-
Notifications
You must be signed in to change notification settings - Fork 24
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update Smoke Tests for NPM 8 Fallback and Lockfile Version 3 with NPM 9 #235
base: main
Are you sure you want to change the base?
Update Smoke Tests for NPM 8 Fallback and Lockfile Version 3 with NPM 9 #235
Conversation
version: 1.1.0 | ||
directory: /npm/multi-dir/bar | ||
updated-dependency-files: | ||
- content: | | ||
{ | ||
"name": "foo", | ||
"version": "1.0.0", | ||
"lockfileVersion": 3, | ||
"lockfileVersion": 1, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
is this supposed to be 1?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No, normally it shouldn't. I am checking it. Also there are problems I am solving then will let you know.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
When running on 9, that is happening. I am trying to find out the reason.
@@ -283,8 +241,8 @@ output: | |||
type: file | |||
pr-title: Bump the npm_and_yarn group across 2 directories with 3 updates | |||
pr-body: | | |||
Bumps the npm_and_yarn group with 2 updates in the /npm/multi-dir/foo directory: @dependabot/dummy-pkg-b and [left-pad](https://github.com/stevemao/left-pad). | |||
Bumps the npm_and_yarn group with 2 updates in the /npm/multi-dir/bar directory: [left-pad](https://github.com/stevemao/left-pad) and @dependabot/dummy-pkg-a. | |||
Bumps the npm_and_yarn group with 1 update in the /npm/multi-dir/foo directory: @dependabot/dummy-pkg-b. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
is this a grouped updates bug?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Checking.
Purpose
This PR updates our smoke tests to align with recent changes in the Dependabot Core project, specifically PR #10757, which sets npm 8 as the default and fallback version under the
npm_fallback_version_above_v6
feature flag and assignslockfileVersion: 3
to npm 9. These changes ensure our tests reflect the supported npm versions (7, 8, and 9), with npm 8 as the fallback and compatibility adjustments for lockfile versioning under npm 9.Key Updates
Why This is Important
Ensuring our smoke tests reflect npm 8 as the fallback and lockfile version 3 for npm 9 improves accuracy for projects without explicit npm versioning, providing reliable dependency resolution. These updates also validate the
npm_fallback_version_above_v6
feature flag’s behavior, confirming that npm 8 is chosen as the fallback where applicable.Additional Notes