Skip to content

Run the bump script with node so the automatic CLI release does not stop at pnpm's frozen install - #387

Merged
wmadden-electric merged 1 commit into
mainfrom
fix/product-versions-lockfile
Nov 6, 2026
Merged

wmadden-electric merged 1 commit into
mainfrom
fix/product-versions-lockfile

Conversation

@wmadden-electric

Copy link
Copy Markdown
Contributor

The automatic CLI release for @prisma/orm-toolchain 8.0.0-rc.23 failed before it opened its pull request (run 42269193200). This change makes the "Bump the CLI version" step run the script with node:

run: |
  corepack enable
  node scripts/bump-version.ts

Why it failed

The step used to run pnpm bump-version. pnpm 11 checks the install before it runs any script, and in CI that check is a frozen install. By that point the workflow has already written rc.23 into the manifests, so the lockfile (still rc.22) does not match and pnpm stops with ERR_PNPM_OUTDATED_LOCKFILE. The script never ran, so it never got to refresh the lockfile itself.

This started with #384, which replaced the old "Refresh the lockfile" step with pnpm bump-version. Today's earlier composer run used the old step and passed.

How I checked it

Locally on this branch, with CI=true:

  1. node scripts/update-product-versions.mjs --channel release rewrote @prisma/orm-toolchain 8.0.0-rc.22 → 8.0.0-rc.23.
  2. pnpm bump-version failed with the same runDepsStatusCheck error as the CI run.
  3. node scripts/bump-version.ts succeeded: it bumped every package to 8.0.0-rc.32 and refreshed pnpm-lock.yaml to rc.23.
  4. pnpm install --frozen-lockfile --lockfile-only then passed.

After this merges I will dispatch the workflow so it opens the rc.23 release pull request.

Alternatives considered

  • pnpm --config.verify-deps-before-run=false bump-version: works, but hides why in a config flag.
  • A pnpm install --lockfile-only step before the bump: refreshes the lockfile twice.

Agent: bellatrix-52

🤖 Generated with Claude Code

… stop it

pnpm 11 installs before running a script, and in CI that install is frozen. After the product pins change, the lockfile no longer matches, so `pnpm bump-version` failed before the script could refresh the lockfile. Running the script with node skips that check.

Signed-off-by: willbot <w.a.madden+machine@gmail.com>
Signed-off-by: Will Madden <madden@prisma.io>
@coderabbitai

coderabbitai Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

Explain Change →

Caution

Review failed

The pull request is closed.

Summary by CodeRabbit

  • Chores
    • Updated the release version-bump workflow to refresh the lockfile when package manifests change, allowing version updates to complete in CI despite manifest and lockfile differences.
    • This is an internal release-process change and does not alter user-facing product behavior.

Walkthrough

The version-bump workflow now runs scripts/bump-version.ts directly after enabling Corepack. Comments explain that pnpm bump-version performs install verification, which can fail in CI when package manifests and the lockfile differ. The script refreshes the lockfile.

Severity of issue fixed: Low

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

@pkg-pr-new

pkg-pr-new Bot commented Nov 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

npx https://pkg.pr.new/@prisma/cli@387
npx https://pkg.pr.new/@prisma/cli-engine@387

commit: 680a24c

@wmadden-electric
wmadden-electric merged commit dedd4ae into main Nov 6, 2026
15 of 16 checks passed
@wmadden-electric
wmadden-electric deleted the fix/product-versions-lockfile branch November 6, 2026 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants