Skip to content

build: commit pnpm-workspace.yaml with esbuild build approval#5

Merged
JohnMcLear merged 1 commit into
mainfrom
fix/regenerate-lockfile-with-build-approval
May 8, 2026
Merged

build: commit pnpm-workspace.yaml with esbuild build approval#5
JohnMcLear merged 1 commit into
mainfrom
fix/regenerate-lockfile-with-build-approval

Conversation

@JohnMcLear
Copy link
Copy Markdown
Member

Summary

PR #4's pnpm.onlyBuiltDependencies in package.json wasn't enough — pnpm v11 also requires the actual approval to be persisted in pnpm-workspace.yaml's allowBuilds: map. onlyBuiltDependencies says 'these MAY have build scripts'; allowBuilds says 'and yes, build them'.

CI keeps failing with:

[ERR_PNPM_IGNORED_BUILDS] Ignored build scripts: esbuild@0.28.0

Generated via pnpm approve-builds --all. The file pnpm wrote contains exactly:

allowBuilds:
  esbuild: true

Test plan

  • Locally: pnpm install --frozen-lockfile runs esbuild's postinstall successfully now.
  • On merge → publish workflow's bump step should clear and ep_syntax_highlighting@0.1.x will land on npm.

🤖 Generated with Claude Code

pnpm v11 stores build-script approvals in pnpm-workspace.yaml under
allowBuilds, separate from package.json's pnpm.onlyBuiltDependencies
(which only declares which deps MAY have build scripts; the workspace
file actually approves them).

Without this committed, CI's 'pnpm install --frozen-lockfile' sees
esbuild's postinstall as unapproved and bails with
[ERR_PNPM_IGNORED_BUILDS], which exits non-zero and breaks the
publish workflow's bump step.

Generated via 'pnpm approve-builds --all'.
@qodo-code-review
Copy link
Copy Markdown

ⓘ You've reached your Qodo monthly free-tier limit. Reviews pause until next month — upgrade your plan to continue now, or link your paid account if you already have one.

@JohnMcLear JohnMcLear merged commit ac0d348 into main May 8, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant