Skip to content
Reproduction of a bug with Rush + pnpm
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
common
packages/mypackage
pnpm-only
.gitignore
LICENSE
README.md
rush.json

README.md

rush-pnpm-bug

Reproduction of a bug with Rush + pnpm: https://github.com/Microsoft/web-build-tools/issues/1142

The bug is that react-focus-lock@1.19.1 is installed, despite react-focus-lock@1.17.7 being declared in pnpm-lock.yaml:

$ npm install --global @microsoft/rush
$ rush install
$ cat common/temp/node_modules/.registry.npmjs.org/react-focus-lock/1.19.1/node_modules/react-focus-lock/package.json
{
  "name": "react-focus-lock",
  "version": "1.19.1",
  "description": "It is a trap! (for a focus)",
  ...

This bug seems not to occur when using pnpm without Rush. I've copied common/temp/package.json and common/config/rush/pnpm-lock.yaml into a directory pnpm-only/ and removed all references to "mypackage.tgz". Perform the install using just pnpm:

$ cd pnpm-only/
$ npm install --global pnpm@3.4.1
$ pnpm install
$ cat node_modules/.registry.npmjs.org/react-focus-lock/1.17.7/node_modules/react-focus-lock/package.json
{
  "name": "react-focus-lock",
  "version": "1.17.7",
  "description": "It is a trap! (for a focus)",
  ...
You can’t perform that action at this time.