From ce373cf9e564193c39877bfa0d56e936fa8de243 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 14 Apr 2026 01:39:19 +0000
Subject: [PATCH 1/3] Migrate CI to pnpm v11: pin versions, frozen lockfile,
 build-script allowlist

Agent-Logs-Url: https://github.com/mdlew/ip/sessions/19c5feb0-c53e-40fe-bdaa-650e72ee12d4

Co-authored-by: mdlew <47911000+mdlew@users.noreply.github.com>
---
 .github/workflows/deploy.yml | 19 ++++++++++++-------
 package.json                 |  3 +++
 2 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index cb6e540..4f58265 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -17,14 +17,19 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - uses: pnpm/action-setup@v6
+      - name: Setup Node
+        uses: actions/setup-node@v4
         with:
-          version: latest #10
-          run_install: |
-            - recursive: true
-              args: [--force, --fix-lockfile, --no-frozen-lockfile]
-            - args: [--global, typescript]
-        
+          node-version: 22
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v6
+        with:
+          version: 11
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
       - name: Generate types
         run: pnpm run generate-types
 
diff --git a/package.json b/package.json
index 83319f9..c2e1973 100644
--- a/package.json
+++ b/package.json
@@ -14,5 +14,8 @@
 		"@cloudflare/workers-types": "latest",
 		"typescript": "latest",
 		"wrangler": "latest"
+	},
+	"pnpm": {
+		"onlyBuiltDependencies": ["esbuild", "sharp", "workerd"]
 	}
 }

From ef6e7316d3c7b5bc143c863c1e49ef45b1ca866d Mon Sep 17 00:00:00 2001
From: Matthew Lew <mdlew@wustl.edu>
Date: Mon, 13 Apr 2026 21:57:38 -0500
Subject: [PATCH 2/3] Update Node setup and dependency installation in CI

---
 .github/workflows/deploy.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 4f58265..648755e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -18,17 +18,18 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 'lts/*'
+          cache: 'pnpm'
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v6
         with:
-          version: 11
+          version: latest
 
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+        run: pnpm install --force --fix-lockfile --no-frozen-lockfile
 
       - name: Generate types
         run: pnpm run generate-types

From 8310e504d87601aa27bb489c118cf85ed180f297 Mon Sep 17 00:00:00 2001
From: Matthew Lew <mdlew@wustl.edu>
Date: Mon, 13 Apr 2026 21:59:49 -0500
Subject: [PATCH 3/3] Remove duplicate pnpm setup step in deploy workflow

---
 .github/workflows/deploy.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 648755e..0fd155e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -17,17 +17,17 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v6
+        with:
+          version: latest
+
       - name: Setup Node
         uses: actions/setup-node@v6
         with:
           node-version: 'lts/*'
           cache: 'pnpm'
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v6
-        with:
-          version: latest
-
       - name: Install dependencies
         run: pnpm install --force --fix-lockfile --no-frozen-lockfile