chore(e2e-tests): Add a pnpm-lock file to every e2e test folder

.github/workflows/build.yml

@@ -1008,6 +1008,9 @@ jobs:
       - name: Copy to temp
         run: yarn ci:copy-to-temp ./test-applications/${{ matrix.test-application }} ${{ runner.temp }}/test-application
         working-directory: dev-packages/e2e-tests
+        env:
+          # On develop/master, ignore lockfiles to test with fresh dependencies
+          E2E_IGNORE_LOCKFILE: ${{ github.event_name != 'pull_request' }}
 
       - name: Build E2E app
         working-directory: ${{ runner.temp }}/test-application
@@ -1134,6 +1137,9 @@ jobs:
       - name: Copy to temp
         run: yarn ci:copy-to-temp ./test-applications/${{ matrix.test-application }} ${{ runner.temp }}/test-application
         working-directory: dev-packages/e2e-tests
+        env:
+          # On develop/master, ignore lockfiles to test with fresh dependencies
+          E2E_IGNORE_LOCKFILE: ${{ github.event_name != 'pull_request' }}
 
       - name: Build E2E app
         working-directory: ${{ runner.temp }}/test-application

.github/workflows/release-update-lockfiles.yml

@@ -0,0 +1,11 @@
+name: 'Release: Update E2E Lockfiles'
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  update-lockfiles:
+    uses: ./.github/workflows/update-e2e-lockfiles.yml
+    with:
+      sentry_only: true

.github/workflows/update-e2e-lockfiles.yml

@@ -0,0 +1,129 @@
+name: 'Update E2E Lockfiles'
+
+on:
+  schedule:
+    # Run every day at midnight UTC
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+    inputs:
+      sentry_only:
+        description: 'Only update @sentry/* packages'
+        type: boolean
+        default: false
+  workflow_call:
+    inputs:
+      sentry_only:
+        description: 'Only update @sentry/* packages'
+        type: boolean
+        default: true
+
+env:
+  CACHED_DEPENDENCY_PATHS: |
+    ${{ github.workspace }}/node_modules
+    ${{ github.workspace }}/packages/*/node_modules
+    ${{ github.workspace }}/dev-packages/*/node_modules
+
+jobs:
+  update-lockfiles:
+    name: Update E2E Lockfiles
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    permissions:
+      pull-requests: write
+      contents: write
+    steps:
+      - name: Check out develop branch
+        uses: actions/checkout@v6
+        with:
+          ref: develop
+
+      - name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version-file: 'package.json'
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.9
+
+      - name: Install Dependencies
+        uses: ./.github/actions/install-dependencies
+
+      - name: Build packages
+        run: yarn build
+
+      - name: Build tarballs
+        run: yarn build:tarball
+
+      - name: Get node version
+        id: versions
+        run: |
+          echo "node=$(jq -r '.volta.node' package.json)" >> $GITHUB_OUTPUT
+
+      - name: Validate Verdaccio
+        run: yarn test:validate
+        working-directory: dev-packages/e2e-tests
+
+      - name: Prepare Verdaccio
+        run: yarn test:prepare
+        working-directory: dev-packages/e2e-tests
+        env:
+          E2E_TEST_PUBLISH_SCRIPT_NODE_VERSION: ${{ steps.versions.outputs.node }}
+
+      - name: Update lockfiles
+        working-directory: dev-packages/e2e-tests
+        run: |
+          for dir in test-applications/*/; do
+            if [ -f "$dir/package.json" ]; then
+              echo "Updating: $dir"
+              if [ "${{ inputs.sentry_only }}" = "true" ]; then
+                (cd "$dir" && pnpm update "@sentry/*" --no-save --ignore-scripts) || echo "Failed: $dir"
+              else
+                # Update all dependencies (including transitives) to latest within allowed ranges
+                # --no-save keeps package.json unchanged, only updates the lockfile
+                (cd "$dir" && pnpm update --no-save --ignore-scripts) || echo "Failed: $dir"
+              fi
+            fi
+          done
+
+      - name: Set PR metadata
+        id: pr-meta
+        run: |
+          if [ "${{ inputs.sentry_only }}" = "true" ]; then
+            echo "title=chore(e2e): Update @sentry/* in lockfiles" >> $GITHUB_OUTPUT
+            echo "commit=chore(e2e): update @sentry/* in lockfiles" >> $GITHUB_OUTPUT
+            echo "body=Automated update of @sentry/* packages in E2E test application lockfiles after release." >> $GITHUB_OUTPUT
+          else
+            echo "title=chore(e2e): Update pnpm lockfiles" >> $GITHUB_OUTPUT
+            echo "commit=chore(e2e): update pnpm lockfiles" >> $GITHUB_OUTPUT
+            echo "body=Automated daily update of E2E test application lockfiles." >> $GITHUB_OUTPUT
+          fi
+
+      - name: Create Pull Request
+        id: create-pr
+        uses: peter-evans/create-pull-request@v7
+        with:
+          branch: chore/update-e2e-lockfiles
+          delete-branch: true
+          title: ${{ steps.pr-meta.outputs.title }}
+          body: |
+            ${{ steps.pr-meta.outputs.body }}
+
+            This PR updates the `pnpm-lock.yaml` files in all E2E test applications.
+          commit-message: ${{ steps.pr-meta.outputs.commit }}
+          labels: |
+            CI & Build
+
+      - name: Enable squash automerge for PR
+        if: steps.create-pr.outputs.pull-request-number != ''
+        run: gh pr merge --squash --auto "${{ steps.create-pr.outputs.pull-request-number }}"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Auto approve PR
+        if: steps.create-pr.outputs.pull-request-number != ''
+        uses: hmarr/auto-approve-action@v4
+        with:
+          pull-request-number: ${{ steps.create-pr.outputs.pull-request-number }}
+          review-message: 'Auto approved automated PR'

dev-packages/e2e-tests/.gitignore

@@ -2,5 +2,5 @@
 tmp
 .tmp_build_stdout
 .tmp_build_stderr
-pnpm-lock.yaml
 .last-run.json
+./pnpm-lock.yaml

dev-packages/e2e-tests/README.md

@@ -23,6 +23,12 @@ Prerequisites: Docker
 - Run `yarn build:tarball` in the root of the repository (needs to be rerun after every update in /packages for the
   changes to have effect on the tests).
 
+### Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `E2E_IGNORE_LOCKFILE` | Set to `true` to delete `pnpm-lock.yaml` before installing dependencies. This forces fresh dependency resolution, ignoring the committed lockfile. Used in CI on `develop`/`master` branches to catch compatibility issues early. |
+
 To finally run all of the tests:
 
 ```bash

dev-packages/e2e-tests/lib/copyToTemp.ts

@@ -1,5 +1,5 @@
 /* eslint-disable no-console */
-import { readFileSync, writeFileSync } from 'fs';
+import { readFileSync, unlinkSync, writeFileSync } from 'fs';
 import { cp } from 'fs/promises';
 import { join } from 'path';
 
@@ -8,6 +8,21 @@ export async function copyToTemp(originalPath: string, tmpDirPath: string): Prom
   await cp(originalPath, tmpDirPath, { recursive: true });
 
   fixPackageJson(tmpDirPath);
+
+  // On develop/master, we want to ignore the lock file to always test with fresh dependencies
+  if (process.env.E2E_IGNORE_LOCKFILE === 'true') {
+    deleteLockfile(tmpDirPath);
+  }
+}
+
+function deleteLockfile(cwd: string): void {
+  const lockfilePath = join(cwd, 'pnpm-lock.yaml');
+  try {
+    unlinkSync(lockfilePath);
+    console.log(`Deleted lockfile at ${lockfilePath} (E2E_IGNORE_LOCKFILE=true)`);
+  } catch {
+    // Lock file doesn't exist, that's fine
+  }
 }
 
 function fixPackageJson(cwd: string): void {

dev-packages/e2e-tests/package.json

@@ -17,7 +17,7 @@
     "ci:build-matrix": "ts-node ./lib/getTestMatrix.ts",
     "ci:build-matrix-optional": "ts-node ./lib/getTestMatrix.ts --optional=true",
     "ci:copy-to-temp": "ts-node ./ciCopyToTemp.ts",
-    "clean:test-applications": "rimraf --glob test-applications/**/{node_modules,dist,build,.next,.nuxt,.sveltekit,.react-router,.astro,.output,pnpm-lock.yaml,.last-run.json,test-results,.angular,event-dumps}",
+    "clean:test-applications": "rimraf --glob test-applications/**/{node_modules,dist,build,.next,.nuxt,.sveltekit,.react-router,.astro,.output,.last-run.json,test-results,.angular,event-dumps}",
     "clean:pnpm": "pnpm store prune"
   },
   "devDependencies": {