Skip to content

fix(deps): re-pin isomorphic-git patch to 1.38.3#807

Merged
wesbillman merged 1 commit into
mainfrom
brain/repin-isomorphic-git-patch
Jun 1, 2026
Merged

fix(deps): re-pin isomorphic-git patch to 1.38.3#807
wesbillman merged 1 commit into
mainfrom
brain/repin-isomorphic-git-patch

Conversation

@wesbillman
Copy link
Copy Markdown
Collaborator

Why

Renovate PR #804 (renovate/patch-all-minor-patch) fails the renovate/artifacts check with ERR_PNPM_UNUSED_PATCH for isomorphic-git. The patch was pinned to 1.38.1, but the lockfile drifted such that the patch no longer applies cleanly — a latent issue that will trip every future Renovate run touching this dep.

What

Re-pin the patch and bump the version range in lockstep so the patched version is always what gets resolved:

  • pnpm-workspace.yaml: patch pin isomorphic-git@1.38.11.38.3
  • patches/: renamed to isomorphic-git@1.38.3.patch (content byte-identical — true re-pin, not a rewrite)
  • web/package.json: range ^1.37.6^1.38.3 (floor now matches the patched version so the lockfile can't silently drift below the patch again)
  • pnpm-lock.yaml: isomorphic-git resolves to 1.38.3 + 3 transitive bumps it pulls in (es-object-atoms, hasown, which-typed-array)

Verification

  • pnpm install --frozen-lockfile passes — no ERR_PNPM_UNUSED_PATCH (the exact error Renovate hit)
  • Patch confirmed applied in node_modules (exports rewritten)
  • pnpm check exits 0 across all 3 workspaces

Follow-up

Once merged, #804 should self-heal: Renovate re-runs against the fixed patch and renovate/artifacts goes green (or tick the rebase box on #804 to force it).

@wesbillman wesbillman requested a review from a team as a code owner June 1, 2026 14:17
Renovate PR #804 failed renovate/artifacts with ERR_PNPM_UNUSED_PATCH:
the patch was pinned to 1.38.1 but the lockfile drifted. Re-pin the
patch and bump the version range in lockstep so the patch always applies.

- pnpm-workspace.yaml: patch pin 1.38.1 -> 1.38.3
- patches/: rename to isomorphic-git@1.38.3.patch (content identical)
- web/package.json: range ^1.37.6 -> ^1.38.3 (floor matches patched version)
- pnpm-lock.yaml: isomorphic-git -> 1.38.3 + transitive bumps

Verified: pnpm install --frozen-lockfile passes (no unused-patch error),
patch confirmed applied in node_modules, pnpm check exits 0.

Signed-off-by: npub1yxv5wk0u0fh6dwt925wntn7h397jvteyj4r87ttcd9xae7n2t3lqqj9jmm <21994759fc7a6fa6b965551d35cfd7897d262f2495467f2d78694ddcfa6a5c7e@sprout-oss.stage.blox.sqprod.co>
@wesbillman wesbillman force-pushed the brain/repin-isomorphic-git-patch branch from 2d3db1a to ab3275f Compare June 1, 2026 14:19
@wesbillman wesbillman merged commit 5670ffc into main Jun 1, 2026
15 checks passed
@wesbillman wesbillman deleted the brain/repin-isomorphic-git-patch branch June 1, 2026 14:41
tlongwell-block pushed a commit that referenced this pull request Jun 1, 2026
* origin/main:
  fix(desktop): route notification clicks to thread context (#790)
  chore(deps): update all non-major dependencies (#804)
  fix(deps): re-pin isomorphic-git patch to 1.38.3 (#807)
  chore(deps): update dependency @tanstack/react-query to v5.100.14 (#805)
  Fix desktop glass chrome and inbox previews (#793)
  refactor(just): slim down mobile-dev to just run Flutter (#801)

Signed-off-by: tlongwell-block <109685178+tlongwell-block@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant