chore: use pnpm-lock.yaml and minimumReleaseAge

.devcontainer/devcontainer.json

@@ -20,7 +20,7 @@
   // "forwardPorts": [],
 
   // Use 'postCreateCommand' to run commands after the container is created.
-  "postCreateCommand": "pnpm install",
+  "postCreateCommand": "pnpm install --frozen-lockfile",
 
   // Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
   "remoteUser": "node"

.github/workflows/GHPages.yml

@@ -29,10 +29,10 @@ jobs:
       - uses: actions/setup-node@v4
       - name: Install And Build
         run: |+
-          pnpm install
+          pnpm install --frozen-lockfile
           pnpm run build
           cd explorer-v2
-          pnpm install
+          pnpm install --frozen-lockfile
           pnpm run pre-build
           pnpm run build
       - name: Setup Pages

.github/workflows/NodeCI.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Lint
         run: pnpm run lint
       - name: Build
@@ -32,7 +32,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run test
   test-for-svelte-v5:
@@ -43,7 +43,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run test
 
@@ -59,7 +59,7 @@ jobs:
           pnpm install -D svelte@4
           rm -rf node_modules
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run test
 
@@ -80,7 +80,7 @@ jobs:
           pnpm install -D svelte@3
           rm -rf node_modules
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run test
   update-fixtures:
@@ -90,7 +90,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Update fixtures
         run: pnpm run update-fixtures
       - name: Check changes
@@ -104,7 +104,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run cover
       - name: Coveralls GitHub Action

.github/workflows/Release.yml

@@ -31,7 +31,7 @@ jobs:
         with:
           node-version: 24
       - name: Install Dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets

.github/workflows/format.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Format
         run: pnpm run eslint-fix
       - name: Commit

.github/workflows/pkg.pr.new.yml

@@ -16,7 +16,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Build
         run: pnpm run build
       - run: pnpx pkg-pr-new publish --compact --json output.json --comment=off

.gitignore

@@ -104,7 +104,6 @@ dist
 .tern-port
 
 # repo
-/pnpm-lock.yaml
 /lib
 /.nyc_output
 /coverage

.npmrc

@@ -1,2 +1 @@
-package-lock=false
 enable-pre-post-scripts=true

.prettierignore

@@ -1 +1,2 @@
 tests/fixtures
+pnpm-lock.yaml

eslint.config.mjs

@@ -46,6 +46,9 @@
       "@typescript-eslint/no-shadow": "off",
       "no-warning-comments": "warn",
       "jsdoc/require-jsdoc": "off",
+      // FIXME: Turning off this rule because it causes `TypeError: aVer.compare is not a function` error.
+      // Most likely the root cause needs to be fixed on the rule side.
+      "node-dependencies/compat-engines": "off",
       complexity: "off",
 
       "prettier/prettier": [

package.json

@@ -14,9 +14,10 @@
   ],
   "funding": "https://github.com/sponsors/ota-meshi",
   "license": "MIT",
-  "packageManager": "pnpm@9.15.9",
+  "packageManager": "pnpm@10.18.3",
   "engines": {
-    "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+    "node": "^18.18.0 || ^20.9.0 || >=21.1.0",
+    "pnpm": "10.18.3"
   },
   "main": "lib/index.js",
   "files": [
@@ -37,7 +38,7 @@
     "cover": "c8 --reporter=lcov pnpm run test",
     "debug": "pnpm run mocha \"tests/src/**/*.ts\" --reporter dot --timeout 60000",
     "eslint-fix": "pnpm run lint --fix",
-    "lint": "eslint .",
+    "lint": "eslint . --concurrency auto",
     "mocha": "pnpm run ts ./node_modules/mocha/bin/mocha.js",
     "prebuild": "pnpm run clean",
     "prerelease": "pnpm run clean && pnpm run build",
@@ -46,7 +47,7 @@
     "run-update-fixtures": "pnpm run ts ./tools/update-fixtures.ts",
     "test": "pnpm run mocha \"tests/src/**/*.ts\" --reporter dot --timeout 60000",
     "ts": "node --import tsx/esm",
-    "update-fixtures": "git add package.json && pnpm i -D svelte@4 && git checkout package.json && pnpm run run-update-fixtures && pnpm i && pnpm run run-update-fixtures",
+    "update-fixtures": "git add package.json && pnpm i -D svelte@4 && pnpm run run-update-fixtures && git checkout package.json pnpm-lock.yaml && pnpm i --frozen-lockfile && pnpm run run-update-fixtures",
     "version:ci": "IN_VERSION_CI_SCRIPT=true pnpm run build:meta && changeset version"
   },
   "peerDependencies": {
@@ -58,6 +59,8 @@
     }
   },
   "dependencies": {
+    "@typescript-eslint/scope-manager": "^8.46.1",
+    "@typescript-eslint/visitor-keys": "^8.46.1",
     "eslint-scope": "^8.2.0",
     "eslint-visitor-keys": "^4.0.0",
     "espree": "^10.0.0",
@@ -80,13 +83,13 @@
     "@types/mocha": "^10.0.10",
     "@types/node": "^22.18.1",
     "@types/semver": "^7.7.1",
-    "@typescript-eslint/parser": "^8.43.0",
-    "@typescript-eslint/types": "^8.43.0",
+    "@typescript-eslint/parser": "^8.46.1",
+    "@typescript-eslint/types": "^8.46.1",
     "benchmark": "^2.1.4",
     "c8": "^10.1.3",
     "chai": "^6.0.1",
     "esbuild": "^0.25.9",
-    "eslint": "~9.38.0",
+    "eslint": "^9.37.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-eslint-comments": "^3.2.0",
     "eslint-plugin-jsdoc": "^61.0.0",
@@ -102,7 +105,7 @@
     "locate-character": "^3.0.0",
     "magic-string": "^0.30.19",
     "mocha": "^11.7.2",
-    "prettier": "~3.6.2",
+    "prettier": "^3.6.2",
     "prettier-plugin-pkg": "^0.21.2",
     "prettier-plugin-svelte": "^3.4.0",
     "rimraf": "^6.0.1",
@@ -111,7 +114,7 @@
     "svelte2tsx": "^0.7.42",
     "tsx": "^4.20.5",
     "typescript": "~5.9.2",
-    "typescript-eslint": "^8.43.0",
+    "typescript-eslint": "^8.46.1",
     "typescript-eslint-parser-for-extra-files": "^0.9.0"
   },
   "publishConfig": {