chore: migrate monorepo to pnpm and update configurations#71
Merged
Conversation
Owner
harshlocham
commented
May 18, 2026
harshlocham
commented
- Replaced npm with pnpm as the package manager across the project.
- Updated package.json scripts to use pnpm commands.
- Added .nvmrc for Node.js version management.
- Modified Dockerfiles to support pnpm installation and build processes.
- Removed package-lock.json files and added pnpm-lock.yaml for dependency management.
- Updated .github workflows to utilize pnpm for dependency installation and caching.
- Adjusted workspace dependencies to use "workspace:*" for better compatibility with pnpm.
Add shared authorization service with participant checks on tasks and messages, socket room join/message fan-out via internal web bridge (no DB in socket), remove client-trusted recipients, block user task status mutation, and require INTERNAL_SECRET for task-worker in production. Co-authored-by: Cursor <cursoragent@cursor.com>
…unication Bump versions for several packages, including chat-app, task-worker, socket, and web. Implemented a more secure architecture for realtime authorization and internal communication, refactoring the socket server to enforce centralized ACL checks and removing client-trusted paths. Added test environment setup for internal service authentication.
Enhance security and enforce ACL for REST and socket communication
- Replaced npm with pnpm as the package manager across the project. - Updated package.json scripts to use pnpm commands. - Added .nvmrc for Node.js version management. - Modified Dockerfiles to support pnpm installation and build processes. - Removed package-lock.json files and added pnpm-lock.yaml for dependency management. - Updated .github workflows to utilize pnpm for dependency installation and caching. - Adjusted workspace dependencies to use "workspace:*" for better compatibility with pnpm.
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
There was a problem hiding this comment.
Pull request overview
Migrates the monorepo from npm to pnpm and updates build/deploy tooling (Vercel, Docker, and GitHub Actions) to install, build, and run packages using pnpm and workspace-based dependency linking.
Changes:
- Introduces pnpm workspace setup (pnpm-workspace.yaml, pnpm-lock.yaml usage, pnpm overrides) and updates package scripts/dependencies to use
workspace:*. - Updates Dockerfiles and docker-compose worker command to install/build/run via pnpm + Corepack.
- Updates GitHub Actions workflows and Vercel config to use pnpm for installs/caching/builds.
Reviewed changes
Copilot reviewed 17 out of 21 changed files in this pull request and generated 5 comments.
Show a summary per file
| File | Description |
|---|---|
| vercel.json | Switches Vercel install/build commands from npm/npx to Corepack + pnpm. |
| pnpm-workspace.yaml | Defines workspace package globs for pnpm. |
| package.json | Sets packageManager to pnpm and updates root scripts/audit + pnpm overrides. |
| packages/services/package.json | Converts internal deps to workspace:*. |
| packages/redis/package.json | Converts internal deps to workspace:*. |
| apps/web/package.json | Updates build script and internal deps to use pnpm filters + workspace:*. |
| apps/task-worker/package.json | Converts internal deps to workspace:*. |
| apps/socket/package.json | Converts internal deps to workspace:*. |
| docker/web.Dockerfile | Replaces npm install/build/start with Corepack + pnpm equivalents. |
| docker/socket.Dockerfile | Replaces npm install/build/start with Corepack + pnpm equivalents. |
| apps/task-worker/Dockerfile | Replaces npm install/build/start with Corepack + pnpm equivalents. |
| docker-compose.worker.yml | Updates worker container command to use pnpm filter start. |
| .nvmrc | Adds Node version pin for local development. |
| .npmrc | Adds pnpm-related config (hoisted linker, peer handling, workspace preference). |
| .gitignore | Ignores pnpm store directory. |
| .github/workflows/security.yml | Switches dependency audit workflow to pnpm + Corepack and pnpm caching. |
| .github/workflows/release.yml | Switches release workflow install/build/version commands to pnpm + Corepack. |
| .github/workflows/node.js.yml | Switches CI install/build/start commands and caching keys to pnpm + Corepack. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Added '@chat/types' as a workspace dependency in pnpm-lock.yaml and package.json. - Marked '@aws-sdk/core' as deprecated due to a known bug, with a link to the issue. - Updated import path in the token-versioning integration test to reference the correct module.
…mmand for consistency
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.