feat: migrate to pnpm #2922
Draft
feat: migrate to pnpm #2922
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Contributor
|
✅ PR title follows Conventional Commits specification. |
|
Semgrep found 10
Risk: Affected versions of @babel/traverse, babel-traverse, @babel/plugin-transform-runtime, @babel/preset-env, @babel/helper-define-polyfill-provider, babel-plugin-polyfill-corejs2, babel-plugin-polyfill-corejs3, babel-plugin-polyfill-es-shims, and babel-plugin-polyfill-regenerator are vulnerable to Incomplete List Of Disallowed Inputs. An attacker can exploit a vulnerability in the internal Babel methods Manual Review Advice: A vulnerability from this advisory is reachable if you use Babel to compile untrusted JavaScript Fix: Upgrade this library to at least version 0.5.3 at blade/packages/blade/pnpm-lock.yaml:5190. Reference(s): GHSA-67hx-6x53-jw92, CVE-2023-45133 🔴 Fix or ignore this finding to merge your pull request. |
|
Semgrep found 10
Risk: Affected versions of @babel/traverse, babel-traverse, @babel/plugin-transform-runtime, @babel/preset-env, @babel/helper-define-polyfill-provider, babel-plugin-polyfill-corejs2, babel-plugin-polyfill-corejs3, babel-plugin-polyfill-es-shims, and babel-plugin-polyfill-regenerator are vulnerable to Incomplete List Of Disallowed Inputs. An attacker can exploit a vulnerability in the internal Babel methods Manual Review Advice: A vulnerability from this advisory is reachable if you use Babel to compile untrusted JavaScript Fix: Upgrade this library to at least version 0.5.3 at blade/pnpm-lock.yaml:6437. Reference(s): GHSA-67hx-6x53-jw92, CVE-2023-45133 🔴 Fix or ignore this finding to merge your pull request. |
Collaborator
🛡️ Coverage ReportSummaryFull Coverage Details |
tewarig
requested review from
anuraghazra,
chaitanyadeorukhkar,
kamleshchandnani,
ravikumar-rajagopalan,
saurabhdaware and
swapnil-kr1
as code owners
anuraghazra
reviewed
Sep 30, 2025
| }; | ||
| }); | ||
|
|
||
| const StyledActionList = ({ |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
so jest uses canvas. we have added that to dev. deps. somehow pnpm as not able to find it.
more update -
https://medium.com/@piotrkorowicki/pnpm-overrides-eb16db96e763
pnpm/pnpm#4920 (comment)
i have documented the migration process here -
https://razorpay.slack.com/archives/C01H13RTF8V/p1756444768657309
Changes
Additional Information
Component Checklist