Fix install failures in CI pipelines running npm >= 7 #1

syndic-will commented 2022年11月02日 19:56:15 +01:00

Hi Aral,

I'm running into this NPM bug when trying to npm ci in a test pipeline with my apps that depend on auto-encrypt: https://github.com/npm/cli/issues/2610

This started after updating my pacakge & pipeline runners to use node 16 & npm 8

It seems the issue is npm started preferring SSH connections when a dependency is pointing to a public git repo, and the pipeline runners don't have SSH keys setup so they can't fetch the dependency. In this case its aral/bent#errors-with-response-headers

The workaround I found from that thread is to force npm into using https by being explicit in the dependency specification.

Hi Aral, I'm running into this NPM bug when trying to `npm ci` in a test pipeline with my apps that depend on auto-encrypt: https://github.com/npm/cli/issues/2610 This started after updating my pacakge & pipeline runners to use node 16 & npm 8 It seems the issue is npm started preferring SSH connections when a dependency is pointing to a public git repo, and the pipeline runners don't have SSH keys setup so they can't fetch the dependency. In this case its `aral/bent#errors-with-response-headers` The workaround I found from that thread is to force npm into using https by being explicit in the dependency specification.

syndic-will commented 2022年11月02日 20:03:34 +01:00

Here's an example of the error: https://github.com/immers-space/immers/actions/runs/3378969630/jobs/5609903444

And here's a commit where I worked around it temporarily: https://github.com/immers-space/immers/pull/94/commits/a17c630ddd23a9d8e5df86baf5f3842d12fde194

However, the next time I update dependencies, npm will revert that back to git+ssh unless we change it here in auto-encrypt

Here's an example of the error: https://github.com/immers-space/immers/actions/runs/3378969630/jobs/5609903444 And here's a commit where I worked around it temporarily: https://github.com/immers-space/immers/pull/94/commits/a17c630ddd23a9d8e5df86baf5f3842d12fde194 However, the next time I update dependencies, npm will revert that back to `git+ssh` unless we change it here in auto-encrypt

aral commented 2022年11月03日 11:25:11 +01:00

All looks good @syndic-will, just got a clean run in the tests and will merge this now. Thank you for your contribution :)

All looks good @syndic-will, just got a clean run in the tests and will merge this now. Thank you for your contribution :)

aral commented 2022年11月03日 11:44:17 +01:00

@syndic-will I just followed the instructions for doing a manual merge here on Codeberg but it’s not getting picked up as a merge. (This is my first pull request merge here.)

Going to open an issue with Codeberg about it. Apologies for the hassle.

@syndic-will I just followed the instructions for doing a manual merge here on Codeberg but it’s not getting picked up as a merge. (This is my first pull request merge here.) Going to open an issue with Codeberg about it. Apologies for the hassle.

aral commented 2022年11月03日 11:49:08 +01:00

@syndic-will Looks like this is an issue that’s been around for two years?!

Codeberg/Community#438 (comment)

Just pinged them to see what we can do about it as I’d like you to get credit for your pull request :)

@syndic-will Looks like this is an issue that’s been around for two years?! https://codeberg.org/Codeberg/Community/issues/438#issuecomment-664357 Just pinged them to see what we can do about it as I’d like you to get credit for your pull request :)

syndic-will commented 2023年01月05日 19:56:52 +01:00

Closing this as the changes are in. No worries about credit, my commit is in the history anyway

Closing this as the changes are in. No worries about credit, my commit is in the history anyway