Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: pin sha512 hash of pnpm@9.15.5 package to workaround npm registry key issue #3187

Merged
merged 1 commit into from
Feb 4, 2025

Conversation

shuuji3
Copy link
Member

@shuuji3 shuuji3 commented Feb 4, 2025

I'm going to take the same approach as vitejs/vite#19341. I guess Netlify build worker preinstalls corepack somewhere but we couldn't find how to adjust the corepack installation in netlify.toml. In this way, we can (hopefully) avoid touching corepack installation.

As a note, the sha512 hash can be calculated like this:

> npm view pnpm@9.15.5 dist.tarball
https://registry.npmjs.org/pnpm/-/pnpm-9.15.5.tgz

> curl -sL $(npm view pnpm@9.15.5 dist.tarball) | shasum -a 512
845196026aab1cc3f098a0474b64dfbab2afe7a1b4e91dd86895d8e4aa32a7a6d03049e2d0ad770bbe4de023a7122fb68c1a1d6e0d033c7076085f9d5d4800d4 

Copy link

netlify bot commented Feb 4, 2025

Deploy Preview for elk-zone ready!

Name Link
🔨 Latest commit e33c09b
🔍 Latest deploy log https://app.netlify.com/sites/elk-zone/deploys/67a20d3479e1b40008fb45e6
😎 Deploy Preview https://deploy-preview-3187--elk-zone.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Copy link

netlify bot commented Feb 4, 2025

Deploy Preview for elk-docs canceled.

Name Link
🔨 Latest commit e33c09b
🔍 Latest deploy log https://app.netlify.com/sites/elk-docs/deploys/67a20d34fcb56100084f9ebd

@shuuji3 shuuji3 force-pushed the shuuji3/chore/pin-pnpm-package-hash branch from 941245c to e33c09b Compare February 4, 2025 12:50
@shuuji3 shuuji3 added this pull request to the merge queue Feb 4, 2025
Merged via the queue into main with commit 06a282e Feb 4, 2025
17 checks passed
@shuuji3 shuuji3 deleted the shuuji3/chore/pin-pnpm-package-hash branch February 4, 2025 13:25
@userquin
Copy link
Member

userquin commented Feb 5, 2025

For Windows using power shell 3.0+ (requires deleting the downloaded file, I don't have time to remove it 💀):

powershell -command "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12;  iwr -outf  \"pnpm-9.15.5.tgz\" \"https://registry.npmjs.org/pnpm/-/pnpm-9.15.5.tgz\"" && powershell "Get-FileHash -Algorithm SHA512 -LiteralPath pnpm-9.15.5.tgz | Format-List -Property Hash | Out-String"

🫠 😵‍

If you download the tgz file manually you can run this command from Command Prompt:

certutil -hashfile ./pnpm-9.15.5.tgz SHA512

(there is no wget on windows)

ayoayco pushed a commit that referenced this pull request Feb 6, 2025
ayoayco pushed a commit that referenced this pull request Feb 6, 2025
maybeanerd pushed a commit to maybeanerd/crab that referenced this pull request Feb 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants