feat: pnpm support

.github/workflows/test.yml

@@ -4,7 +4,7 @@ name: test
 
 on:
   push:
-    branches: ['main']
+    branches: [ 'main' ]
   pull_request:
 
 jobs:
@@ -46,6 +46,18 @@ jobs:
         with:
           cmd: install
           dir: 'yarn/test'
+      - name: Setup node
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+        with:
+          node-version: 16.14.0
+      - name: Install dependencies with pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          # lock file 6.0
+          version: 8
+          run_install: |
+            - cwd: 'pnpm/test'
+          package_json_file: 'pnpm/test/package.json'
       - name: Run swift build
         working-directory: 'swift/test'
         run: swift build

go.mod

@@ -12,6 +12,7 @@ require (
 	github.com/stretchr/testify v1.8.4
 	github.com/vifraa/gopom v0.2.1
 	golang.org/x/mod v0.11.0
+	gopkg.in/yaml.v3 v3.0.1
 	sigs.k8s.io/release-utils v0.7.4
 )
 
@@ -52,5 +53,4 @@ require (
 	gonum.org/v1/gonum v0.8.2 // indirect
 	gopkg.in/neurosnap/sentences.v1 v1.0.7 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
-	gopkg.in/yaml.v3 v3.0.1 // indirect
 )

npm/handler.go

@@ -192,6 +192,7 @@ func (m *NPM) buildDependencies(path string, deps map[string]interface{}) ([]met
 	if err != nil {
 		return modules, err
 	}
+	de.Root = true
 	h := fmt.Sprintf("%x", sha256.Sum256([]byte(fmt.Sprintf("%s-%s", de.Name, de.Version))))
 	de.Checksum = meta.Checksum{
 		Algorithm: "SHA256",