Skip to content

fix(ci): --force on npm self-upgrade — unblock v0.3.1 publish#760

Merged
kokevidaurre merged 1 commit intomainfrom
fix/npm-self-upgrade
Apr 24, 2026
Merged

fix(ci): --force on npm self-upgrade — unblock v0.3.1 publish#760
kokevidaurre merged 1 commit intomainfrom
fix/npm-self-upgrade

Conversation

@kokevidaurre
Copy link
Copy Markdown
Contributor

Summary

The v0.3.1 release ran successfully through CI + security but failed at npm publish because the npm self-upgrade step crashed:

```
npm install -g npm@latest
→ Cannot find module 'promise-retry'
→ ##[error]Process completed with exit code 1.
```

Documented npm bug: when npm@latest self-upgrades from [email protected], the partially-installed new package can't resolve its own arborist internals mid-install. `--force` bypasses the broken intermediate state.

Changes

  • release.yml: `npm install -g npm@latest` → `npm install -g npm@latest --force`
  • publish.yml: same fix (also affected)

Why this blocks the release

  • @latest is still at 0.2.2
  • v0.3.1 tag exists but never published
  • After merge, we re-push the v0.3.1 tag to re-trigger release.yml with the fix

Post-merge steps

```bash
git checkout main && git pull
git tag -d v0.3.1
git push origin :refs/tags/v0.3.1
git tag v0.3.1
git push origin v0.3.1 # re-triggers release.yml with the fix
```

Test plan

  • CI green
  • After tag re-push: release.yml completes successfully
  • `npm view squads-cli dist-tags` shows `latest: 0.3.1`

\`npm install -g npm@latest\` fails mid-upgrade with \`Cannot find module
'promise-retry'\` because the new npm package is partially installed and
can't resolve its own internal arborist modules. Documented npm bug.

Adding --force makes the install bypass the broken intermediate state.

Affects both release.yml (tag-triggered) and publish.yml (manual).
This is what blocked the v0.3.1 publish to @latest.

Co-Authored-By: Claude <[email protected]>
@gemini-code-assist
Copy link
Copy Markdown

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@github-actions github-actions Bot added the ci label Apr 24, 2026
@codecov-commenter
Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@kokevidaurre kokevidaurre merged commit a1d2df6 into main Apr 24, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants