chore: adopt pnpm 11, remove Dependabot, refresh docs (INTER-2313, INTER-2314)#200
Conversation
- Delete .github/dependabot.yml (we use Snyk) - Replace semantic-release publish section in contributing.md with the changesets flow INTER-2313
- Remove dead start:spa script targeting nonexistent examples/spa - Add react peer dependency (>=18) - Fix next-appDir port collision with next example (3002 -> 3003) - Align preact example env instructions with other examples - Document pnpm test:coverage and pnpm docs in contributing.md
There was a problem hiding this comment.
Pull request overview
Updates repository maintenance/docs to align with the current release tooling (Changesets) and standardize example/setup instructions across the repo.
Changes:
- Remove Dependabot configuration (dependency updates handled elsewhere).
- Update
contributing.mdpublishing section to describe the Changesets-based release flow and add build/test/docs commands. - Refresh README/example docs links and example run commands (workspace
pnpm --filter ...), plus minor package metadata tweaks.
Reviewed changes
Copilot reviewed 13 out of 13 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| README.md | Updates badges/links and aligns docs references + setup snippet details. |
| package.json | Removes an unused script and adds react as a peer dependency. |
| examples/webpack-based/README.md | Updates setup/run instructions to use workspace filtering. |
| examples/vite/README.md | Replaces generic Vite template text with Fingerprint-specific setup/run steps. |
| examples/preact/README.md | Standardizes env/setup and workspace run instructions. |
| examples/next/README.md | Standardizes setup/run instructions using pnpm --filter. |
| examples/next-appDir/README.md | Standardizes setup/run instructions and updates the documented port. |
| examples/next-appDir/package.json | Changes dev port from 3002 to 3003. |
| examples/create-react-app/README.md | Standardizes setup/run instructions using pnpm --filter. |
| examples/create-react-app/package.json | Renames the main run script to dev and aliases start to it. |
| contributing.md | Rewrites build/playground guidance and documents the Changesets release process. |
| CHANGELOG.md | Updates a documentation link to the non-versioned agent reference. |
| .github/dependabot.yml | Removes Dependabot configuration. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
The shared dx-team-toolkit workflow requires a pnpm version from package.json's packageManager key; it was missing, breaking all CI jobs (and main) at the Install pnpm step.
Coverage report
Test suite run success21 tests passing in 15 suites. Report generated by 🧪jest coverage report action from 7c94e92 Show full coverage report
|
Bump the packageManager pin from pnpm 10 to 11.13.0 (with corepack integrity hash) and add an allowBuilds allowlist, since pnpm 11 blocks dependency build scripts by default. esbuild (Vite build) is allowed; the core-js funding notices and legacy fsevents@1 native build stay disabled. Lockfile is unchanged (v9.0 is already valid under pnpm 11). Verified locally on pnpm 11.13.0: build, lint, test:dts, test:coverage.
pnpm exec changesetto create a changeset. |
TheUnderScorer
left a comment
There was a problem hiding this comment.
LGTM!
A small suggestion: perhaps we could add a new job to the testing pipeline - it would build the examples and serve as an additional smoke test. WDYT?
Thanks! Yeah, I have a subtask for something like this https://fingerprintjs.atlassian.net/browse/INTER-2322 |
Combines two subtasks: Dependabot/changesets cleanup (INTER-2313) and Corepack + pnpm 11 adoption (INTER-2314), plus a docs pass.
INTER-2313 — Dependabot / changesets / docs
.github/dependabot.yml— we use Snyk for dependency updates.contributing.mdwith the changesets flow, matchingrelease.ymland.changeset/config.json.pnpm --filter <name> dev, add the missing Vite example, and fix the 3002 port collision between the two Next.js examples.docs.fingerprint.comtargets.react(>=18) as a peer dependency; remove the deadstart:spascript.INTER-2314 — Corepack + pnpm 11
packageManagertopnpm@11.13.0with the corepack integrity hash.pnpm-workspace.yamlnow allowsesbuild(Vite build) and keeps the rest disabled.This also fixes CI, which was failing repo-wide (including
main) because the shareddx-team-toolkitworkflow needs a pnpm version frompackageManager.