lerna --version incorrectly updates package-lock.json generated with npm@7

Expected Behavior

Package version should be correctly updated in package-lock.json version 2 with lerna --version command.

Current Behavior

When package-lock.json in version 2 is used (generated by npm@7) then lerna --version command updates only the first (root) version information in the package-lock.json. The information in the packages section of package-lock.json is left with an old version.

{
  "name": "@space/types",
  "version": "1.0.13",
  "lockfileVersion": 2,
  "requires": true,
  "packages": {
    "": {
      "name": "@space/types",
      "version": "1.0.11",
      "dependencies": {
        "@space/constants": "file:../constants",
        "fp-ts": "^2.9.5",
        "io-ts": "^2.2.14",
        "joi": "^17.4.0"
      }
    },
(...)

Steps to Reproduce (for bugs)

1. Install and use npm@7
2. Create a lerna monorepo with “version”: “independent”
3. Add a package, publish it to have an initial version published
4. Make some changes in the package, commit, push
5. Run lerna --version to tag a new version
6. Review pushed changes in package-lock.json

lerna.json

{
  "packages": [
    "packages/*"
  ],
  "version": "independent",
  "command": {
    "publish": {
      "ignoreChanges": [
        "*.md"
      ],
      "registry": "<redacted>"
    }
  }
}

Your Environment

Executable	Version
lerna --version	3.22.1
npm --version	7.6.0
node --version	14.15.0

OS	Version
macOS Catalina	10.15.7

[hudochenkov]

@k-koehler I’m using my fix from this PR https://github.com/lerna/lerna/pull/2914 with https://github.com/ds300/patch-package

[tex0l]

I can reproduce the issue and I understand what’s happening, but I have no solution.

It comes from an inconsistent installation of npm. The version you have in your path differs from the one actually used by lerna in the packages.

I use npm@7.6.3 with node@14.16.0. I installed the node@14 package with Homebrew which initially comes with npm@6.14.11 but updated it with npm i -g npm --force. When I use npm from my shell:

✗ npm --version 
7.6.3

But lerna doesn’t use the same binary for npm, it uses the one intially installed with node@14

✗ lerna exec -- npm --version
lerna notice cli v3.22.1
lerna info Executing command in 5 packages: "npm --version"
6.14.11
6.14.11
6.14.11
6.14.11
6.14.11
lerna success exec Executed command in 5 packages: "npm --version"

This is confirmed by test which npm from the shell:

✗ which npm
/usr/local/bin/npm

And from lerna exec:

✗ lerna exec -- which npm    
lerna notice cli v3.22.1
lerna info Executing command in 5 packages: "which npm"
/usr/local/Cellar/node@14/14.16.0_1/bin/npm
/usr/local/Cellar/node@14/14.16.0_1/bin/npm
/usr/local/Cellar/node@14/14.16.0_1/bin/npm
/usr/local/Cellar/node@14/14.16.0_1/bin/npm
/usr/local/Cellar/node@14/14.16.0_1/bin/npm
lerna success exec Executed command in 5 packages: "which npm"

Using lerna info, this is not detected:

✗ lerna info
lerna notice cli v3.22.1

 Environment info:

  System:
    OS: macOS 11.2.3
    CPU: (4) x64 Intel(R) Core(TM) i5-7360U CPU @ 2.30GHz
  Binaries:
    Node: 14.16.0 - /usr/local/bin/node
    Yarn: 1.22.10 - /usr/local/bin/yarn
    npm: 7.6.3 - /usr/local/bin/npm
  Utilities:
    Git: 2.30.0 - /usr/local/bin/git
  npmPackages:
    lerna: ^3.22.1 => 3.22.1 

I didn’t find what $PATH lerna exec uses, nor how to configure it to use the same one as the current shell.