create-apollo-monorepo 0.9.6 → 0.9.8

package/README.md

@@ -106,3 +106,21 @@ pnpm backend:update  # git submodule update --remote --merge apps/backend
 
 Don't edit files inside `apps/backend` — open issues / PRs against the
 `apollo-cms` repository upstream.
+
+## Deploying to production
+
+The scaffold pins `packageManager: "pnpm@11.0.0"` so Corepack picks the right
+pnpm. If your CI / deploy host installs pnpm separately, **make sure it's
+pnpm 11+** — pnpm 11 sets `strictDepBuilds: true` by default and reads the
+allow-list from `allowBuilds` in `pnpm-workspace.yaml`. pnpm 10 silently
+ignores `allowBuilds`; pnpm 11 silently ignores the deprecated
+`onlyBuiltDependencies`. Mixing the two leads to `sharp` (and `esbuild`,
+`@swc/core`, …) skipping their postinstalls, which surfaces at runtime as:
+
+```
+Failed to load external module sharp-<hash>:
+  Error: Cannot find module 'sharp-<hash>'
+```
+
+The scaffold's `pnpm-workspace.yaml` already lists the binaries Apollo CMS
+needs in `allowBuilds`. If you add a new native dep, append it there.

package/index.mjs

@@ -398,7 +398,13 @@ function writeRootPackageJson(targetDir, dirName) {
     devDependencies: {
       concurrently: "^9.0.0",
     },
-    engines: { node: ">=22", pnpm: ">=10" },
+    // Pin to pnpm 11 because `pnpm-workspace.yaml` uses the `allowBuilds`
+    // map format introduced in v11 (deprecated `onlyBuiltDependencies` is
+    // silently ignored on v11 — sharp/esbuild postinstalls then no-op and
+    // /admin/media crashes at runtime with "Cannot find module sharp-…").
+    // Corepack uses this field to auto-fetch the right pnpm.
+    packageManager: "pnpm@11.0.0",
+    engines: { node: ">=22", pnpm: ">=11" },
   };
   writeFileSync(resolve(targetDir, "package.json"), JSON.stringify(pkg, null, 2) + "\n");
 
@@ -441,35 +447,36 @@ function linkRootEnvLocal(targetDir, appRelPath, fallbackLines) {
 }
 
 function writePnpmWorkspace(targetDir) {
-  // pnpm 10 reads `onlyBuiltDependencies` from pnpm-workspace.yaml (the
-  // package.json#pnpm location is deprecated for workspaces). apollo-cms
-  // transitively pulls multiple esbuild versions (0.18, 0.25, 0.27); pnpm's
-  // binary symlink can pick the wrong platform binary for esbuild's
-  // postinstall version check, failing with "Expected X.Y.Z but got A.B.C".
-  // Allow listed packages to run their build/postinstall scripts; the rest
-  // are skipped (pnpm 10 default is empty allow-list).
+  // pnpm 11 replaced `onlyBuiltDependencies` (list) with `allowBuilds`
+  // (map of package -> bool). apollo-cms transitively pulls multiple
+  // esbuild versions (0.18, 0.25, 0.27); pnpm's binary symlink can pick
+  // the wrong platform binary for esbuild's postinstall version check,
+  // failing with "Expected X.Y.Z but got A.B.C". Allow listed packages
+  // to run their build/postinstall scripts; the rest are skipped
+  // (pnpm 11 default is `strictDepBuilds: true`, empty allow-map).
+  // See https://pnpm.io/blog/releases/11.0.
   const yaml = [
     "packages:",
     "  - 'apps/*'",
     "  - 'apps/cms-plugins/*'",
     "",
-    "onlyBuiltDependencies:",
-    "  - '@parcel/watcher'",
-    "  - '@rolldown/binding-darwin-arm64'",
-    "  - '@rolldown/binding-linux-arm64-gnu'",
-    "  - '@rolldown/binding-linux-x64-gnu'",
-    "  - '@swc/core'",
-    "  - '@swc/core-darwin-arm64'",
-    "  - '@swc/core-darwin-x64'",
-    "  - '@swc/core-linux-arm64-gnu'",
-    "  - '@swc/core-linux-x64-gnu'",
-    "  - 'better-sqlite3'",
-    "  - 'core-js'",
-    "  - 'core-js-pure'",
-    "  - 'esbuild'",
-    "  - 'msw'",
-    "  - 'sharp'",
-    "  - 'unrs-resolver'",
+    "allowBuilds:",
+    "  '@parcel/watcher': true",
+    "  '@rolldown/binding-darwin-arm64': true",
+    "  '@rolldown/binding-linux-arm64-gnu': true",
+    "  '@rolldown/binding-linux-x64-gnu': true",
+    "  '@swc/core': true",
+    "  '@swc/core-darwin-arm64': true",
+    "  '@swc/core-darwin-x64': true",
+    "  '@swc/core-linux-arm64-gnu': true",
+    "  '@swc/core-linux-x64-gnu': true",
+    "  'better-sqlite3': true",
+    "  'core-js': true",
+    "  'core-js-pure': true",
+    "  'esbuild': true",
+    "  'msw': true",
+    "  'sharp': true",
+    "  'unrs-resolver': true",
     "",
   ].join("\n");
   writeFileSync(resolve(targetDir, "pnpm-workspace.yaml"), yaml);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-apollo-monorepo",
-  "version": "0.9.6",
+  "version": "0.9.8",
   "description": "Scaffold a monorepo with a frontend app and Apollo CMS as a git submodule backend (single-origin via Next.js rewrites + assetPrefix)",
   "bin": {
     "create-apollo-monorepo": "index.mjs"