[Bug] Cannot migrate legacy lockfiles with private GitHub Package dependencies
See original GitHub issueDescribe the bug
In legacy lockfiles private GitHub Package dependencies resolved
value has the following pattern: https://npm.pkg.github.com/download/@account/project/1.0.0/someverylong#hashvalue
. Attempting to migrate to yarn@berry
results with the Only some patterns can be imported from legacy lockfiles
error. That’s because there is no .git
or .tar.gz
or .tgz
in there.
Environment:
- OSX
- Node version 12.14.1
- Yarn version 2.0.0-rc.27
Issue Analytics
- State:
- Created 4 years ago
- Reactions:18
- Comments:14 (3 by maintainers)
Top Results From Across the Web
Installing private package from Github Package registry using ...
I created a private copy of this hello-world repository. ... imported from legacy lockfiles (not "https://npm.pkg.github.com/download/@mvce- ...
Read more >Git dependencies - Unity - Manual
When the Package Manager fetches a package from a Git repository, it adds the package locally to your project. This allows you to...
Read more >Migration | Yarn - Package Manager
A step-by-step and in-depth migration guide from Yarn 1 (Classic) to Yarn 2 (Berry). ... Webpack configs from non-private packages should avoid referencing ......
Read more >Announcing Poetry 1.2.0 | Blog
The legacy get-poetry.py installation script has been replaced by ... As the dev-dependencies is now deprecated, projects should migrate to ...
Read more >Heroku Node.js Support
Heroku uses the lockfiles, either the package-lock.json or ... files into git to ensure the same dependency versions across environments.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Hi! 👋
This issue looks stale, and doesn’t feature the
reproducible
label - which implies that you didn’t provide a working reproduction using Sherlock. As a result, it’ll be closed in a few days unless a maintainer explicitly vouches for it or you edit your first post to include a formal reproduction (you can use the playground for that).Note that we require Sherlock reproductions for long-lived issues (rather than standalone git repositories or similar) because we’re a small team. Sherlock gives us the ability to check which bugs are still affecting the master branch at any given point, and decreases the amount of code we need to run on our own machines (thus leading to faster bug resolution faster). It helps us help you! 😃
If you absolutely cannot reproduce a bug on Sherlock (for example because it’s a Windows-only issue), a maintainer will have to manually add the
upholded
label.Same here although mine has a
.tgz
in there yet is served through an artifacts repository