chore: update tooling and dependencies#149
Merged
Merged
Conversation
- Bump pnpm from 10.24.0 to 11.7.0 (mise.toml + package.json) - Add .npmrc settings: save-exact, save-prefix - Add pnpm-workspace.yaml with minimumReleaseAge and allowBuilds - Add go + ratchet for GitHub Actions pinning
- ratchet:update — pin actions to latest SHA for current tag - ratchet:upgrade — upgrade actions to latest (deploy.yml only) - check:ratchet — lint that all actions are pinned
rbjornstad
force-pushed
the
chore/update-tooling-and-deps
branch
from
77ee0d7 to
f778ccc
Compare
rbjornstad
force-pushed
the
chore/update-tooling-and-deps
branch
from
f778ccc to
b33607e
Compare
There was a problem hiding this comment.
Pull request overview
Updates the repository’s tooling and dependency management to match the setup used in nais/console-frontend, aiming for more deterministic installs and improved supply-chain hardening for pnpm and GitHub Actions.
Changes:
- Bumps pnpm to 11.7.0 and updates dependencies/lockfile, switching to exact version specifiers.
- Adds pnpm workspace security controls (
minimumReleaseAge,allowBuilds) and npm save behavior config (save-exact,save-prefix). - Introduces mise tasks and tooling for
ratchetto pin/lint/upgrade GitHub Actions references.
Reviewed changes
Copilot reviewed 7 out of 8 changed files in this pull request and generated 5 comments.
Show a summary per file
| File | Description |
|---|---|
| pnpm-workspace.yaml | Adds pnpm workspace-level security/policy configuration. |
| pnpm-lock.yaml | Regenerates lockfile for updated tooling/deps and exact specifiers. |
| package.json | Pins pnpm via packageManager and switches dependencies to exact versions. |
| mise/tasks/ratchet/upgrade.sh | Adds mise task to run ratchet upgrade (currently targeting deploy workflow). |
| mise/tasks/ratchet/update.sh | Adds mise task to run ratchet update across workflows. |
| mise/tasks/check/ratchet.sh | Adds mise check task to lint workflow action pinning. |
| mise.toml | Updates toolchain versions and adds Go + ratchet tool installation. |
| .npmrc | Adds deterministic save settings and reorders config. |
Files not reviewed (1)
- pnpm-lock.yaml: Generated file
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Remove duplicate savePrefix from pnpm-workspace.yaml (already in .npmrc) - Update AGENTS.md node version to 24.14.1 - Add set -euo pipefail to all ratchet task scripts - Fix upgrade task description to match scope (deploy.yml only)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Aligns tooling config with
nais/console-frontend:.npmrc: addedsave-exact=trueandsave-prefix=for deterministic installspnpm-workspace.yaml: addedminimumReleaseAge(14 days) andallowBuildsratchet:update,ratchet:upgrade,check:ratchet)