Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resolve yarn install warning about ansi-html-community #567

Closed
1 task done
rocketnova opened this issue Dec 1, 2021 · 0 comments · Fixed by #588
Closed
1 task done

Resolve yarn install warning about ansi-html-community #567

rocketnova opened this issue Dec 1, 2021 · 0 comments · Fixed by #588
Assignees
Labels
Engineering Technology and Development Track Type: Robustness Tickets to improve the application, invisibly
Milestone

Comments

@rocketnova
Copy link
Contributor

rocketnova commented Dec 1, 2021

Description

In #565, we patched the vuln in the abandoned ansi-html package, but using ansi-html-community. However, I just noticed that yarn install --frozen-lockfile is showing this warning:

warning Pattern ["[email protected]"] is trying to unpack in the same destination "/home/runner/.cache/yarn/v6/npm-ansi-html-0.0.8-69fbc4d6ccbe383f9736934ae34c3f8290f1bf41-integrity/node_modules/ansi-html" as pattern ["ansi-html@https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41","[email protected]","ansi-html@^0.0.7"]. This could result in non-deterministic behavior, skipping.

See the github actions next.js CI run for merging in #565 as an example.

Acceptance Criteria

  • Resolve warning
@rocketnova rocketnova added the Engineering Technology and Development Track label Dec 1, 2021
@rocketnova rocketnova added this to the For Handoff milestone Dec 1, 2021
@rocketnova rocketnova assigned rocketnova and unassigned rocketnova Dec 8, 2021
@lomky lomky added Type: Robustness Tickets to improve the application, invisibly Type: User Experience Tickets that directly improve the application, visibly and removed Type: User Experience Tickets that directly improve the application, visibly labels Dec 21, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Engineering Technology and Development Track Type: Robustness Tickets to improve the application, invisibly
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants