Support PNPM v10

TL;DR

Dependabot now supports PNPM v10: it was upgraded to pnpm 10.11.1 and the supported-ecosystems docs were updated. I would like to be able to use it in my projects as long as Dependabot will work with it.

Steps

1. Dependabot now supports PNPM v10: it was upgraded to pnpm 10.11.1 and the supported-ecosystems docs were updated. If Dependabot still behaves oddly on your pnpm 10 project, check the packageManager field in package.json and note Dependabot has experimental corepack support for project-specific versions.

When to use

You are seeing this: https://github.com/dependabot/dependabot-core/issues/11246: Issue dependabot/dependabot-core#11246 (closed, 71 comments): ### Is there an existing issue for this? - [X] I have searched the existing issues ### Feature description Dependabot supported... Use this skill when you run into "Support PNPM v10".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

Versions mentioned in the source: pnpm 10.11.1, v10.0.0. If you are on something much newer or older, the details may have shifted.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Sources

• https://github.com/dependabot/dependabot-core/issues/11246:
• https://docs.github.com/en/enterprise-cloud@latest/code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories#supported-ecosystems-and-repositories
• https://github.com/pnpm/pnpm/releases/tag/v10.0.0

Issue gh:dependabot/dependabot-core#11246: the reporter asked: Issue dependabot/dependabot-core#11246 (closed, 71 comments): ### Is there an existing issue for this? - [X] I have searched the existing issues ### Feature description Dependabot supported ecosystems and repositories - GitHub Enterprise Cloud Docs stats that PNPM v7, v8, and v9 are supported. v10 was recently released. I would like to be able to use it in my projects as long as Dependabot will work with it. The verified answer was: Dependabot now supports PNPM v10: it was upgraded to pnpm 10.11.1 and the supported-ecosystems docs were updated. If Dependabot still behaves oddly on your pnpm 10 project, check the packageManager field in package.json and note Dependabot has experimental corepack support for project-specific versions. Evidence thread: https://github.com/dependabot/dependabot-core/issues/11246