[C3] Bump create-vike from 0.0.677 to 0.0.681 in /packages/create-cloudflare/src/frameworks (#15422)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wrangler automated PR updater <wrangler@cloudflare.com>
Co-authored-by: Edmund Hung <edmund@cloudflare.com>

Author: 3 people

.changeset/c3-frameworks-update-15422.md

@@ -0,0 +1,13 @@
+---
+"create-cloudflare": patch
+---
+
+Update dependencies of "create-cloudflare"
+
+The following dependency versions have been updated:
+
+| Dependency  | From    | To      |
+| ----------- | ------- | ------- |
+| create-vike | 0.0.677 | 0.0.681 |
+
+Preserve framework-generated `dangerouslyAllowAllBuilds` settings instead of adding a conflicting pnpm `allowBuilds` configuration.

packages/create-cloudflare/src/frameworks/package.json

@@ -12,7 +12,7 @@
 		"create-react-router": "8.3.1",
 		"create-rwsdk": "3.1.3",
 		"create-solid": "0.11.0",
-		"create-vike": "0.0.677",
+		"create-vike": "0.0.681",
 		"create-vinext-app": "1.0.0-beta.2",
 		"create-vite": "9.2.0",
 		"create-vue": "3.23.0",

packages/create-cloudflare/src/helpers/__tests__/pnpmBuildApprovals.test.ts

@@ -167,6 +167,22 @@ describe("writePnpmBuildApprovals", () => {
 		expect(written).toMatch(/^ {2}esbuild: true$/m);
 		expect(written).toMatch(/^ {2}workerd: true$/m);
 	});
+
+	test("preserves a framework's opt-in to all dependency builds", ({
+		expect,
+	}) => {
+		mockPackageManager("pnpm", "10.33.0");
+		vi.mocked(existsSync).mockImplementation(
+			(path) => path.toString() === yamlPath
+		);
+		vi.mocked(readFile).mockReturnValue(
+			["packages:", "  - .", "dangerouslyAllowAllBuilds: true", ""].join("\n")
+		);
+
+		writePnpmBuildApprovals(projectPath);
+
+		expect(vi.mocked(writeFile)).not.toHaveBeenCalled();
+	});
 });
 
 describe("mergeAllowBuilds", () => {
@@ -208,6 +224,19 @@ describe("mergeAllowBuilds", () => {
 
 		expect(mergeAllowBuilds(input)).toBe(input);
 	});
+
+	test("does not combine allowBuilds with dangerouslyAllowAllBuilds", ({
+		expect,
+	}) => {
+		const input = [
+			"packages:",
+			"  - .",
+			"dangerouslyAllowAllBuilds: true",
+			"",
+		].join("\n");
+
+		expect(mergeAllowBuilds(input)).toBe(input);
+	});
 });
 
 describe("isPnpmIgnoredBuildsError", () => {

packages/create-cloudflare/src/helpers/pnpmBuildApprovals.ts

@@ -58,6 +58,13 @@ const ALLOW_BUILDS_ENTRY = /^( {2})(['"]?)([^'":]+)\2:\s*(.*)$/;
 
 /** Exported for unit testing. */
 export const mergeAllowBuilds = (original: string): string => {
+	// A framework generator may explicitly opt into running all dependency
+	// build scripts. Adding `allowBuilds` would be redundant and pnpm rejects
+	// the combination as conflicting build policies.
+	if (/^dangerouslyAllowAllBuilds:[ \t]*true[ \t]*$/m.test(original)) {
+		return original;
+	}
+
 	const eol = detectEol(original);
 	const lines = original.split(/\r?\n/);