component-detection icon indicating copy to clipboard operation
component-detection copied to clipboard

Support pnpm 9

Open CraigMacomber opened this issue 1 year ago • 2 comments

Support pnpm lock file format 9.0 used by pnpm 9.

Pnpm 8 is supported until April 2025, so for pnpm to remain supported, support for pnpm 9 should land enough before that to allow users to migrate.

CraigMacomber avatar Jun 04 '24 04:06 CraigMacomber

pnpm has provided a 379 day window to migrate from pnpm 8 to pnpm 9 before security patches will no longer be provided. Over 25% of this time has now passed. I'm glad to see work on this is considered "ready" and I hope it gets implemented soon.

CraigMacomber avatar Jul 26 '24 23:07 CraigMacomber

About 40% of the time-window for migrating from pnpm 8 to 9 has passed. "Status" has not changed since my last post.

pnpm 9 has had 23 stable releases: even though pnpm 8 is still getting security patching, it would be great to be able to move onto pnpm 9 and take advantage of all that new development work.

Is there any estimate of when pnpm 9 support will land?

CraigMacomber avatar Sep 11 '24 15:09 CraigMacomber

Over 60% support window for pnpm 8 to allow migration to 9 has passed, and component-detection still does not support pnpm 9.

There have been no comments to this issue from the maintainers. There is a PR to add support, but its failing on CI and hasn't been touched in over a month.

Would it be possible to get an estimate of when pnpm 9 support will land? Maybe this work could be prioritized as a security item?

CraigMacomber avatar Dec 02 '24 18:12 CraigMacomber

Hi @CraigMacomber, We got held up with some deployment freezes but I will be merging this and deploying today!

FernandoRojo avatar Dec 02 '24 18:12 FernandoRojo