Update dependency policy (#80)

Author: nedtwigg

.github/dependabot.yml

@@ -3,8 +3,41 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: weekly
+      interval: "weekly"
     groups:
       github-actions:
         patterns:
           - "*"
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      semver-patch-days: 1
+      semver-minor-days: 3
+      semver-major-days: 14
+    versioning-strategy: "increase-if-necessary"
+    groups:
+      npm-production:
+        dependency-type: "production"
+        patterns:
+          - "*"
+      npm-development:
+        dependency-type: "development"
+        patterns:
+          - "*"
+
+  - package-ecosystem: "cargo"
+    directory: "/standalone/src-tauri"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      semver-patch-days: 1
+      semver-minor-days: 3
+      semver-major-days: 14
+    versioning-strategy: "increase-if-necessary"
+    groups:
+      cargo:
+        patterns:
+          - "*"

.github/workflows/chromatic.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
         with:
-          version: 10
+          version: 11.0.6
 
       - name: Install dependencies
         run: pnpm install

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
 
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
         with:
-          version: 10
+          version: 11.0.6
 
       - name: Install dependencies
         run: pnpm install
@@ -44,7 +44,7 @@ jobs:
 
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
         with:
-          version: 10
+          version: 11.0.6
 
       - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 

.github/workflows/release.yml

@@ -37,7 +37,7 @@ jobs:
 
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
         with:
-          version: 10
+          version: 11.0.6
 
       - name: Install workspace dependencies
         run: pnpm install --frozen-lockfile
@@ -164,7 +164,7 @@ jobs:
 
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
         with:
-          version: 10
+          version: 11.0.6
 
       - name: Install workspace dependencies
         run: pnpm install --frozen-lockfile
@@ -235,7 +235,7 @@ jobs:
 
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
         with:
-          version: 10
+          version: 11.0.6
 
       - name: Install workspace dependencies
         run: pnpm install --frozen-lockfile

.gitignore

@@ -1,5 +1,6 @@
 # Dependencies
 node_modules/
+.pnpm-store/
 
 # Build output
 dist/

docs/specs/deploy.md

@@ -95,7 +95,7 @@ strategy:
 ```
 
 Each matrix leg:
-1. Checkout, setup Node 22, pnpm 10, Rust stable
+1. Checkout, setup Node 22, pnpm 11.0.6, Rust stable
 2. Install workspace dependencies once from the repo root with `pnpm install --frozen-lockfile`
 3. Install system deps (Linux: libgtk, libwebkit, etc.)
 4. Generate an ephemeral, per-job Tauri updater key with `pnpm --dir standalone exec tauri signer generate --ci --write-keys "$RUNNER_TEMP/tauri-ci-updater.key" --force`
@@ -111,7 +111,7 @@ The CI updater key exists only so Tauri emits updater-shaped artifacts during un
 ### Job: `build-vscode`
 
 Runs on `ubuntu-latest`:
-1. Checkout, setup Node 22, pnpm 10
+1. Checkout, setup Node 22, pnpm 11.0.6
 2. `pnpm install --frozen-lockfile` at the repo root
 3. `pnpm --filter dormouse-lib test`
 4. `pnpm --filter dormouse build:frontend && pnpm --filter dormouse build`

lib/package.json

@@ -37,7 +37,7 @@
     "storybook": "^10.4.0",
     "tailwindcss": "^4.3.0",
     "typescript": "^6.0.3",
-    "vite": "^7.3.1",
+    "vite": "^7.3.3",
     "vitest": "^4.1.6"
   }
 }

package.json

@@ -2,6 +2,7 @@
   "name": "dormouse-root",
   "private": true,
   "license": "FSL-1.1-MIT",
+  "packageManager": "pnpm@11.0.6",
   "scripts": {
     "build": "pnpm run build:vscode && pnpm --filter dormouse-website build",
     "test": "pnpm -r run test",
@@ -15,12 +16,5 @@
     "dogfood:standalone": "bash standalone/scripts/dogfood.sh",
     "storybook": "pnpm --filter dormouse-lib storybook",
     "bundle-themes": "node lib/scripts/bundle-themes.mjs"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "@swc/core",
-      "esbuild",
-      "node-pty"
-    ]
   }
 }