fix: validate peer dependencies in release workflow and update ci:version script

.config/knip.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://unpkg.com/knip@latest/schema.json",
+  "workspaces": {
+    "packages/*": {
+      "entry": ["dist/index.mjs"],
+      "project": "**/*.{js,ts,mjs,mts}",
+      "ignoreDependencies": ["unbuild"]
+    }
+  },
+  "ignore": ["**/node_modules/**"],
+  "ignoreExportsUsedInFile": true,
+  "rules": {
+    "dependencies": "error",
+    "devDependencies": "warn",
+    "peerDependencies": "error"
+  }
+} 

.github/workflows/release.yml

@@ -41,7 +41,12 @@ jobs:
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
+      - name: Validate dependencies
+        if: steps.changesets.outputs.published == 'true'
+        run: |
+          pnpm run deps:check
+        env:
+          NODE_ENV: production
       - name: Publish to jsr.io
         if: steps.changesets.outputs.published == 'true'
         run: pnpx @qingshaner/jsr-release publish --changesetReleases='${{ steps.changesets.outputs.publishedPackages }}'

package.json

@@ -12,21 +12,23 @@
     "type-check": "biome lint && tsc",
     "test": "pnpm --color -r run test",
     "ci:install": "pnpm install --no-frozen-lockfile",
-    "ci:version": "changeset version && pnpx @qingshaner/jsr-release --allowDirty version --sync",
+    "ci:version": "changeset version && pnpm add -D @pnpm/logger@^5.1.0 @pnpm/worker@^1000.1.3 && pnpx @qingshaner/jsr-release --allowDirty version --sync",
     "ci:publish": "changeset publish",
     "ci:prepublish": "pnpm build",
+    "deps:check": "pnpm dlx knip --production --no-exit-code --reporter=md",
     "jsr:test": "pnpm --filter \"@clack/*\" jsr --dry-run",
     "jsr:run": "pnpm --filter \"@clack/*\" jsr"
   },
   "devDependencies": {
     "@biomejs/biome": "1.9.4",
     "@changesets/cli": "^2.26.2",
     "@types/node": "^18.16.0",
+    "knip": "^3.8.4",
     "typescript": "^5.2.2",
     "unbuild": "^2.0.0"
   },
   "packageManager": "[email protected]",
   "volta": {
     "node": "20.18.1"
   }
-}
+}