question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[Bug] Cannot migrate legacy lockfiles with private GitHub Package dependencies

See original GitHub issue

Describe the bug

In legacy lockfiles private GitHub Package dependencies resolved value has the following pattern: https://npm.pkg.github.com/download/@account/project/1.0.0/someverylong#hashvalue. Attempting to migrate to yarn@berry results with the Only some patterns can be imported from legacy lockfiles error. That’s because there is no .git or .tar.gz or .tgz in there.

Environment:

  • OSX
  • Node version 12.14.1
  • Yarn version 2.0.0-rc.27

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Reactions:18
  • Comments:14 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
yarnbotcommented, Jun 10, 2020

Hi! 👋

This issue looks stale, and doesn’t feature the reproducible label - which implies that you didn’t provide a working reproduction using Sherlock. As a result, it’ll be closed in a few days unless a maintainer explicitly vouches for it or you edit your first post to include a formal reproduction (you can use the playground for that).

Note that we require Sherlock reproductions for long-lived issues (rather than standalone git repositories or similar) because we’re a small team. Sherlock gives us the ability to check which bugs are still affecting the master branch at any given point, and decreases the amount of code we need to run on our own machines (thus leading to faster bug resolution faster). It helps us help you! 😃

If you absolutely cannot reproduce a bug on Sherlock (for example because it’s a Windows-only issue), a maintainer will have to manually add the upholded label.

1reaction
DimitrKcommented, Mar 5, 2020

Same here although mine has a .tgz in there yet is served through an artifacts repository

➤ YN0014: │ webpack-hot-middleware@npm:^2.25.0: Only some patterns can be imported from legacy lockfiles (not "https://mycompany.artifactory.com/mycompany/api/npm/npm/webpack-hot-middleware/-/webpack-hot-middleware-2.25.0.tgz#4528a0a63ec37f8f8ef565cf9e534d57d09fe706")
Read more comments on GitHub >

github_iconTop Results From Across the Web

Installing private package from Github Package registry using ...
I created a private copy of this hello-world repository. ... imported from legacy lockfiles (not "https://npm.pkg.github.com/download/@mvce- ...
Read more >
Git dependencies - Unity - Manual
When the Package Manager fetches a package from a Git repository, it adds the package locally to your project. This allows you to...
Read more >
Migration | Yarn - Package Manager
A step-by-step and in-depth migration guide from Yarn 1 (Classic) to Yarn 2 (Berry). ... Webpack configs from non-private packages should avoid referencing ......
Read more >
Announcing Poetry 1.2.0 | Blog
The legacy get-poetry.py installation script has been replaced by ... As the dev-dependencies is now deprecated, projects should migrate to ...
Read more >
Heroku Node.js Support
Heroku uses the lockfiles, either the package-lock.json or ... files into git to ensure the same dependency versions across environments.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found