Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Conversation

@ryo-manba
Copy link
Member

@ryo-manba ryo-manba commented Oct 14, 2025

Fixes #9812 (comment)

Added support for specifying npm version in pnpm-workspace.yaml to enable features like OIDC publishing that require specific npm versions.

# pnpm-workspace.yaml
npmVersion: "10.2.3"

When running pnpm publish, the specified npm version is automatically downloaded, cached to $PNPM_HOME/.tools/npm/{version}/, and used for publishing.

@ryo-manba ryo-manba marked this pull request as ready for review October 17, 2025 00:01
@ryo-manba ryo-manba requested a review from zkochan as a code owner October 17, 2025 00:01
Copy link
Member

@zkochan zkochan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We probably need to use the devEngines.packageManager field for this. But then pnpm will fail to run because it will tell that another package manager should be used... We could probably have an array of package managers. So, both pnpm and npm.

@ryo-manba
Copy link
Member Author

Sounds good, that approach should also fix #9924.
I'll give it a try.

louis-bompart added a commit to coveo/ui-kit that referenced this pull request Oct 29, 2025
@ryo-manba ryo-manba marked this pull request as draft November 17, 2025 16:01
}

manifest[dependenciesFieldName] ??= {}
manifest[dependenciesFieldName]![packageManagerName] = `packageManager:${versionToUse}`

Check warning

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support OIDC publishing ("trusted publishing")

2 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.