Remove yalc artifact from spec/dummy lockfiles#977
Conversation
WalkthroughThe pull request updates the Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches
🧪 Generate unit tests (beta)
📝 Coding Plan
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Greptile SummaryCleans up a yalc development artifact that was accidentally committed to
Confidence Score: 5/5
Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A["spec/dummy/package.json"] -->|"before: file:.yalc/shakapacker"| B["Local .yalc directory\n(version 9.6.0-rc.3)"]
A -->|"after: ^9.6.1"| C["npm registry\n([email protected])"]
A --> D["package-lock.json\n(regenerated)"]
A --> E["yarn.lock\n(regenerated)"]
D --> C
E --> C
style B fill:#f96,stroke:#333,color:#000
style C fill:#6f9,stroke:#333,color:#000
Last reviewed commit: 2286bcc |
ReviewThis is a clean, well-scoped fix that removes accidentally-committed yalc artifacts from the repo. The lockfile regenerations look correct — both now resolve One minor concern: The One workflow question (left inline): Using |
ReviewGood cleanup — removing the yalc artifact is the right call. One concern worth discussing: the PR description says it replaces the dependency with More importantly, an exact-pinned published version means:
Suggested alternative: If there's a reason the local-file reference was abandoned (e.g., CI resolution issues), it would be worth documenting that decision. If not, `file:../.." seems like the more correct fix. |
### Summary Adds the v9.7.0 changelog section with release notes for all user-visible changes since v9.6.1: - **Added**: rspack v2 support (PR #975) - **Fixed**: Config exporter path traversal and annotation format validation (PR #914) - **Fixed**: `webpack-subresource-integrity` v5 named export handling (PR #978, fixes #972) Version diff links at the bottom of the file are updated accordingly. ### Pull Request checklist - [x] ~Add/update test to cover these changes~ - [x] ~Update documentation~ - [x] Update CHANGELOG file ### Other Information Non-user-visible PRs (#920, #965, #970, #971, #977, #979, #981, #982) were intentionally excluded per changelog policy. <!-- CURSOR_SUMMARY --> --- > [!NOTE] > **Low Risk** > Documentation-only change updating `CHANGELOG.md`; no runtime code or dependency changes are introduced in this PR. > > **Overview** > Adds a new `v9.7.0` section to `CHANGELOG.md` documenting user-visible changes (rspack v2 support and two fixes around config export security/validation and `webpack-subresource-integrity` v5 exports). > > Updates the compare links at the bottom so `[Unreleased]` now compares from `v9.7.0`, and adds the new `[v9.7.0]` tag link. > > <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit 8942a43. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup> <!-- /CURSOR_SUMMARY --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Added rspack v2 support * **Bug Fixes** * Improved security and validation handling <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Claude Opus 4.6 <[email protected]>
## Summary - replace `file:.yalc/shakapacker` with the published `9.6.1` dependency in `spec/dummy/package.json` - regenerate both `spec/dummy/package-lock.json` and `spec/dummy/yarn.lock` so they no longer reference local `.yalc` paths - verify `spec/dummy` resolves `[email protected]` ## Testing - `npm install --package-lock-only --ignore-scripts` (in `spec/dummy`) - `yarn install --non-interactive` (in `spec/dummy`) - `npm ls shakapacker` (in `spec/dummy`) Closes #968.
### Summary Adds the v9.7.0 changelog section with release notes for all user-visible changes since v9.6.1: - **Added**: rspack v2 support (PR #975) - **Fixed**: Config exporter path traversal and annotation format validation (PR #914) - **Fixed**: `webpack-subresource-integrity` v5 named export handling (PR #978, fixes #972) Version diff links at the bottom of the file are updated accordingly. ### Pull Request checklist - [x] ~Add/update test to cover these changes~ - [x] ~Update documentation~ - [x] Update CHANGELOG file ### Other Information Non-user-visible PRs (#920, #965, #970, #971, #977, #979, #981, #982) were intentionally excluded per changelog policy. <!-- CURSOR_SUMMARY --> --- > [!NOTE] > **Low Risk** > Documentation-only change updating `CHANGELOG.md`; no runtime code or dependency changes are introduced in this PR. > > **Overview** > Adds a new `v9.7.0` section to `CHANGELOG.md` documenting user-visible changes (rspack v2 support and two fixes around config export security/validation and `webpack-subresource-integrity` v5 exports). > > Updates the compare links at the bottom so `[Unreleased]` now compares from `v9.7.0`, and adds the new `[v9.7.0]` tag link. > > <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit 8942a43. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup> <!-- /CURSOR_SUMMARY --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Added rspack v2 support * **Bug Fixes** * Improved security and validation handling <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Claude Opus 4.6 <[email protected]>
Summary
file:.yalc/shakapackerwith the published9.6.1dependency inspec/dummy/package.jsonspec/dummy/package-lock.jsonandspec/dummy/yarn.lockso they no longer reference local.yalcpathsspec/dummyresolves[email protected]Testing
npm install --package-lock-only --ignore-scripts(inspec/dummy)yarn install --non-interactive(inspec/dummy)npm ls shakapacker(inspec/dummy)Closes #968.