Dependency graph does not support pnpm v9 #134391
Replies: 5 comments 4 replies
-
💬 Your Product Feedback Has Been Submitted 🎉 Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users. Here's what you can expect moving forward ⏩
Where to look to see what's shipping 👀
What you can do in the meantime 💻
As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities. Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐ |
Beta Was this translation helpful? Give feedback.
-
Here's two public repositories showcasing the issue:
Notice how in v8 (with lockfile v6), the dependency graph includes a large number of transitive dependencies from the lockfile, whereas in v9 (with lockfile v9), it does not. Screens for completeness sake: |
Beta Was this translation helpful? Give feedback.
-
Hi, @vluoto Please try to verify if the tool or service you are using for the dependency graph has updated its support for pnpm v9. Sometimes, tools may take time to catch up with major version changes. |
Beta Was this translation helpful? Give feedback.
-
Got this reply from GitHub Enterprise Support:
|
Beta Was this translation helpful? Give feedback.
-
It looks as though support for v9 lockfile is starting to be rolled out. We've seen both transitive dependencies and dependabot security alerts return in our repo. There's no indication as to what has changed, but we are awaiting a response from enterprise support to hopefully provide some detail. |
Beta Was this translation helpful? Give feedback.
-
Select Topic Area
Bug
Body
Pnpm changed its lockfile format (from lockfile version 6.0 to 9.0) in v9 (release notes). Dependency graph no longer detects dependencies from lockfiles after upgrading pnpm from v8 to v9.
Before
After
Beta Was this translation helpful? Give feedback.
All reactions