. This broke CI because sqlite3 couldn't download its prebuilt native binary during install. Co-Authored-By: Claude Opus 4.6 --- package.json | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/package.json b/package.json index dbcf35d0e4..5a08147867 100644 --- a/package.json +++ b/package.json @@ -53,5 +53,15 @@ "jest": "^29.7.0", "jest-circus": "^29.7.0", "node-fetch": "^2.6.7" + }, + "pnpm": { + "onlyBuiltDependencies": [ + "@parcel/watcher", + "better-sqlite3", + "esbuild", + "sharp", + "sqlite3", + "workerd" + ] } }