Closed case-fastly closed 7 months ago
In case you find it useful: https://github.com/renovatebot/renovate/pull/28470
Any eta for this? Thanks
I can choose between my dependeabot workflow becoming manual, or you successfully force me to eat your NPM dogfood. 👎 Please make pnpm a first class citizen. My package.json
has an engines
section which you should be able to use to install the right version of pnpm
. After that it is a bit more complex, but we're failing on the first part here, simply not using the version specified, even if it is a particular release from version 8.x series.
Thanks for the fix! Looks like Dependabot version updates now work with the new lockfile format, but the Dependabot alerts dashboard seems eerily empty. 😰
Ever since lockfile v9 support has been added we're no longer getting the error, but it has now been replaced with a different lockfile related error, see https://github.com/keycloak/keycloak/network/updates/824818081
Ever since lockfile v9 support has been added we're no longer getting the error, but it has now been replaced with a different lockfile related error, see https://github.com/keycloak/keycloak/network/updates/824818081
Getting a 404 trying to access the link.
I guess there still needs to be a release sometime, since the PR it created today (08.05.) still downgrades my lockfile to version 6.0
https://github.com/D3strukt0r/weleda-webcenter-text-export/pull/32/files
Getting a 404 trying to access the link.
Here is the (truncated) log:
Is there an existing issue for this?
Package ecosystem
pnpm
Package manager version
pnpm v9
Language version
n/a
Manifest location and content before the Dependabot update
n/a
dependabot.yml content
n/a
Updated dependency
n/a
What you expected to see, versus what you actually saw
Per this comment in the original pnpm support Feature Request thread, it looks like the pnpm package manager just updated to v9, along with an updated lockfile format.
Dependabot is now erroring with:
Native package manager behavior
No response
Images of the diff or a link to the PR, issue, or logs
No response
Smallest manifest that reproduces the issue
No response