next.js
[cna] For pnpm ignore postinstall from `sharp` and `unrs-resolver`
#83168

Merged

[cna] For pnpm ignore postinstall from `sharp` and `unrs-resolver` #83168

icyJoseph merged 4 commits into canary from feat/cna-sharp-approved-build-with-pnpm

icyJoseph assigned

icyJoseph 286 days ago

ijjk added create-next-app

ijjk added created-by: Next.js DevEx team

icyJoseph commented on 2025-08-28

karlhorky commented on 2025-08-28

styfle approved these changes on 2025-10-20

styfle commented on 2025-10-21

styfle dismissed these changes on 2025-10-21

feat: for pnpm use onlyBuiltDependencies with sharp

4306caa5

eps1lon force pushed 211 days ago

Use `neverBuiltDependencies` instead

3f06767f

eps1lon force pushed to 3f06767f 211 days ago

eps1lon marked this pull request as draft 211 days ago

vercel commented on 2025-11-11

Use `ignoredBuiltDependencies`

85f6614e

Also exclude unrs-resolver

9cb563e6

eps1lon force pushed to 9cb563e6 211 days ago

eps1lon assigned

eps1lon 211 days ago

eps1lon unassigned

icyJoseph 211 days ago

eps1lon changed the title ~~feat: for pnpm use onlyBuiltDependencies with sharp~~ [cna] For pnpm ignore postinstall from `sharp` and `unrs-resolver` 211 days ago

eps1lon approved these changes on 2025-11-11

eps1lon requested a review from

styfle 211 days ago

eps1lon marked this pull request as ready for review 211 days ago

eps1lon unassigned

eps1lon 211 days ago

icyJoseph dismissed their stale review 211 days ago

> We're currently not in a position to curate a list of trusted dependencies and their versions. ignoreBuiltDependencies is sufficient here and avoids having to audit these packages.

icyJoseph merged 41c1f870 into canary 211 days ago

icyJoseph deleted the feat/cna-sharp-approved-build-with-pnpm branch 211 days ago

github-actions added locked

github-actions locked as resolved and limited conversation to collaborators 196 days ago

Reviewers

eps1lon

vercel

styfle

karlhorky

stefanprobst

Assignees

No one assigned

Labels

create-next-app locked created-by: Next.js DevEx team

Milestone

No milestone

next.js [cna] For pnpm ignore postinstall from `sharp` and `unrs-resolver` #83168 Merged

[cna] For pnpm ignore postinstall from `sharp` and `unrs-resolver` #83168

next.js
[cna] For pnpm ignore postinstall from `sharp` and `unrs-resolver`
#83168

Merged