Skip to content

fix: allow sharp, esbuild and turbo build scripts - #319

Merged
unional merged 1 commit into
mainfrom
fix/allow-native-build-scripts
Sep 6, 2026
Merged

fix: allow sharp, esbuild and turbo build scripts#319
unional merged 1 commit into
mainfrom
fix/allow-native-build-scripts

Conversation

@unional

@unional unional commented Sep 5, 2026

Copy link
Copy Markdown
Owner

pnpm blocks dependency build scripts by default, and this workspace declared no onlyBuiltDependencies at all. So sharp's install script never runs.

On Linux that goes unnoticed — a matching prebuilt binary arrives as an optional dependency. On macOS astro build fails:

MissingSharp: Could not find Sharp. Please install Sharp (`sharp`) manually
into your project or migrate to another image service.

That is why the sharp security PR #309 could not pass its macOS leg. The same change applied to that branch turned its run green, which is the evidence this is the right fix.

Why this belongs on main, not on that PR

The missing declaration is a property of this repo, not of the sharp upgrade. Any dependency PR that touches these packages hits it, and #309 conflicted with main after #310 landed. Fixing it here means Renovate inherits it on its next rebase instead of each PR carrying the same patch.

esbuild and turbo are native installers in the same position — pnpm reports all three as ignored, so they are declared together.

Verified

pnpm install --frozen-lockfile  ->  no ignored-builds warning
pnpm run verify                 ->  exit 0, Tasks: 4 successful, 4 total

The macOS-only failure cannot be reproduced on Linux, so CI is the real check here — as it was on #309, where it passed.

🤖 Generated with Claude Code

https://claude.ai/code/session_01ETjy9oQGyETyFmDBdR9Egz

pnpm blocks dependency build scripts by default and this workspace declared no
`onlyBuiltDependencies`, so sharp's install script never runs. On Linux that goes
unnoticed - a matching prebuilt binary arrives as an optional dependency - but on
macOS `astro build` fails:

    MissingSharp: Could not find Sharp. Please install Sharp (`sharp`) manually
    into your project or migrate to another image service.

This is why the sharp security PR (#309) could not pass its macOS CI leg. Proven
there: the same change on that branch turned the run green.

Fixing it on `main` rather than only on that branch, because the missing
declaration is a property of this repo, not of the sharp upgrade - any dependency
PR touching these packages hits it, and Renovate will inherit the fix when it
rebases.

esbuild and turbo are native installers in the same position; pnpm reports all
three as ignored.

Verified: `pnpm install --frozen-lockfile` no longer warns about ignored builds
and `pnpm run verify` exits 0, 4/4 tasks.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ETjy9oQGyETyFmDBdR9Egz
Signed-off-by: unional <homawong@gmail.com>
@changeset-bot

changeset-bot Bot commented Sep 5, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 8b08b22

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@mergify

mergify Bot commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

@unional
unional merged commit 71d2cd7 into main Sep 6, 2026
10 checks passed
@unional
unional deleted the fix/allow-native-build-scripts branch September 6, 2026 02:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant