Devuan bug report logs - #706
yarnpkg: depends on incompatible version of commander

Package: yarnpkg; Reported by: Kristof Csillag <[email protected]>; Keywords: debian; Done: Mark Hindley <[email protected]>; Maintainer for yarnpkg is (unknown).

---

Message received at [email protected]:

Received: (at 706-done) by bugs.devuan.org; 10 Jan 2023 17:01:32 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2001:41d0:2:d06e::5c4:2612]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Tue, 10 Jan 2023 17:01:32 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id FudnC9SZvWMdKwAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Tue, 10 Jan 2023 17:01:08 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 27D1DDB6; Tue, 10 Jan 2023 17:01:08 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id D7BD7B69
	for <[email protected]>; Tue, 10 Jan 2023 17:01:07 +0000 (UTC)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <[email protected]>)
	id 1pFHzn-00033a-1Y
	for [email protected]; Tue, 10 Jan 2023 17:01:07 +0000
Received: (nullmailer pid 25850 invoked by uid 1000);
	Tue, 10 Jan 2023 17:01:06 -0000
Date: Tue, 10 Jan 2023 17:01:06 +0000
From: Mark Hindley <[email protected]>
To: [email protected]
Subject: Fixed in Debian #1019291
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Debbugs-No-Ack: No Thanks

Version: 1.22.19+~cs24.27.18-2

---

Notification sent to Kristof Csillag <[email protected]>:
bug acknowledged by developer. Full text available.

---

Reply sent to Mark Hindley <[email protected]>:
You have taken responsibility. Full text available.

---

Set bug forwarded-to-address to 'https://bugs.debian.org/1019291'. Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

---

Added tag(s) debian. Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

---

Message received at [email protected]:

Received: (at 706) by bugs.devuan.org; 9 Sep 2022 16:57:18 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Fri, 09 Sep 2022 16:57:18 +0000 (UTC)
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 4F40D661804
	for <[email protected]>; Fri,  9 Sep 2022 18:57:08 +0200 (CEST)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <[email protected]>)
	id 1oWhJS-0003iP-Cx; Fri, 09 Sep 2022 17:57:06 +0100
Received: (nullmailer pid 28566 invoked by uid 1000);
	Fri, 09 Sep 2022 16:57:05 -0000
Date: Fri, 9 Sep 2022 17:57:05 +0100
From: Mark Hindley <[email protected]>
To: Kristof Csillag <[email protected]>, [email protected]
Subject: Re: bug#706: yarnpkg: depends on incompatible version of commander
Message-ID: <[email protected]>
References: <166250049311.22033.11526768158892372626.reportbug@piper>
 <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[email protected]>
X-Debbugs-No-Ack: No Thanks
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

Control: tags -1 debian
Control: forwarded -1 https://bugs.debian.org/1019291

Kristof,

Thanks for this.

On Tue, Sep 06, 2022 at 11:47:59PM +0200, Kristof Csillag wrote:
> Package: yarnpkg
> 
> Version: 1.22.19+~cs24.27.18-1
> Severity: normal
> X-Debbugs-Cc: [email protected]

However, neither node-commander not yarn are forked packages in Devuan and we
use Debian's packages directly without recompilation.

Thanks for already reporting it to Debian's BTS to be addressed.

Mark

---

Information forwarded to [email protected], [email protected]:
bug#706; Package yarnpkg. Full text available.

---

Message received at [email protected]:

Received: (at submit) by bugs.devuan.org; 6 Sep 2022 21:48:14 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Tue, 06 Sep 2022 21:48:14 +0000 (UTC)
Received: from mail-ed1-f52.google.com (mail-ed1-f52.google.com [209.85.208.52])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id C5371661881
	for <[email protected]>; Tue,  6 Sep 2022 23:48:01 +0200 (CEST)
Authentication-Results: mail.dyne.org;
	dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com [email protected] header.b="ocNt3CO3";
	dkim-atps=neutral
Received: by mail-ed1-f52.google.com with SMTP id z21so6889643edi.1
        for <[email protected]>; Tue, 06 Sep 2022 14:48:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=content-transfer-encoding:in-reply-to:references:to:from
         :content-language:subject:user-agent:mime-version:date:message-id
         :from:to:cc:subject:date;
        bh=GRdPeTueUj+qGUlYzLnXr29GyMEOuoQQkAw2dlZZqBY=;
        b=ocNt3CO3uRDtViUgcq/WA2dvC+LhUI/TjvuK5RmnWoq6YppJgi0cKInqJ+ZCmrh7Ab
         41OdQ0AekKcN7kHqjc7N2bLbKpQMkkkr2Ks52u3EDCdGGtzMMmTHiw3z7AMXFGHXL8Jg
         hoGbL5Nr25KPi5qdOZge+4fLSUEf3oPz17b1LeGSvbiy6ZjbOJIZM02+BWxq1+lObyue
         xUnZh/ZrbE4ki1R/TyEVkEJG8WecmedHaNqyXNwqDCa4NQazzcJommQRDtrbC/sIeCPe
         KUh9wDT6YDTG59bPnxYrkyxBff+Bsff3XW2Ig7hszkgkquM8Ygarz52KJrpTfFlHzQ+y
         j05g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=content-transfer-encoding:in-reply-to:references:to:from
         :content-language:subject:user-agent:mime-version:date:message-id
         :x-gm-message-state:from:to:cc:subject:date;
        bh=GRdPeTueUj+qGUlYzLnXr29GyMEOuoQQkAw2dlZZqBY=;
        b=NYvUNuayDrlcCfsvNt4Z9QrL9W0+7p5tO6krzwLhph+vKbyCw98t7/AQGhqngyaRJe
         Luan3JHPTSdNVKZP1L+N81Ax4LIKsamOTK82ptw+JmiAgd9kJLorx6FBrE6GlytKnva2
         K685OTkubWAcITM4f9taJA7iqnzT91X6Cznk0ITPk0a/8KrPuMq/KGyLpGKf9U4oOmAi
         ZJ/h7A+JUktYJH+bzPAWk6HfPPuGgjFAtZiyYtB+9bPLFPBEeFVMRRPCV0ul+0vcambz
         YMR/Ewngul7V86F3Npn9+sBs/mo8BAZ0LmUFurQ74ZE/Zr/k3oKBXim45Ib7kc4aW5uM
         R06w==
X-Gm-Message-State: ACgBeo2UGPMsfMLMns9HYJfVg7tVjs/tsi+Gv/XtEh4gdtEZJibiHfS9
	55/txFcXMOo40k8ZtQMnDZzpjeTPZeqhEg==
X-Google-Smtp-Source: AA6agR6AMU+zTp4NRMLb2qF+o6OqJ23iv1G37gXRztqj6DvbWKjNVbWfitlA38GkBJwnd/8uknZd4A==
X-Received: by 2002:a05:6402:530c:b0:43b:c6bf:a496 with SMTP id eo12-20020a056402530c00b0043bc6bfa496mr516698edb.282.1662500880395;
        Tue, 06 Sep 2022 14:48:00 -0700 (PDT)
Received: from [192.168.30.200] (193-226-247-49.pool.digikabel.hu. [193.226.247.49])
        by smtp.gmail.com with ESMTPSA id da8-20020a056402176800b004477c582ffdsm5703190edb.80.2022.09.06.14.47.59
        for <[email protected]>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Tue, 06 Sep 2022 14:47:59 -0700 (PDT)
Message-ID: <[email protected]>
Date: Tue, 6 Sep 2022 23:47:59 +0200
MIME-Version: 1.0
Subject: yarnpkg: depends on incompatible version of commander
Content-Language: en-US
From: Kristof Csillag <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
References: <166250049311.22033.11526768158892372626.reportbug@piper>
In-Reply-To: <166250049311.22033.11526768158892372626.reportbug@piper>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=1.3 required=5.0 tests=DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,NML_ADSP_CUSTOM_MED,RCVD_IN_DNSWL_BLOCKED,
	RCVD_IN_MSPIKE_H2,SPF_PASS,T_DKIM_INVALID autolearn=disabled
	version=3.4.2
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

Package: yarnpkg

Version: 1.22.19+~cs24.27.18-1
Severity: normal
X-Debbugs-Cc: [email protected]

The current version of node-commander in Debian testing an unstable in 9.4.0.
However, this version is not fully compatible
with the current version of yarn.

For some packages, you will get something like this:

yarn run v1.22.19
TypeError: _commander(...).default.optionFor is not a function
     at /usr/share/nodejs/yarn/lib/cli/index.js:511:88
     at Array.findIndex (<anonymous>)
     at _callee$ (/usr/share/nodejs/yarn/lib/cli/index.js:507:38)
     at tryCatch
(/usr/share/nodejs/@babel/runtime/helpers/regeneratorRuntime.js:86:17)
     at Generator._invoke
(/usr/share/nodejs/@babel/runtime/helpers/regeneratorRuntime.js:66:24)
     at Generator.next
(/usr/share/nodejs/@babel/runtime/helpers/regeneratorRuntime.js:117:21)
     at asyncGeneratorStep
(/usr/share/nodejs/@babel/runtime/helpers/asyncToGenerator.js:3:24)
     at _next
(/usr/share/nodejs/@babel/runtime/helpers/asyncToGenerator.js:25:9)
     at /usr/share/nodejs/@babel/runtime/helpers/asyncToGenerator.js:32:7
     at new Promise (<anonymous>)

The short summary is that yarn tries to use the "optionFor" feature of
commnder,
but as far as I can tell, the last version of commander that still had
optionFor was version 4.1.1;
it has been removed by the time 5.0.0 has been released.

The upstream yarn package depends on "^2.9.0", so the currently packaged 9.4.0
definitely doesn't satisfy it.

I suggest shipping an older version commander to satisfy this dependency.

-- System Information:
Distributor ID: Devuan
Description:    Devuan GNU/Linux 4 (chimaera)
Release:        4
Codename:       chimaera
Architecture: x86_64

Kernel: Linux 5.19.0-1-amd64 (SMP w/24 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=hu_HU.UTF-8, LC_CTYPE=hu_HU.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages yarnpkg depends on:
ii  ca-certificates                    20210119
ii  node-asap                          2.0.6+~2.0.0-1
ii  node-babel7-runtime                7.18.13+~cs214.250.184-2
ii  node-bytes                         3.1.2-1
ii  node-camelcase                     7.0.0-2
ii  node-chalk                         5.0.1-2
ii  node-chownr                        1.1.3-5
ii  node-ci-info                       3.3.2+~cs4.2.0-1
ii  node-cli-table                     0.3.11+~cs0.13.4-1
ii  node-commander                     9.4.0-1
ii  node-death                         1.1.0-2
ii  node-debug                         4.3.4+~cs4.1.7-1
ii  node-deep-equal                    2.0.5+~cs32.12.77-1
ii  node-detect-indent                 6.1.0-1
ii  node-duplexify                     4.1.2-1
ii  node-emoji                         1.10.0+~1.8.1-1
ii  node-fast-levenshtein              2.0.6+ds-3
ii  node-glob                          7.1.6+~7.1.3-1
ii  node-imports-loader                0.8.0-5
ii  node-ini                           3.0.1-1
ii  node-inquirer                      8.2.3+~cs26.8.8-1
ii  node-invariant                     2.2.4-2
ii  node-is-builtin-module             3.2.0-1
ii  node-js-yaml                       4.1.0+dfsg+~4.0.5-6
ii  node-loud-rejection                2.2.0-2
ii  node-micromatch                    4.0.5+~4.0.2-1
ii  node-minimatch                     3.0.4+~3.0.3-1
ii  node-mkdirp                        1.0.4+~1.0.1-1
ii  node-object-path                   0.11.8+~0.11.1-1
ii  node-path-root                     0.1.1-2
ii  node-prepend-http                  3.0.1-2
ii  node-proper-lockfile               4.1.2-2
ii  node-puka                          1.0.1+dfsg-2
ii  node-pump                          3.0.0-5
ii  node-pumpify                       2.0.1-2
ii  node-read                          1.0.7-4
ii  node-request                       2.88.1-5
ii  node-request-capture-har           1.2.2-2
ii  node-resolve                       1.22.1+~cs5.31.10-1
ii  node-rimraf                        3.0.2-1
ii  node-semver                        7.3.4-1
ii  node-sort-keys                     4.0.0-1
ii  node-ssri                          9.0.1-1
ii  node-strict-uri-encode             2.0.0+~2.0.0-1
ii  node-strip-ansi                    6.0.1-1
ii  node-strip-bom                     4.0.0-2
ii  node-tar-stream                    2.2.0+~cs3.2.2-1
ii  node-through2                      4.0.2-2
ii  node-uuid                          8.3.2+~8.3.3-2
ii  node-validate-npm-package-license  3.0.4-2
ii  node-yn                            4.0.0-2
ii  nodejs                             18.7.0+dfsg-5

yarnpkg recommends no packages.

yarnpkg suggests no packages.

---

Acknowledgement sent to Kristof Csillag <[email protected]>:
New bug report received and forwarded. Copy sent to [email protected]. Full text available.

---

Report forwarded to [email protected], [email protected]:
bug#706; Package yarnpkg. Full text available.

---