chore(website): migrate to pnpm and enable minimum release age (#724)

## Summary

Migrates the `website/` subdirectory from Yarn 4 to pnpm 10.24.0 as part
of an org-wide supply-chain hardening effort. The Python root (`uv`) is
unchanged.

Enables a 24h minimum release age for third-party npm packages via
`pnpm-workspace.yaml` (with `@apify/*` and `@crawlee/*` excluded so
first-party releases stay fast), and mirrors the policy in
`renovate.json` via `internalChecksFilter=strict` plus a `packageRule`
that sets `minimumReleaseAge: 0 days` for the same scopes.

## Changes

- `website/package.json`: renamed to `apify-client-python-website`,
marked `private: true`, set `packageManager` to `pnpm@10.24.0`, rewrote
all script references from `yarn` to `pnpm`.
- `website/pnpm-workspace.yaml` (new): sets `minimumReleaseAge: 1440`
(minutes) with `@apify/*` and `@crawlee/*` excluded.
- `website/.npmrc` (new): enables hoisted node linker and workspace
package linking.
- `website/pnpm-lock.yaml` (new): generated from `pnpm install`.
- Removed Yarn artifacts: `website/yarn.lock`, `website/.yarnrc.yml`,
`website/.yarn/` (only contained `install-state.gz`; no `.yarn/patches/`
directory was present).
- `website/docusaurus.config.js`: renamed `future.experimental_faster`
to `future.faster` (required by Docusaurus 3.10).
- `.github/actions/pnpm-install/action.yml` (new): composite action
copied verbatim from `apify-client-js` for use by future CI workflows.
- `.github/workflows/_release_docs.yaml`: `git add website/yarn.lock` ->
`git add website/pnpm-lock.yaml`.
- `.github/workflows/manual_release_stable.yaml`: replaced inline `yarn
install` + `npx docusaurus` in the `version_docs` job with
`pnpm/action-setup`, `pnpm install --frozen-lockfile`, and `pnpm exec
docusaurus`. (Steps are inlined rather than calling
`./.github/actions/pnpm-install` because GitHub Actions does not support
`working-directory` on `uses:` steps and the composite expects to run
from the repo containing the lockfile.)
- `pyproject.toml`: `poe` tasks `update-docs-theme`, `build-docs`, and
`run-docs` now use `pnpm` instead of `yarn` / `corepack enable && yarn`.
- `renovate.json`: added `internalChecksFilter: "strict"` and a package
rule granting `@apify/*` / `@crawlee/*` a `0 days` minimum release age.
- `.gitignore`: dropped the now-obsolete `website/.yarn` entry.

Verified locally: `pnpm install`, `pnpm install --frozen-lockfile`, and
Docusaurus config validation all pass. A full `pnpm build` is gated by
the repo's Python docs pipeline (`pydoc-markdown`) which is invoked by
`uv run poe build-docs` in CI and was not re-run locally; the Docusaurus
config loads past the `future.faster` rename cleanly.

Rolls out the same pattern just applied to `apify-sdk-python`.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: B4nan

.github/workflows/manual_release_docs.yaml

@@ -52,15 +52,21 @@ jobs:
       - name: Install Python dependencies
         run: uv run poe install-dev
 
+      - name: Install pnpm and website dependencies
+        uses: apify/workflows/pnpm-install@main
+        with:
+          working-directory: website
+
       - name: Update docs theme
         run: uv run poe update-docs-theme
 
       - name: Commit the updated package.json and lockfile
         uses: EndBug/add-and-commit@v10
         with:
-          add: website/package.json website/yarn.lock
+          add: website/package.json website/pnpm-lock.yaml
           message: "chore: Automatic docs theme update [skip ci]"
           default_author: github_actions
+          pull: '--rebase --autostash'
           # `actions/checkout` detaches HEAD on SHA refs; EndBug needs a branch to push.
           new_branch: ${{ github.event.repository.default_branch }}
 

.github/workflows/manual_version_docs.yaml

@@ -61,12 +61,15 @@ jobs:
       - name: Install Python dependencies
         run: uv run poe install-dev
 
+      - name: Install pnpm and website dependencies
+        uses: apify/workflows/pnpm-install@main
+        with:
+          working-directory: website
+
       - name: Snapshot the current version
         id: snapshot
         run: |
           cd website
-          corepack enable
-          yarn install
 
           # Extract version from pyproject.toml.
           FULL_VERSION="$(uv version --short)"
@@ -98,8 +101,8 @@ jobs:
 
           # Build API reference and create Docusaurus version snapshots.
           bash build_api_reference.sh
-          uv run npx docusaurus docs:version "$MAJOR_MINOR_VERSION"
-          uv run npx docusaurus api:version "$MAJOR_MINOR_VERSION"
+          uv run pnpm exec docusaurus docs:version "$MAJOR_MINOR_VERSION"
+          uv run pnpm exec docusaurus api:version "$MAJOR_MINOR_VERSION"
 
       - name: Commit and push versioned docs
         id: commit_versioned_docs
@@ -108,6 +111,7 @@ jobs:
           add: website/versioned_docs website/versioned_sidebars website/versions.json
           message: "docs: Version docs for v${{ steps.snapshot.outputs.version }} [skip ci]"
           default_author: github_actions
+          pull: '--rebase --autostash'
           # `actions/checkout` detaches HEAD on SHA refs; EndBug needs a branch to push.
           new_branch: ${{ github.event.repository.default_branch }}
 

.gitignore

@@ -69,6 +69,7 @@ website/versioned_docs/*/pyproject.toml
 # Website build artifacts, node dependencies
 website/build
 website/node_modules
+website/yarn.lock
 website/.yarn
 website/.docusaurus
 website/api-typedoc-generated.json

pyproject.toml

@@ -238,6 +238,13 @@ keep_model_order = true
 # Minimal defense against supply-chain atatcks.
 exclude-newer = "24 hours"
 
+[tool.uv.exclude-newer-package]
+# Allow internal Apify packages to install immediately.
+apify-client = false
+apify-shared = false
+apify_fingerprint_datapoints = false
+crawlee = false
+
 # Run tasks with: uv run poe <task>
 [tool.poe.tasks]
 clean = "rm -rf .coverage .pytest_cache .ruff_cache .ty_cache build dist htmlcov"
@@ -263,15 +270,15 @@ shell = "uv run ruff format --check && uv run ruff check"
 shell = "uv run ruff check --fix && uv run ruff format"
 
 [tool.poe.tasks.update-docs-theme]
-shell = "corepack enable && yarn up @apify/docs-theme"
+shell = "pnpm update @apify/docs-theme"
 cwd = "website"
 
 [tool.poe.tasks.build-docs]
-shell = "./build_api_reference.sh && corepack enable && yarn && uv run yarn build"
+shell = "./build_api_reference.sh && pnpm install && uv run pnpm build"
 cwd = "website"
 
 [tool.poe.tasks.run-docs]
-shell = "./build_api_reference.sh && corepack enable && yarn && uv run yarn start"
+shell = "./build_api_reference.sh && pnpm install && uv run pnpm start"
 cwd = "website"
 
 [tool.poe.tasks.generate-models]

renovate.json

@@ -19,9 +19,14 @@
             "groupSlug": "dev-dependencies",
             "automerge": true,
             "automergeType": "branch"
+        },
+        {
+            "matchPackageNames": ["@apify/*", "@crawlee/*", "apify", "apify-client", "apify-shared", "apify-fingerprint-datapoints", "crawlee", "got-scraping"],
+            "minimumReleaseAge": "0 days"
         }
     ],
     "minimumReleaseAge": "1 day",
+    "internalChecksFilter": "strict",
     "schedule": ["before 7am every weekday"],
     "ignoreDeps": ["apify_client", "docusaurus-plugin-typedoc-api"]
 }

website/.yarnrc.yml

@@ -32,7 +32,7 @@ const { absoluteUrl } = config;
 /** @type {Partial<import('@docusaurus/types').DocusaurusConfig>} */
 module.exports = {
     future: {
-        experimental_faster: {
+        faster: {
             swcJsLoader: true,
             swcJsMinimizer: true,
             swcHtmlMinimizer: true,

website/docusaurus.config.js

@@ -1,21 +1,23 @@
 {
-    "name": "apify-client-python",
+    "name": "apify-client-python-website",
+    "private": true,
     "scripts": {
         "clean": "rimraf .docusaurus build",
-        "build": "yarn clean && docusaurus build",
-        "start": "yarn clean && docusaurus start",
-        "deploy": "yarn clean && docusaurus deploy",
+        "build": "pnpm clean && docusaurus build",
+        "start": "pnpm clean && docusaurus start",
+        "deploy": "pnpm clean && docusaurus deploy",
         "docusaurus": "docusaurus",
         "publish-gh-pages": "docusaurus-publish",
         "rename-version": "docusaurus rename-version",
         "swizzle": "docusaurus swizzle",
         "version": "docusaurus version",
         "write-translations": "docusaurus write-translations",
         "prettify": "prettier --write --config ./tools/docs-prettier.config.js ../docs/*.md ../docs/*.mdx",
-        "lint": "yarn lint:code",
-        "lint:fix": "yarn lint:code:fix",
+        "lint": "pnpm lint:code",
+        "lint:fix": "pnpm lint:code:fix",
         "lint:code": "eslint .",
-        "lint:code:fix": "eslint . --fix"
+        "lint:code:fix": "eslint . --fix",
+        "preinstall": "npx only-allow pnpm"
     },
     "dependencies": {
         "@apify/docs-theme": "^1.0.243",
@@ -47,5 +49,5 @@
         "rimraf": "^6.0.0",
         "typescript": "^6.0.0"
     },
-    "packageManager": "yarn@4.13.0"
+    "packageManager": "pnpm@10.24.0"
 }