sdedic commented on PR #8695: URL: https://github.com/apache/netbeans/pull/8695#issuecomment-3142806050
> undici isn't declared anywhere in the repo so it must be a transitive dependency of something what is allowed to update between builds. I also can't find it in the log so the update must happen quietly? ``` $ npm ls --all | grep undici ``` comes up empty -> not even transitive dependency from the project itself, but it's a dependncy of `@vscode/vsce@2.19.0`. It's dependency declares ``` package-lock.json: "undici": "^7.12.0", ``` so in a pristine environment (with no package-lock.json for it) it resolves to whatever >= 7.12.0 available at that time Maybe we can change the vscode project dependencies to fix version of vsce and fix vsce dependencies in our package-lock.json ? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@netbeans.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: notifications-unsubscr...@netbeans.apache.org For additional commands, e-mail: notifications-h...@netbeans.apache.org For further information about the NetBeans mailing lists, visit: https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
