Skip to content

Remove global npm upgrade from deploy-nodejs/deploy-wasm jobs#676

Merged
adsharma merged 2 commits into
mainfrom
npmjs_no_latest
Jul 10, 2026
Merged

Remove global npm upgrade from deploy-nodejs/deploy-wasm jobs#676
adsharma merged 2 commits into
mainfrom
npmjs_no_latest

Conversation

@adsharma

@adsharma adsharma commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

The 'npm install -g npm@latest' step causes MODULE_NOT_FOUND errors for the 'sigstore' module needed by --provenance during npm publish. This is a known issue where npm 11's in-place global upgrade on GitHub hosted runners fails to properly lay down its restructured dependency tree (sigstore is missing from node_modules).

The bundled npm 10.9.x in both Node 20 and Node 22 already supports --provenance (added in npm 9.5.0), so the upgrade is unnecessary.

adsharma added 2 commits July 9, 2026 16:48
The 'npm install -g npm@latest' step causes MODULE_NOT_FOUND errors
for the 'sigstore' module needed by --provenance during npm publish.
This is a known issue where npm 11's in-place global upgrade on GitHub
hosted runners fails to properly lay down its restructured dependency
tree (sigstore is missing from node_modules).

The bundled npm 10.9.x in both Node 20 and Node 22 already supports
--provenance (added in npm 9.5.0), so the upgrade is unnecessary.
The wasm build does not define CPPHTTPLIB_OPENSSL_SUPPORT because
OpenSSL is not available for Emscripten, causing set_ca_cert_path
to be absent from the httplib Client interface. Wrap the call in
a preprocessor guard; on wasm, CA cert configuration is skipped,
which is fine since wasm's HTTP client path cannot use OpenSSL
certificates.
@adsharma adsharma merged commit 4dc9f0a into main Jul 10, 2026
38 of 39 checks passed
@adsharma

Copy link
Copy Markdown
Contributor Author

@adsharma adsharma deleted the npmjs_no_latest branch July 10, 2026 01:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant