Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Version 3.13.0 contains unreleased express v4.18.0

See original GitHub issue

Describe the bug The recent release of verdaccio version 3.13.0 contains an update to core dependencies that updates express to an unreleased version: 4.18.0 -> https://github.com/verdaccio/verdaccio/commit/17271ed#diff-8ee2343978836a779dc9f8d6b794c3b2R4131

This breaks any build to run verdaccio with the following error:

error Couldn't find any versions for "express" that matches "4.18.0"

To Reproduce

Add "verdaccio": "3.13.0" to project package.json
Run yarn install --no-lockfile
See error

Expected behavior Verdaccio installs successfully.

Environment information

Yarn: 1.17.3

Package.json:

{
  "private": true,
  "devDependencies": {
    "verdaccio": "^3.2.0",
    "verdaccio-memory": "^1.0.3"
  }
}

Verdaccio: 3.13.0

Issue Analytics

State:
Created 4 years ago
Reactions:3
Comments:6 (4 by maintainers)

Top GitHub Comments

1reaction

sergiohgzcommented, Sep 30, 2019

@HipsterBrown verdaccio 3.13.1 is available at npmjs and Docker Hub with the fix

Thanks a lot for reporting 😃

1reaction

HipsterBrowncommented, Sep 30, 2019

Thanks for the quick response @juanpicado 👏

Top Results From Across the Web

Changelog history — tox 3.25.1 documentation

the tox:version section contains the versions of all packages tox depends on with their version. passing -l now allows only listing default target...

Source Packages in "kinetic", Subsection misc - Ubuntu

... android-platform-dalvik (10.0.0+r36-4) [universe]; android-platform-external-boringssl ... dujour-version-check-clojure (0.2.3-1) [universe] ...

Diff - 3c8c0ae7259484da0612623aead17fc3000deff9^2 ...

+ +2020-07-28 version 3.12.4 (C++/Java/Python/PHP/Objective-C/C#/Ruby/JavaScript) + +This release contains no significant changes, but exists because 3.12.3 ...

Debian -- Source Packages in "sid"

... binutils-arm-none-eabi (18); binutils-avr (2.26.20160125+Atmel3.6.2-4) ... golang-github-aquasecurity-go-version (0.0~git20210121.637058c-2) ...

CVE - Search Results - MITRE

This issue affects Apache Helix all releases from 0.8.0 to 1.0.4. ... The problem has been patched in the versions published on 2022-10-18,...