Skip to content

fix(deps): repair corrupted pnpm lockfile and reduce recurrence risk #53

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Th3Mouk merged 6 commits into from
Sep 3, 2026
Merged

fix(deps): repair corrupted pnpm lockfile and reduce recurrence risk #53

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
542b16e
fix(deps): repair corrupted pnpm lockfile and reduce recurrence risk
Th3Mouk Sep 3, 2026
54473e5
fix(ci): pin npm to 12.0.2 to avoid an Arborist crash in the shrinkwr…
Th3Mouk Sep 3, 2026
0894768
fix(ci): use npm 11.19.1 instead of 12.0.2 (Node 22.12.x compatibility)
Th3Mouk Sep 3, 2026
027c13b
fix(ci): pin test:npm-shrinkwrap to the 24.x leg instead of upgrading…
Th3Mouk Sep 3, 2026
abcba30
fix(git-adapter): match git 2.55's reworded autostash-conflict message
Th3Mouk Sep 3, 2026
47d0a2e
fix(ci): restore the npm upgrade, needed on both legs for test:pack
Th3Mouk Sep 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 0 additions & 5 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,11 +6,6 @@ updates:
interval: "weekly"
labels:
- "dependabot"
groups:
prod-dependencies:
dependency-type: "production"
dev-dependencies:
dependency-type: "development"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
Expand Down
15 changes: 15 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,13 +42,28 @@ jobs:
node-version: ${{ matrix.node-version }}
cache: pnpm

# The npm bundled with 22.12.x (10.9.0) crashes ("Cannot read
# properties of null (reading 'edgesOut')") inside the
# `npm install --package-lock-only` that scripts/sync-npm-shrinkwrap.mjs
# runs - invoked both by test:npm-shrinkwrap below and, unconditionally
# on every leg, by test:pack's `prepack` hook (pnpm sync:npm-shrinkwrap
# && pnpm build). Needed on every leg that reaches either.
- run: npm install -g npm@11.19.1

- run: pnpm install --frozen-lockfile
- run: pnpm lint
- run: pnpm format:check
- run: pnpm knip
- run: pnpm typecheck
- run: pnpm test:audit-prod
# Pinned to one leg beyond the npm-version fix above: a transitive
# devDependency (@napi-rs/wasm-runtime) gates its newest release
# behind `engines.node: ^22.13.0 || >=23.5.0`, which only 24.x
# satisfies - so even a non-crashing npm resolves a genuinely
# different (and differently-committed) answer on 22.12.x. The
# committed npm-shrinkwrap.json matches what 24.x resolves.
- run: pnpm test:npm-shrinkwrap
if: matrix.node-version == '24.x'
- run: pnpm build
- run: pnpm test
if: matrix.node-version == '22.12.x'
Expand Down
1,397 changes: 680 additions & 717 deletions npm-shrinkwrap.json
View file
Open in desktop

Large diffs are not rendered by default.

1 change: 0 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,6 @@
"@types/node": "^25.5.0",
"@types/proper-lockfile": "^4.1.4",
"@types/semver": "^7.7.0",
"@types/shell-quote": "^1.7.5",
"@vitest/coverage-v8": "^4.1.2",
"knip": "^6.0.1",
"oxfmt": "^0.53.0",
Expand Down
Loading