Skip to content

fix(ci): match the lockfile to the recorded submodule - #13

Merged
upupming merged 1 commit into
mainfrom
fix/lockfile
Sep 7, 2026
Merged

upupming merged 1 commit into
mainfrom
fix/lockfile

Conversation

@upupming

@upupming upupming commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

main has been red since #10: every job dies in setup with

ERR_PNPM_OUTDATED_LOCKFILE
Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to
date with <ROOT>/lynx-screens/package.json

The lockfile in #10 was regenerated while the lynx-screens submodule sat on a
local branch, so it asks for versions the recorded commit does not declare.
Regenerated against the commit main actually points at.

There is a second half to this that this PR does not fix: #10 moved
packages/lynx and the example to ReactLynx 0.126 while the submodule stays
on 0.125, so an install now produces both Preact 10 and 11. The example builds
and the tests pass, but the two are separate runtimes. It resolves once
lynx-screens takes the same bump and the submodule pointer moves with it.

The toolchain bump regenerated the lockfile with the lynx-screens
submodule sitting on a local branch, so the lockfile asked for versions
its recorded commit does not declare and every job died on
ERR_PNPM_OUTDATED_LOCKFILE.
@changeset-bot

changeset-bot Bot commented Sep 7, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: c436f70

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​lynx-js/​autolink-codegen@​0.5.0 ⏵ 0.4.17610096 -392 +1100
Added@​lynx-js/​react@​0.125.01001009496100

View full report

@upupming
upupming merged commit 96fbfef into main Sep 7, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant