Skip to content

fix(studio): Address pnpm audit and latest node versions #1042

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
steramae-nvidia merged 3 commits into from
Aug 3, 2026
Merged

fix(studio): Address pnpm audit and latest node versions #1042

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
0de49e7
fix(studio): Address pnpm audit and latest node versions
steramae-nvidia Aug 3, 2026
27987f3
docs: update README bootstrap Node version to 22.23.2
steramae-nvidia Aug 3, 2026
7622b69
docs: align documented Node/pnpm toolchain versions with web/package.…
steramae-nvidia Aug 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -242,7 +242,7 @@ Ensure all pre-commit hooks pass by running `uv run pre-commit run -a`. A clean
- **uv version pin:** Root `pyproject.toml` requires `uv>=0.9.14,<0.10.0`. Newer uv releases (e.g. 0.11.x) fail `uv sync` with a version mismatch. Install the pinned range before bootstrapping: `pip install 'uv>=0.9.14,<0.10.0'`.
- **Native build deps:** `make bootstrap-python` builds `annoy` (via `nemoguardrails`). Install system headers once per VM image: `sudo apt-get install -y python3-dev build-essential`.
- **Python bootstrap:** Run `make bootstrap-python` from repo root (creates `.venv`, runs `uv sync --frozen --all-packages`). See [SETUP.md](SETUP.md) for the full playbook.
- **Studio (optional):** `make bootstrap-studio` requires Node **22.18.x** and pnpm per `web/package.json` engines. The VM may ship an older Node (e.g. 22.14); API services still run without Studio assets. Upgrade Node then run `make bootstrap-studio` if you need `http://localhost:8080/studio/`.
- **Studio (optional):** `make bootstrap-studio` requires Node **22.23.x** and pnpm per `web/package.json` engines. The VM may ship an older Node (e.g. 22.14); API services still run without Studio assets. Upgrade Node then run `make bootstrap-studio` if you need `http://localhost:8080/studio/`.
Comment thread
steramae-nvidia marked this conversation as resolved.

### Running the platform

Expand Down
2 changes: 1 addition & 1 deletion Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -233,7 +233,7 @@ bootstrap: bootstrap-python ## Bootstrap the local dev environment, including St
echo "warning: optional Studio asset bootstrap did not complete."; \
echo "Studio will be unavailable at http://localhost:8080/studio/ until assets are built."; \
echo "Install Node.js matching web/package.json with pnpm, then rerun:"; \
echo " pnpm env use --global 22.18.0"; \
echo " pnpm env use --global 22.23.2"; \
Comment thread
coderabbitai[bot] marked this conversation as resolved.
echo " make bootstrap-studio"; \
fi
@echo "bootstrap completed"
Expand Down
4 changes: 2 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ NeMo Platform brings NVIDIA NeMo libraries together under one CLI, Python SDK, a

## Get started

**Prerequisites:** Python 3.12-3.13, `uv>=0.9.14,<0.10.0`, and an API key for an inference provider (NVIDIA Build, OpenAI, Anthropic, Google Gemini, or a local Ollama instance). For source development, you also need Git, GNU Make, and Node.js 22.18.x with `pnpm` if you want the web UI.
**Prerequisites:** Python 3.12-3.13, `uv>=0.9.14,<0.10.0`, and an API key for an inference provider (NVIDIA Build, OpenAI, Anthropic, Google Gemini, or a local Ollama instance). For source development, you also need Git, GNU Make, and — if you want the web UI — Node.js `>=22.23.2 <23` with `pnpm>=10.34.5`.

Quick install from PyPI:

Expand Down Expand Up @@ -79,7 +79,7 @@ nemo services run
<details>
<summary>Studio (web UI) bootstrap troubleshooting</summary>

If `make bootstrap` reports that Studio asset bootstrap did not complete, the API still runs but the web UI is unavailable until the bundle is built. Install Node 22.18.x with `pnpm env use --global 22.18.0`, then run `make bootstrap-studio` from the repo root.
If `make bootstrap` reports that Studio asset bootstrap did not complete, the API still runs but the web UI is unavailable until the bundle is built. Install Node 22.23.x with `pnpm env use --global 22.23.2`, then run `make bootstrap-studio` from the repo root.
Comment thread
steramae-nvidia marked this conversation as resolved.

</details>

Expand Down
6 changes: 3 additions & 3 deletions docs/get-started/setup.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ Install NeMo Platform and start working with AI agents.
- An API key from one of: [NVIDIA Build](https://build.nvidia.com), [OpenAI](https://platform.openai.com/api-keys), [Anthropic](https://console.anthropic.com/settings/keys), [Google Gemini](https://aistudio.google.com/apikey), or a local [Ollama](https://ollama.com) instance (no key needed)
- 16 GB available disk space and 8 GB RAM
- For the PyPI install: `pip` in a Python environment
- For the source checkout install: [Git](https://git-scm.com/), GNU Make, [uv](https://docs.astral.sh/uv/) `>=0.9.14,<0.10.0`, [Node.js (≥22.18.0, \<23)](https://nodejs.org/en/download) satisfying `web/package.json`, and [pnpm](https://pnpm.io/installation)
- For the source checkout install: [Git](https://git-scm.com/), GNU Make, [uv](https://docs.astral.sh/uv/) `>=0.9.14,<0.10.0`, [Node.js (≥22.23.2, \<23)](https://nodejs.org/en/download) satisfying `web/package.json`, and [pnpm](https://pnpm.io/installation)

## Install

Expand Down Expand Up @@ -50,7 +50,7 @@ source .venv/bin/activate

The `make bootstrap` target creates the Python environment, syncs Python dependencies, builds Studio assets, and installs local plugins.

If Studio asset bootstrap fails, the API can still run but Studio is unavailable until the web bundle is built. Install Node.js with pnpm using `pnpm env use --global 22.18.0`, then rerun `make bootstrap-studio` from the repository root.
If Studio asset bootstrap fails, the API can still run but Studio is unavailable until the web bundle is built. Install Node.js with pnpm using `pnpm env use --global 22.23.2`, then rerun `make bootstrap-studio` from the repository root.
Comment thread
steramae-nvidia marked this conversation as resolved.

Verify the installation:

Expand Down Expand Up @@ -244,7 +244,7 @@ Check `~/.local/state/nmp/instances/<scope>/services.log` in the directory where

### Studio returns 404 or unavailable

Studio requires the FastAPI web assets built by `make bootstrap-studio`. If `make bootstrap` warned that Studio asset bootstrap did not complete, install Node.js with pnpm using `pnpm env use --global 22.18.0`, then rerun `make bootstrap-studio` and `nemo services restart` from the repository root.
Studio requires the FastAPI web assets built by `make bootstrap-studio`. If `make bootstrap` warned that Studio asset bootstrap did not complete, install Node.js with pnpm using `pnpm env use --global 22.23.2`, then rerun `make bootstrap-studio` and `nemo services restart` from the repository root.

### No models discovered

Expand Down
2 changes: 1 addition & 1 deletion web/.nvmrc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
22
22.23.2
6 changes: 3 additions & 3 deletions web/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,8 +54,8 @@
"typescript-eslint": "^8.59.0"
},
"engines": {
"node": ">=22.18.0 <23",
"pnpm": ">=10.32.1"
"node": ">=22.23.2 <23",
"pnpm": ">=10.34.5"
},
"packageManager": "pnpm@10.32.1"
"packageManager": "pnpm@10.34.5"
Comment thread
coderabbitai[bot] marked this conversation as resolved.
}
2 changes: 1 addition & 1 deletion web/packages/studio/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -115,7 +115,7 @@
"@vitest/ui": "catalog:",
"blob-polyfill": "^9.0.20240710",
"happy-dom": "catalog:",
"js-yaml": "^4.2.0",
"js-yaml": "^4.3.0",
"jsdom": "catalog:",
"msw": "catalog:",
"postcss": "catalog:",
Expand Down
110 changes: 49 additions & 61 deletions web/pnpm-lock.yaml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading