Skip to content

fix(vercel-cli): 🐛 pin version to prevent broken @vercel/hono dependency install#999

Merged
punkbit merged 2 commits intomainfrom
fix/vercel-cli-breaks-in-cli-due-to-a-faulty-version-now-hidden-by-vercel
Apr 15, 2026
Merged

fix(vercel-cli): 🐛 pin version to prevent broken @vercel/hono dependency install#999
punkbit merged 2 commits intomainfrom
fix/vercel-cli-breaks-in-cli-due-to-a-faulty-version-now-hidden-by-vercel

Conversation

@punkbit
Copy link
Copy Markdown
Contributor

@punkbit punkbit commented Apr 15, 2026

Why?

NPM is trying to fetch @vercel/hono@0.2.67.tgz from the npm registry, but that version doesn't exist. The latest published version of @vercel/hono on npm is 0.2.64, published about 16 hours ago. npm Version 0.2.67 was never actually published to the registry, but the latest vercel CLI package declared it as a dependency.

How?

  • Verified NPM registry
  • Declare fixed version in CI/CD where the issue originally occurs

Tickets?

N/A

Contribution checklist?

  • You've done enough research before writing
  • You have reviewed the PR
  • The commit messages are detailed
  • The build command runs locally
  • Assets or static content are linked and stored in the project
  • For documentation, guides or references, you've tested the commands

Security checklist?

  • All user inputs are validated and sanitized
  • No usage of dangerouslySetInnerHTML
  • Sensitive data has been identified and is being protected properly
  • Build output contains no secrets or API keys

Preview?

❯ npm view vercel@latest dependencies

{
  ...
  '@vercel/hono': '0.2.67',
  ...
}

@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Apr 15, 2026

⚠️ No Changeset found

Latest commit: fdbd3c2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 15, 2026

Claude finished @punkbit's task in 44s —— View job


Review

  • Gather context
  • Read changed file
  • Provide review

✅ Looks good! Clean, targeted hotfix — nice work!

The change is a single line in .github/workflows/storybook-vercel.yml (line 50):

- run: npm install --global vercel@latest
+ run: npm install --global vercel@41.7.3

This correctly pins the Vercel CLI to the last known-good version before vercel@latest introduced a broken dependency on the non-existent @vercel/hono@0.2.67.

💡 Suggestion (non-blocking)

  • Consider adding an inline comment in the workflow so future maintainers know why this version is pinned and when it's safe to unpin, e.g.:
    # Pinned to avoid broken @vercel/hono@0.2.67 dep in newer versions — revisit when Vercel publishes a fix
    run: npm install --global vercel@41.7.3
    This prevents someone from "helpfully" bumping it back to @latest without realising.

No concerns with the fix itself — this is the right short-term approach to unblock CI.

Comment thread .github/workflows/storybook-vercel.yml
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 15, 2026

Claude finished @punkbit's task in 43s —— View job


Review

  • Gather context
  • Read changed file
  • Provide review

✅ Looks great! This PR is in good shape.

The latest push (fdbd3c2) added the inline comment that was suggested in the previous review — nice follow-through!

Current state of .github/workflows/storybook-vercel.yml line 50:

- name: Install Vercel CLI
  # NOTE: Pinned to avoid broken @vercel/hono@0.2.67 dep in newer versions can revisit when Vercel publishes a fix
  run: npm install --global vercel@41.7.3

Regarding @EvandroLG's comment — the intent is to be on an older version (that's the whole fix), so 41.7.3 being behind latest is deliberate. The comment in the workflow makes this clear to future maintainers.

No blocking issues. Ready to merge. 🙌

@workflow-authentication-public
Copy link
Copy Markdown
Contributor

📚 Storybook Preview Deployed

✅ Preview URL: https://click-7et5bu2a1-clickhouse.vercel.app

Built from commit: 7dad1006cc1e9185d33412f430b3cf406b0d1d23

@punkbit punkbit merged commit 01c5e29 into main Apr 15, 2026
9 checks passed
@punkbit punkbit deleted the fix/vercel-cli-breaks-in-cli-due-to-a-faulty-version-now-hidden-by-vercel branch April 15, 2026 14:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants