Skip to content

Conversation

@chris-olszewski
Copy link
Member

@chris-olszewski chris-olszewski commented Oct 6, 2025

What was changed

Move from NPM to PNPM package manager

Why?

PNPM offers a variety of improvements over NPM. Specifically, we're interested in the security benefits of minimumReleaseAge and not running dependency lifecycle scripts unless allowlisted.

Needs to be landed in conjunction with temporalio/features#698

Checklist

  1. Closes N/A

  2. How was this tested:
    CI

  3. Any docs updates needed?
    N/A

@chris-olszewski chris-olszewski force-pushed the olszewski/pnpm branch 5 times, most recently from cd61082 to d5cd111 Compare October 7, 2025 18:49
features-tests:
name: Features Tests
uses: temporalio/features/.github/workflows/typescript.yaml@main
uses: temporalio/features/.github/workflows/typescript.yaml@olszewski/pnpm
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Used to verify CI setup. Once both PRs are approved will switch to main before landing

@chris-olszewski chris-olszewski marked this pull request as ready for review November 12, 2025 15:17
@chris-olszewski chris-olszewski requested a review from a team as a code owner November 12, 2025 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants