replace npm with pnpm

.github/dependabot.yml

@@ -1,6 +1,6 @@
 version: 2
 updates:
-   - package-ecosystem: "npm"
+   - package-ecosystem: "pnmp"
      directory: "/"
      schedule:
         interval: "daily"

.github/workflows/docker-build-custom.yml

@@ -34,12 +34,12 @@ jobs:
             token: ${{ secrets.GITHUB_TOKEN }}
 
         - name: Install dependencies
-          run: npm install
+          run: pnmp install
           working-directory: ./ab_platform_web
 
         # Webpack
         - name: Webpack build
-          run: npm run build:${{ inputs.build_type }}
+          run: pnmp run build:${{ inputs.build_type }}
           working-directory: ./ab_platform_web
           env:
             SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}

.github/workflows/e2e-tests.yml

@@ -34,11 +34,20 @@ jobs:
               token: ${{ secrets.GITHUB_TOKEN }}
               ref: ${{ matrix.branch }}
 
-         - run: npm i
+         - uses: actions/setup-node@v4
+           with:
+              node-version: 22
+              cache: pnpm
+              cache-dependency-path: ab_platform_web/pnpm-lock.yaml
+         - uses: pnpm/action-setup@v4
+           with:
+              version: 11.0.6
+
+         - run: pnpm install --frozen-lockfile
            working-directory: ./ab_platform_web
 
          - name: Webpack
-           run: npm run build:${{ matrix.webpack }}
+           run: pnpm run build:${{ matrix.webpack }}
            working-directory: ./ab_platform_web
 
          # webpack expects the folder to be called "web" ab-install action expects "ab_service_web"

.github/workflows/lighthouse.yml

@@ -22,12 +22,12 @@ jobs:
               token: ${{ secrets.GITHUB_TOKEN }}
               ref: master
 
-         - name: Install NPM Dependencies
-           run: npm i
+         - name: Install pnmp Dependencies
+           run: pnmp i
            working-directory: ./ab_platform_web
 
          - name: Run Webpack
-           run: npm run build:update
+           run: pnmp run build:update
            working-directory: ./ab_platform_web
 
          # webpack expects the folder to be called "web" ab-install action expects "ab_service_web"
@@ -49,7 +49,7 @@ jobs:
 
          - name: Run Lighthouse CI
            run: |
-              npm install -g @lhci/cli puppeteer
+              pnmp install -g @lhci/cli puppeteer
               lhci autorun
            working-directory: ./ab_platform_web
            env:

.github/workflows/merging-rules.yml

@@ -11,6 +11,7 @@ permissions:
 jobs:
    e2e-tests:
       uses: ./.github/workflows/e2e-tests.yml
+      secrets: inherit
    dependabot:
       runs-on: ubuntu-latest
       needs: e2e-tests

.github/workflows/pr-merge-release.yml

@@ -19,6 +19,7 @@ jobs:
     # Only run if the PR closed by merging and we have a label
     if: ${{ needs.call-get-label.outputs.valid == 'true' }}
     uses: ./.github/workflows/e2e-tests.yml
+    secrets: inherit
   call-bump-version:
     name: Version
     # Only run if tests pass

.github/workflows/unit-tests.yml

@@ -8,6 +8,13 @@ jobs:
          - uses: actions/checkout@v4
            with:
               submodules: true
-         - run: npm install
-         - run: npm test
-
+         - uses: actions/setup-node@v4
+           with:
+              node-version: 22
+              cache: pnpm
+              cache-dependency-path: pnpm-lock.yaml
+         - uses: pnpm/action-setup@v4
+           with:
+              version: 11.0.6
+         - run: pnpm install --frozen-lockfile
+         - run: pnpm test

.github/workflows/update-core-version.yml

@@ -22,6 +22,7 @@ jobs:
     name: Test
     needs: call-update-sub
     uses: ./.github/workflows/e2e-tests.yml
+    secrets: inherit
     with:
       ref: ${{ needs.call-update-sub.outputs.branch }}
 

package.json

@@ -1,6 +1,7 @@
 {
   "name": "ab_platform_web",
-  "version": "1.23.7+c21502",
+  "packageManager": "pnpm@11.0.6",
+  "version": "1.23.5",
   "description": "AppBuilder runtime environment for the Web client.",
   "main": "index.js",
   "scripts": {