chore: bump turbo to 2.9.14, migrate pnpm config to workspace yaml (#9147)

* chore: bump turbo to 2.9.14, migrate pnpm config to workspace yaml

- Bump turbo from 2.9.4 to 2.9.14 in root package.json and the
  four production Dockerfiles (web, live, admin, space).
- Move pnpm.overrides, onlyBuiltDependencies, and
  ignoredBuiltDependencies from package.json into pnpm-workspace.yaml.
  pnpm v10+ no longer reads the pnpm field in package.json, so the
  full overrides block and most of onlyBuiltDependencies were being
  silently ignored.
- Add @plane/utils as a workspace dependency to the live server.

* chore: drop unused allowBuilds block, bump lodash-es to 4.18.1

- Remove the `allowBuilds` block from pnpm-workspace.yaml. It is not
  a recognized pnpm v10/v11 key and its values were inconsistent with
  the actual `onlyBuiltDependencies` / `ignoredBuiltDependencies`
  configuration.
- Bump `lodash-es` catalog entry from 4.18.0 to 4.18.1. With overrides
  now applied workspace-wide, 4.18.0 (marked deprecated as a "bad
  release") was being enforced everywhere.

* fix: use pnpm v11 allowBuilds in place of removed legacy keys

`onlyBuiltDependencies` and `ignoredBuiltDependencies` were removed
in pnpm v11. They were being silently ignored on this branch, which
caused `ERR_PNPM_IGNORED_BUILDS` to fail CI under `--frozen-lockfile`.

Replace them with the v11-native `allowBuilds:` block, mapping the
previous allowlist to `true` and the previous denylist (sharp) to
`false`. Locally verified that the build scripts for @parcel/watcher,
@swc/core, esbuild, and msgpackr-extract now run on install.

apps/admin/Dockerfile.admin

@@ -13,7 +13,7 @@ RUN corepack enable pnpm
 
 FROM base AS builder
 
-RUN pnpm add -g turbo@2.9.4
+RUN pnpm add -g turbo@2.9.14
 
 COPY . .
 

apps/live/Dockerfile.live

@@ -15,7 +15,7 @@ RUN apk update
 RUN apk add --no-cache libc6-compat
 # Set working directory
 WORKDIR /app
-ARG TURBO_VERSION=2.9.4
+ARG TURBO_VERSION=2.9.14
 RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION}
 COPY . .
 RUN turbo prune --scope=live --docker

apps/live/package.json

@@ -39,6 +39,7 @@
     "@plane/editor": "workspace:*",
     "@plane/logger": "workspace:*",
     "@plane/types": "workspace:*",
+    "@plane/utils": "workspace:*",
     "@react-pdf/renderer": "^4.3.0",
     "@react-pdf/types": "^2.9.2",
     "@tiptap/core": "catalog:",

apps/space/Dockerfile.space

@@ -13,7 +13,7 @@ RUN corepack enable pnpm
 
 FROM base AS builder
 
-RUN pnpm add -g turbo@2.9.4
+RUN pnpm add -g turbo@2.9.14
 
 COPY . .
 

apps/web/Dockerfile.web

@@ -14,7 +14,7 @@ RUN apk add --no-cache libc6-compat
 # Set working directory
 WORKDIR /app
 
-ARG TURBO_VERSION=2.9.4
+ARG TURBO_VERSION=2.9.14
 RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION}
 COPY . .
 

package.json

@@ -24,7 +24,7 @@
     "lint-staged": "16.2.7",
     "oxfmt": "0.35.0",
     "oxlint": "1.51.0",
-    "turbo": "2.9.4"
+    "turbo": "2.9.14"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx,cjs,mjs,cts,mts,json,css,md}": [
@@ -37,57 +37,5 @@
   "engines": {
     "node": ">=22.18.0"
   },
-  "packageManager": "pnpm@10.32.1+sha512.a706938f0e89ac1456b6563eab4edf1d1faf3368d1191fc5c59790e96dc918e4456ab2e67d613de1043d2e8c81f87303e6b40d4ffeca9df15ef1ad567348f2be",
-  "pnpm": {
-    "overrides": {
-      "express": "catalog:",
-      "mdast-util-to-hast": "13.2.1",
-      "valibot": "1.2.0",
-      "glob": "11.1.0",
-      "brace-expansion": "5.0.5",
-      "nanoid": "3.3.8",
-      "esbuild": "0.25.0",
-      "@babel/helpers": "7.26.10",
-      "@babel/runtime": "7.26.10",
-      "chokidar": "3.6.0",
-      "prosemirror-view": "1.40.0",
-      "@types/express": "4.17.23",
-      "typescript": "catalog:",
-      "vite": "catalog:",
-      "qs": "6.14.2",
-      "diff": "5.2.2",
-      "webpack": "5.104.1",
-      "lodash-es": "catalog:",
-      "lodash": "4.18.1",
-      "markdown-it": "14.1.1",
-      "rollup": "4.59.0",
-      "minimatch@3": "3.1.4",
-      "minimatch@10": "10.2.3",
-      "serialize-javascript": "7.0.5",
-      "ajv@6": "6.14.0",
-      "ajv@8": "8.18.0",
-      "undici@7": "7.24.0",
-      "flatted": "3.4.2",
-      "picomatch": "2.3.2",
-      "yaml@1": "1.10.3",
-      "yaml@2": "2.8.3",
-      "path-to-regexp": "0.1.13",
-      "defu": "6.1.5",
-      "postcss": "8.5.10",
-      "axios": "catalog:",
-      "follow-redirects": "1.16.0",
-      "uuid": "catalog:",
-      "fast-uri@<3.1.2": ">=3.1.2"
-    },
-    "onlyBuiltDependencies": [
-      "@parcel/watcher",
-      "@swc/core",
-      "esbuild",
-      "msgpackr-extract",
-      "turbo"
-    ],
-    "ignoredBuiltDependencies": [
-      "sharp"
-    ]
-  }
+  "packageManager": "pnpm@11.3.0+sha512.2c403d6594527287672b1f7056343a1f7c3634036a67ffabfcc2b3d7595d843768f8787148d1b57cf7956c90606bbd192857c363af19e96d2d0ec9ec5741d215"
 }

pnpm-workspace.yaml

@@ -1,8 +1,8 @@
 packages:
-- apps/*
-- packages/*
-- "!apps/api"
-- "!apps/proxy"
+  - apps/*
+  - packages/*
+  - "!apps/api"
+  - "!apps/proxy"
 
 catalog:
   "@atlaskit/pragmatic-drag-and-drop-auto-scroll": 1.4.0
@@ -24,7 +24,7 @@ catalog:
   i18next: 25.10.9
   i18next-icu: 2.4.3
   i18next-resources-to-backend: 1.2.1
-  lodash-es: 4.18.0
+  lodash-es: 4.18.1
   lucide-react: 0.469.0
   mobx-react: 9.1.1
   mobx-utils: 6.0.8
@@ -40,5 +40,50 @@ catalog:
   uuid: 14.0.0
   vite: 7.3.2
 
-onlyBuiltDependencies:
-- turbo
+overrides:
+  express: "catalog:"
+  mdast-util-to-hast: 13.2.1
+  valibot: 1.2.0
+  glob: 11.1.0
+  brace-expansion: 5.0.5
+  nanoid: 3.3.8
+  esbuild: 0.25.0
+  "@babel/helpers": 7.26.10
+  "@babel/runtime": 7.26.10
+  chokidar: 3.6.0
+  prosemirror-view: 1.40.0
+  "@types/express": 4.17.23
+  typescript: "catalog:"
+  vite: "catalog:"
+  qs: 6.14.2
+  diff: 5.2.2
+  webpack: 5.104.1
+  lodash-es: "catalog:"
+  lodash: 4.18.1
+  markdown-it: 14.1.1
+  rollup: 4.59.0
+  "minimatch@3": 3.1.4
+  "minimatch@10": 10.2.3
+  serialize-javascript: 7.0.5
+  "ajv@6": 6.14.0
+  "ajv@8": 8.18.0
+  "undici@7": 7.24.0
+  flatted: 3.4.2
+  picomatch: 2.3.2
+  "yaml@1": 1.10.3
+  "yaml@2": 2.8.3
+  path-to-regexp: 0.1.13
+  defu: 6.1.5
+  postcss: 8.5.10
+  axios: "catalog:"
+  follow-redirects: 1.16.0
+  uuid: "catalog:"
+  "fast-uri@<3.1.2": ">=3.1.2"
+
+allowBuilds:
+  "@parcel/watcher": true
+  "@swc/core": true
+  esbuild: true
+  msgpackr-extract: true
+  turbo: true
+  sharp: false