From 2b9e787c90fec087f448a66647b25308a02b6ec1 Mon Sep 17 00:00:00 2001 From: John McLear Date: Mon, 21 Sep 2026 19:01:33 +0100 Subject: [PATCH] fix(deps): move pnpm overrides to pnpm-workspace.yaml pnpm 11 no longer reads the `pnpm` field from package.json, so the overrides added by the recent dependency sweep were silently ignored while the lockfile still recorded them. The frozen install used by the publish job then aborts with: ERR_PNPM_LOCKFILE_CONFIG_MISMATCH Cannot proceed with the frozen installation. The current "overrides" configuration doesn't match the value found in the lockfile which kills the release workflow in its "Bump version (patch)" step, so the plugin cannot publish at all. Move the same overrides, unchanged, into pnpm-workspace.yaml where pnpm 11 reads them. pnpm 10 (used by the lint job) reads them there too, and lockfileVersion stays at '9.0'. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_013S4pYSjwUsiZtdtMMpW7bw --- package.json | 6 ------ pnpm-workspace.yaml | 10 ++++++++++ 2 files changed, 10 insertions(+), 6 deletions(-) create mode 100644 pnpm-workspace.yaml diff --git a/package.json b/package.json index db6a1ed..4be8d4d 100644 --- a/package.json +++ b/package.json @@ -25,11 +25,5 @@ }, "dependencies": { "ep_plugin_helpers": "^0.6.7" - }, - "pnpm": { - "overrides": { - "js-yaml@4": "^4.3.2", - "brace-expansion@1": "^1.1.16" - } } } diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml new file mode 100644 index 0000000..8f0be43 --- /dev/null +++ b/pnpm-workspace.yaml @@ -0,0 +1,10 @@ +# js-yaml and brace-expansion arrive only as transitive dev dependencies (via +# eslint and minimatch@3), so `pnpm update` cannot move them. The selectors are +# scoped to the affected major line: an unbounded range would drag minimatch@3 +# onto brace-expansion 5.x and eslint onto js-yaml 5.x. +# +# pnpm 11 no longer reads `pnpm.overrides` from package.json — these must live +# here or the lockfile and the install disagree (ERR_PNPM_LOCKFILE_CONFIG_MISMATCH). +overrides: + js-yaml@4: '^4.3.2' + brace-expansion@1: '^1.1.16'