chore: use pnpm-lock.yaml and minimumReleaseAge (#775)

Author: baseballyama

.devcontainer/devcontainer.json

@@ -20,7 +20,7 @@
   // "forwardPorts": [],
 
   // Use 'postCreateCommand' to run commands after the container is created.
-  "postCreateCommand": "pnpm install",
+  "postCreateCommand": "pnpm install --frozen-lockfile",
 
   // Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
   "remoteUser": "node"

.github/workflows/GHPages.yml

@@ -29,10 +29,10 @@ jobs:
       - uses: actions/setup-node@v4
       - name: Install And Build
         run: |+
-          pnpm install
+          pnpm install --frozen-lockfile
           pnpm run build
           cd explorer-v2
-          pnpm install
+          pnpm install --frozen-lockfile
           pnpm run pre-build
           pnpm run build
       - name: Setup Pages

.github/workflows/NodeCI.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Lint
         run: pnpm run lint
       - name: Build
@@ -32,7 +32,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run test
   test-for-svelte-v5:
@@ -43,7 +43,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run test
 
@@ -59,7 +59,7 @@ jobs:
           pnpm install -D svelte@4
           rm -rf node_modules
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run test
 
@@ -80,7 +80,7 @@ jobs:
           pnpm install -D svelte@3
           rm -rf node_modules
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run test
   update-fixtures:
@@ -90,7 +90,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Update fixtures
         run: pnpm run update-fixtures
       - name: Check changes
@@ -104,7 +104,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Test
         run: pnpm run cover
       - name: Coveralls GitHub Action

.github/workflows/Release.yml

@@ -31,7 +31,7 @@ jobs:
         with:
           node-version: 24
       - name: Install Dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets

.github/workflows/format.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Format
         run: pnpm run eslint-fix
       - name: Commit

.github/workflows/pkg.pr.new.yml

@@ -16,7 +16,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
       - name: Install Packages
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Build
         run: pnpm run build
       - run: pnpx pkg-pr-new publish --compact --json output.json --comment=off

.gitignore

@@ -104,7 +104,6 @@ dist
 .tern-port
 
 # repo
-/pnpm-lock.yaml
 /lib
 /.nyc_output
 /coverage

.npmrc

@@ -1,2 +1 @@
-package-lock=false
 enable-pre-post-scripts=true

.prettierignore

@@ -1 +1,2 @@
 tests/fixtures
+pnpm-lock.yaml

eslint.config.mjs

@@ -46,6 +46,9 @@ export default [
       "@typescript-eslint/no-shadow": "off",
       "no-warning-comments": "warn",
       "jsdoc/require-jsdoc": "off",
+      // FIXME: Turning off this rule because it causes `TypeError: aVer.compare is not a function` error.
+      // Most likely the root cause needs to be fixed on the rule side.
+      "node-dependencies/compat-engines": "off",
       complexity: "off",
 
       "prettier/prettier": [