install: fail --frozen-lockfile on manifest drift and fix the spurious lockfile re-saves behind it - #33632

Closed

robobun wants to merge 5 commits into

mainfrom

farm/8cbd0739/frozen-lockfile-new-direct-dep

Commits on Aug 15, 2026

install: stop reporting manifest diffs for repos whose lockfile is already up to date
robobun
committed
2168cf3
install: record workspace versions when migrating pnpm-lock.yaml
robobun
committed
4626fb9
install: fail --frozen-lockfile when a manifest diverges from bun.lock, and say which one
robobun
committed
efd0b62
test: frozen-lockfile manifest drift and up-to-date repo shapes
robobun
committed
b9407df
install: debug lockfile JSON wrote the package name as a dist-tag dependency's tag
robobun
committed
13f2595