Skip to content

chore(deps): update pnpm to v11.5.0#16903

Merged
ematipico merged 2 commits into
mainfrom
ocavue/deps367
Jun 2, 2026
Merged

chore(deps): update pnpm to v11.5.0#16903
ematipico merged 2 commits into
mainfrom
ocavue/deps367

Conversation

@ocavue
Copy link
Copy Markdown
Contributor

@ocavue ocavue commented May 28, 2026

Changes

Update pnpm from v11.0.9 to the latest version v11.5.0.

There are two reasons that I want to update our pnpm:

  1. Since pnpm v11.1.3, pnpm has a stricter verification against supply chain attacks. Now it will re-check all deps against trustPolicy and minimumReleaseAge when running pnpm install, if pnpm-lock.yaml has changed.

    $ pnpm i
    Scope: all 523 workspace projects
    ✓ Lockfile passes supply-chain policies (2227 entries in 32.6s)
    
  2. It seems that pnpm v11 consumes more memory compared to pnpm v10, and this causes the Renovate bot to run OOM. As shown in the screenshot below:

    CleanShot 2026-05-30 at 13 03 49@2x

    You can check this link to see more discussion about the Renovate OOM issue after pnpm v11.

    pnpm v11.3.0 improved the memory footprint, and I want to see if this can bring back the Renovate bot for Astro.

Testing

Green CI

Docs

N/A

@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 28, 2026

⚠️ No Changeset found

Latest commit: 3e68323

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions Bot added the pkg: integration Related to any renderer integration (scope) label May 28, 2026
@ocavue ocavue marked this pull request as ready for review May 28, 2026 22:34
@ocavue ocavue changed the title chore(deps): update pnpm to v11.4.0 chore(deps): update pnpm to v11.5.0 May 30, 2026
Comment thread pnpm-workspace.yaml
Comment on lines +41 to +42
# 'fake-data-pkg' is a local package used for testing
- 'fake-data-pkg@1.0.0'
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I need this change to bypass the stricter verification in the newer pnpm version.

@ematipico ematipico merged commit 272ca61 into main Jun 2, 2026
24 checks passed
@ematipico ematipico deleted the ocavue/deps367 branch June 2, 2026 09:51
ematipico added a commit that referenced this pull request Jun 2, 2026
* chore(deps): resolve peer dependency issues (#16894)

* chore(deps): update eslint to v10 (#16896)

* test(vercel): add per-test timeout and raise suite timeout (#16898)

* chore: eliminate duplicate pnpm configurations (#16906)

* Fix i18n redirectToDefaultLocale not working with prefixDefaultLocale (#16887)

* fix(i18n): preserve ROUTE_TYPE_HEADER for i18n post-processing (#16800)

* chore: move fix somewhere else

* chore: update changeset

---------

Co-authored-by: ematipico <estoppa@cloudflare.com>

* feat(fonts): better bold fallbacks (#16908)

* [ci] format

* fix(docs): replace last occurrences of `withastro/adapters` (#16693)

* fix: astro() marks all pipeline features as used (#16899)

* fix: astro() marks all pipeline features as used

AstroHandler is the batteries-included handler that wires up every
pipeline feature internally. Mark all PipelineFeatures bits at the
top of handle() so the one-shot warnMissingFeatures check in BaseApp
never fires a false positive when the first request short-circuits
(e.g. a redirect route skips middleware).

* add changeset

* move allFeatures mask to base-pipeline.ts per review

* docs: fix typos in astro:i18n middleware JSDoc (#16574)

* docs: fix outdated Partytown link (#16865)

* chore(deps): update devalue (#16900)

* Pre-bundle astro/fetch and astro/hono in Cloudflare optimizeDeps (#16914)

## Goal
Eliminate the 'new dependencies optimized: astro/fetch' warning during dev
in the Cloudflare adapter. The advanced routing feature (d69f858, #16366)
introduced astro/fetch and astro/hono exports, and the Cloudflare handler
entry points (01aa164, #16729) import from them — but neither commit
added these to the optimizeDeps.include list. Vite discovers them at runtime
and triggers a late re-optimization.

## Decisions
- Added both astro/fetch and astro/hono: the Cloudflare adapter imports from
  both (hono.ts imports FetchState from astro/fetch, and astro/hono is used
  similarly). Pre-bundling both prevents the same issue for either entry point.

## Changes
- packages/integrations/cloudflare/src/index.ts: added astro/fetch and
  astro/hono to the server environment optimizeDeps.include array, alongside
  the existing astro/app and astro/app/fetch/default-handler entries.

* fix(node): serve prerendered pages with build.format 'file' and 'preserve' by passing extensions option to send (#16922)

* [ci] format

* chore(deps): update `pnpm/action-setup` to v6 (#16904)

* chore(deps): update pnpm to v11.5.0 (#16903)

* Fix 404 route resolution for experimental.advancedRouting with astro/hono handlers (#16911)

Co-authored-by: Emanuele Stoppa <estoppa@cloudflare.com>
Co-authored-by: Matthew Phillips <matthew@matthewphillips.info>

* dedupe

---------

Co-authored-by: ocavue <ocavue@users.noreply.github.com>
Co-authored-by: btea <2356281422@qq.com>
Co-authored-by: Houston (Bot) <108291165+astrobot-houston@users.noreply.github.com>
Co-authored-by: Florian Lefebvre <contact@florian-lefebvre.dev>
Co-authored-by: Florian Lefebvre <florian-lefebvre@users.noreply.github.com>
Co-authored-by: Armand Philippot <git@armand.philippot.eu>
Co-authored-by: Matthew Phillips <matthewphillips@cloudflare.com>
Co-authored-by: dfedoryshchev <64079946+dfedoryshchev@users.noreply.github.com>
Co-authored-by: Andreas Deininger <andreas@deininger.net>
Co-authored-by: Houston (Bot) <matthewp@users.noreply.github.com>
Co-authored-by: Matthew Phillips <matthew@matthewphillips.info>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pkg: integration Related to any renderer integration (scope)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants