safe-global / safe-core-sdk / 27199620712

80%

push

github

chore: migrate from Yarn v1 to pnpm 10.16+ (#1338)

* chore: migrate from Yarn v1 to pnpm 10.16+

- Replace yarn.lock with pnpm-lock.yaml (via pnpm import)
- Add pnpm-workspace.yaml with minimumReleaseAge, onlyBuiltDependencies,
  and blockExoticSubdeps security settings
- Update packageManager field to pnpm@10.33.0 with Corepack SHA512 hash
- Add engines field enforcing Node >=20 and pnpm >=10.16
- Remove workspaces field (superseded by pnpm-workspace.yaml)
- Replace lerna run with pnpm -r run in all root scripts
- Update lerna.json npmClient to pnpm
- Replace yarn with pnpm in all package-level scripts and bin/testing-kit.js
- Add abitype as direct devDependency in api-kit and relay-kit (pnpm
  strict isolation no longer hoists it from viem)
- Update all GitHub Actions workflows: add pnpm/action-setup step,
  switch cache and install commands to pnpm
- Add .github/dependabot.yml with cooldown and typescript-toolchain group

* chore: update DOCS with pnpm migration

* chore: fix prettier issues

* chore: set axios as devDependency

* fix: prevent command shell injection

* chore: fix relay-kit tests

* fix: 'CodeQL / Shell command built from environment values'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* chore: set actions permissions and limit concurrent actions runs in PRs

* chore: set workspace as version for repo packages

* fix: playground dependencies

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

267 of 409 branches covered (65.28%)

Branch coverage included in aggregate %.

947 of 1106 relevant lines covered (85.62%)

4.94 hits per line