fix(deps): add missing webpack-dev-server override (unbreaks main)#443
Conversation
PR #442 (1c3b6df) added webpack-dev-server@5.2.4 to package-lock.json but the corresponding `overrides` entry never made it into package.json. `npm ci` on main now fails with "Missing: webpack-dev-server@4.15.2 from lock file" because the natural dep tree (via @wordpress/scripts) wants 4.15.2 while the lockfile has 5.2.4 with no override to bridge the gap. This breaks the release workflow — without it, the changesets action cannot install deps to refresh PR #403 or publish 4.8.5. Adding the missing override is sufficient; the lockfile is already at the correct resolution and `npm install --package-lock-only` is a no-op. Verified locally: `npm ci --dry-run` now exits 0.
|
|
Review nudge for @wpengine/headless-open-source — this is a hotfix to unbreak PR #442's lockfile shipped This adds the one missing line. Verified locally: Once this is in, release.yml will run again, refresh #403 with the security changeset, and we can ship 4.8.5. |
2 participants
Summary
npm cionmainis failing — PR chore(deps): patch uuid and webpack-dev-server security alerts (dev-only) #442 (1c3b6df) added thewebpack-dev-server@5.2.4resolution topackage-lock.jsonbut left the corresponding entry out of theoverridesblock inpackage.json. The lockfile has5.2.4while package.json's natural tree (via@wordpress/scripts) wants4.15.2, with no override to bridge them.release.ymlworkflow (failed run 26516976225) — without it, the changesets action can't install deps to refresh PR Release Plugin #403 or publish 4.8.5."webpack-dev-server": "^5.2.4"line is sufficient; lockfile is already at the correct resolution andnpm install --package-lock-onlyis a no-op.Test plan
npm ci --dry-runexits 0 locally with the patchedpackage.jsonnpm install --package-lock-onlymakes no further changes to the lockfile