Skip to content

feat(jfrog): add pnpm package manager support - #1078

Merged
matifali merged 4 commits into
coder:mainfrom
Edd88-pixel:eddy/jfrog-pnpm-1074
Oct 6, 2026
Merged

matifali merged 4 commits into
coder:mainfrom
Edd88-pixel:eddy/jfrog-pnpm-1074

Conversation

@Edd88-pixel

@Edd88-pixel Edd88-pixel commented Aug 26, 2026 •

Copy link
Copy Markdown
Collaborator

Why

The JFrog token and OAuth modules can configure several package managers, but pnpm is not currently supported. Adding pnpm configuration lets workspaces resolve pnpm packages through Artifactory while preserving the existing npm configuration contract.

Closes #1074.

Changes

  • Add an optional package_managers.pnpm repository list to both JFrog modules.
  • Configure pnpm with jf pnpmc --global --repo-resolve and generate the shared npm/pnpm .npmrc content.
  • Validate that npm and pnpm use the same repository list when both are enabled because they share ~/.npmrc.
  • Add Terraform and Bun coverage for pnpm configuration and mismatched repositories.
  • Document pnpm requirements and usage, and bump both module examples to version 1.3.0.

Validation

  • bun test main.test.ts in jfrog-token: 12 tests passed, 35 assertions.
  • terraform test -verbose in jfrog-oauth: 14 tests passed.
  • terraform validate in both modules: passed.
  • Terraform formatting and Prettier checks: passed.

Type of Change

  • New module
  • New template
  • Bug fix
  • Feature/enhancement
  • Documentation
  • Other

Module Information

Paths: registry/coder/modules/jfrog-token, registry/coder/modules/jfrog-oauth
New version: v1.3.0
Breaking change: [ ] Yes [x] No

Testing & Validation

  • Tests pass (bun test)
  • Code formatted (bun fmt)
  • Changes tested locally

Related Issues

Closes #1074.

@Edd88-pixel
Edd88-pixel marked this pull request as ready for review August 26, 2026 12:26
@Edd88-pixel
Edd88-pixel requested a review from matifali August 26, 2026 15:58
Comment thread registry/coder/modules/jfrog-oauth/run.sh

Copy link
Copy Markdown
Member

@Edd88-pixel has this been tested? Can we merge it?

@Edd88-pixel

Copy link
Copy Markdown
Collaborator Author

yes it has already been tested you can merge

@matifali

Copy link
Copy Markdown
Member

@codex review

@matifali matifali added the version:minor Add to PRs requiring a minor version upgrade label Sep 21, 2026
@matifali
matifali enabled auto-merge (squash) September 23, 2026 13:51
@matifali
matifali merged commit f21e23b into coder:main Oct 6, 2026
5 checks passed
matifali added a commit that referenced this pull request Oct 9, 2026
…on (#1168)

## Description

`tag_release.sh` tagged every untagged module on the currently
checked-out commit (HEAD). In a bulk release, where several modules
merged since the last run, every tag pointed at the same commit, and
that commit could include changes newer than the version being tagged.

It now walks each module README's first-parent history, newest first,
and tags the commit where the module block's `version` became the
current value. With squash merges that is the PR's merge commit. The
commit is resolved while scanning, so the "Tags to be created" list
shows `tag -> sha` and `--dry-run` previews the real targets.

The script never checks out anything (it tags by SHA), so the working
tree and HEAD are unchanged after a bulk run.

Notes:
- Shallow clones can't be resolved reliably, so it warns and tags HEAD
there.
- A version that was reverted and re-bumped resolves to the latest bump.
- A tag now contains the module as of its bump commit, not later changes
made without a version bump.
- `MAINTAINER.md` updated: no more checking out the merge commit first.

## Type of Change

- [x] Bug fix

## Testing & Validation

- [ ] Tests pass (`bun test`) (no tests cover this script)
- [x] Code formatted (`bun fmt`)
- [x] Changes tested locally: `--dry-run` over all modules, and the
commit lookup against `jetbrains` (revert/re-bump), `jfrog-token`,
`antigravity`, `vault-token`

## Real run

Ran from this branch on macOS (after a dry run on macOS and on a Linux
dogfood workspace, bash 5.3 / git 2.53, with matching output). It tagged
the four pending modules, each on the commit that introduced its
version. With the old script, all four would have pointed at HEAD
(`f21e23b2`).

| Tag | Tagged commit | Merge commit subject | On origin |
| --- | --- | --- | --- |
| `release/coder/agent-relay-claude-code/v0.2.0` | `84519820` |
feat(agent-relay-claude-code): declare and expose the
agent_relay_client_platform parameter (#1147) | yes |
| `release/coder/aibridge-proxy/v1.0.1` | `6f894e74` | chore: AI Bridge
-> AI Gateway rename (#1118) | yes |
| `release/coder/jfrog-oauth/v1.4.0` | `f21e23b2` | feat(jfrog): add
pnpm package manager support (#1078) | yes |
| `release/coder/jfrog-token/v1.4.0` | `f21e23b2` | feat(jfrog): add
pnpm package manager support (#1078) | yes |

Pushed in two batches (3 + 1), 4 created, 0 failed.

## Related Issues

None

---
Generated with [Claude Code](https://claude.com/claude-code) using
Claude
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

version:minor Add to PRs requiring a minor version upgrade

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add pnpm support to JFrog modules (jfrog-token, jfrog-oauth)

2 participants