Fresh dependency resolution in Release Smoke can select versions newer than our patches, failing with ERR_PNPM_UNUSED_PATCH for @expo/fingerprint and expo-network.
Add exact workspace overrides for all patched packages that lacked one and refresh the lockfile. Existing exact overrides remain in place, so every patched package is pinned, including transitive dependencies. Resolved package versions are unchanged.
Validation: node scripts/release-smoke.ts passes, including regeneration without a lockfile; vp run check:changed passes formatting and typechecks for all 32 packages; git diff --check passes. This is dependency configuration only, with no visual changes.
Model: GPT-6.1 Sol. Harness: Codex in T3 Code.
Review completed
Added 1 commit
Verdict: Needs Human Approval
Macroscope's review found this PR requires human approval ā This pins existing patched dependencies for reproducible lockfile-free installs without changing the normal locked graph. Human review is warranted because the pins include the Clerk Expo authentication package, whose patched runtime behavior affects native auth navigation.
You can add or adjust custom eligibility rules. Learn more.
No actionable comments were generated in the recent review. š
31bd5222-4d41-462c-a320-c7fd70c606e3Reviewing files that changed from the base of the PR and between fd1063ba7c452e2a938484277235afebf0639119 and a1d912aa0b592412f33438fe34a7b6f44038c0fa.
pnpm-lock.yaml is excluded by !**/pnpm-lock.yamlpnpm-workspace.yamlIncluded review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 6 remain after this review.
The workspace configuration adds exact version pins for patched packages under overrides. The existing expo-modules-core override remains unchanged, but its explanatory comment is removed.
Changes: Dependency overrides
| Layer / File(s) | Summary |
|---|---|
Add exact package version pins pnpm-workspace.yaml | The overrides section adds exact version pins for patched packages. The existing expo-modules-core pin remains unchanged, and its explanatory comment is removed. |
Priority: ā Normal
Estimated code review effort: 2 (Simple) | ~5 minutes
Change: Bug fix
Suggested reviewers: project516
a1d91The dependency override changes are mergeable based on the supplied evidence.
| Check name | Status | Explanation |
|---|---|---|
| Title check | Passed | The title clearly and concisely describes the main change: pinning patched dependency versions. |
| Description check | Passed | The description explains the dependency-resolution problem, the override and lockfile changes, and specific verification results. It is mostly complete, but it does not explicitly document the Scope aā¦ |
| Linked Issues check | Passed | Check skipped because no linked issues were found for this pull request. |
| Out of Scope Changes check | Passed | Check skipped because no linked issues were found for this pull request. |
Explanation
The description explains the dependency-resolution problem, the override and lockfile changes, and specific verification results. It is mostly complete, but it does not explicitly document the Scope and approval requirement or explain why this focused configuration change qualifies without prior approval.
Comment @coderabbitai help to get the list of available commands.
ā Thread transfer remains within every enforced ceiling.
ā¹ļø The exact PR base did not have a successful artifact. Baseline uses the latest successful
mainmeasurement shown below.
| Provider | Metric | Main baseline | This PR | Impact | PR ceiling | |
|---|---|---|---|---|---|---|
| Codex | Total thread wire | 5.0 KiB | 5.0 KiB | ā7 B (ā0.1%) | 6.8 KiB | ā |
| Codex | Thread snapshot wire | 3.8 KiB | 3.8 KiB | 0 B (0.0%) | 4.9 KiB | ā |
| Codex | Live turn WebSocket wire | 1.2 KiB | 1.2 KiB | ā7 B (ā0.6%) | 2.0 KiB | ā |
| Codex | Live turn WebSocket decoded | 20.9 KiB | 20.9 KiB | 0 B (0.0%) | 29.3 KiB | ā |
| Codex | Live turn messages | 2 | 2 | 0 (0.0%) | 8 | ā |
| Claude | Total thread wire | 5.0 KiB | 5.0 KiB | +7 B (+0.1%) | 6.8 KiB | ā |
| Claude | Thread snapshot wire | 3.8 KiB | 3.8 KiB | 0 B (0.0%) | 4.9 KiB | ā |
| Claude | Live turn WebSocket wire | 1.2 KiB | 1.2 KiB | +7 B (+0.6%) | 2.0 KiB | ā |
| Claude | Live turn WebSocket decoded | 21.2 KiB | 21.2 KiB | 0 B (0.0%) | 29.3 KiB | ā |
| Claude | Live turn messages | 2 | 2 | 0 (0.0%) | 8 | ā |
Baseline: 4eae8ae Ā· PR result: a1d912a Ā· Source CI: success
10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.
Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.
