Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NodeJS includes runtime dependency from nodejs-npm package #771

Closed
lorenzo-arena opened this issue Jan 4, 2024 · 1 comment
Closed

NodeJS includes runtime dependency from nodejs-npm package #771

lorenzo-arena opened this issue Jan 4, 2024 · 1 comment

Comments

@lorenzo-arena
Copy link

I'm using the nodejs recipe to run a JS file on a target device; I don't need npm and none of my recipes are referencing it. However, I'm getting npm and npx installed on the device due to the fact that the "nodejs" package depends on "nodejs-npm" (this can be found by looking at the control file in the created IPK package). How can that be? I'm not finding any explicit dependency between the two packages.

@lorenzo-arena
Copy link
Author

This was due to a dangling link installed in the nodejs package, linking to the /usr/bin/corepack file. Since it was dangling, yocto automatically tries to search for the target in other packages and add them to the depenency list if the target file is found. This seems to be fixed in more recent versions of the recipe, like in the nanbield branch, but not in kirkstone.

gratian pushed a commit to gratian/meta-openembedded that referenced this issue Feb 5, 2024
This release contains bug fixes only.
The following CVEs have been addressed:

CVE-2023-27783
CVE-2023-27784
CVE-2023-27785
CVE-2023-27786
CVE-2023-27787
CVE-2023-27788
CVE-2023-27789

Changelog:
=========
dlt_jnpr_ether_cleanup: check subctx before cleanup by @Marsman1996 in openembedded#781
Bug openembedded#780 assert tcpedit dlt cleanup by @fklassen in openembedded#800
Fix bugs caused by strtok_r by @Marsman1996 in openembedded#783
Bug openembedded#782 openembedded#784 openembedded#785 openembedded#786 openembedded#787 openembedded#788 strtok r isuses by @fklassen in openembedded#801
Update en10mb.c by @david-guti in openembedded#793
PR openembedded#793 ip6 unicast flood by @fklassen in openembedded#802
Bug openembedded#719 fix overflow check for parse_mpls() by @fklassen in openembedded#804
PR openembedded#793 - update tests for corrected IPv6 MAC by @fklassen in openembedded#805
PR openembedded#793 - update tests for vlandel by @fklassen in openembedded#806
Feature openembedded#773 gh actions ci by @fklassen in openembedded#807
Feature openembedded#759: Upgrade autogen/libopts to 5.18.16 by @fklassen in openembedded#760
Bug openembedded#751 don't exit after send error by @fklassen in openembedded#761
Bug openembedded#750: configure: libpcap version robustness by @fklassen in openembedded#764
Bug openembedded#749 flow stats: avoid overstating flow packet count by @fklassen in openembedded#765
Bug openembedded#750 more libpcap version updates by @fklassen in openembedded#766
Bug openembedded#767 tests: support for out-of-tree tests by @fklassen in openembedded#768
Bug openembedded#750 - fix macOS test failure by @fklassen in openembedded#770
4.4.3 by @fklassen in openembedded#769 and openembedded#771

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant