Skip to content

fix(deps): pin node-pty to its patched version for release archives - #14

Merged
mdatagent merged 1 commit into
customfrom
fix/pin-patched-deps
Oct 28, 2026
Merged

mdatagent merged 1 commit into
customfrom
fix/pin-patched-deps

Conversation

@mdatagent

Copy link
Copy Markdown
Collaborator

Upstream fix 22840ab943 — pin all patched package versions (pingdotgg/t3code#23798)

Existing systems changed

  1. Workspace dependency overrides (pnpm-workspace.yaml): node-pty is pinned to 1.2.0-beta.15, the version its patch targets. The lockfile keeps the same resolved version; only the importer specifier changes.

How the systems interact

  1. Release archive build (scripts/build-cli-archive.ts): stages the server's runtime externals into a fresh package.json and runs vp install --prod without the lockfile, copying the workspace overrides and the patches that apply.
  2. Before this change the stage resolved ^1.2.0-beta.15 to the newest beta (1.2.0-beta.18, now past pnpm's release-age window), so the node-pty@1.2.0-beta.15 patch went unused and pnpm stopped with ERR_PNPM_UNUSED_PATCH. With the override the stage installs the same patched node-pty as the running release.

Only node-pty is pinned (upstream pins every patched package): it is the only patched runtime external with a version range; @ff-labs/fff-node is already exact.

Verifiable outcome

Release built from this branch's merge: see the fork's releases page

🤖 Generated with Claude Code

Release archives install runtime packages without the lockfile, so the
^1.2.0-beta.15 range resolved to a newer beta and pnpm rejected the unused
node-pty patch. Same approach as upstream 22840ab (pingdotgg#23798).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions github-actions Bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:XS labels Oct 28, 2026
@mdatagent
mdatagent merged commit 58cd29f into custom Oct 28, 2026
7 of 22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XS vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant