Skip to content

fix(crosscode): sync lockfile and normalize publish metadata - #140

Merged
snhsish merged 1 commit into
mainfrom
fix/crosscode-lockfile
Oct 17, 2026
Merged

snhsish merged 1 commit into
mainfrom
fix/crosscode-lockfile

Conversation

@snhsish

@snhsish snhsish commented Oct 17, 2026

Copy link
Copy Markdown
Owner

Why

The merge of #139 changed packages/crosscode/package.json (moved @crosscode/shared to devDependencies) but did not update pnpm-lock.yaml. As a result the Version workflow failed on main:

ERR_PNPM_OUTDATED_LOCKFILE  Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to date with packages/crosscode/package.json
"devDependencies" in the lockfile ... doesn't match the same field in package.json

Because of that failure, changesets/action never regenerated the "chore: version packages" PR (#136), so the 0.7.0 release is stuck.

Changes

  • pnpm-lock.yaml: record @crosscode/shared under devDependencies for the packages/crosscode importer, matching package.json.
  • packages/crosscode/package.json: use "bin": { "crosscode": "dist/cli.js" } and "repository.url": "git+https://github.com/snhsish/crosscode.git" so npm publish stops emitting auto-correction warnings (the bin[...] ... was invalid and removed message is misleading — the entry is kept, just normalized).

Verification

  • pnpm install --frozen-lockfile --lockfile-only → "Done" (lockfile in sync).
  • npm publish --dry-run → no warnings (only the expected "cannot publish over 0.6.9" until the version is bumped).
  • npm pack internal manifest keeps "bin": { "crosscode": "./dist/cli.js" } / dist/cli.js and drops @crosscode/shared from dependencies.

After merge

The Version workflow re-runs, updates PR #136 to bump crosscode 0.7.0 (minor changeset + QR patch changeset), after which it can be merged and published.

- Update pnpm-lock.yaml so @crosscode/shared is recorded as a devDependency,
  matching package.json. Without this, the Version workflow fails with
  ERR_PNPM_OUTDATED_LOCKFILE and never opens a release PR.
- Use "dist/cli.js" for bin and "git+https://..." for repository.url so
  npm publish no longer emits auto-correction warnings.
@vercel

vercel Bot commented Oct 17, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
crosscode-web Skipped Skipped Oct 17, 2026 1:34pm UTC

@snhsish
snhsish merged commit cf4907c into main Oct 17, 2026
6 checks passed

This branch was previously deployed

1 inactive deployment
Preview — 53d90e4e Deployed Oct 17, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant