feat(supply-chain): upgrade pnpm to 11, workspace updates, deps and a…

.github/renovate.json

@@ -1,5 +1,5 @@
 {
-  "extends": ["config:base", ":pinOnlyDevDependencies", "schedule:monthly"],
+  "extends": ["github>commercetools/renovate-config", "config:base", ":pinOnlyDevDependencies", "schedule:monthly"],
   "separateMajorMinor": true,
   "packageRules": [
     {

.github/workflows/main.yml

@@ -11,16 +11,16 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4.2.0
+        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
         id: pnpm-install
         with:
           run_install: false
 
       - name: Setup Node (uses version in .nvmrc)
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
           cache: 'pnpm'

.github/workflows/pull-request.yml

@@ -9,7 +9,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           fetch-depth: 0
 
@@ -18,13 +18,13 @@ jobs:
           git checkout -
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4.2.0
+        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
         id: pnpm-install
         with:
           run_install: false
 
       - name: Setup Node (uses version in .nvmrc)
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
           cache: 'pnpm'

.github/workflows/release.yml

@@ -13,27 +13,27 @@ jobs:
        # Get GitHub token via the CT Changesets App
       - name: Generate GitHub token (via CT Changesets App)
         id: generate_github_token
-        uses: tibdex/github-app-token@v2.1.0
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
         with:
           app_id: ${{ secrets.CT_CHANGESETS_APP_ID }}
           private_key: ${{ secrets.CT_CHANGESETS_APP_PEM }}
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           # Pass a personal access token (using our `ct-changesets` app) to be able to trigger other workflows
           # https://help.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
           # https://github.community/t/action-does-not-trigger-another-on-push-tag-action/17148/8
           token: ${{ steps.generate_github_token.outputs.token }}
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4.2.0
+        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
         id: pnpm-install
         with:
           run_install: false
 
       - name: Setup Node (uses version in .nvmrc)
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
           cache: 'pnpm'
@@ -55,7 +55,7 @@ jobs:
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets
-        uses: changesets/action@v1
+        uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0
         with:
           publish: pnpm changeset publish
           version: pnpm changeset:version-and-format

package.json

@@ -28,7 +28,7 @@
     "generate-model": "pnpm --filter @commercetools-test-data/generators generate"
   },
   "dependencies": {
-    "@babel/core": "^7.21.0",
+    "@babel/core": "7.26.10",
     "@changesets/changelog-github": "0.5.1",
     "@changesets/cli": "2.29.7",
     "@commercetools-frontend/babel-preset-mc-app": "24.8.0",
@@ -45,15 +45,15 @@
     "@manypkg/cli": "0.25.1",
     "@manypkg/find-root": "3.1.0",
     "@preconstruct/cli": "2.8.12",
-    "@types/jest": "^29.4.0",
+    "@types/jest": "29.5.14",
     "@types/node": "22.18.9",
     "babel-jest": "29.7.0",
-    "babel-plugin-module-resolver": "^5.0.2",
+    "babel-plugin-module-resolver": "5.0.2",
     "cross-env": "10.1.0",
     "dotenv": "17.2.3",
     "eslint": "8.57.1",
     "eslint-formatter-pretty": "5.0.0",
-    "find-up": "^7.0.0",
+    "find-up": "7.0.0",
     "husky": "9.1.7",
     "jest": "29.7.0",
     "jest-extended": "6.0.0",
@@ -63,9 +63,9 @@
     "jest-watch-typeahead": "2.2.2",
     "lint-staged": "15.5.2",
     "prettier": "3.6.2",
-    "prettier-jest": "npm:prettier@^3.0.0",
-    "tsc-files": "^1.1.3",
+    "prettier-jest": "npm:prettier@3.5.3",
+    "tsc-files": "1.1.4",
     "typescript": "5.9.3"
   },
-  "packageManager": "pnpm@10.18.2"
+  "packageManager": "pnpm@11.10.0"
 }

pnpm-workspace.yaml

@@ -1,3 +1,17 @@
 packages:
-- "generators"
-- "standalone"
+  - "generators"
+  - "standalone"
+
+minimumReleaseAge: 1440
+minimumReleaseAgeExclude:
+  - '@commercetools/*'
+  - '@commercetools-frontend/*'
+  - '@commercetools-backend/*'
+  - '@commercetools-uikit/*'
+
+blockExoticSubdeps: true
+
+allowBuilds:
+  core-js: false
+  core-js-pure: false
+  esbuild: false

standalone/package.json

@@ -131,14 +131,14 @@
     ]
   },
   "dependencies": {
-    "@babel/runtime": "^7.17.9",
-    "@babel/runtime-corejs3": "^7.17.9",
-    "@commercetools-frontend/application-config": "^24.0.0",
-    "@commercetools-frontend/constants": "^24.0.0",
+    "@babel/runtime": "7.26.10",
+    "@babel/runtime-corejs3": "7.26.10",
+    "@commercetools-frontend/application-config": "24.2.1",
+    "@commercetools-frontend/constants": "24.2.1",
     "@commercetools/platform-sdk": "8.18.0",
-    "@faker-js/faker": "^9.0.0",
-    "@types/lodash": "^4.17.0",
-    "lodash": "^4.17.21",
-    "omit-deep": "^0.3.0"
+    "@faker-js/faker": "9.6.0",
+    "@types/lodash": "4.17.16",
+    "lodash": "4.17.21",
+    "omit-deep": "0.3.0"
   }
 }