fix: upgrade pnpm to 10.33.2 (actual latest) in all locations

claude · claude · commit a62ac0c70a00 · 2026-05-01T08:57:45.000Z
Updates pnpm from 10.23.0 to 10.33.2 in: - package.json packageManager field - CLAUDE.md version reference - All GitHub Actions workflows (10 files) Security fixes include path traversal protection and symlink-escape protection for file:/git: dependencies. Slack thread: https://triggerdotdev.slack.com/archives/C061L2MHW93/p1777625600974279?thread_ts=1777622248.762639&cid=C061L2MHW93 https://claude.ai/code/session_01G759MUqmjsPh9k1qDxbdjG
diff --git a/.github/workflows/changesets-pr.yml b/.github/workflows/changesets-pr.yml
@@ -88,7 +88,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
@@ -33,7 +33,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/e2e-webapp.yml b/.github/workflows/e2e-webapp.yml
@@ -48,7 +48,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
@@ -31,7 +31,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -81,7 +81,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: Setup node
         uses: buildjet/setup-node@v4
@@ -250,7 +250,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/sdk-compat.yml b/.github/workflows/sdk-compat.yml
@@ -25,7 +25,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
@@ -63,7 +63,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
@@ -104,7 +104,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
@@ -149,7 +149,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/typecheck.yml b/.github/workflows/typecheck.yml
@@ -19,7 +19,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/unit-tests-internal.yml b/.github/workflows/unit-tests-internal.yml
@@ -53,7 +53,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
@@ -122,7 +122,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/unit-tests-packages.yml b/.github/workflows/unit-tests-packages.yml
@@ -53,7 +53,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
@@ -122,7 +122,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
diff --git a/.github/workflows/unit-tests-webapp.yml b/.github/workflows/unit-tests-webapp.yml
@@ -53,7 +53,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
@@ -130,7 +130,7 @@ jobs:
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.23.0
+          version: 10.33.2
 
       - name: ⎔ Setup node
         uses: buildjet/setup-node@v4
diff --git a/CLAUDE.md b/CLAUDE.md
@@ -4,7 +4,7 @@ This file provides guidance to Claude Code when working with this repository. Su
 
 ## Build and Development Commands
 
-This is a pnpm 10.28.2 monorepo using Turborepo. Run commands from root with `pnpm run`.
+This is a pnpm 10.33.2 monorepo using Turborepo. Run commands from root with `pnpm run`.
 
 ```bash
 pnpm run docker              # Start Docker services (PostgreSQL, Redis, Electric)
diff --git a/package.json b/package.json
@@ -65,7 +65,7 @@
     "vite-tsconfig-paths": "^4.0.5",
     "vitest": "3.1.4"
   },
-  "packageManager": "pnpm@10.28.2",
+  "packageManager": "pnpm@10.33.2",
   "dependencies": {
     "@changesets/cli": "2.26.2",
     "@remix-run/changelog-github": "^0.0.5",
