From d5e0955922826d25ba13c833056196b33f5de988 Mon Sep 17 00:00:00 2001 From: Dominic Couture Date: Fri, 13 Mar 2026 09:49:44 +0100 Subject: [PATCH 1/2] chore: Run pnpm dedupe in CI --- .github/workflows/lint.yaml | 17 +++++++++++ pnpm-lock.yaml | 60 +++++-------------------------------- 2 files changed, 24 insertions(+), 53 deletions(-) create mode 100644 .github/workflows/lint.yaml diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml new file mode 100644 index 0000000..4e90395 --- /dev/null +++ b/.github/workflows/lint.yaml @@ -0,0 +1,17 @@ +name: Lint + +on: + pull_request: + branches: main + +jobs: + lint: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - uses: pnpm/action-setup@v4 + - uses: actions/setup-node@v4 + with: + cache: 'pnpm' + - run: pnpm install + - run: pnpm dedupe --check diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index bb3536b..0eeed68 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -80,18 +80,6 @@ packages: react: ^18.0.0 || ^19.0.0 || ^19.0.0-0 react-dom: ^18.0.0 || ^19.0.0 || ^19.0.0-0 - '@clerk/shared@3.15.0': - resolution: {integrity: sha512-yPsRYAJYSyniJItmXjz6eHOHcR75+SZV9K/UPp1djz/vyu4CCyndz83kc9xTa7MG/1Sfz2yKIIhyyB/21bjDoQ==} - engines: {node: '>=18.17.0'} - peerDependencies: - react: ^18.0.0 || ^19.0.0 || ^19.0.0-0 - react-dom: ^18.0.0 || ^19.0.0 || ^19.0.0-0 - peerDependenciesMeta: - react: - optional: true - react-dom: - optional: true - '@clerk/shared@3.42.0': resolution: {integrity: sha512-sJUur/7jnHHlAsdoDosxpOmfV05VR7K5rvqlFskj3GaAMFEJrvdOztw0hmhBGVSWiCpjTZfdGITegton8mo7mQ==} engines: {node: '>=18.17.0'} @@ -109,11 +97,6 @@ packages: engines: {node: '>=18.17.0'} deprecated: 'This package is no longer supported. Please import types from @clerk/shared/types instead. See the upgrade guide for more info: https://clerk.com/docs/guides/development/upgrading/upgrade-guides/core-3' - '@clerk/types@4.70.0': - resolution: {integrity: sha512-WYqxeNVqeshuHRj0t+nIS5be0WlIqjudLamhqCNkstpkxSiVDHF1lyGEjPVYmbXwOzdnZoPtFqWEaiBEGaboJA==} - engines: {node: '>=18.17.0'} - deprecated: 'This package is no longer supported. Please import types from @clerk/shared/types instead. See the upgrade guide for more info: https://clerk.com/docs/guides/development/upgrading/upgrade-guides/core-3' - '@emnapi/runtime@1.4.5': resolution: {integrity: sha512-++LApOtY0pEEz1zrd9vy1/zXVaVJJ/EbAF3u0fXIzPJEDtnITsBGbbK0EkM72amhl/R5b+5xx0Y/QhcVOpuulg==} @@ -836,15 +819,6 @@ packages: csstype@3.1.3: resolution: {integrity: sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw==} - debug@4.4.1: - resolution: {integrity: sha512-KcKCqiftBJcZr++7ykoDIEwSa3XWowTfNPo92BYxjXiyYEVrUQh2aLyhxBCwww+heortUFxEJYcRzosstTEBYQ==} - engines: {node: '>=6.0'} - peerDependencies: - supports-color: '*' - peerDependenciesMeta: - supports-color: - optional: true - debug@4.4.3: resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==} engines: {node: '>=6.0'} @@ -1653,8 +1627,8 @@ snapshots: '@clerk/clerk-react@5.36.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)': dependencies: - '@clerk/shared': 3.15.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0) - '@clerk/types': 4.70.0 + '@clerk/shared': 3.42.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0) + '@clerk/types': 4.101.10(react-dom@19.1.0(react@19.1.0))(react@19.1.0) react: 19.1.0 react-dom: 19.1.0(react@19.1.0) tslib: 2.8.1 @@ -1662,8 +1636,8 @@ snapshots: '@clerk/express@1.7.12(express@5.2.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)': dependencies: '@clerk/backend': 2.29.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0) - '@clerk/shared': 3.15.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0) - '@clerk/types': 4.70.0 + '@clerk/shared': 3.42.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0) + '@clerk/types': 4.101.10(react-dom@19.1.0(react@19.1.0))(react@19.1.0) express: 5.2.1 tslib: 2.8.1 transitivePeerDependencies: @@ -1674,26 +1648,14 @@ snapshots: dependencies: '@clerk/backend': 2.29.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0) '@clerk/clerk-react': 5.36.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0) - '@clerk/shared': 3.15.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0) - '@clerk/types': 4.70.0 + '@clerk/shared': 3.42.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0) + '@clerk/types': 4.101.10(react-dom@19.1.0(react@19.1.0))(react@19.1.0) next: 15.5.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0) react: 19.1.0 react-dom: 19.1.0(react@19.1.0) server-only: 0.0.1 tslib: 2.8.1 - '@clerk/shared@3.15.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)': - dependencies: - '@clerk/types': 4.70.0 - dequal: 2.0.3 - glob-to-regexp: 0.4.1 - js-cookie: 3.0.5 - std-env: 3.9.0 - swr: 2.3.4(react@19.1.0) - optionalDependencies: - react: 19.1.0 - react-dom: 19.1.0(react@19.1.0) - '@clerk/shared@3.42.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)': dependencies: csstype: 3.1.3 @@ -1713,10 +1675,6 @@ snapshots: - react - react-dom - '@clerk/types@4.70.0': - dependencies: - csstype: 3.1.3 - '@emnapi/runtime@1.4.5': dependencies: tslib: 2.8.1 @@ -2248,10 +2206,6 @@ snapshots: csstype@3.1.3: {} - debug@4.4.1: - dependencies: - ms: 2.1.3 - debug@4.4.3: dependencies: ms: 2.1.3 @@ -3022,7 +2976,7 @@ snapshots: cac: 6.7.14 chokidar: 4.0.3 consola: 3.4.2 - debug: 4.4.1 + debug: 4.4.3 esbuild: 0.25.5 fix-dts-default-cjs-exports: 1.0.1 joycon: 3.1.1 From 3c93df4278f5d732a757fae16f86b74177ae1783 Mon Sep 17 00:00:00 2001 From: Dominic Couture Date: Fri, 13 Mar 2026 09:53:10 +0100 Subject: [PATCH 2/2] Add minimal permissions --- .github/workflows/lint.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 4e90395..038ce3d 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -1,4 +1,6 @@ name: Lint +permissions: + contents: read on: pull_request: