Upgrade pnpm

This PR does a few related changes:

- Upgrades pnpm to 9.3.0 (latest)
- Locks the pnpm and node versions via the `engines` field of `package.json`
- Sets the `package-manager-strict`, `package-manager-version-strict` options
  for pnpm to enforce that the correct pnpm version is in use
- Configures github actions to use the node version from the `engines` field
- Upgrades nix shell configuration
- Moves nix config over to using flakes

Author: cprussin

.envrc

@@ -1,9 +1,7 @@
 #!/usr/bin/env bash
 # the shebang is ignored, but nice for editors
 
-if type -P lorri &>/dev/null; then
-  eval "$(lorri direnv)"
-elif type -P nix-shell &>/dev/null; then
-  echo 'while direnv evaluated .envrc, could not find the command "lorri" [https://github.com/nix-community/lorri]'
-  use nix
+if ! has nix_direnv_version || ! nix_direnv_version 3.0.5; then
+    source_url "https://raw.githubusercontent.com/nix-community/nix-direnv/3.0.5/direnvrc" "sha256-RuwIS+QKFj/T9M2TFXScjBsLR6V3A17YVoEW/Q6AZ1w="
 fi
+use flake

.github/workflows/ci-hermes-client-api-types.yml

@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: "package.json"
       - uses: pnpm/action-setup@v4
         name: Install pnpm
         with:

.github/workflows/ci-typescript.yml

@@ -26,11 +26,11 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: "package.json"
       - uses: pnpm/action-setup@v4
         name: Install pnpm
         with:
-          run_install: "args: [--frozen-lockfile]"
+          run_install: true
       - name: Build
         run: pnpm exec lerna run build
       - name: Test

.github/workflows/publish-js.yml

@@ -12,7 +12,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v4
         with:
-          node-version: "18"
+          node-version-file: "package.json"
       - uses: pnpm/action-setup@v4
         name: Install pnpm
         with:

.gitignore

@@ -20,3 +20,4 @@ tsconfig.tsbuildinfo
 __pycache__
 .DS_Store
 .vercel
+.direnv

.npmrc

@@ -1 +1,2 @@
 engine-strict=true
+package-manager-strict=true

.nvmrc

@@ -0,0 +1 @@
+v18.19.1

Dockerfile.node

@@ -1,4 +1,4 @@
-FROM node:18.20-slim@sha256:1da7652745e9ba5de396e436aa086588ea50d532540fa3147fbc1957c43a46ab as builder-base
+FROM node:18.19.1-slim@sha256:246bf34b0c7cf8d9ff7cbe0c1ff44b178051f06c432c8e7df1645f1bd20b0352 as builder-base
 WORKDIR /usr/src/pyth
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"
@@ -7,7 +7,7 @@ COPY ./ .
 RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --frozen-lockfile
 
 
-FROM node:18.20-alpine@sha256:6937be95129321422103452e2883021cc4a96b63c32d7947187fcb25df84fc3f as runner-base
+FROM node:18.19.1-alpine@sha256:c7620fdecfefb96813da62519897808775230386f4c8482e972e37b8b18cb460 as runner-base
 WORKDIR /srv
 ENV NODE_ENV production
 RUN addgroup --system --gid 1001 pyth && adduser --system --uid 1001 pyth -g pyth && chown pyth:pyth .

flake.lock

@@ -0,0 +1,67 @@
+{
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs";
+    flake-utils.url = "github:numtide/flake-utils";
+    mkCli.url = "github:cprussin/mkCli";
+  };
+
+  outputs = {
+    nixpkgs,
+    flake-utils,
+    mkCli,
+    ...
+  }: (
+    flake-utils.lib.eachDefaultSystem
+    (
+      system: let
+        nodejs-overlay = _: prev: {
+          nodejs = prev.nodejs_18;
+        };
+
+        cli-overlay = _: prev: {
+          cli = prev.lib.mkCli "cli" {
+            _noAll = true;
+
+            install = "${prev.pnpm}/bin/pnpm i";
+
+            test = {
+              nix = {
+                lint = "${prev.statix}/bin/statix check --ignore node_modules .";
+                dead-code = "${prev.deadnix}/bin/deadnix --exclude ./node_modules .";
+                format = "${prev.alejandra}/bin/alejandra --exclude ./node_modules --check .";
+              };
+            };
+
+            fix = {
+              nix = {
+                lint = "${prev.statix}/bin/statix fix --ignore node_modules .";
+                dead-code = "${prev.deadnix}/bin/deadnix --exclude ./node_modules -e .";
+                format = "${prev.alejandra}/bin/alejandra --exclude ./node_modules .";
+              };
+            };
+          };
+        };
+
+        pkgs = import nixpkgs {
+          inherit system;
+          overlays = [mkCli.overlays.default cli-overlay nodejs-overlay];
+          config = {};
+        };
+      in {
+        devShells.default = pkgs.mkShell {
+          buildInputs = [
+            pkgs.cargo
+            pkgs.cli
+            pkgs.git
+            pkgs.libusb
+            pkgs.nodejs
+            pkgs.pkg-config
+            pkgs.pnpm
+            pkgs.pre-commit
+            pkgs.python3
+          ];
+        };
+      }
+    )
+  );
+}