Skip to content
This repository was archived by the owner on May 29, 2026. It is now read-only.

fix(deps): resolve eslint-config/typescript-eslint ERESOLVE (closes #62)#63

Merged
rubenvdlinde merged 3 commits into
developmentfrom
fix/eslint-eresolve
May 25, 2026
Merged

fix(deps): resolve eslint-config/typescript-eslint ERESOLVE (closes #62)#63
rubenvdlinde merged 3 commits into
developmentfrom
fix/eslint-eresolve

Conversation

@rubenvdlinde

Copy link
Copy Markdown
Contributor

Summary

Fixes the fleet-wide npm ci ERESOLVE (#62) that blocked all quality + spec-validation CI jobs on development and every PR.

@nextcloud/eslint-config@8.4.2 peer-requires @vue/eslint-config-typescript@^13 and eslint-import-resolver-typescript@^3.8, neither of which was declared. npm eagerly resolved the optional eslint-plugin-import-x peer (which demands @typescript-eslint/utils@^8.56) against the pinned @typescript-eslint@7.18, producing the conflict.

Changes

  • Add @vue/eslint-config-typescript@^13.0.0, eslint-import-resolver-typescript@~3.8.7, eslint-plugin-import@^2.31.0 as explicit devDeps (the missing required peers).
  • Override eslint-plugin-import-x -> @typescript-eslint/utils@^7.18.0 so the optional import-x peer stays on the 7.x tree.
  • Bump node-polyfill-webpack-plugin 3 -> 4 (a second pre-existing ERESOLVE surfaced once the first cleared: @nextcloud/webpack-vue-config@6.3.2 peers node-polyfill-webpack-plugin@4.0.0).
  • No legacy-peer-deps escape hatch.

Test plan

@nextcloud/eslint-config@8.4.2 peer-requires @vue/eslint-config-typescript@^13
and eslint-import-resolver-typescript@^3.8, neither of which were declared.
npm eagerly pulled the optional eslint-plugin-import-x peer (which demands
@typescript-eslint/utils@^8.56) against the pinned @typescript-eslint@7.18,
producing the ERESOLVE that blocked npm ci fleet-wide.

- Add @vue/eslint-config-typescript@^13.0.0 + eslint-import-resolver-typescript
  + eslint-plugin-import as explicit devDeps (the missing required peers).
- Pin eslint-import-resolver-typescript to ~3.8.7 and override import-x's
  @typescript-eslint/utils to ^7.18.0 so the optional import-x peer stays on the
  7.x tree instead of dragging in 8.x.
- Bump node-polyfill-webpack-plugin 3 -> 4 (a second, pre-existing ERESOLVE
  surfaced once the first cleared: @nextcloud/webpack-vue-config@6.3.2 peers 4.0.0).

npm ci and npm run lint both pass cleanly; no legacy-peer-deps escape hatch.
@github-actions

Copy link
Copy Markdown
Contributor

Quality Report — ConductionNL/nextcloud-app-template @ d068de7

Check PHP Vue Security License Tests
lint
phpcs
phpmd
psalm
phpstan
phpmetrics
eslint
stylelint
composer
npm ❌ 2/706 denied
PHPUnit ⏭️
Newman ⏭️
Playwright ⏭️

❌ Denied npm licenses

Package Version License
pako 1.0.11 (MIT AND Zlib)
sha.js 2.4.12 (MIT AND BSD-3-Clause)

Quality workflow — 2026-05-25 17:47 UTC

Download the full PDF report from the workflow artifacts.

@github-actions

Copy link
Copy Markdown
Contributor

Quality Report — ConductionNL/nextcloud-app-template @ 2d29e2e

Check PHP Vue Security License Tests
lint
phpcs
phpmd
psalm
phpstan
phpmetrics
eslint
stylelint
composer
npm ❌ 2/597 denied
PHPUnit ⏭️
Newman ⏭️
Playwright ⏭️

❌ Denied npm licenses

Package Version License
pako 1.0.11 (MIT AND Zlib)
sha.js 2.4.12 (MIT AND BSD-3-Clause)

Quality workflow — 2026-05-25 17:52 UTC

Download the full PDF report from the workflow artifacts.

pako (MIT AND Zlib) and sha.js (MIT AND BSD-3-Clause) are denied by the
License (npm) gate because its check only splits SPDX OR expressions, not AND.
Both halves of each are permissive and EUPL-1.2/AGPL-3.0 compatible, so add
manual overrides. These two transitive deps predate this PR (they failed the
same gate on the broken-CI baseline); adding the overrides unblocks the gate
now that npm install resolves.
@github-actions

Copy link
Copy Markdown
Contributor

Quality Report — ConductionNL/nextcloud-app-template @ f9077b8

Check PHP Vue Security License Tests
lint
phpcs
phpmd
psalm
phpstan
phpmetrics
eslint
stylelint
composer
npm ✅ 597/597
PHPUnit ⏭️
Newman ⏭️
Playwright ⏭️

Quality workflow — 2026-05-25 17:55 UTC

Download the full PDF report from the workflow artifacts.

@rubenvdlinde rubenvdlinde merged commit 9da9507 into development May 25, 2026
15 of 24 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant