Use pnpm instead of npm (#751)

* Use pnpm instead of npm

* `makers setup && makers check`

* Refine meta updater with flake.nix and sd

.github/dependabot.yml

@@ -14,7 +14,7 @@ updates:
       determinatesystems-actions:
         patterns:
           - 'DeterminateSystems*'
-  - package-ecosystem: 'npm'
+  - package-ecosystem: 'pnpm'
     directory: '/'
     schedule:
       interval: 'weekly'

.github/workflows/ci.yml

@@ -21,12 +21,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+      - uses: pnpm/action-setup@a3252b78c470c02df07e9d59298aecedc3ccdd6d # v3.0.0
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version-file: '.node-version'
-          cache: npm
-      - run: npm ci --ignore-scripts
-      - run: npm run build
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm run build
       - name: Check no diff for products
         run: git add --intent-to-add . && git diff --exit-code
 
@@ -35,25 +36,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+      - uses: pnpm/action-setup@a3252b78c470c02df07e9d59298aecedc3ccdd6d # v3.0.0
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version-file: '.node-version'
-          cache: npm
-      - run: npm ci --ignore-scripts
-      - run: npm test
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm test
 
   typecheck:
     timeout-minutes: 15
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+      - uses: pnpm/action-setup@a3252b78c470c02df07e9d59298aecedc3ccdd6d # v3.0.0
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version-file: '.node-version'
-          cache: npm
-      - run: npm ci --ignore-scripts
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
       - name: Typecheck
-        run: npm run typecheck
+        run: pnpm run typecheck
 
   lint:
     timeout-minutes: 15

.github/workflows/dependency-review.yml

@@ -4,7 +4,7 @@ on:
     paths:
       - '.github/workflows/**'
       - 'package.json'
-      - 'package-lock.json'
+      - 'pnpm-lock.yaml'
 
 permissions:
   contents: read

.github/workflows/lint.yml

@@ -4,11 +4,11 @@ on:
     branches: [main]
     paths-ignore:
       - 'dist/**'
-      - 'package-lock.json'
+      - 'pnpm-lock.yaml'
   pull_request:
     paths-ignore:
       - 'dist/**'
-      - 'package-lock.json'
+      - 'pnpm-lock.yaml'
 jobs:
   dprint:
     timeout-minutes: 15

.github/workflows/update-nixpkgs-and-versions-in-ci.yml

@@ -12,18 +12,10 @@ on:
 jobs:
   update-nixpkgs:
     uses: kachick/selfup/.github/workflows/reusable-bump-flake-lock-and-selfup.yml@action-v1
-    if: (github.event.sender.login == 'kachick') || (github.event_name != 'pull_request')
     with:
       dry-run: ${{ github.event_name == 'pull_request' }}
       optional-run: |
-        nix develop --command nix run github:kachick/selfup/v0.0.2 -- run --prefix='# selfup ' --skip-by='nix run' .github/ISSUE_TEMPLATE/*.yml
-        git diff-index --quiet HEAD || git commit -m 'Update latest versions in issue template' .github
-
-        nix develop --command bash -c 'node --version | tr -d v' > .node-version
-        git add .node-version
-        # https://stackoverflow.com/q/34807971
-        git update-index -q --really-refresh
-        git diff-index --quiet HEAD || git commit -m 'Update .node-version' .node-version
+        nix run .#bump-nix-dependencies
     secrets:
       APP_ID: ${{ secrets.APP_ID }}
       APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}

CONTRIBUTING.md

@@ -36,7 +36,7 @@ See also [scripts](package.json) for tasks details.
 ## REPL
 
 ```typescript
-npm run repl
+pnpm run repl
 
 Welcome to Node.js v20.5.1.
 Type ".help" for more information.

Makefile.toml

@@ -5,7 +5,7 @@ skip_core_tasks = true
 category = "Tools"
 description = "Install dependencies after nix"
 script = [
-  "npm ci --ignore-scripts",
+  "pnpm install --frozen-lockfile",
 ]
 
 [tasks.fmt]
@@ -30,21 +30,21 @@ script = [
 category = "Tools"
 description = 'Test'
 script = [
-  "npm run test",
+  "pnpm run test",
 ]
 
 [tasks.typecheck]
 category = "Tools"
 description = 'Correctness in TypeScript'
 script = [
-  "npm run typecheck",
+  "pnpm run typecheck",
 ]
 
 [tasks.build]
 category = "Tools"
 description = 'Build that actually run in production'
 script = [
-  "npm run build",
+  "pnpm run build",
 ]
 
 [tasks.check]
@@ -64,6 +64,7 @@ category = "Tools"
 description = 'Print dependency and the versions'
 script = [
   "node --version",
+  "pnpm --version",
   "nix --version",
   "deno --version",
   "makers --version",