[cli] move builders to peer dependencies (try 2) by mehulkar · Pull Request #15023 · vercel/vercel

mehulkar · 2026-02-12T05:08:56Z

Merged in #14763, reverted in #15022.

Re-submitting and running e2e tests now via label. e2e tests are coming back by default to PRs in #15008

Moves builders to peerDependencies and tells pnpm that they're optional dependencies. With this config, pnpm will not bundle them into the publishd vercel CLI, but they will be in the manifest.
Add a feature to the resolveBuilders function that reads the peerDependencies section of package.json at runtime and installs that correct version of the builder. It stores this builder in a local cache (.vercel/builders) so it only has to get them from the registry once.

Note

Low Risk Change

This PR moves builder packages from dependencies to peerDependencies and adds on-demand installation logic, which is a build/packaging infrastructure change without security implications.

Moves @vercel/* builders from dependencies to peerDependencies with optional metadata
Adds resolveBuilders logic to install builders from peerDeps on demand to .vercel/builders cache
Updates CI workflows and tests to handle peer dependency builds

^{Risk assessment for commit 7d94411.}

- Moves builders to peerDependencies and tells pnpm that they're optional dependencies. With this config, `pnpm` will not bundle them into the publishd `vercel` CLI, but they will be in the manifest. - Add a feature to the `resolveBuilders` function that reads the peerDependencies section of package.json at runtime and installs that correct version of the builder. It stores this builder in a local cache (`.vercel/builders`) so it only has to get them from the registry once. --------- Co-authored-by: Cursor <cursoragent@cursor.com>

changeset-bot · 2026-02-12T05:09:01Z

🦋 Changeset detected

Latest commit: 7d94411

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
vercel	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

github-actions · 2026-02-12T05:09:22Z

📦 CLI Tarball Ready

The Vercel CLI tarball for this PR is now available!

Quick Test

You can test this PR's CLI directly by running:

npx https://vercel-gngswvl5n.vercel.sh/tarballs/vercel.tgz --help

Use in vercel.json

To use this CLI version in your project builds, add to your vercel.json:

{
  "build": {
    "env": {
      "VERCEL_CLI_VERSION": "vercel@https://vercel-gngswvl5n.vercel.sh/tarballs/vercel.tgz"
    }
  }
}

github-actions · 2026-02-12T05:10:00Z

🧪 Unit Test Strategy

Comparing: cf38fab → 7d94411 (view diff)

Strategy: Code changed outside of a package - running all unit tests

⚠️ All unit tests will run because global code changes could impact all packages.

Affected packages - 15 (38%)

vercel
@vercel/build-utils
@vercel/client
@vercel/firewall
@vercel/fs-detectors
@vercel/go
@vercel/hydrogen
@vercel/next
@vercel/node
@vercel/python
@vercel/remix-builder
@vercel/ruby
@vercel/rust
@vercel/static-build
examples

Unaffected packages - 25 (63%)

@vercel-internals/get-package-json
@vercel/backends
@vercel/cervel
@vercel/cli-auth
@vercel/config
@vercel/detect-agent
@vercel/edge
@vercel/elysia
@vercel/error-utils
@vercel/express
@vercel/fastify
@vercel/frameworks
@vercel/functions
@vercel/gatsby-plugin-vercel-builder
@vercel/h3
@vercel/hono
@vercel/koa
@vercel/nestjs
@vercel/oidc
@vercel/oidc-aws-credentials-provider
@vercel/python-analysis
@vercel/redwood
@vercel/related-projects
@vercel/routing-utils
@vercel/static-config

Results

Unit tests: All affected packages will run unit tests
E2E tests: Running in parallel via E2E Tests workflow
Type checks: All affected packages will run type checks

This comment is automatically generated based on the affected testing strategy

packages/cli/src/util/build/import-builders.ts

packages/cli/src/output-manager.ts

I"m seeing the 11ty builder fail in #15023, and can't explain why. Probably has to do with which builder is being resolved. Adding some debug logging here  > [!NOTE] > Low Risk Change > > This PR adds debug logging for resolved builders and documentation comments, with no security or logic changes. > > - Adds debug log output showing resolved builder versions > - Adds JSDoc comments to BuilderWithPkg interface properties > - Adds description field to static-build package.json > > <sup>Risk assessment for [commit 9547170](https://github.com/vercel/vercel/commit/9547170eaa7136321f2e4ec7cfc7dee0cbc376b6).</sup>

This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or [setup this action to publish automatically](https://github.com/changesets/action#with-publishing). If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated. # Releases ## vercel@50.17.0 ### Minor Changes - Install builder packages on demand ([#15023](#15023)) - Display functions exceeding 250MB uncompressed size limit with total size and breakdown of largest dependencies (requires environment variable VERCEL_ANALYZE_BUILD_OUTPUT=1). ([#14067](#14067)) ### Patch Changes - Add `--format=json` option to `vercel integration list` and show project name in table header when results are scoped to a project ([#15007](#15007)) - Fix builder import resolution from pre-installed depenencies ([#15041](#15041)) - Services routing improvements: ([#15018](#15018)) - Fix route ownership scoping so parent service catch-alls (e.g. Vite SPA fallback) don't capture sibling service prefixes - Move shared ownership-guard helpers (`getOwnershipGuard`, `scopeRouteSourceToOwnership`) to `@vercel/routing-utils` - Place runtime service function outputs under internal `/_svc/<service>/index` namespace to prevent filesystem path leakage - Block `/_svc` as a reserved routePrefix in service validation - Scope all builder-emitted routes (not just route-owning builders) to their service ownership before merging - Updated dependencies \[]: - @vercel/static-build@2.8.37 - @vercel/build-utils@13.4.0 - @vercel/next@4.15.28 - @vercel/redwood@2.4.9 - @vercel/rust@1.0.5 ## @vercel/client@17.2.41 ### Patch Changes - Updated dependencies \[[`3cd0b559f1815fdb13f7aa05114bae2b0b0b0e68`](3cd0b55)]: - @vercel/routing-utils@5.3.3 - @vercel/build-utils@13.4.0 ## @vercel/fs-detectors@5.8.6 ### Patch Changes - Services routing improvements: ([#15018](#15018)) - Fix route ownership scoping so parent service catch-alls (e.g. Vite SPA fallback) don't capture sibling service prefixes - Move shared ownership-guard helpers (`getOwnershipGuard`, `scopeRouteSourceToOwnership`) to `@vercel/routing-utils` - Place runtime service function outputs under internal `/_svc/<service>/index` namespace to prevent filesystem path leakage - Block `/_svc` as a reserved routePrefix in service validation - Scope all builder-emitted routes (not just route-owning builders) to their service ownership before merging - Updated dependencies \[[`3cd0b559f1815fdb13f7aa05114bae2b0b0b0e68`](3cd0b55)]: - @vercel/routing-utils@5.3.3 - @vercel/frameworks@3.17.1 ## @vercel/routing-utils@5.3.3 ### Patch Changes - Services routing improvements: ([#15018](#15018)) - Fix route ownership scoping so parent service catch-alls (e.g. Vite SPA fallback) don't capture sibling service prefixes - Move shared ownership-guard helpers (`getOwnershipGuard`, `scopeRouteSourceToOwnership`) to `@vercel/routing-utils` - Place runtime service function outputs under internal `/_svc/<service>/index` namespace to prevent filesystem path leakage - Block `/_svc` as a reserved routePrefix in service validation - Scope all builder-emitted routes (not just route-owning builders) to their service ownership before merging  > [!NOTE] > Low Risk Change > > This PR is an automated Changesets release that only updates version numbers in package.json files and adds changelog entries - no source code changes are present. > > - Deletes changeset markdown files after consuming them > - Bumps version numbers in 4 package.json files > - Adds changelog entries documenting previous changes > > <sup>Risk assessment for [commit 9186d29](https://github.com/vercel/vercel/commit/9186d293adee9d555b8582f5c1d0cec87689acf1).</sup>  Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

2 commits related moving builders out of the bundle: - #15023 - #15041 Since it's isn't a clean revert, I've: - moved builders back into dependencies, and reverted import-builders and its tests to the commit at 3cd0b55 (parent of 127547d). No other commits have landed to these files since then, so it seems like the best way of doing this. This commit also contains a timestamp update on all builders `.deploy` files. This is just a way to invalidate the builders so all e2e tests run on this PR.

mehulkar added the run-e2e-tests label Feb 12, 2026

mehulkar changed the title ~~[cli] move builders to peer dependencies (#14763)~~ [cli] move builders to peer dependencies Feb 12, 2026

vercel bot deployed to Preview February 12, 2026 05:09 View deployment

mehulkar changed the title ~~[cli] move builders to peer dependencies~~ [cli] move builders to peer dependencies (try 2) Feb 12, 2026

vercel bot reviewed Feb 12, 2026

View reviewed changes

packages/cli/src/util/build/import-builders.ts Show resolved Hide resolved

packages/cli/src/output-manager.ts Outdated Show resolved Hide resolved

mehulkar added 2 commits February 12, 2026 09:05

Merge branch 'main' into mk/peer-dep-builders-2

b79e623

reduce debug flag

e3d6741

vercel bot deployed to Preview February 12, 2026 15:07 View deployment

fix comment

ec4059e

mehulkar marked this pull request as ready for review February 12, 2026 15:28

mehulkar requested review from a team and ijjk as code owners February 12, 2026 15:28

vercel bot deployed to Preview February 12, 2026 15:29 View deployment

mehulkar requested a review from jeffsee55 February 12, 2026 15:31

jeffsee55 approved these changes Feb 12, 2026

View reviewed changes

mehulkar added 3 commits February 12, 2026 11:34

[cli] add debug log for resolved builders

ec29e54

add debug log for static build tests

9547170

revert

b452530

mehulkar mentioned this pull request Feb 12, 2026

[cli] add debug log for resolved builders #15029

Merged

Merge branch 'mk/debug-log' into mk/peer-dep-builders-2

98e9cb4

vercel bot deployed to Preview February 12, 2026 18:39 View deployment

Merge branch 'main' into mk/peer-dep-builders-2

7d94411

vercel bot deployed to Preview February 12, 2026 20:40 View deployment

mehulkar merged commit 127547d into main Feb 12, 2026
196 of 198 checks passed

mehulkar deleted the mk/peer-dep-builders-2 branch February 12, 2026 21:42

vercel-release-bot mentioned this pull request Feb 12, 2026

Version Packages #15035

Merged

mehulkar mentioned this pull request Feb 14, 2026

feat(cli): move builders back into bundle #15059

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[cli] move builders to peer dependencies (try 2)#15023

[cli] move builders to peer dependencies (try 2)#15023
mehulkar merged 9 commits intomainfrom
mk/peer-dep-builders-2

mehulkar commented Feb 12, 2026 •

edited by vercel bot

Loading

Uh oh!

changeset-bot bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

mehulkar commented Feb 12, 2026 • edited by vercel bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 CLI Tarball Ready

Quick Test

Use in vercel.json

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🧪 Unit Test Strategy

Results

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

mehulkar commented Feb 12, 2026 •

edited by vercel bot

Loading

changeset-bot bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading