Tag See all →

#npm

2 stories

Banner: a CI pipeline restoring an outdated dependency cache because the cache key ignores the lockfile

DevOps & CI/CD Bug Report

CI passed with stale node_modules: a cache key without the lockfile hash

Daniel Tran · Jul 15, 2025 · 8 min read

A lockfile-only dependency bump passed CI and then broke production. Our cache key hashed package.json, not package-lock.json, so CI restored old node_modules and skipped npm ci. How we found it and rebuilt dependency caching we can trust.

Banner: a dependency tree where one branch refuses to connect to a newer React version

Web Development Bug Report

npm ERESOLVE unable to resolve dependency tree after upgrading to React 19

Daniel Tran · Dec 30, 2024 · 8 min read

Bumping React to 19 made npm install fail with ERESOLVE. The quick --legacy-peer-deps workaround installed, then crashed tooltips in staging. We learned to read the conflict, upgrade the real offender and use overrides only as a short, tested bridge.