Skip to content

chore: adopt pnpm 11, remove Dependabot, refresh docs (INTER-2313, INTER-2314)#200

Merged
JuroUhlar merged 9 commits into
mainfrom
chore/INTER-2313-dependabot-changesets-docs
Jul 15, 2026
Merged

chore: adopt pnpm 11, remove Dependabot, refresh docs (INTER-2313, INTER-2314)#200
JuroUhlar merged 9 commits into
mainfrom
chore/INTER-2313-dependabot-changesets-docs

Conversation

@JuroUhlar

@JuroUhlar JuroUhlar commented Jul 14, 2026

Copy link
Copy Markdown
Collaborator

Combines two subtasks: Dependabot/changesets cleanup (INTER-2313) and Corepack + pnpm 11 adoption (INTER-2314), plus a docs pass.

INTER-2313 — Dependabot / changesets / docs

  • Delete .github/dependabot.yml — we use Snyk for dependency updates.
  • Replace the semantic-release section in contributing.md with the changesets flow, matching release.yml and .changeset/config.json.
  • Standardize the example apps on pnpm --filter <name> dev, add the missing Vite example, and fix the 3002 port collision between the two Next.js examples.
  • Update redirected doc links to their current docs.fingerprint.com targets.
  • Add react (>=18) as a peer dependency; remove the dead start:spa script.

INTER-2314 — Corepack + pnpm 11

  • Pin packageManager to pnpm@11.13.0 with the corepack integrity hash.
  • pnpm 11 blocks dependency build scripts by default, so pnpm-workspace.yaml now allows esbuild (Vite build) and keeps the rest disabled.

This also fixes CI, which was failing repo-wide (including main) because the shared dx-team-toolkit workflow needs a pnpm version from packageManager.

- Delete .github/dependabot.yml (we use Snyk)
- Replace semantic-release publish section in contributing.md with the changesets flow

INTER-2313
- Remove dead start:spa script targeting nonexistent examples/spa
- Add react peer dependency (>=18)
- Fix next-appDir port collision with next example (3002 -> 3003)
- Align preact example env instructions with other examples
- Document pnpm test:coverage and pnpm docs in contributing.md

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates repository maintenance/docs to align with the current release tooling (Changesets) and standardize example/setup instructions across the repo.

Changes:

  • Remove Dependabot configuration (dependency updates handled elsewhere).
  • Update contributing.md publishing section to describe the Changesets-based release flow and add build/test/docs commands.
  • Refresh README/example docs links and example run commands (workspace pnpm --filter ...), plus minor package metadata tweaks.

Reviewed changes

Copilot reviewed 13 out of 13 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
README.md Updates badges/links and aligns docs references + setup snippet details.
package.json Removes an unused script and adds react as a peer dependency.
examples/webpack-based/README.md Updates setup/run instructions to use workspace filtering.
examples/vite/README.md Replaces generic Vite template text with Fingerprint-specific setup/run steps.
examples/preact/README.md Standardizes env/setup and workspace run instructions.
examples/next/README.md Standardizes setup/run instructions using pnpm --filter.
examples/next-appDir/README.md Standardizes setup/run instructions and updates the documented port.
examples/next-appDir/package.json Changes dev port from 3002 to 3003.
examples/create-react-app/README.md Standardizes setup/run instructions using pnpm --filter.
examples/create-react-app/package.json Renames the main run script to dev and aliases start to it.
contributing.md Rewrites build/playground guidance and documents the Changesets release process.
CHANGELOG.md Updates a documentation link to the non-versioned agent reference.
.github/dependabot.yml Removes Dependabot configuration.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
@JuroUhlar JuroUhlar marked this pull request as draft July 14, 2026 15:06
The shared dx-team-toolkit workflow requires a pnpm version from
package.json's packageManager key; it was missing, breaking all CI
jobs (and main) at the Install pnpm step.
@github-actions

github-actions Bot commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Coverage report

St.
Category Percentage Covered / Total
🟢 Statements 83.21% 109/131
🟡 Branches 63.77% 44/69
🟢 Functions 80.49% 33/41
🟢 Lines 82.81% 106/128

Test suite run success

21 tests passing in 15 suites.

Report generated by 🧪jest coverage report action from 7c94e92

Show full coverage report
St File % Stmts % Branch % Funcs % Lines Uncovered Line #s
🟢 All files 83.2 63.76 80.48 82.81
🟢  src 88.7 75.86 83.33 88.33
🟢   detect-env.ts 90 83.33 100 90 15,85
🟢   env.ts 100 100 100 100
🟢   env.types.ts 85.71 40 50 83.33 14
🟡   ...nt-context.ts 75 100 0 75 8
🟡   get-env.ts 60 0 100 60 8-9
🟢   ssr.ts 100 100 100 100
🟢   ...sitor-data.ts 95.65 100 80 95.65 100
🟢  src/components 92.5 61.53 91.66 92.3
🟢   ...-provider.tsx 91.17 58.33 90 90.9 53,58,96
🟢   ...vironment.tsx 100 100 100 100
🟡  src/utils 58.62 42.85 63.63 58.62
🟡   ...-is-truthy.ts 50 50 100 50 3
🟡   to-error.ts 66.66 50 100 66.66 6
🟢   use-const.ts 100 50 100 100 4
🟢   ...mise-store.ts 92.3 75 100 92.3 7
🔴   wait-until.ts 0 0 0 0 8-19

Bump the packageManager pin from pnpm 10 to 11.13.0 (with corepack
integrity hash) and add an allowBuilds allowlist, since pnpm 11 blocks
dependency build scripts by default. esbuild (Vite build) is allowed;
the core-js funding notices and legacy fsevents@1 native build stay
disabled. Lockfile is unchanged (v9.0 is already valid under pnpm 11).

Verified locally on pnpm 11.13.0: build, lint, test:dts, test:coverage.
@github-actions

Copy link
Copy Markdown
Contributor

⚠️ This PR doesn't contain any changesets. If there are user-facing changes, don't forget to run:

pnpm exec changeset

to create a changeset.

@JuroUhlar JuroUhlar changed the title chore: remove Dependabot config and document changesets flow chore: adopt pnpm 11, remove Dependabot, refresh docs (INTER-2313, INTER-2314) Jul 14, 2026
@JuroUhlar JuroUhlar marked this pull request as ready for review July 14, 2026 15:26

@TheUnderScorer TheUnderScorer left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

A small suggestion: perhaps we could add a new job to the testing pipeline - it would build the examples and serve as an additional smoke test. WDYT?

@JuroUhlar

Copy link
Copy Markdown
Collaborator Author

LGTM!

A small suggestion: perhaps we could add a new job to the testing pipeline - it would build the examples and serve as an additional smoke test. WDYT?

Thanks! Yeah, I have a subtask for something like this https://fingerprintjs.atlassian.net/browse/INTER-2322

@JuroUhlar JuroUhlar merged commit bbcef01 into main Jul 15, 2026
12 checks passed
@JuroUhlar JuroUhlar deleted the chore/INTER-2313-dependabot-changesets-docs branch July 15, 2026 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants