onlyBuiltDependencies in pnpm-workspace.yaml is supported from [email protected]:

The pnpm.* settings from package.json can now be specified in the pnpm-workspace.yaml file instead.

onlyBuiltDependencies:
- esbuild
- fuse-native

pnpm approve-builds adds onlyBuiltDependencies to pnpm-workspace.yaml as of 10.7.1.

Current implementation is fixed to the pnpm.onlyBuiltDependencies field in the pacakge.json:

• #432

Backwards compatibility is supported and is probably fixed (?) in 10.6.1

When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.

package.json / pnpm.onlyBuiltDependencies is added

{
  "packageManager": "[email protected]+sha512.34e538c329b5553014ca8e8f4535997f96180a1d0f614339357449935350d924e22f8614682191264ec33d1462ac21561aff97f6bb18065351c162c7e8f6de67",
  "pnpm": {
    "onlyBuiltDependencies": [
      "esbuild"
    ]
  }
}

even when pnpm-workspace.yaml / onlyBuiltDependencies exists.

# pnpm-workspace.yaml

packages:
  - packages/*
  - sites/*

onlyBuiltDependencies:
  - '@tailwindcss/oxide'
  - esbuild

pnpm dlx sv create .

┌  Welcome to the Svelte CLI! (v0.9.5)
│
◇  Which template would you like?
│  SvelteKit minimal
│
◇  Add type checking with TypeScript?
│  Yes, using TypeScript syntax
│
◆  Project created
│
◇  What would you like to add to your project? (use arrow keys / space bar)
│  prettier, eslint, tailwindcss, sveltekit-adapter
│
◇  tailwindcss: Which plugins would you like to add?
│  none
│
◇  sveltekit-adapter: Which SvelteKit adapter would you like to use?
│  static
│
◆  Successfully setup add-ons
│
◇  Which package manager do you want to install dependencies with?
│  pnpm
│
◆  Successfully installed dependencies
│
◇  Successfully formatted modified files
│
◇  What's next? ───────────────────────────────╮
│                                              │
│  📁 Project steps                            │
│                                              │
│    1: pnpm run dev --open                    │
│                                              │
│  To close the dev server, hit Ctrl-C         │
│                                              │
│  Stuck? Visit us at https://svelte.dev/chat  │
│                                              │
├──────────────────────────────────────────────╯
│
└  You're all set!

corepack use pnpm@latest

╭ Warning ───────────────────────────────────────────────────────────────────────────────────╮
│                                                                                            │
│   Ignored build scripts: @tailwindcss/oxide.                                               │
│   Run "pnpm approve-builds" to pick which dependencies should be allowed to run scripts.   │
│                                                                                            │
╰────────────────────────────────────────────────────────────────────────────────────────────╯