build: include src/cdk in pnpm workspace

This will allow pnpm to identifiy dependencies like `parse5` to be
understood as non-dev dependencies, so that they are propagated with
`rules_js` even when `cdk` is linked as `npm_package`. This is necessary
when using the npm package of CDK in the Material schematic tests.

To do this we need to give up on our non-statically readable
substitutions for tslib and RxJS but this is acceptable as those don't
change often and the benefits of the pnpm workspace are more important.

We move `parse5` from `optionalDependencies` to `dependencies` so that
pnpm recognizes this as non-dev dependency for the runtime execution of
the CDK package. `parse5` doesn't have any native code, so
`optionalDependencies` vs `dependencies` doesn't make a difference.

Long-term we should consider simply bundling `parse5` here.

Author: devversion

.aspect/rules/external_repository_action_cache/npm_translate_lock_MzA5NzUwNzMx

@@ -1,8 +1,9 @@
 # @generated
 # Input hashes for repository rule npm_translate_lock(name = "npm2", pnpm_lock = "@//:pnpm-lock.yaml").
 # This file should be checked into version control along with the pnpm-lock.yaml file.
-.npmrc=-2023857461
+.npmrc=-1406867100
 package.json=-370577278
-pnpm-lock.yaml=997015112
+pnpm-lock.yaml=-1162470554
 pnpm-workspace.yaml=1711114604
+src/cdk/package.json=-908433069
 yarn.lock=-987404687

.bazelignore

@@ -17,3 +17,5 @@ integration/yarn-pnp-compat/.yarn/cache
 integration/yarn-pnp-compat/.yarn/unplugged
 integration/yarn-pnp-compat/.yarn/install-state.gz
 integration/yarn-pnp-compat/node_modules
+
+src/cdk/node_modules

.npmrc

@@ -5,3 +5,8 @@ engine-strict = false
 # projects using rules_js so that pnpm outside of Bazel lays out a node_modules tree similar to what
 # rules_js lays out under Bazel (without a hidden node_modules/.pnpm/node_modules)
 hoist=false
+
+# Avoid pnpm auto-installing peer dependencies. We want to be explicit about our versions used
+# for peer dependencies, avoiding potential mismatches. In addition, it ensures we can continue
+# to rely on peer dependency placeholders substituted via Bazel.
+auto-install-peers=false

WORKSPACE

@@ -175,6 +175,7 @@ npm_translate_lock(
     data = [
         "//:package.json",
         "//:pnpm-workspace.yaml",
+        "//src/cdk:package.json",
     ],
     npmrc = "//:.npmrc",
     pnpm_lock = "//:pnpm-lock.yaml",

packages.bzl

@@ -1,9 +1,3 @@
-# Each individual package uses a placeholder for the version of Angular to ensure they're
-# all in-sync. This map is passed to each ng_package rule to stamp out the appropriate
-# version for the placeholders.
-TSLIB_PACKAGE_VERSION = "^2.3.0"
-RXJS_PACKAGE_VERSION = "^6.5.3 || ^7.4.0"
-
 # Packages which are versioned together on npm
 ANGULAR_COMPONENTS_SCOPED_PACKAGES = ["@angular/%s" % p for p in [
     "material",
@@ -27,12 +21,8 @@ PKG_GROUP_REPLACEMENTS = {
 NPM_PACKAGE_SUBSTITUTIONS = dict(PKG_GROUP_REPLACEMENTS, **{
     # Peer dependency version on the Angular framework.
     "0.0.0-NG": "{STABLE_FRAMEWORK_PEER_DEP_RANGE}",
-    # Version of `tslib`
-    "0.0.0-TSLIB": TSLIB_PACKAGE_VERSION,
     # Version of the local package being built, generated via the `--workspace_status_command` flag.
     "0.0.0-PLACEHOLDER": "{STABLE_PROJECT_VERSION}",
-    # Version of `rxjs`
-    "0.0.0-RXJS": RXJS_PACKAGE_VERSION,
 })
 
 NO_STAMP_NPM_PACKAGE_SUBSTITUTIONS = dict(NPM_PACKAGE_SUBSTITUTIONS, **{