From 12e7cf9c364c5f0d117891b5cfe6893b5fd05a4c Mon Sep 17 00:00:00 2001
From: Tony <TonyRL@users.noreply.github.com>
Date: Tue, 5 Nov 2024 23:20:47 +0800
Subject: [PATCH] chore: pin difflib to github tarball in package.json

remove auto commit since it skips tests

related:
https://github.com/dependabot/dependabot-core/issues/7258
https://github.com/dependabot/dependabot-core/issues/7851
https://github.com/dependabot/dependabot-core/issues/10124

https://github.com/pnpm/pnpm/issues/6050
https://github.com/pnpm/pnpm/issues/6530
https://github.com/pnpm/pnpm/issues/8343
---
 .github/workflows/test.yml | 25 -------------------------
 package.json               |  5 +++++
 2 files changed, 5 insertions(+), 25 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e70dd3c8bb7d3a..bc8fbb8cb131ab 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,31 +15,6 @@ permissions:
   checks: write
 
 jobs:
-  fix-pnpm-lock:
-    # workaround for https://github.com/dependabot/dependabot-core/issues/7258
-    # until https://github.com/pnpm/pnpm/issues/6530 is fixed
-    if: github.triggering_actor == 'dependabot[bot]' && github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-      contents: write
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: lts/*
-          cache: 'pnpm'
-      - run: |
-          rm pnpm-lock.yaml
-          pnpm i
-      - uses: stefanzweifel/git-auto-commit-action@v5
-        with:
-          commit_message: 'chore: fix pnpm install'
-          commit_user_name: dependabot[bot]
-          commit_user_email: 49699333+dependabot[bot]@users.noreply.github.com
-          commit_author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
   vitest:
     runs-on: ubuntu-latest
     timeout-minutes: 10
diff --git a/package.json b/package.json
index 1b7e59998f82d6..145c44770479ee 100644
--- a/package.json
+++ b/package.json
@@ -198,5 +198,10 @@
     "packageManager": "pnpm@9.12.3",
     "engines": {
         "node": ">=22"
+    },
+    "pnpm": {
+        "overrides": {
+            "difflib": "https://codeload.github.com/postlight/difflib.js/tar.gz/32e8e38c7fcd935241b9baab71bb432fd9b166ed"
+        }
     }
 }