Upgrade pnpm

.changeset/stale-geese-do.md

@@ -0,0 +1,5 @@
+---
+'skuba': minor
+---
+
+lint: Run pnpm codemod to upgrade to pnpm v11

.changeset/wet-glasses-cover.md

@@ -0,0 +1,9 @@
+---
+'pnpm-plugin-skuba': minor
+---
+
+Support pnpm 11
+
+- Migrated the pnpmfile from CommonJS (`pnpmfile.cjs`) to ESM (`pnpmfile.mjs`).
+- Re-enabled `strictDepBuilds` and set `trustPolicy` to `no-downgrade`.
+- Replaced `packageManagerStrictVersion` with `pmOnFail: error`, removing the now-unnecessary `ignorePatchFailures` setting.

package.json

@@ -162,7 +162,7 @@
     "supertest": "7.2.2",
     "type-fest": "2.19.0"
   },
-  "packageManager": "pnpm@10.34.3",
+  "packageManager": "pnpm@11.8.0",
   "engines": {
     "node": ">=22.18.0"
   },

packages/eslint-config-skuba/package.json

@@ -54,7 +54,7 @@
     "eslint": ">=9.22.0",
     "typescript": ">=5.5.4"
   },
-  "packageManager": "pnpm@10.34.3",
+  "packageManager": "pnpm@11.8.0",
   "engines": {
     "node": ">=22.14.0"
   },

packages/eslint-plugin-skuba/package.json

@@ -51,7 +51,7 @@
     "eslint": ">=9.22.0",
     "typescript-eslint": ">=8.59.2"
   },
-  "packageManager": "pnpm@10.34.3",
+  "packageManager": "pnpm@11.8.0",
   "engines": {
     "node": ">=22.14.0"
   },

packages/pnpm-plugin-skuba/package.json

@@ -15,19 +15,19 @@
   "license": "MIT",
   "sideEffects": false,
   "type": "module",
-  "main": "pnpmfile.cjs",
+  "main": "pnpmfile.mjs",
   "files": [
-    "pnpmfile.cjs"
+    "pnpmfile.mjs"
   ],
   "devDependencies": {
     "@pnpm/cafs-types": "^1000.1.0",
-    "@pnpm/config": "^1004.10.3"
+    "@pnpm/config.reader": "^1101.9.0"
   },
   "engines": {
     "node": ">=22.14.0"
   },
   "skuba": {
-    "entryPoint": "pnpmfile.cjs",
+    "entryPoint": "pnpmfile.mjs",
     "template": "oss-npm-package",
     "type": "package",
     "version": "14.1.2"

packages/pnpm-plugin-skuba/pnpmfile.cjs → packages/pnpm-plugin-skuba/pnpmfile.mjs

@@ -1,9 +1,9 @@
 // @ts-check
 
 /**
- * @satisfies {Partial<import("@pnpm/config").Config>}
+ * @satisfies {Partial<import("@pnpm/config.reader").Config>}
  */
-const defaultConfig = {
+export const defaultConfig = {
   allowBuilds: {
     '@ast-grep/lang-bash': true,
     '@ast-grep/lang-json': true,
@@ -19,7 +19,6 @@ const defaultConfig = {
     'unrs-resolver': true,
   },
   blockExoticSubdeps: true,
-  ignorePatchFailures: false,
 
   minimumReleaseAge: 4320,
   minimumReleaseAgeExclude: [
@@ -34,7 +33,8 @@ const defaultConfig = {
     'tsconfig-seek',
   ],
 
-  packageManagerStrictVersion: true,
+  pmOnFail: 'error',
+
   publicHoistPattern: [
     '@arethetypeswrong/core',
     '@changesets/cli',
@@ -53,15 +53,15 @@ const defaultConfig = {
     'typescript',
     'vitest',
   ],
-  strictDepBuilds: false,
-  trustPolicy: 'off',
+  strictDepBuilds: true,
+  trustPolicy: 'no-downgrade',
   trustPolicyExclude: ['semver@6.3.1'], // dependency of eslint-plugin-react
 };
 
-module.exports = {
+export default {
   defaultConfig,
   hooks: {
-    /** @param {import("@pnpm/config").Config} config */
+    /** @param {import("@pnpm/config.reader").Config} config */
     updateConfig(config) {
       Object.entries(defaultConfig).forEach(([key, value]) => {
         if (

patches/@changesets__cli@2.31.0.patch

@@ -0,0 +1,38 @@
+diff --git a/dist/changesets-cli.cjs.js b/dist/changesets-cli.cjs.js
+index 9f0bd6c5f96011be225269a71365a878cb822bb7..6e7267d88b66868f144b531763a000bfa197483e 100644
+--- a/dist/changesets-cli.cjs.js
++++ b/dist/changesets-cli.cjs.js
+@@ -824,12 +824,12 @@ function getPackageInfo(packageJson) {
+
+     // Bare query: when dist-tags.latest is set, returns the full `versions` array via packument
+     // bleed-through, enabling only-pre detection downstream. Returns empty when no `latest` exists.
+-    let result = await spawn__default["default"]("npm", ["info", packageJson.name, `--${scope ? `${scope}:` : ""}registry=${registry}`, "--json"]);
++    let result = await spawn__default["default"]("pnpm", ["info", packageJson.name, `--${scope ? `${scope}:` : ""}registry=${registry}`, "--json"]);
+
+     // Bare query returned nothing — retry with exact version specifier
+     // to handle prerelease-only packages on registries without auto-`latest`.
+     if (result.stdout.toString() === "") {
+-      result = await spawn__default["default"]("npm", ["info", `${packageJson.name}@${packageJson.version}`, `--${scope ? `${scope}:` : ""}registry=${registry}`, "--json"]);
++      result = await spawn__default["default"]("pnpm", ["info", `${packageJson.name}@${packageJson.version}`, `--${scope ? `${scope}:` : ""}registry=${registry}`, "--json"]);
+     }
+
+     // Normalize, just in case. The above prerelease-only package query should already have returned:
+diff --git a/dist/changesets-cli.esm.js b/dist/changesets-cli.esm.js
+index d9582bf53eaf55402a6bf96a39589af7854b8f23..e4224856a038284171250e519c64a7ad307b65cf 100644
+--- a/dist/changesets-cli.esm.js
++++ b/dist/changesets-cli.esm.js
+@@ -787,12 +787,12 @@ function getPackageInfo(packageJson) {
+
+     // Bare query: when dist-tags.latest is set, returns the full `versions` array via packument
+     // bleed-through, enabling only-pre detection downstream. Returns empty when no `latest` exists.
+-    let result = await spawn$1("npm", ["info", packageJson.name, `--${scope ? `${scope}:` : ""}registry=${registry}`, "--json"]);
++    let result = await spawn$1("pnpm", ["info", packageJson.name, `--${scope ? `${scope}:` : ""}registry=${registry}`, "--json"]);
+
+     // Bare query returned nothing — retry with exact version specifier
+     // to handle prerelease-only packages on registries without auto-`latest`.
+     if (result.stdout.toString() === "") {
+-      result = await spawn$1("npm", ["info", `${packageJson.name}@${packageJson.version}`, `--${scope ? `${scope}:` : ""}registry=${registry}`, "--json"]);
++      result = await spawn$1("pnpm", ["info", `${packageJson.name}@${packageJson.version}`, `--${scope ? `${scope}:` : ""}registry=${registry}`, "--json"]);
+     }
+
+     // Normalize, just in case. The above prerelease-only package query should already have returned: