镜像站点 · 本页由第三方 GitHub 只读镜像提供,非 GitHub 官方站点,不接受任何登录或凭据输入。前往 github.com
Skip to content

chore(deps): reference the direct dependency from the @semantic-release/npm override - #80

Merged
so5 merged 2 commits into
mainfrom
fix/override-direct-ref
Nov 14, 2026
Merged

so5 merged 2 commits into
mainfrom
fix/override-direct-ref

Conversation

@so5

@so5 so5 commented Nov 14, 2026

Copy link
Copy Markdown
Owner

Dependabot security updates fail with EOVERRIDE: Override for @semantic-release/npm@10.0.6 conflicts with direct dependency. Reproduced locally with npm install @semantic-release/npm@10.0.6; with the override written as "$@semantic-release/npm" (a reference to the direct dependency) the same command succeeds. The resolved versions in package-lock.json do not change.

🤖 Generated with Claude Code

https://claude.ai/code/session_01TTzaDyPRW6HMpHHnZG2KHz

so5 and others added 2 commits November 14, 2026 14:17
…se/npm override

Dependabot security updates failed with EOVERRIDE (Override for
@semantic-release/npm@10.0.6 conflicts with direct dependency) because the
override repeated the version range of the direct dependency. Using the
$-reference keeps both in sync and lets npm accept the override.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TTzaDyPRW6HMpHHnZG2KHz
@sonarqubecloud

Copy link
Copy Markdown

@so5
so5 merged commit 5e8827f into main Nov 14, 2026
12 checks passed
@so5
so5 deleted the fix/override-direct-ref branch November 14, 2026 08:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant