Transition from npm to pnpm

Author: jdalton

.env.local

@@ -1 +1 @@
-NODE_COMPILE_CACHE="$(pwd)/.cache"
+NODE_COMPILE_CACHE="./.cache"

.env.test

@@ -1,2 +1,2 @@
-NODE_COMPILE_CACHE="$(pwd)/.cache"
+NODE_COMPILE_CACHE="./.cache"
 VITEST=1

.github/actions/setup/action.yml

@@ -0,0 +1,26 @@
+name: 'Setup'
+description: 'Setup Node.js and pnpm with caching'
+
+inputs:
+  node-version:
+    description: 'Node.js version'
+    required: false
+    default: '22'
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Setup pnpm
+      uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+      with:
+        version: '^10.16.0'
+
+    - name: Setup Node.js with pnpm cache
+      uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: 'pnpm'
+
+    - name: Install dependencies
+      shell: bash
+      run: pnpm install

.github/workflows/lint.yml

@@ -20,7 +20,12 @@ concurrency:
 jobs:
   linting:
     name: 'Linting'
-    uses: SocketDev/workflows/.github/workflows/reusable-base.yml@master
-    with:
-      no-lockfile: true
-      npm-test-script: 'check'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: SocketDev/socket-packageurl-js/.github/actions/setup@9adbb36c918120919787c7030e262fc809f291c4
+        with:
+          node-version: '22'
+
+      - name: Run linting
+        run: pnpm run check

.github/workflows/provenance.yml

@@ -26,16 +26,16 @@ jobs:
         with:
           node-version: '22'
           registry-url: 'https://registry.npmjs.org'
-          cache: npm
+          cache: pnpm
           scope: '@socketregistry'
-      - run: npm install -g npm@latest
-      - run: npm ci
-      - run: npm test
-      - run: npm publish --provenance --tag latest --access public
+      - run: npm install -g pnpm@latest
+      - run: pnpm install
+      - run: pnpm test
+      - run: pnpm publish --provenance --tag latest --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           SOCKET_CLI_DEBUG: ${{ inputs.debug }}
-      - run: npm access set mfa=automation @socketregistry/packageurl-js
+      - run: pnpm access set mfa=automation @socketregistry/packageurl-js
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           SOCKET_CLI_DEBUG: ${{ inputs.debug }}

.github/workflows/test.yml

@@ -21,9 +21,16 @@ concurrency:
 jobs:
   test:
     name: 'Tests'
-    uses: SocketDev/workflows/.github/workflows/reusable-base.yml@master
-    with:
-      no-lockfile: true
-      npm-test-script: 'test'
-      node-versions: '18,20,22,24'
-      os: 'ubuntu-latest,windows-latest'
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+        node-version: [18, 20, 22, 24]
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: SocketDev/socket-packageurl-js/.github/actions/setup@9adbb36c918120919787c7030e262fc809f291c4
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - name: Run tests
+        run: pnpm run test

.github/workflows/types.yml

@@ -15,8 +15,13 @@ permissions:
 
 jobs:
   type-check:
-    uses: SocketDev/workflows/.github/workflows/type-check.yml@master
-    with:
-      no-lockfile: true
-      ts-versions: '5.9'
-      ts-libs: 'dom,esnext'
+    name: 'Type Check'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: SocketDev/socket-packageurl-js/.github/actions/setup@9adbb36c918120919787c7030e262fc809f291c4
+        with:
+          node-version: '22'
+
+      - name: Run type check
+        run: pnpm run check:tsc

.gitignore

@@ -1,11 +1,11 @@
 .DS_Store
 ._.DS_Store
 Thumbs.db
-/.cache
 /.env
 /.nvm
 /.tap
 /.vscode
 /npm-debug.log
+**/.cache
 **/node_modules
 /*.tsbuildinfo