[BUG] Sha Integrity Check fails for listr-update-renderer

Description

Currently, lint-staged depends on a forked version of listr-update-renderer, which is pointing at a branch owned by you. When we went to deploy after merging the latest version of lint-staged, we got integrity errors installing this version of listr-update-renderer. My hunch is that it was a version mismatch, pointing the v0.4.0 sha of listr-update-renderer at the GitHub branch version.

My initial suggestion was going to be to lock it to a specific commit hash. Then at least when you commit to that branch, we won’t get integrity errors related to those changes. That said, I’m not entirely sure what the underlying issue was. Hopefully you get that fix merged upstream soon 😃.

Environment

• OS: Heroku
• Node.js: 10.4.0
• lint-staged: v8.0.0

[devinus]

This is currently causing npm audit to fail for Node 10.13.0 and npm 6.4.1 for any project that uses lint-staged as a devDependency.

[hutchy2570]

We hit this too. I ended up having to clear my npm cache locally, then npm i to update the package-lock. However it broke again once 8.0.1-8.0.3 were published so I had to re-run npm i to update the package-lock again to fix it.