Skip to content

chore: migrate npm to pnpm across CI, Docker, and scripts#555

Draft
Anshumancanrock wants to merge 3 commits intocameri:mainfrom
Anshumancanrock:chore/pnpm-migration
Draft

chore: migrate npm to pnpm across CI, Docker, and scripts#555
Anshumancanrock wants to merge 3 commits intocameri:mainfrom
Anshumancanrock:chore/pnpm-migration

Conversation

@Anshumancanrock
Copy link
Copy Markdown
Collaborator

Migrates the package manager from npm to pnpm to improve install times, enforce strict dependency resolution, and reduce disk space usage.

Changes

  • Replaced package-lock.json with pnpm-lock.yaml (using pnpm@10.33.0).
  • Updated GitHub Actions to use pnpm/action-setup and pnpm install --frozen-lockfile.
  • Updated Dockerfile and docker-compose configuration to use pnpm.
  • Fixed Husky pre-commit/pre-push hooks to use pnpm exec.
  • Updated command references in README.md, CONTRIBUTING.md, and CONFIGURATION.md.
  • Added patch changeset to satisfy CI dependency constraint.

Benchmarks (Local)

Area npm (before) pnpm (after) Gain
Cold install time ~14.05s ~6.92s About 50% faster clean installs
Warm install time ~4.50s ~2.51s Faster repeat installs during development

Testing

  1. Install and script flows run with pnpm locally.
  2. CI workflow steps are updated for pnpm.
  3. Docker-related command paths are updated to pnpm.

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedzod@​3.25.769810010088100
Updatedaxios@​1.15.0 ⏵ 1.15.190 -110010095100

View full report

@coveralls
Copy link
Copy Markdown
Collaborator

Coverage Status

coverage: 73.34% (+0.02%) from 73.323% — Anshumancanrock:chore/pnpm-migration into cameri:main

@Anshumancanrock Anshumancanrock marked this pull request as draft April 21, 2026 01:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants