Skip to content

[pull] main from TryGhost:main#1050

Merged
pull[bot] merged 3 commits into
code:mainfrom
TryGhost:main
Apr 11, 2026
Merged

[pull] main from TryGhost:main#1050
pull[bot] merged 3 commits into
code:mainfrom
TryGhost:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented Apr 11, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

9larsons and others added 3 commits April 10, 2026 17:19
ref f186b6a
- Switched `displayAuditSummary()` from `yarn audit` to `pnpm audit` and
updated the JSON parsing — pnpm returns a single object with
`metadata.vulnerabilities` instead of yarn's newline-delimited JSON
- Fixed `parsePnpmOutdatedOutput()` to use `info.wanted` instead of
`info.current`, which pnpm's `outdated --json` does not include

These were missed during the pnpm migration in #27017.
no ref

This task requires a secret that's not available on forks, and we should
skip it like we do other jobs.
no issue
This removes the explicit TS package build step in favor of nx automatic
build triggers. Because of the way this command was invoked, all of the
frontend packages were being built on every CI run of acceptance/legacy
tests, which adds about 3-4 minutes per job. The only package ghost/core
depends on is parse-email-address, and so by leveraging Nx's automatic
dependent target running, we can ensure that only the necessary packages
are built. Leveraging Nx now also means that if more lecal packages with
build targets are added as ghost/core deps in the future, the jobs will
continue to work as designed.

This is a repeat of #27293 which was partially reverted during the pnpm
cutover)
@pull pull Bot locked and limited conversation to collaborators Apr 11, 2026
@pull pull Bot added the ⤵️ pull label Apr 11, 2026
@pull pull Bot merged commit 8eb0a3e into code:main Apr 11, 2026
4 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants