ci: package-lock.json out of sync on master — npm ci fails (postcss 8.5.31 in lock vs 8.5.32 required)

Open Beginner friendly
#433 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
82/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
typescript
Domain
ci-cd

Research direction

Start with package.json and package-lock.json, using the pinned npm version 10.9.4 through Corepack. Regenerate the lockfile with npm install --package-lock-only, then verify a cold npm ci succeeds. Check the diff is limited to the postcss resolution.

Written by the indexing model from the issue text.

Description

bug priority-p1

Problem

npm ci fails on a cold install from master (verified 2026-11-05, eciperay manager run for #410):

npm error `npm ci` can only install packages when your package.json and package-lock.json are in sync.
npm error Invalid: lock file's [email protected] does not satisfy [email protected]

Same failure class as #285 / #300 / #311 / #382 / #428: a dependency bump landed without the lockfile being regenerated by the pinned npm, so the lockfile's pinned postcss (8.5.31) no longer satisfies the range package.json resolves (8.5.32).

Fix

Regenerate package-lock.json with the pinned npm (npm install --package-lock-only, [email protected] via the packageManager field / Corepack), verify npm ci passes on a cold install, and confirm no unrelated lockfile churn (the Tamagui nested-layout trap does not apply here — postcss is not in the @spudly/ui subtree, but check the diff stays scoped to the postcss resolution).

Dominant language
TypeScript
Stars
0
Forks
0
Avg merge
9h 12m
Merged PRs (30d)
192

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from spudly/eciperay

All issues in spudly/eciperay

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.