Escape-Technologies / graphql-armor

🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

Home Page:https://escape.tech/graphql-armor/docs/getting-started

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Issues with versions of envelop/core + envelop/types. @4 + @5

tatiananeda opened this issue · comments

Install latest package (2.4.0) into node 20/npm 9 env, run npm ci after installation, following errors happen:

npm ERR! code EUSAGE
npm ERR! 
npm ERR! `npm ci` can only install packages when your package.json and package-lock.json or npm-shrinkwrap.json are in sync. Please update your lock file with `npm install` before continuing.
npm ERR! 
npm ERR! Invalid: lock file's @envelop/core@4.0.3 does not satisfy @envelop/core@5.0.0
npm ERR! Invalid: lock file's @envelop/types@4.0.1 does not satisfy @envelop/types@5.0.0
npm ERR! Missing: @envelop/core@4.0.3 from lock file
npm ERR! Missing: @envelop/core@4.0.3 from lock file
npm ERR! Missing: @envelop/core@4.0.3 from lock file
npm ERR! Missing: @envelop/core@4.0.3 from lock file
npm ERR! Missing: @envelop/types@4.0.1 from lock file
npm ERR! Missing: @envelop/types@4.0.1 from lock file
npm ERR! Missing: @envelop/types@4.0.1 from lock file
npm ERR! Missing: @envelop/types@4.0.1 from lock file
npm ERR! 
npm ERR! Clean install a project
npm ERR! 
npm ERR! Usage:
npm ERR! npm ci
npm ERR! 
npm ERR! Options:
npm ERR! [--install-strategy <hoisted|nested|shallow|linked>] [--legacy-bundling]
npm ERR! [--global-style] [--omit <dev|optional|peer> [--omit <dev|optional|peer> ...]]
npm ERR! [--strict-peer-deps] [--foreground-scripts] [--ignore-scripts] [--no-audit]
npm ERR! [--no-bin-links] [--no-fund] [--dry-run]
npm ERR! [-w|--workspace <workspace-name> [-w|--workspace <workspace-name> ...]]
npm ERR! [-ws|--workspaces] [--include-workspace-root] [--install-links]
npm ERR! 
npm ERR! aliases: clean-install, ic, install-clean, isntall-clean
npm ERR! 
npm ERR! Run "npm help ci" for more info

npm ERR! A complete log of this run can be found in: ....../2024-04-17T11_17_23_859Z-debug-0.log

checked with npm ls these packages come from dependencies of graphql-armor.

Does not happen with 2.3.0

Can provide a fix MR if you're ok with it.

Can provide a fix MR if you're ok with it.

Feel free to provide a MR 👍
Any idea which package is causing this ?

it's outdated graphql-yoga in yoga example, I'll try to make MR when I have time, unless you will earlier

it's outdated graphql-yoga in yoga example, I'll try to make MR when I have time, unless you will earlier

I am not sure the examples are linked to the actual package.
Merged #458 meanwhile.

Released in 3.0.0