From 52deb5feb4bb235313d3e7ff9fffa5db2a67b18d Mon Sep 17 00:00:00 2001
From: Julien Calixte <julien.calixte@theodo.com>
Date: Wed, 13 May 2026 18:46:06 +0200
Subject: [PATCH] fix(ci): use portable pnpm build-allow config

The allowBuilds map syntax only works in pnpm 11.x, but the
Dockerfile resolves pnpm@latest to a 10.x that doesn't recognize
it, so install fails on unapproved build scripts. Switch to the
onlyBuiltDependencies/ignoredBuiltDependencies arrays and pin
packageManager so CI and local stay in sync.
---
 package.json        |  4 +---
 pnpm-workspace.yaml | 15 ++++++++-------
 2 files changed, 9 insertions(+), 10 deletions(-)

diff --git a/package.json b/package.json
index bee946f..2dc3295 100644
--- a/package.json
+++ b/package.json
@@ -2,6 +2,7 @@
   "name": "remanso",
   "version": "1.0.0",
   "private": true,
+  "packageManager": "pnpm@11.0.9",
   "scripts": {
     "dev": "vite",
     "build": "vite build",
@@ -93,8 +94,5 @@
     "vite": "^8.0.1",
     "vite-plugin-pwa": "^1.2.0",
     "vitest": "^3.2.4"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": ["core-js"]
   }
 }
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index efd08f8..fb91034 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,7 +1,8 @@
-allowBuilds:
-  '@parcel/watcher': true
-  core-js: false
-  esbuild: true
-  fsevents: true
-  sharp: true
-  vue-demi: true
+onlyBuiltDependencies:
+  - '@parcel/watcher'
+  - esbuild
+  - fsevents
+  - sharp
+  - vue-demi
+ignoredBuiltDependencies:
+  - core-js