chore: migrate to npm (#4607)

Author: alexander-akait

.cspell.json

@@ -113,7 +113,6 @@
     "**/dist/**",
     "**/__snapshots__/**",
     "**/*.tsbuildinfo",
-    "**/yarn.lock",
     "**/*.png.tpl",
     "**/package-lock.json",
     "packages/*/lib/**",

.devcontainer/devcontainer.json

@@ -5,6 +5,6 @@
   "settings": {
     "terminal.integrated.shell.linux": "/bin/bash"
   },
-  "postCreateCommand": "yarn install && yarn build",
+  "postCreateCommand": "npm install && npm run build",
   "extensions": ["dbaeumer.vscode-eslint", "esbenp.prettier-vscode"]
 }

.github/CONTRIBUTING.md

@@ -11,7 +11,6 @@ Table of Contents
 - [Your first Contribution](#your-first-contribution)
 - [Setup](#setup)
 - [Running Tests](#running-tests)
-  - [Using yarn](#using-yarn)
 - [Editor Config](#editor-config)
 - [Dependencies](#dependencies)
 - [Branching Model](#branching-model)
@@ -53,71 +52,58 @@ In case you are suggesting a new feature, we will match your idea with our curre
 ## Setup
 
 - Install [Node.js](https://nodejs.org/) if you don't have it already.
-  _Note: Node 6 or greater would be better for "best results"._
-- Fork the **webpack-cli** repo at [https://github.com/webpack/webpack-cli](https://github.com/webpack/webpack-cli).
-- `git clone <your-clone-url> && cd webpack-cli`
-
-- We use [yarn](https://yarnpkg.com/lang/en/) workspaces, please install it:
+  _Note: Node 22 or greater would be better for "best results"._
 
-  Read the [Installation Guide](https://yarnpkg.com/en/docs/install) on their official website for detailed instructions on how to install Yarn.
+- Fork the **webpack-cli** repo at [https://github.com/webpack/webpack-cli](https://github.com/webpack/webpack-cli).
 
-> Using yarn is not a requirement, [npm](https://www.npmjs.com/) is included in node.
+- `git clone <your-clone-url> && cd webpack-cli`
 
 - Install the dependencies:
 
   ```bash
-  yarn install
+  npm install
   ```
 
 - Build all the submodules before building for the first time
 
   ```bash
-  yarn build
+  npm run build
   ```
 
 > If you are a Docker and Visual Studio Code user, you can quickstart development using [Remote - Containers](https://marketplace.visualstudio.com/items?itemName=ms-vscode-remote.remote-containers) Extension
 
 ## Running Tests
 
-### Using yarn
-
 - Run all the tests with:
 
   ```bash
-  yarn test
+  npm run test
   ```
 
 - Run CLI tests with:
 
   ```bash
-  yarn test:cli
+  npm run test:cli
   ```
 
 - Run tests of all packages:
 
   ```bash
-  yarn test:packages
+  npm run test:packages
   ```
 
 - Test a single CLI test case:
 
   > Must run from root of the project
 
   ```bash
-  yarn jest path/to/my-test.js
-  ```
-
-- You can also install jest globally and run tests without npx:
-
-  ```bash
-  yarn global add jest
   jest path/to/my-test.js
   ```
 
 - You can run the linters:
 
   ```bash
-  yarn lint
+  npm run lint
   ```
 
 ## Editor Config
@@ -128,8 +114,6 @@ The [.editorconfig](https://github.com/webpack/webpack-cli/blob/main/.editorconf
 
 This is a multi-package repository and dependencies are managed using [lerna](https://lerna.js.org/)
 
-> If you are adding or updating any dependency, please commit the updated `yarn.lock` file.
-
 To update dependencies, import each dependency and make sure the command line build passes. The dependency should support our minimal supported node version for webpack, found in `package.json`.
 
 ## Branching Model
@@ -249,7 +233,7 @@ documentation.
 
 ## Releasing
 
-Run `yarn publish:monorepo` to build all packages and bump versions, this will then get published on npm.
+Run `npm run publish:monorepo` to build all packages and bump versions, this will then get published on npm.
 
 ## Join the development
 

.github/dependabot.yml

@@ -6,9 +6,20 @@ updates:
       interval: daily
       time: "04:00"
       timezone: Europe/Berlin
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 20
     versioning-strategy: lockfile-only
+    labels:
+      - dependencies
     groups:
       dependencies:
         patterns:
           - "*"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: daily
+      time: "04:00"
+      timezone: Europe/Berlin
+    open-pull-requests-limit: 20
+    labels:
+      - dependencies

.github/workflows/dependency-review.yml

@@ -9,6 +9,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout Repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: "Dependency Review"
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2

.github/workflows/nodejs.yml

@@ -30,22 +30,22 @@ jobs:
         webpack-version: [latest]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Using Node v${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: ${{ matrix.node-version }}
-          cache: "yarn"
+          cache: "npm"
 
       - name: Install dependencies
-        run: yarn --frozen-lockfile
+        run: npm ci
 
       - name: Build
-        run: yarn build
+        run: npm run build
 
       - name: Lint
-        run: yarn lint
+        run: npm run lint
 
   build:
     name: Tests and Coverage - ${{ matrix.os }} - Node v${{ matrix.node-version }}, Webpack ${{ matrix.webpack-version }}, DevServer ${{ matrix.dev-server-version }} (${{ matrix.shard }})
@@ -65,31 +65,31 @@ jobs:
         dev-server-version: [latest]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
 
       - name: Using Node v${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: ${{ matrix.node-version }}
-          cache: "yarn"
+          cache: "npm"
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 #4.2.0
         with:
           version: 9
 
       - name: Install dependencies
-        run: yarn --frozen-lockfile --ignore-engines --ignore-scripts
+        run: npm ci --ignore-scripts
 
       - name: Prepare environment for tests
-        run: yarn build:ci
+        run: npm run build:ci
 
       - name: Run tests and generate coverage
-        run: yarn test:coverage --ci --shard=${{ matrix.shard }}
+        run: npm run test:coverage --ci --shard=${{ matrix.shard }}
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true
@@ -105,24 +105,24 @@ jobs:
         os: [ubuntu-latest]
         node-version: [lts/*]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
 
       - name: Using Node v${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: ${{ matrix.node-version }}
-          cache: "yarn"
+          cache: "npm"
 
       - name: Install dependencies
-        run: yarn --frozen-lockfile --ignore-engines
+        run: npm ci
 
       - name: Prepare environment for tests
-        run: yarn build:ci
+        run: npm run build:ci
 
       - name: Run smoketests
-        run: yarn test:smoketests
+        run: npm run test:smoketests
 
   commitlint:
     name: Lint Commit Messages
@@ -131,16 +131,16 @@ jobs:
       group: commitlint-${{ github.ref }}
       cancel-in-progress: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: "lts/*"
-          cache: "yarn"
+          cache: "npm"
 
-      - run: yarn --frozen-lockfile
+      - run: npm ci
 
       - name: Validate PR commits with commitlint
         if: github.event_name == 'pull_request'

.github/workflows/update-docs.yml

@@ -18,6 +18,7 @@ node_modules
 test/**/node_modules
 
 # Lock files
+yarn.lock
 test/**/yarn.lock
 test/**/package-json.lock
 !test/api/**/yarn.lock
@@ -40,7 +41,6 @@ lerna-debug.log
 .yo-rc.json
 
 # package-lock file
-package-lock.json
 !test/api/**/package-lock.json
 
 junit.xml

.gitignore

@@ -12,3 +12,5 @@ test/build/config/error-array/webpack.config.js
 test/build/config/error-mjs/syntax-error.mjs
 test/configtest/with-config-path/syntax-error.config.js
 test/build/build-errors/stats.json
+
+/.nx/workspace-data