Skip to content

fix(release): drop cross-ref/infra rewrites from #203, keep only version bumps#204

Merged
sirdeggen merged 1 commit into
mainfrom
fix/lockfile-revert-cross-refs
Jun 17, 2026
Merged

fix(release): drop cross-ref/infra rewrites from #203, keep only version bumps#204
sirdeggen merged 1 commit into
mainfrom
fix/lockfile-revert-cross-refs

Conversation

@sirdeggen

Copy link
Copy Markdown
Contributor

Problem

PR #203 ran sync-versions, which (beyond the intended own-version patch bumps) rewrote 45 cross-package dep ranges and patch-bumped 7 infra components. Those caret ranges (e.g. ^2.1.4) already satisfied check-versions against the new local versions, so the rewrites were unnecessary — and they forced pnpm-lock.yaml to re-resolve against registry versions not yet published (gasp 1.2.4, sdk 2.1.5, ...). Result: pnpm install --frozen-lockfile fails on main (ERR_PNPM_OUTDATED_LOCKFILE).

Fix

Revert every cross-ref and infra change. Retain only the 9 package own-version patch bumps — the actual release intent:

  • @bsv/overlay-topics → 1.0.2
  • @bsv/wallet-toolbox (+client, +mobile) → 2.1.29
  • @bsv/verifast → 0.1.1
  • @bsv/overlay → 2.0.4
  • @bsv/overlay-express → 2.3.1
  • @bsv/sdk → 2.1.5
  • @bsv/gasp → 1.2.4

Own-version fields are not recorded in lockfile importers, so the lockfile stays valid.

Verification

  • node scripts/check-versions.mjs → clean
  • pnpm install --frozen-lockfile → exit 0

🤖 Generated with Claude Code

…tch bumps

PR #203 ran sync-versions, which rewrote 45 cross-package dep ranges
(e.g. ^2.1.4 -> ^2.1.5) and patch-bumped 7 infra components. Those caret
ranges already satisfied check-versions against the new local versions, so
the rewrites were unnecessary — and they forced pnpm-lock.yaml to re-resolve
against registry versions that are not yet published (gasp 1.2.4, sdk 2.1.5,
...), breaking `pnpm install --frozen-lockfile` on main.

Revert every cross-ref and infra change; retain only the 9 package
own-version patch bumps (the actual release intent). Own-version fields are
not recorded in the lockfile importers, so the lockfile stays valid.

check-versions: clean. pnpm install --frozen-lockfile: exit 0.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@sonarqubecloud

Copy link
Copy Markdown

@codecov

codecov Bot commented Jun 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@sirdeggen sirdeggen merged commit 43d846a into main Jun 17, 2026
12 checks passed
@sirdeggen sirdeggen deleted the fix/lockfile-revert-cross-refs branch June 17, 2026 04:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant