Skip to content

fix(approve-scripts): approve deps with no resolved URL by name#9607

Merged
owlstronaut merged 1 commit into
release/v11from
backport/v11/9606
Jun 23, 2026
Merged

fix(approve-scripts): approve deps with no resolved URL by name#9607
owlstronaut merged 1 commit into
release/v11from
backport/v11/9606

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Backport of #9606 to release/v11.

Fixes #9558.

Registry deps with no `resolved` URL in `package-lock.json` have no
trustable version, so `approve-scripts` cannot pin them. It was silently
writing nothing and leaving them pending; now it approves them by name
(`pkg: true`) and warns why.

(cherry picked from commit 971500f)
@owlstronaut owlstronaut merged commit 70f0ea5 into release/v11 Jun 23, 2026
42 checks passed
@owlstronaut owlstronaut deleted the backport/v11/9606 branch June 23, 2026 19:05
@github-actions github-actions Bot mentioned this pull request Jun 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants