Skip to content

Pin npm plugin dependency versions in action.yml

170d61c
Select commit
Loading
Failed to load commit list.
Merged

Pin npm plugin dependency versions #511

Pin npm plugin dependency versions in action.yml
170d61c
Select commit
Loading
Failed to load commit list.
LinearB / lb/linearb_ai_review succeeded Apr 3, 2026 in 1m 40s

Code review added

✨ PR Review

Agentic review
Pinning npm plugin dependency versions flags a critical issue: non-existent package versions will silently break plugin installs—changes required.

1 issues detected:

🐞 Bug - Multiple non-existent npm versions pinned, silently breaking plugin installs

Details: Three of four npm versions pinned in action.yml:123 don't exist in the npm registry (lodash@4.18.1, moment@2.30.1, axios@1.14.0), causing npm i to fail silently due to continue-on-error: true. Downstream steps requiring these packages will crash at runtime with "module not found" errors instead of failing immediately at install time. Correct the versions (e.g., lodash@4.17.21, moment@2.29.4, axios@1.7.7) or remove the continue-on-error flag to surface install failures early.
File: action.yml (123-123)

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Review using Guidelines Learn how