Skip to content

fix: replace workspace:^ in peerDependencies with real version ranges#1321

Merged
pyramation merged 1 commit into
mainfrom
feat/fix-workspace-peer-deps
Jun 28, 2026
Merged

fix: replace workspace:^ in peerDependencies with real version ranges#1321
pyramation merged 1 commit into
mainfrom
feat/fix-workspace-peer-deps

Conversation

@pyramation

Copy link
Copy Markdown
Contributor

Summary

npm install -g pgpm fails with EUNSUPPORTEDPROTOCOL: Unsupported URL Type "workspace:" because graphile-llm@0.14.0 was published with "graphile-search": "workspace:^" in its peerDependencies.

The workspace: protocol is a pnpm feature that should be replaced with real versions during publish, but the lerna/makage publish pipeline doesn't replace it in peerDependencies — only in dependencies.

The dependency chain: pgpm@pgpmjs/export@pgpmjs/migrate-client@constructive-io/graphql-querygraphile-settingsgraphile-llm@0.14.0 (boom).

Fix: replace workspace:^ with real version ranges in peerDependencies across 4 packages:

# graphile-llm
- "graphile-search": "workspace:^"
+ "graphile-search": "^1.18.0"

# graphile-postgis, graphile-pg-aggregates, graphile-ltree
- "graphile-connection-filter": "workspace:^"
+ "graphile-connection-filter": "^1.13.0"

Only graphile-llm is currently broken on npm; the other three are preventive fixes (same pattern, not yet leaked to published versions).

Link to Devin session: https://app.devin.ai/sessions/8405d6fc90a04e5e9e17471f7eb69e33
Requested by: @pyramation

graphile-llm had 'graphile-search: workspace:^' in peerDependencies which
leaked into the published package on npm, breaking 'npm install -g pgpm'
(EUNSUPPORTEDPROTOCOL). Same issue existed in graphile-postgis,
graphile-pg-aggregates, and graphile-ltree for graphile-connection-filter.

pnpm replaces workspace: protocols in dependencies during publish, but
peerDependencies are not always replaced by the lerna/makage publish
pipeline.
@pyramation pyramation self-assigned this Jun 28, 2026
@devin-ai-integration

Copy link
Copy Markdown
Contributor

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment, CI, and merge conflict monitoring

@pyramation pyramation merged commit 29959cb into main Jun 28, 2026
1 check failed
@pyramation pyramation deleted the feat/fix-workspace-peer-deps branch June 28, 2026 01:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant