Devuan bug report logs - #706
yarnpkg: depends on incompatible version of commander

Full log

Message #5 received at submit@bugs.devuan.org (full text, mbox, reply):

Received: (at submit) by bugs.devuan.org; 6 Sep 2022 21:48:14 +0000
Return-Path: <csillag.kristof@gmail.com>
Delivered-To: devuanbugs@dyne.org
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Tue, 06 Sep 2022 21:48:14 +0000 (UTC)
Received: from mail-ed1-f52.google.com (mail-ed1-f52.google.com [209.85.208.52])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id C5371661881
	for <submit@bugs.devuan.org>; Tue,  6 Sep 2022 23:48:01 +0200 (CEST)
Authentication-Results: mail.dyne.org;
	dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b="ocNt3CO3";
	dkim-atps=neutral
Received: by mail-ed1-f52.google.com with SMTP id z21so6889643edi.1
        for <submit@bugs.devuan.org>; Tue, 06 Sep 2022 14:48:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=content-transfer-encoding:in-reply-to:references:to:from
         :content-language:subject:user-agent:mime-version:date:message-id
         :from:to:cc:subject:date;
        bh=GRdPeTueUj+qGUlYzLnXr29GyMEOuoQQkAw2dlZZqBY=;
        b=ocNt3CO3uRDtViUgcq/WA2dvC+LhUI/TjvuK5RmnWoq6YppJgi0cKInqJ+ZCmrh7Ab
         41OdQ0AekKcN7kHqjc7N2bLbKpQMkkkr2Ks52u3EDCdGGtzMMmTHiw3z7AMXFGHXL8Jg
         hoGbL5Nr25KPi5qdOZge+4fLSUEf3oPz17b1LeGSvbiy6ZjbOJIZM02+BWxq1+lObyue
         xUnZh/ZrbE4ki1R/TyEVkEJG8WecmedHaNqyXNwqDCa4NQazzcJommQRDtrbC/sIeCPe
         KUh9wDT6YDTG59bPnxYrkyxBff+Bsff3XW2Ig7hszkgkquM8Ygarz52KJrpTfFlHzQ+y
         j05g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=content-transfer-encoding:in-reply-to:references:to:from
         :content-language:subject:user-agent:mime-version:date:message-id
         :x-gm-message-state:from:to:cc:subject:date;
        bh=GRdPeTueUj+qGUlYzLnXr29GyMEOuoQQkAw2dlZZqBY=;
        b=NYvUNuayDrlcCfsvNt4Z9QrL9W0+7p5tO6krzwLhph+vKbyCw98t7/AQGhqngyaRJe
         Luan3JHPTSdNVKZP1L+N81Ax4LIKsamOTK82ptw+JmiAgd9kJLorx6FBrE6GlytKnva2
         K685OTkubWAcITM4f9taJA7iqnzT91X6Cznk0ITPk0a/8KrPuMq/KGyLpGKf9U4oOmAi
         ZJ/h7A+JUktYJH+bzPAWk6HfPPuGgjFAtZiyYtB+9bPLFPBEeFVMRRPCV0ul+0vcambz
         YMR/Ewngul7V86F3Npn9+sBs/mo8BAZ0LmUFurQ74ZE/Zr/k3oKBXim45Ib7kc4aW5uM
         R06w==
X-Gm-Message-State: ACgBeo2UGPMsfMLMns9HYJfVg7tVjs/tsi+Gv/XtEh4gdtEZJibiHfS9
	55/txFcXMOo40k8ZtQMnDZzpjeTPZeqhEg==
X-Google-Smtp-Source: AA6agR6AMU+zTp4NRMLb2qF+o6OqJ23iv1G37gXRztqj6DvbWKjNVbWfitlA38GkBJwnd/8uknZd4A==
X-Received: by 2002:a05:6402:530c:b0:43b:c6bf:a496 with SMTP id eo12-20020a056402530c00b0043bc6bfa496mr516698edb.282.1662500880395;
        Tue, 06 Sep 2022 14:48:00 -0700 (PDT)
Received: from [192.168.30.200] (193-226-247-49.pool.digikabel.hu. [193.226.247.49])
        by smtp.gmail.com with ESMTPSA id da8-20020a056402176800b004477c582ffdsm5703190edb.80.2022.09.06.14.47.59
        for <submit@bugs.devuan.org>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Tue, 06 Sep 2022 14:47:59 -0700 (PDT)
Message-ID: <705b5fc6-15eb-0eaa-36c2-2cbfa0a22239@gmail.com>
Date: Tue, 6 Sep 2022 23:47:59 +0200
MIME-Version: 1.0
Subject: yarnpkg: depends on incompatible version of commander
Content-Language: en-US
From: Kristof Csillag <csillag.kristof@gmail.com>
To: Devuan Bug Tracking System <submit@bugs.devuan.org>
References: <166250049311.22033.11526768158892372626.reportbug@piper>
In-Reply-To: <166250049311.22033.11526768158892372626.reportbug@piper>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=1.3 required=5.0 tests=DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,NML_ADSP_CUSTOM_MED,RCVD_IN_DNSWL_BLOCKED,
	RCVD_IN_MSPIKE_H2,SPF_PASS,T_DKIM_INVALID autolearn=disabled
	version=3.4.2
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

Package: yarnpkg

Version: 1.22.19+~cs24.27.18-1
Severity: normal
X-Debbugs-Cc: csillag.kristof@gmail.com

The current version of node-commander in Debian testing an unstable in 9.4.0.
However, this version is not fully compatible
with the current version of yarn.

For some packages, you will get something like this:

yarn run v1.22.19
TypeError: _commander(...).default.optionFor is not a function
    at /usr/share/nodejs/yarn/lib/cli/index.js:511:88
    at Array.findIndex (<anonymous>)
    at _callee$ (/usr/share/nodejs/yarn/lib/cli/index.js:507:38)
    at tryCatch
(/usr/share/nodejs/@babel/runtime/helpers/regeneratorRuntime.js:86:17)
    at Generator._invoke
(/usr/share/nodejs/@babel/runtime/helpers/regeneratorRuntime.js:66:24)
    at Generator.next
(/usr/share/nodejs/@babel/runtime/helpers/regeneratorRuntime.js:117:21)
    at asyncGeneratorStep
(/usr/share/nodejs/@babel/runtime/helpers/asyncToGenerator.js:3:24)
    at _next
(/usr/share/nodejs/@babel/runtime/helpers/asyncToGenerator.js:25:9)
    at /usr/share/nodejs/@babel/runtime/helpers/asyncToGenerator.js:32:7
    at new Promise (<anonymous>)

The short summary is that yarn tries to use the "optionFor" feature of
commnder,
but as far as I can tell, the last version of commander that still had
optionFor was version 4.1.1;
it has been removed by the time 5.0.0 has been released.

The upstream yarn package depends on "^2.9.0", so the currently packaged 9.4.0
definitely doesn't satisfy it.

I suggest shipping an older version commander to satisfy this dependency.

-- System Information:
Distributor ID: Devuan
Description:    Devuan GNU/Linux 4 (chimaera)
Release:        4
Codename:       chimaera
Architecture: x86_64

Kernel: Linux 5.19.0-1-amd64 (SMP w/24 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=hu_HU.UTF-8, LC_CTYPE=hu_HU.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages yarnpkg depends on:
ii  ca-certificates                    20210119
ii  node-asap                          2.0.6+~2.0.0-1
ii  node-babel7-runtime                7.18.13+~cs214.250.184-2
ii  node-bytes                         3.1.2-1
ii  node-camelcase                     7.0.0-2
ii  node-chalk                         5.0.1-2
ii  node-chownr                        1.1.3-5
ii  node-ci-info                       3.3.2+~cs4.2.0-1
ii  node-cli-table                     0.3.11+~cs0.13.4-1
ii  node-commander                     9.4.0-1
ii  node-death                         1.1.0-2
ii  node-debug                         4.3.4+~cs4.1.7-1
ii  node-deep-equal                    2.0.5+~cs32.12.77-1
ii  node-detect-indent                 6.1.0-1
ii  node-duplexify                     4.1.2-1
ii  node-emoji                         1.10.0+~1.8.1-1
ii  node-fast-levenshtein              2.0.6+ds-3
ii  node-glob                          7.1.6+~7.1.3-1
ii  node-imports-loader                0.8.0-5
ii  node-ini                           3.0.1-1
ii  node-inquirer                      8.2.3+~cs26.8.8-1
ii  node-invariant                     2.2.4-2
ii  node-is-builtin-module             3.2.0-1
ii  node-js-yaml                       4.1.0+dfsg+~4.0.5-6
ii  node-loud-rejection                2.2.0-2
ii  node-micromatch                    4.0.5+~4.0.2-1
ii  node-minimatch                     3.0.4+~3.0.3-1
ii  node-mkdirp                        1.0.4+~1.0.1-1
ii  node-object-path                   0.11.8+~0.11.1-1
ii  node-path-root                     0.1.1-2
ii  node-prepend-http                  3.0.1-2
ii  node-proper-lockfile               4.1.2-2
ii  node-puka                          1.0.1+dfsg-2
ii  node-pump                          3.0.0-5
ii  node-pumpify                       2.0.1-2
ii  node-read                          1.0.7-4
ii  node-request                       2.88.1-5
ii  node-request-capture-har           1.2.2-2
ii  node-resolve                       1.22.1+~cs5.31.10-1
ii  node-rimraf                        3.0.2-1
ii  node-semver                        7.3.4-1
ii  node-sort-keys                     4.0.0-1
ii  node-ssri                          9.0.1-1
ii  node-strict-uri-encode             2.0.0+~2.0.0-1
ii  node-strip-ansi                    6.0.1-1
ii  node-strip-bom                     4.0.0-2
ii  node-tar-stream                    2.2.0+~cs3.2.2-1
ii  node-through2                      4.0.2-2
ii  node-uuid                          8.3.2+~8.3.3-2
ii  node-validate-npm-package-license  3.0.4-2
ii  node-yn                            4.0.0-2
ii  nodejs                             18.7.0+dfsg-5

yarnpkg recommends no packages.

yarnpkg suggests no packages.

Send a report that this bug log contains spam.