Switch to pnpm

[techknowlogick]

opening this for discussion.

I use git worktrees to work on various PRs for Gitea, leading me to have sometimes up to 20different copies of node_modules installed. This takes a toll on the available space on my hard drive. pnpm uses hardlinks&symlinks to alleviate this issue.

I understand this takes us a step away from core nodejs tools, but I think for anyone who works on several branches at a time it would benefit them.

I also had to fork the license checker to support analyzing pnpm projects.

[6543]

pnpm is awesome - but addoption is not to hight so support in other tools is till kinda lacking

[6543]

-> plz ask more devs for lgtm ... as they also have to work with it :)

[6543]

@techknowlogick would be nice if you could create a pull upstream

microsoft/license-checker-webpack-plugin@main...tklk-forks:license-checker-webpack-plugin:pnpm-support

[TheFox0x7]

My drive welcomes this as well :)

[techknowlogick]

-> plz ask more devs for lgtm ... as they also have to work with it :)

@6543 yup, that's why I also requested a review from @silverwind as they have a lot of interaction with the js side of things so I don't want to negatively impact them just for a slight improvement for me.

I requested a review from you as I know you use it with woodpecker already.

[delvh]

I'm neither for nor against it.
I lack the experience with it to judge if pnpm is a good choice or not.

Nevertheless, there seems be a clear opinion from the TOC in favor of it.
Still, it's probably best to wait for approval from the people that are most impacted by it (@silverwind and @wxiaoguang).

[wxiaoguang]

Haven't tested it. I am neutral for it.

[silverwind]

This adds a new build dependency, so the build docs need to be updated to mention this requirement:

https://github.com/go-gitea/gitea#building

As for the change, I'm -0 because I see no need to change this package manager. gitea's node_modules consumes 629MB currently. Hard linking npm dependencies creates problems when you want to edit a dependency for debugging and has problems across file system boundaries like docker volumes. I see no benefit.

[silverwind]

I also had to fork the license checker to support analyzing pnpm projects.

I'd rather we drop the license.txt generation completely, it's been causing too much issues.

[silverwind]

I guess you can merge this now and we remove the license.txt generation later (along with your fork), if we get consensus on that removal.

[silverwind]

pnpm install does not have a --no-save option: https://pnpm.io/cli/install and it therefor errors:

 ERR_PNPM_OPTION_NOT_SUPPORTED  The "add" command currently does not support the no-save option

[silverwind]

Apparently there is open issue pnpm/pnpm#1237 about it. I'm not sure how to solve.

[silverwind]

I guess what we should do is make a second package.json and lockfile inside the tools directory that holds these dependencies. That way we avoid any pnpm install failures related to those native modules on the main package.

[techknowlogick]

Good catch. I separated it out, and added cairo and pixman to the flake so that at least those who use nix can ensure they have the expected build deps. I'll have to add a mention of those two to the docs as turns out that prebuilt versions of canvas aren't available for at least my combination of devices and node versions.

[silverwind]

Looks good. I think there might be some wasm-based svg-to-png solution somewhere which would work everywhere, but this is good enough for now.

Edit: Likely https://github.com/ssssota/svg2png-wasm