Skip to content

build: verify pnpm tarball against the packageManager sha512 pin #4952

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
escapedcat merged 1 commit into from
Aug 16, 2026
+9 −3
Merged

build: verify pnpm tarball against the packageManager sha512 pin #4952

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 9 additions & 3 deletions Dockerfile.ci
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,15 @@ FROM docker.io/library/node:22-alpine AS builder
WORKDIR /src
COPY . ./
RUN apk add --no-cache python3 py3-setuptools make g++ git
# Install the pnpm version pinned in package.json `packageManager` via npm;
# corepack was removed from Node 25+ and cannot install pnpm >= 12.
RUN npm install --global pnpm@$(node -p "require('./package.json').packageManager.split('@')[1].split('+')[0]") && \
# Install the pnpm version pinned in package.json `packageManager`, verifying
# the tarball against the pin's sha512 digest as corepack did (corepack was
# removed from Node 25+ and cannot install pnpm >= 12).
RUN pnpm_version=$(node -p "require('./package.json').packageManager.split('@')[1].split('+')[0]") && \
pnpm_sha=$(node -p "require('./package.json').packageManager.split('+sha512.')[1]") && \
npm pack pnpm@$pnpm_version && \
echo "$pnpm_sha pnpm-$pnpm_version.tgz" | sha512sum -c - && \
npm install --global ./pnpm-$pnpm_version.tgz && \
rm ./pnpm-$pnpm_version.tgz && \
pnpm install --frozen-lockfile && \
pnpm run build && \
# Commit lint CLI packages
Expand Down