Skip to content

build: patch out lerna for verdaccio publish#4185

Open
erickzhao wants to merge 9 commits intonextfrom
lerna-verdaccio-patch
Open

build: patch out lerna for verdaccio publish#4185
erickzhao wants to merge 9 commits intonextfrom
lerna-verdaccio-patch

Conversation

@erickzhao
Copy link
Member

@erickzhao erickzhao commented Mar 20, 2026

Description

This PR adds a patch to add a --skip-check-working-tree flag to Lerna Publish so that you can run yarn test:verdaccio even with a dirty git working tree.

On the way, I upgrade Lerna versions to the latest that our age gate allows.

ref lerna/lerna#2329

Testing

  • Try running yarn test:verdaccio with uncommitted changes. This should publish packages to the Verdaccio registry and run your tests.
  • Comment out the newly-added --skip-check-working-tree flag in spawn-verdaccio.ts and try running the same tests. This should fail pretty quickly on the lerna publish step.

@socket-security
Copy link

socket-security bot commented Mar 20, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedlerna@​9.0.0 ⏵ 9.0.698 +610084 +191 +5100

View full report

@erickzhao erickzhao marked this pull request as ready for review March 20, 2026 05:46
@erickzhao erickzhao requested a review from a team as a code owner March 20, 2026 05:46
@socket-security
Copy link

socket-security bot commented Mar 20, 2026

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Copy link
Member

@erikian erikian left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wonder if this can be upstreamed? There doesn't seem to be any opposition to this feature in the linked issue, so it might be worth a shot.

@erickzhao
Copy link
Member Author

Yep, I was hoping on landing this first as a proof of concept before opening a PR upstream :D

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants