Skip to content

Upgrade to pnpm 11 and resolve dependency alerts - #166

Merged
kostyafarber merged 1 commit into
mainfrom
chore/pnpm-11-security-updates
Jul 30, 2026
Merged

Upgrade to pnpm 11 and resolve dependency alerts#166
kostyafarber merged 1 commit into
mainfrom
chore/pnpm-11-security-updates

Conversation

@kostyafarber

Copy link
Copy Markdown
Collaborator

Summary

  • upgrade the workspace and global-compatible configuration to pnpm 11.18.0
  • move pnpm settings into pnpm-workspace.yaml, preserve the hoisted linker, and explicitly allow reviewed install scripts
  • update Electron, Forge, Vite, Vitest, React, and React Router to patched compatible versions
  • replace React Router DOM compatibility imports with the React Router 8 API
  • replace vulnerable transitive versions with narrow parent-specific overrides
  • remove confirmed-unused dependencies and add pnpm check-deps

Security

  • reduced the audit result from 89 advisories to 0
  • reduced security overrides to eight targeted entries for upstream ranges without patched releases

Verification

  • pnpm install --frozen-lockfile
  • pnpm check-deps
  • pnpm peers check
  • pnpm format:check
  • pnpm lint:check
  • pnpm typecheck
  • pnpm test
  • pnpm --filter @shift/desktop package

@kostyafarber
kostyafarber merged commit d09030b into main Jul 30, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant