chore: migrate from yarn v1 to pnpm and update GitHub Actions (#155)

* chore: migrate from yarn v1 to pnpm

- Update packageManager field in package.json
- Convert yarn.lock to pnpm-lock.yaml using pnpm import
- Update GitHub Actions workflows to use pnpm
- Update test script to use pnpm in example directory
- Add persist-credentials: false to checkout actions for security
- Add explicit permissions to workflow jobs

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

* CI: pin GitHub Action version

* chore: update Node.js version to 22 in website workflow

- Update website.yml to use Node.js 22 (current LTS) instead of 20

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

* chore: migrate example directory from yarn v1 to pnpm

- Add packageManager field to example/package.json
- Convert example/yarn.lock to example/pnpm-lock.yaml
- Remove example/yarn.lock

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

* fix: replace prepublish with prepare script for pnpm compatibility

- Remove deprecated prepublish script
- Add build command to prepare script to ensure lib directory exists before testing
- Fixes CI test failure where example directory couldn't find built files

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

* fix: use prepublishOnly and explicit build in pretest

- Replace prepare script with prepublishOnly for npm publish
- Add explicit build to pretest script before running tests
- Keep prepare script for git hooks only
- Avoids unnecessary builds on every pnpm install

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

---------

Co-authored-by: Claude <[email protected]>

Author: azu

.github/workflows/test.yml

@@ -4,17 +4,24 @@ jobs:
   test:
     name: "Test on Node.js ${{ matrix.node-version }}"
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         node-version: [ 18, 20, 22 ]
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          persist-credentials: false
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
       - name: setup Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install
-        run: yarn install
+        run: pnpm install
       - name: Test
-        run: yarn test
+        run: pnpm test

.github/workflows/website.yml

@@ -8,26 +8,33 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          persist-credentials: false
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: 20
+          node-version: 22
       - name: Set Env
         run: |
           echo "CURRENT_VERSION=$(node -p 'require("./package.json").version')" >> $GITHUB_ENV
       - name: Install
-        run: yarn install
+        run: pnpm install
       - name: Build
         run: |
-          yarn install
-          npm run website -- --metadataVersion="${CURRENT_VERSION}"
+          pnpm install
+          pnpm run website -- --metadataVersion="${CURRENT_VERSION}"
         env:
           CURRENT_VERSION: ${{ env.CURRENT_VERSION }}
         working-directory: example/
       - name: Deploy
-        uses: peaceiris/actions-gh-pages@v4
+        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./example/dist

example/package.json

@@ -18,5 +18,6 @@
   },
   "dependencies": {
     "textlint-rule-preset-jtf-style": "file:.."
-  }
+  },
+  "packageManager": "[email protected]+sha512.9fb969fa749b3ade6035e0f109f0b8a60b5d08a1a87fdf72e337da90dcc93336e2280ca4e44f2358a649b83c17959e9993e777c2080879f3801e6f0d999ad3dd"
 }