Skip to content

chore: update to pnpm v10 #3894

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mkurapov wants to merge 9 commits into
base: main
Choose a base branch
from
Open

chore: update to pnpm v10 #3894

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
93fc469
chore: update to pnpm v10.33.0
mkurapov Apr 8, 2026
3345b4c
chore: update dockerfiles to pnpm v10
mkurapov Apr 8, 2026
ac3014f
chore: fixing vulnerabilities
mkurapov Apr 8, 2026
88e88de
chore: remove trivyignore vulns
mkurapov Apr 8, 2026
a95a460
chore: update vulnerability ignore lists
mkurapov Apr 8, 2026
a3c0eb7
chore(ci): update grype scanning action to latest version
mkurapov Apr 8, 2026
732ebde
chore: update vuln ignore lists
mkurapov Apr 8, 2026
2d8971b
chore: address frontend vulns
mkurapov Apr 8, 2026
9054d89
chore: formatting
mkurapov Apr 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/node-build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -506,7 +506,7 @@ jobs:
run: |
docker images
- name: Scan docker image
uses: anchore/scan-action@v3
uses: anchore/scan-action@v7
with:
image: /tmp/${{ github.sha }}-${{ matrix.package }}-${{ matrix.platform.name }}-${{ needs.version-generator.outputs.version }}.tar
fail-build: true
Expand Down
27 changes: 14 additions & 13 deletions .grype.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,15 @@
ignore:
- vulnerability: GHSA-3xgq-45jj-v275
- vulnerability: CVE-2026-23950
- vulnerability: CVE-2026-23745

# CVE-2025-64756
- vulnerability: CVE-2025-64756
- vulnerability: GHSA-5j98-mcp5-4vw2

# CVE-2026-24842
- vulnerability: CVE-2026-24842
- vulnerability: GHSA-r6q2-hw4h-h46w
- vulnerability: GHSA-8qq5-rm4j-mr97
- vulnerability: GHSA-34x7-hfp2-rc4v
- vulnerability: CVE-2026-27903
- vulnerability: GHSA-7r86-cg39-jmmj

- vulnerability: CVE-2026-27904
- vulnerability: GHSA-23c5-xmqv-rm74

- vulnerability: CVE-2026-33671
- vulnerability: GHSA-c2c7-rcm5-vvqj

- vulnerability: CVE-2026-29786
- vulnerability: GHSA-qffp-2rhf-9h96

- vulnerability: CVE-2026-31802
- vulnerability: GHSA-9ppj-qmqm-q256
11 changes: 6 additions & 5 deletions .trivyignore
View file
Open in desktop
Copy link
Copy Markdown
Contributor Author

@mkurapov mkurapov Apr 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ignore base 24-alpine3.23 image vulnerabilities:

https://hub.docker.com/layers/library/node/24-alpine3.23/images/sha256-5bc53106902596d90fb497746b74ea40e0625c1c8327681d6bff3ee6ad42a22b

Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
CVE-2024-21538 exp:2026-03-01
CVE-2026-23950 exp:2026-03-01
CVE-2025-64756 exp:2026-03-01
CVE-2026-23745 exp:2026-03-01
CVE-2026-24842 exp:2026-03-01
CVE-2026-27903 exp:2026-06-01
CVE-2026-27904 exp:2026-06-01
CVE-2026-33671 exp:2026-06-01
CVE-2026-29786 exp:2026-06-01
CVE-2026-31802 exp:2026-06-01
CVE-2026-22184 exp:2026-06-01
2 changes: 1 addition & 1 deletion localenv/mock-account-servicing-entity/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"

RUN corepack enable
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate

COPY pnpm-lock.yaml ./

Expand Down
18 changes: 12 additions & 6 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,10 @@
"license": "Apache-2.0",
"repository": "https://github.com/interledger/rafiki",
"engines": {
"pnpm": "^8.15.9",
"pnpm": "^10.33.0",
"node": "24"
},
"packageManager": "pnpm@8.15.9",
"packageManager": "pnpm@10.33.0",
"scripts": {
"preinstall": "npx only-allow pnpm",
"lint": "eslint --max-warnings=0 --fix .",
Expand Down Expand Up @@ -68,18 +68,24 @@
"json5@<1.0.2": ">=1.0.2",
"katex": ">=0.16.21",
"jose": ">=4.15.5",
"koa@>=2.0.0": "^2.16.4",
"koa@>=3.0.0": "^3.1.2",
"undici@>=5.0.0": "^5.28.5",
"undici@>=6.0.0": "^6.21.2",
"tar": ">=7.5.4",
"undici@>=6.0.0": "^6.24.0",
"immutable@>=3.0.0": "^3.8.3",
"immutable@>=5.0.0": "^5.1.5",
"picomatch@>=2.0.0": "^2.3.2",
"picomatch@>=4.0.0": "^4.0.4",
"tar": ">=7.5.11",
"braces@<3.0.3": ">=3.0.3",
"dset@<3.1.4": ">=3.1.4",
"path-to-regexp@>=0.1.7": "^0.1.12",
"path-to-regexp@>=0.1.7": "^0.1.13",
"path-to-regexp@>=6.3.0": "^6.3.0",
"next": "^15.5.8",
"form-data": "^4.0.4",
"sha.js": ">=2.4.12",
"@remix-run/router": ">=1.23.2",
"lodash": ">=4.17.23",
"lodash": ">=4.18.0",
"qs@<6.14.1": ">=6.14.1",
"@apollo/server": "^4.13.0"
}
Expand Down
2 changes: 1 addition & 1 deletion packages/auth/Dockerfile.dev
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ USER rafiki
RUN mkdir -p /home/rafiki/.local/bin
ENV PATH="/home/rafiki/.local/bin:$PATH"
RUN corepack enable --install-directory ~/.local/bin
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate

COPY pnpm-lock.yaml package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./

Expand Down
2 changes: 1 addition & 1 deletion packages/auth/Dockerfile.prod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"

RUN corepack enable
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate

COPY pnpm-lock.yaml ./

Expand Down
2 changes: 1 addition & 1 deletion packages/backend/Dockerfile.dev
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ USER rafiki
RUN mkdir -p /home/rafiki/.local/bin
ENV PATH="/home/rafiki/.local/bin:$PATH"
RUN corepack enable --install-directory ~/.local/bin
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate
COPY pnpm-lock.yaml package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./

# Fetch the pnpm dependencies, but use a local cache.
Expand Down
2 changes: 1 addition & 1 deletion packages/backend/Dockerfile.prod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"

RUN corepack enable
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate

COPY pnpm-lock.yaml ./

Expand Down
3 changes: 1 addition & 2 deletions packages/card-service/Dockerfile.dev
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ USER rafiki
RUN mkdir -p /home/rafiki/.local/bin
ENV PATH="/home/rafiki/.local/bin:$PATH"
RUN corepack enable --install-directory ~/.local/bin
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate
COPY pnpm-lock.yaml package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./

# Fetch the pnpm dependencies, but use a local cache.
Expand All @@ -30,6 +30,5 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
--recursive \
--offline \
--frozen-lockfile
RUN pnpm --filter card-service build:deps

CMD pnpm --filter card-service dev
2 changes: 1 addition & 1 deletion packages/card-service/Dockerfile.prod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"

RUN corepack enable
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate

COPY pnpm-lock.yaml ./

Expand Down
2 changes: 1 addition & 1 deletion packages/frontend/Dockerfile.dev
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ USER rafiki
RUN mkdir -p /home/rafiki/.local/bin
ENV PATH="/home/rafiki/.local/bin:$PATH"
RUN corepack enable --install-directory ~/.local/bin
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate

COPY pnpm-lock.yaml package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./
COPY packages/frontend ./packages/frontend
Expand Down
2 changes: 1 addition & 1 deletion packages/frontend/Dockerfile.prod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"

RUN corepack enable
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate

COPY pnpm-lock.yaml ./

Expand Down
3 changes: 1 addition & 2 deletions packages/point-of-sale/Dockerfile.dev
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ USER rafiki
RUN mkdir -p /home/rafiki/.local/bin
ENV PATH="/home/rafiki/.local/bin:$PATH"
RUN corepack enable --install-directory ~/.local/bin
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate
COPY pnpm-lock.yaml package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./

# Fetch the pnpm dependencies, but use a local cache.
Expand All @@ -30,6 +30,5 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
--recursive \
--offline \
--frozen-lockfile
RUN pnpm --filter point-of-sale build:deps
Copy link
Copy Markdown
Contributor Author

@mkurapov mkurapov Apr 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This command did not exist in the point-of-sale or card-service


CMD pnpm --filter point-of-sale dev
2 changes: 1 addition & 1 deletion packages/point-of-sale/Dockerfile.prod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"

RUN corepack enable
RUN corepack prepare pnpm@8.7.4 --activate
RUN corepack prepare pnpm@10.33.0 --activate

COPY pnpm-lock.yaml ./

Expand Down
Loading
Loading