fix: omit @strapi devDependencies for local plugins

[singhlovepreet9]

Fixes strapi/strapi#22946

Problem

In Strapi 5, local plugins (which are scaffolded inside a project's src/plugins/ directory) end up with a large number of heavy @strapi/ packages in their devDependencies, like @strapi/strapi, @strapi/design-system, and @strapi/icons. Since most Strapi 5 projects do not have root workspace hoisting enabled by default, running an install step inside a local plugin duplicates these heavy dependencies inside src/plugins/my-plugin/node_modules, leading to massive plugin folder sizes (e.g. 1.6 GB).

Root Cause

@strapi/sdk-plugin init indiscriminately populates devDependencies for both standalone and local plugins.

Fix

This PR utilizes the existing isStrapiProject check to omit heavy @strapi/ packages from the generated devDependencies when a plugin is initialized locally inside a Strapi project. The packages correctly remain in peerDependencies so that sdk-plugin build still externalizes them properly during bundling.

Verification

• Wrote new unit tests mimicking a local plugin initialization (isStrapiProject = true) and verified devDependencies correctly omits the heavy packages while preserving them in peerDependencies.
• pnpm run test:unit passes cleanly.
• pnpm run lint passes cleanly.
• Fresh-eyes review confirms this strictly targets the root cause with zero risk to standalone plugins.

[changeset-bot]

⚠️ No Changeset found

Latest commit: df1990f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: b88744ef-5574-4ab3-ad04-f4e7cc8eb7c7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud