feat: decouple cli-app-scripts from yarn by kabaros · Pull Request #933 · dhis2/app-platform

kabaros · 2025-07-23T07:58:29Z

This PR decouples the dependency of cli-app-scripts on yarn@v1 allowing apps and consumers of the CLI to use more modern package managers such as pnpm (or even npm).

d2-with-pnpm.webm

relates to the CLI PR: dhis2/cli#629
implements https://dhis2.atlassian.net/browse/LIBS-800

Some notes:

The PR keeps backwards compatibility - by default, initialising new apps would use yarn@1 and should behave the same as before. Users are able to pass a --pnpm argument to opt for using pnpm instead.
When using pnpm, the dependencies of a new a project are installed using the specified package manager, and the lock file updated.
For pnpm, we needed to public hoist in order to make phantom dependencies of @dhis2/app-shell work. These were used directly by the shell, and worked before because of the behaviour of yarn 1 (which was dropped in subsequent yarn versions) to hoist and make available all dependencies - at some point, we should look at app-shell behaviour in order to avoid the issue, but for now, this works without issues for consumers.
Added a packageManager field to package.json - this enables consumers to know what package manager to use and install it with corepack (which is available for modern node version from 14+) .
This also gets rid of all the warnings when initialising a new app! 🥳

To test:

install the alpha version of CLI pnpm i -g @dhis2/cli@alpha (you can use npm or yarn if you'd like)
initialise a new app with d2 app scripts init sample --pnpm
- if you haven't before, enable corepack with corepack enable - this is just convenient and good practice in general.
you can then test the normal operations of cli-app-scripts: pnpm start, pnpm build pnpm test....
repeat the same without the --pnpm flag to ensure things work with yarn as before.

# [12.7.0-alpha.1](v12.6.4...v12.7.0-alpha.1) (2025-07-23) ### Bug Fixes * **deps:** get rid of warnings shown on initialising new d2 projects ([#929](#929)) ([f5b499f](f5b499f)), closes [#927](#927) [#927](#927) [#928](#928) [#928](#928) [#930](#930) [#930](#930) ### Features * support pnpm and other package managers ([9c81f35](9c81f35))

# [12.7.0-alpha.2](v12.7.0-alpha.1...v12.7.0-alpha.2) (2025-07-23) ### Bug Fixes * correct cli-app-script link ([1d889ff](1d889ff))

# [12.7.0-alpha.3](v12.7.0-alpha.2...v12.7.0-alpha.3) (2025-07-23) ### Bug Fixes * default to pnpm as a package manager ([2fb963f](2fb963f))

# [12.7.0-alpha.4](v12.7.0-alpha.3...v12.7.0-alpha.4) (2025-07-24) ### Bug Fixes * change hoist options for phantom app-shell dependencies ([ac9aa78](ac9aa78))

# [12.7.0-alpha.5](v12.7.0-alpha.4...v12.7.0-alpha.5) (2025-07-24) ### Bug Fixes * add styled-jsx to hoisted dependencies ([9e692bc](9e692bc))

# [12.7.0-alpha.6](v12.7.0-alpha.5...v12.7.0-alpha.6) (2025-07-24) ### Bug Fixes * change cli option for package manager to boolean '--pnpm' ([e971c3d](e971c3d))

# [12.7.0-alpha.7](v12.7.0-alpha.6...v12.7.0-alpha.7) (2025-07-24) ### Bug Fixes * default args to undefined not 'false' to avoid conflict ([2b54a06](2b54a06))

# [12.7.0-alpha.8](v12.7.0-alpha.7...v12.7.0-alpha.8) (2025-07-24) ### Bug Fixes * recommend the use of 'pnpm' as a warning on init command ([e0cda6d](e0cda6d))

# [12.7.0-alpha.9](v12.7.0-alpha.8...v12.7.0-alpha.9) (2025-07-24) ### Bug Fixes * capitalise log messages ([e480586](e480586))

kabaros · 2025-07-24T09:44:06Z

            )} to ${path.relative(paths.base, srcNodeModules)}...`
        )
-        await fs.ensureSymlink(srcNodeModules, destNodeModules)
+        fs.ensureSymlinkSync(srcNodeModules, destNodeModules)


this - and other fs.xSync calls - fix a race condition that happened before the first time we run start where the symlink is sometimes not yet created

# [12.7.0-alpha.10](v12.7.0-alpha.9...v12.7.0-alpha.10) (2025-07-24) ### Bug Fixes * ensure app-shell symlink is created to avoid race conditon ([223350e](223350e)) * ensure npm works as well as pnpm ([2975d2e](2975d2e))

# [12.7.0-alpha.11](v12.7.0-alpha.10...v12.7.0-alpha.11) (2025-07-24) ### Bug Fixes * race condition with symlinks ([fe2d496](fe2d496))

# [12.7.0-alpha.12](v12.7.0-alpha.11...v12.7.0-alpha.12) (2025-07-24) ### Bug Fixes * add corepack packageManager field ([acb4ac0](acb4ac0))

# [12.7.0-alpha.15](v12.7.0-alpha.14...v12.7.0-alpha.15) (2025-07-28) ### Bug Fixes * hoist dependencies needed for plugins and PWAs ([fa91bc5](fa91bc5))

# [12.8.0-alpha.1](v12.7.0...v12.8.0-alpha.1) (2025-07-28) ### Bug Fixes * add corepack packageManager field ([acb4ac0](acb4ac0)) * add styled-jsx to hoisted dependencies ([9e692bc](9e692bc)) * capitalise log messages ([e480586](e480586)) * change cli option for package manager to boolean '--pnpm' ([e971c3d](e971c3d)) * change hoist options for phantom app-shell dependencies ([ac9aa78](ac9aa78)) * correct cli-app-script link ([1d889ff](1d889ff)) * default args to undefined not 'false' to avoid conflict ([2b54a06](2b54a06)) * default to pnpm as a package manager ([2fb963f](2fb963f)) * ensure app-shell symlink is created to avoid race conditon ([223350e](223350e)) * ensure npm works as well as pnpm ([2975d2e](2975d2e)) * expose init command in the package ([cc8b7f5](cc8b7f5)) * force alpha release to npm ([78a2e69](78a2e69)) * hoist dependencies needed for plugins and PWAs ([fa91bc5](fa91bc5)) * race condition with symlinks ([fe2d496](fe2d496)) * recommend the use of 'pnpm' as a warning on init command ([e0cda6d](e0cda6d)) ### Features * support pnpm and other package managers ([9c81f35](9c81f35))

sonarqubecloud · 2025-07-28T19:30:54Z

Quality Gate passed

Issues
0 New issues
2 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

# [12.8.0-alpha.2](v12.8.0-alpha.1...v12.8.0-alpha.2) (2025-10-29) ### Bug Fixes * allow passing a reporter to init command ([ca36333](ca36333))

This reverts commit ca36333.

# [12.8.0-alpha.3](v12.8.0-alpha.2...v12.8.0-alpha.3) (2025-10-29) ### Bug Fixes * Revert "fix: allow passing a reporter to init command ([6028374](6028374))

sonarqubecloud · 2025-10-29T19:13:18Z

Quality Gate failed

Failed conditions
20 New issues
1 New Critical Issues (required ≤ 0)
20 New Code Smells (required ≤ 0)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

KaiVandivier · 2026-01-13T10:20:37Z

 }

-const handler = async ({ force, name, cwd, lib, typeScript }) => {
+const handler = async ({ force, pnpm, npm, name, cwd, lib, typeScript }) => {


Add warning to use pnpm create @dhis2/app instead?

KaiVandivier · 2026-01-13T10:28:43Z

+const paths = require('../paths')
+
+const isNpmProject = () => {
+    return paths.npmLock !== null
+}
+
+module.exports = isNpmProject


Maybe check for packageManager field in package.json first?

(This might return an erroneous value if there are multiple lock files in a project, which happens)

KaiVandivier · 2026-01-13T10:36:11Z


 exports.validateLockfile = async (pkg, { paths, offerFix = false }) => {
-    if (paths.yarnLock === null) {
+    if (paths.yarnLock === null && !isPnpmProject() && !isNpmProject()) {


To do: Test if pnpm and npm run into singleton issue; test by upgrading UI or app-runtime to a version other than the app shell/adapter

KaiVandivier · 2026-01-13T10:39:42Z

Have a check on this

KaiVandivier

🎉🎉🎉🎉🎉🎉🎉

🥳 🥳 🥳 🥳 🥳 🥳

Some follow-ups in comments, and package manager option in CLI "create" wizard

Nice! 👏👏👏👏

# [12.11.0-alpha.1](v12.10.1...v12.11.0-alpha.1) (2026-01-13) ### Bug Fixes * add corepack packageManager field ([acb4ac0](acb4ac0)) * add styled-jsx to hoisted dependencies ([9e692bc](9e692bc)) * allow passing a reporter to init command ([ca36333](ca36333)) * capitalise log messages ([e480586](e480586)) * change cli option for package manager to boolean '--pnpm' ([e971c3d](e971c3d)) * change hoist options for phantom app-shell dependencies ([ac9aa78](ac9aa78)) * correct cli-app-script link ([1d889ff](1d889ff)) * default args to undefined not 'false' to avoid conflict ([2b54a06](2b54a06)) * default to pnpm as a package manager ([2fb963f](2fb963f)) * ensure app-shell symlink is created to avoid race conditon ([223350e](223350e)) * ensure npm works as well as pnpm ([2975d2e](2975d2e)) * expose init command in the package ([cc8b7f5](cc8b7f5)) * force alpha release to npm ([78a2e69](78a2e69)) * hoist dependencies needed for plugins and PWAs ([fa91bc5](fa91bc5)) * race condition with symlinks ([fe2d496](fe2d496)) * recommend the use of 'pnpm' as a warning on init command ([e0cda6d](e0cda6d)) * Revert "fix: allow passing a reporter to init command ([6028374](6028374)) ### Features * support pnpm and other package managers ([9c81f35](9c81f35))

sonarqubecloud · 2026-01-13T14:36:29Z

Quality Gate failed

Failed conditions
2 New issues
2 New Code Smells (required ≤ 0)
1 New Critical Issues (required ≤ 0)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

## [12.10.2](v12.10.1...v12.10.2) (2026-01-13) ### Bug Fixes * rerun pipeline ([#949](#949)) ([d83ca2d](d83ca2d)) ### Features * decouple cli-app-scripts from yarn ([#933](#933)) ([71648a2](71648a2)), closes [#927](#927) [#927](#927) [#928](#928) [#928](#928) [#930](#930) [#930](#930) [#931](#931)

dhis2-bot · 2026-01-13T14:57:24Z

🎉 This PR is included in version 12.10.2 🎉

The release is available on:

Your semantic-release bot 📦🚀

kabaros and others added 20 commits July 23, 2025 07:38

feat: support pnpm and other package managers

9c81f35

fix: correct cli-app-script link

1d889ff

chore(release): cut 12.7.0-alpha.2 [skip release]

9187716

# [12.7.0-alpha.2](v12.7.0-alpha.1...v12.7.0-alpha.2) (2025-07-23) ### Bug Fixes * correct cli-app-script link ([1d889ff](1d889ff))

fix: default to pnpm as a package manager

2fb963f

chore(release): cut 12.7.0-alpha.3 [skip release]

7dcca0c

# [12.7.0-alpha.3](v12.7.0-alpha.2...v12.7.0-alpha.3) (2025-07-23) ### Bug Fixes * default to pnpm as a package manager ([2fb963f](2fb963f))

fix: change hoist options for phantom app-shell dependencies

ac9aa78

chore(release): cut 12.7.0-alpha.4 [skip release]

5242730

# [12.7.0-alpha.4](v12.7.0-alpha.3...v12.7.0-alpha.4) (2025-07-24) ### Bug Fixes * change hoist options for phantom app-shell dependencies ([ac9aa78](ac9aa78))

fix: add styled-jsx to hoisted dependencies

9e692bc

chore(release): cut 12.7.0-alpha.5 [skip release]

4c36791

# [12.7.0-alpha.5](v12.7.0-alpha.4...v12.7.0-alpha.5) (2025-07-24) ### Bug Fixes * add styled-jsx to hoisted dependencies ([9e692bc](9e692bc))

fix: change cli option for package manager to boolean '--pnpm'

e971c3d

chore(release): cut 12.7.0-alpha.6 [skip release]

290043d

# [12.7.0-alpha.6](v12.7.0-alpha.5...v12.7.0-alpha.6) (2025-07-24) ### Bug Fixes * change cli option for package manager to boolean '--pnpm' ([e971c3d](e971c3d))

fix: default args to undefined not 'false' to avoid conflict

2b54a06

chore(release): cut 12.7.0-alpha.7 [skip release]

382fbac

# [12.7.0-alpha.7](v12.7.0-alpha.6...v12.7.0-alpha.7) (2025-07-24) ### Bug Fixes * default args to undefined not 'false' to avoid conflict ([2b54a06](2b54a06))

fix: recommend the use of 'pnpm' as a warning on init command

e0cda6d

chore(release): cut 12.7.0-alpha.8 [skip release]

8bbd017

# [12.7.0-alpha.8](v12.7.0-alpha.7...v12.7.0-alpha.8) (2025-07-24) ### Bug Fixes * recommend the use of 'pnpm' as a warning on init command ([e0cda6d](e0cda6d))

fix: capitalise log messages

e480586

chore(release): cut 12.7.0-alpha.9 [skip release]

e1c1a5f

# [12.7.0-alpha.9](v12.7.0-alpha.8...v12.7.0-alpha.9) (2025-07-24) ### Bug Fixes * capitalise log messages ([e480586](e480586))

fix: ensure npm works as well as pnpm

2975d2e

fix: ensure app-shell symlink is created to avoid race conditon

223350e

kabaros commented Jul 24, 2025

View reviewed changes

kabaros and others added 6 commits July 24, 2025 10:50

test: fix failing test

f55bc5e

chore(release): cut 12.7.0-alpha.10 [skip release]

878865c

# [12.7.0-alpha.10](v12.7.0-alpha.9...v12.7.0-alpha.10) (2025-07-24) ### Bug Fixes * ensure app-shell symlink is created to avoid race conditon ([223350e](223350e)) * ensure npm works as well as pnpm ([2975d2e](2975d2e))

fix: race condition with symlinks

fe2d496

chore(release): cut 12.7.0-alpha.11 [skip release]

1708b32

# [12.7.0-alpha.11](v12.7.0-alpha.10...v12.7.0-alpha.11) (2025-07-24) ### Bug Fixes * race condition with symlinks ([fe2d496](fe2d496))

fix: add corepack packageManager field

acb4ac0

chore(release): cut 12.7.0-alpha.12 [skip release]

266c30b

# [12.7.0-alpha.12](v12.7.0-alpha.11...v12.7.0-alpha.12) (2025-07-24) ### Bug Fixes * add corepack packageManager field ([acb4ac0](acb4ac0))

kabaros marked this pull request as ready for review July 24, 2025 11:27

kabaros added 2 commits July 24, 2025 13:16

Merge remote-tracking branch 'origin/master' into alpha

824618d

fix: force alpha release to npm

78a2e69

chore(release): cut 12.7.0-alpha.15 [skip release]

dbd079e

# [12.7.0-alpha.15](v12.7.0-alpha.14...v12.7.0-alpha.15) (2025-07-28) ### Bug Fixes * hoist dependencies needed for plugins and PWAs ([fa91bc5](fa91bc5))

kabaros mentioned this pull request Jul 28, 2025

fix(internal): move to use pnpm instead of yarn 1 dhis2/aggregate-data-entry-app#481

Draft

kabaros and others added 2 commits July 28, 2025 20:26

Merge remote-tracking branch 'origin/master' into alpha

8e360a9

kabaros mentioned this pull request Aug 11, 2025

chore(app-platform): add packageManager field to package.json dhis2/data-exchange-app#124

Closed

kabaros force-pushed the alpha branch 2 times, most recently from 23701f5 to 79392dc Compare October 29, 2025 09:43

kabaros and others added 4 commits October 29, 2025 15:03

fix: allow passing a reporter to init command

ca36333

chore(release): cut 12.8.0-alpha.2 [skip release]

152c3d3

# [12.8.0-alpha.2](v12.8.0-alpha.1...v12.8.0-alpha.2) (2025-10-29) ### Bug Fixes * allow passing a reporter to init command ([ca36333](ca36333))

fix: Revert "fix: allow passing a reporter to init command

6028374

This reverts commit ca36333.

chore(release): cut 12.8.0-alpha.3 [skip release]

e2e260e

# [12.8.0-alpha.3](v12.8.0-alpha.2...v12.8.0-alpha.3) (2025-10-29) ### Bug Fixes * Revert "fix: allow passing a reporter to init command ([6028374](6028374))

KaiVandivier reviewed Jan 13, 2026

View reviewed changes

Comment thread cli/pnpm-lock.yaml

Copy link
Copy Markdown

Contributor

KaiVandivier Jan 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Have a check on this

KaiVandivier approved these changes Jan 13, 2026

View reviewed changes

kabaros and others added 2 commits January 13, 2026 14:32

Merge remote-tracking branch 'origin' into alpha

c064fdc

kabaros merged commit 71648a2 into master Jan 13, 2026
11 of 12 checks passed

kabaros deleted the alpha branch January 13, 2026 14:44

dhis2-bot added the released label Jan 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: decouple cli-app-scripts from yarn#933

feat: decouple cli-app-scripts from yarn#933
kabaros merged 41 commits intomasterfrom
alpha

kabaros commented Jul 23, 2025 •

edited

Loading

Uh oh!

kabaros Jul 24, 2025 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Jul 28, 2025

Uh oh!

sonarqubecloud Bot commented Oct 29, 2025

Uh oh!

KaiVandivier Jan 13, 2026

Uh oh!

KaiVandivier Jan 13, 2026

Uh oh!

KaiVandivier Jan 13, 2026

Uh oh!

KaiVandivier Jan 13, 2026

Uh oh!

KaiVandivier left a comment

Uh oh!

sonarqubecloud Bot commented Jan 13, 2026

Uh oh!

Uh oh!

dhis2-bot commented Jan 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

kabaros commented Jul 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Some notes:

To test:

Uh oh!

kabaros Jul 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud Bot commented Jul 28, 2025

Quality Gate passed

Uh oh!

sonarqubecloud Bot commented Oct 29, 2025

Quality Gate failed

Uh oh!

KaiVandivier Jan 13, 2026

Choose a reason for hiding this comment

Uh oh!

KaiVandivier Jan 13, 2026

Choose a reason for hiding this comment

Uh oh!

KaiVandivier Jan 13, 2026

Choose a reason for hiding this comment

Uh oh!

KaiVandivier Jan 13, 2026

Choose a reason for hiding this comment

Uh oh!

KaiVandivier left a comment

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud Bot commented Jan 13, 2026

Quality Gate failed

Uh oh!

Uh oh!

dhis2-bot commented Jan 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

kabaros commented Jul 23, 2025 •

edited

Loading

kabaros Jul 24, 2025 •

edited

Loading