Skip to content

chore(deps): sync package-lock.json with package.json - #2343

Open
beck-8 wants to merge 1 commit into
FilecoinFoundationWeb:mainfrom
beck-8:fix/sync-package-lock
Open

chore(deps): sync package-lock.json with package.json#2343
beck-8 wants to merge 1 commit into
FilecoinFoundationWeb:mainfrom
beck-8:fix/sync-package-lock

Conversation

@beck-8

@beck-8 beck-8 commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

Problem

The Publish ui-filecoin Package (Release) workflow has failed on every push to main since 2026-03-25 — last successful run was 37c0faa5, first failure was 80274d1 (chore(deps): upgrade next to 16.2.1 and @next/eslint-plugin-next ...).

npm ci fails because package-lock.json is out of sync with package.json:

  • Missing entries: @next/eslint-plugin-next, eslint-plugin-turbo, fast-glob@3.3.1, dotenv@16.0.3 — left behind by the next 16.2.x / eslint upgrades in March.
  • Stale entries: all @esbuild/* platform packages pinned at 0.27.4 while esbuild resolves to 0.27.7.

Example failing run: https://github.com/FilecoinFoundationWeb/filecoin-foundation/actions/runs/27221260624/job/80376380835

Addresses #2337 (comment) (cc @BigLep)

Fix

Regenerated the lockfile with npm install --package-lock-only, which re-resolves the full dependency tree from package.json — including optionalDependencies platform packages for all platforms, which a plain npm install does not refresh (it only touches the packages installed on the local platform, so the stale @esbuild/* entries for other platforms survived).

Verification

npm ci --dry-run passes cleanly after this change (it reproduces the exact CI error before it).

Note

Committed with --no-verify: the pre-commit hook currently fails on pre-existing markdownlint errors in main's blog content (ProPGF-Batch-3-Call-for-Builders.md, Announcing-Filecoin-ProPGF-Batch-3-Selection-Committee.md), unrelated to this change. Those may deserve a separate fix.

The Release workflow (Publish ui-filecoin Package) has failed on every
push to main since 2026-03-25, because `npm ci` found package-lock.json
out of sync with package.json:

- Missing entries for @next/eslint-plugin-next, eslint-plugin-turbo,
  fast-glob and dotenv, left behind by the next 16.2.x / eslint upgrades.
- Stale @esbuild/* platform packages pinned at 0.27.4 while esbuild
  resolves to 0.27.7.

Regenerate the lockfile with `npm install --package-lock-only` so the
full dependency tree (including optional platform packages for all
platforms) is re-resolved from package.json. `npm ci --dry-run` now
passes.

Note: committed with --no-verify because the pre-commit hook currently
fails on pre-existing markdownlint errors in main's blog content,
unrelated to this change.
@vercel

vercel Bot commented Jun 12, 2026

Copy link
Copy Markdown

@beck-8 is attempting to deploy a commit to the Filecoin Foundation's projects Team on Vercel.

A member of the Team first needs to authorize it.

@BigLep
BigLep requested a review from Copilot June 12, 2026 16:33

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants