Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix missing dependencies pin info in package-lock.json #7236

Closed
wants to merge 1 commit into from

Conversation

Ironicbay
Copy link
Contributor

Closes #7231

@Ironicbay Ironicbay requested a review from a team as a code owner April 30, 2024 08:48
Copy link
Contributor

@FirelightFlagboy FirelightFlagboy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Integrity is back 😄

@touilleMan
Copy link
Member

image

@@ -1085,92 +1511,244 @@
}
},
"node_modules/@swc/core": {
"version": "1.5.0",
"version": "1.4.17",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It would be better to fix this issue by going back to the last version of package-lock.json containing the pinned versions, then re-doing whatever change introduced the removal of the pins in the first place

I have the feeling the numerous change in version in this PR are due to the fact we fixed the issue by re-pinning the version from scratch (hence losing the old pins and there precise versions)

@Ironicbay Ironicbay force-pushed the fix-missing-dependencies-info-package-lock branch from 0338521 to 429d255 Compare April 30, 2024 12:23
@Ironicbay Ironicbay force-pushed the fix-missing-dependencies-info-package-lock branch from 429d255 to a9e9ecc Compare April 30, 2024 12:43
@Ironicbay Ironicbay added this pull request to the merge queue Apr 30, 2024
@Ironicbay Ironicbay removed this pull request from the merge queue due to a manual request Apr 30, 2024
@Ironicbay
Copy link
Contributor Author

Addressed among other things in #7202

@Ironicbay Ironicbay closed this Apr 30, 2024
@FirelightFlagboy FirelightFlagboy deleted the fix-missing-dependencies-info-package-lock branch April 30, 2024 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

package-lock.json is missing its dependency pin info
3 participants