Skip to content

fix: support npm 12 installs#2955

Merged
rinatkhaziev merged 1 commit into
trunkfrom
codex/npm-12-lockfile-migration
Jul 10, 2026
Merged

fix: support npm 12 installs#2955
rinatkhaziev merged 1 commit into
trunkfrom
codex/npm-12-lockfile-migration

Conversation

@rinatkhaziev

Copy link
Copy Markdown
Contributor

Description

This pull request updates the repository's Node.js dependency management to consistently use package-lock.json instead of npm-shrinkwrap.json across all CI and workflow files. It also removes deprecated environment variables related to npm publishing and adds a configuration to .npmrc. Additionally, the migration documentation is updated to reflect these changes.

CI and Workflow Updates:

  • Updated all GitHub Actions workflow files (ci.yml, devenv-e2e.yml, sea-build-sign.yml) to use package-lock.json for caching dependencies instead of npm-shrinkwrap.json, ensuring consistency and compatibility with current npm versions. [1] [2] [3] [4] [5]

NPM Publishing:

  • Removed deprecated NPM_CONFIG_TAG environment variable and related comments from npm-publish.yml, as npm-shrinkwrap.json is no longer used. [1] [2]

Configuration:

  • Added allow-git=root to .npmrc, possibly to support git-based dependencies at the root level.

Documentation:

  • Updated COMMANDER-MIGRATION.md to reference the removal of args from package-lock.json instead of npm-shrinkwrap.json.

Pull request checklist

New release checklist

Steps to Test

Outline the steps to test and verify the PR here.

Example:

  1. Check out PR.
  2. Run npm run build
  3. Run ./dist/bin/vip-cookies.js nom
  4. Verify cookies are delicious.

@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review Summary

The full dependency review summary was too large to display here (1368KB, limit is 1024KB).

Please download the artifact named "dependency-review-summary" to view the complete report.

View full job summary

@rinatkhaziev rinatkhaziev merged commit 383dd57 into trunk Jul 10, 2026
17 of 19 checks passed
@rinatkhaziev rinatkhaziev deleted the codex/npm-12-lockfile-migration branch July 10, 2026 18:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants