feat: pnpm i will only run postbuild scripts for approved dependencies (#39018)

* Move the overrides to pnpm-workspace.yml.

* Only allow building for supabase CLI. All other deps will ignore their postbuild scripts.

* Run approve-builds and approve only supabase CLI.

package.json

@@ -62,17 +62,6 @@
     "type": "git",
     "url": "git+https://github.com/supabase/supabase.git"
   },
-  "pnpm": {
-    "overrides": {
-      "@supabase/supabase-js>@supabase/auth-js": "catalog:",
-      "@tanstack/directive-functions-plugin>vite": "catalog:",
-      "@tanstack/react-start-plugin>vite": "catalog:",
-      "esbuild": "^0.25.2",
-      "@redocly/respect-core>form-data": "^4.0.4",
-      "tmp": "^0.2.4"
-    },
-    "neverBuiltDependencies": ["libpg-query"]
-  },
   "engines": {
     "pnpm": ">=10.16",
     "node": ">=22"

pnpm-workspace.yaml

@@ -1,31 +1,56 @@
 packages:
-  - 'apps/*'
-  - 'packages/*'
-  - 'blocks/*'
-  - 'e2e/*'
+  - apps/*
+  - packages/*
+  - blocks/*
+  - e2e/*
 
 catalog:
-  '@types/node': ^22.0.0
-  '@types/react': '^18.3.0'
-  '@types/react-dom': '^18.3.0'
   '@supabase/auth-js': 2.72.0-rc.11
-  '@supabase/supabase-js': ^2.47.14
   '@supabase/realtime-js': ^2.11.3
-  'next': ^15.5.2
-  'react': '^18.3.0'
-  'react-dom': '^18.3.0'
-  'tailwindcss': '3.4.1'
-  'typescript': '~5.9.0'
-  'valtio': '^1.12.0'
-  'vite': '^6.2.7'
-  'zod': '^3.25.76'
+  '@supabase/supabase-js': ^2.47.14
+  '@types/node': ^22.0.0
+  '@types/react': ^18.3.0
+  '@types/react-dom': ^18.3.0
+  next: ^15.5.2
+  react: ^18.3.0
+  react-dom: ^18.3.0
+  tailwindcss: 3.4.1
+  typescript: ~5.9.0
+  valtio: ^1.12.0
+  vite: ^6.2.7
+  zod: ^3.25.76
+
+ignoredBuiltDependencies:
+  - '@parcel/watcher'
+  - '@sentry/cli'
+  - contentlayer2
+  - core-js
+  - es5-ext
+  - esbuild
+  - libpg-query
+  - msw
+  - node-pty
+  - protobufjs
+  - sharp
 
 minimumReleaseAge: 10080
+
 minimumReleaseAgeExclude:
-  - 'ai'
+  - ai
   - '@ai-sdk/*'
   - '@supabase/mcp-server-supabase'
   - '@supabase/mcp-utils'
-  - '@supabase/auth-js' 
+  - '@supabase/auth-js'
   - '@supabase/supabase-js'
   - '@supabase/realtime-js'
+
+onlyBuiltDependencies:
+  - supabase
+
+overrides:
+  '@redocly/respect-core>form-data': ^4.0.4
+  '@supabase/supabase-js>@supabase/auth-js': 'catalog:'
+  '@tanstack/directive-functions-plugin>vite': 'catalog:'
+  '@tanstack/react-start-plugin>vite': 'catalog:'
+  esbuild: ^0.25.2
+  tmp: ^0.2.4