Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(arborist): add v1 upgrade info to cli #7092

Closed

Conversation

siemhesda
Copy link
Contributor

Add documentation about upgrading lockfile from v1 to v2 based on the issue comment below.

#5051 (comment)

References

Closes #5051

@siemhesda siemhesda requested a review from a team as a code owner December 19, 2023 20:52
@wraithgar
Copy link
Member

This is making the assumption that folks have their lockfile version set to 2. A more explicit instruction is in order here to future proof this.

@wraithgar
Copy link
Member

wraithgar commented Dec 20, 2023

Actually that comment just shows the root problem. npm should still absolutely warn about peer dependencies when it converts a lockfile if it is done during an install. Having to wait for a subsequent install is not an adequate scenario, folks are expecting it to work that way on the first install.

@wraithgar wraithgar closed this Dec 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[BUG] npm 8 allows incorrect peer dependencies when upgrading a v1 lockfile to v2.
2 participants