From 8044db8618c43be0c1c76e08ad70defb19300a4f Mon Sep 17 00:00:00 2001
From: John McLear <john@mclear.co.uk>
Date: Tue, 31 Mar 2026 10:24:19 +0100
Subject: [PATCH] Add pnpm update step to checkPlugin for dependency updates

Run pnpm update on plugins during autofix to bump all dependencies
to their latest compatible versions, reducing dependabot noise and
keeping plugins current.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 bin/plugins/checkPlugin.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/plugins/checkPlugin.ts b/bin/plugins/checkPlugin.ts
index e2ca59d5ee0..9d81e8bca78 100644
--- a/bin/plugins/checkPlugin.ts
+++ b/bin/plugins/checkPlugin.ts
@@ -403,6 +403,12 @@ log4js.configure({
     logger.warn('Test files not found, please create tests.  https://github.com/ether/etherpad-lite/wiki/Creating-a-plugin#writing-and-running-front-end-tests-for-your-plugin');
   }
 
+  // Update all dependencies to their latest compatible versions.
+  if (autoFix) {
+    logger.info('Updating dependencies...');
+    execSync('pnpm update', {cwd: `${pluginPath}/`, stdio: 'inherit'});
+  }
+
   // Install dependencies so we can run ESLint. This should also create or update package-lock.json
   // if autoFix is enabled.
   const npmInstall = `pnpm install`;