mirror of
https://github.com/go-gitea/gitea.git
synced 2026-10-14 01:15:12 +02:00
silverwind
6384ed4d11
Gitea changed the `dist.tarball` it advertises for already published versions twice: | Gitea | `dist.tarball` path of `@scope/name@1.0.0` | |---|---| | 1.27 | `%40scope%2Fname/-/1.0.0/name-1.0.0.tgz` | | 28.0, https://github.com/go-gitea/gitea/pull/39061 | `@scope%2Fname/-/1.0.0/name-1.0.0.tgz` | | 28.1, https://github.com/go-gitea/gitea/pull/39434 | `@scope/name/-/name-1.0.0.tgz` | pnpm 11.5.2+ verifies the tarball URLs pinned in its lockfile against the registry metadata, so frozen installs of lockfiles written against 1.27 fail with `ERR_PNPM_TARBALL_URL_MISMATCH`. - Versions uploaded before this PR get their 1.27 URL back. - New versions store their canonical tarball path at upload, so later URL changes can't reach published versions. The host still follows the request. Lockfiles written against 28.0 for scoped packages, or by pnpm 12 with `@scope:registry` against 28.1, need those pinned `tarball:` entries removed, as 1.27 lockfiles of the same versions need the other URL. Signed-off-by: silverwind <me@silverwind.io>
40 lines
2.3 KiB
Go
40 lines
2.3 KiB
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package npm
|
|
|
|
// TagProperty is the name of the property for tag management
|
|
const TagProperty = "npm.tag"
|
|
|
|
// Metadata represents the metadata of a npm package
|
|
type Metadata struct {
|
|
Scope string `json:"scope,omitempty"`
|
|
Name string `json:"name,omitempty"`
|
|
Description string `json:"description,omitempty"`
|
|
Author string `json:"author,omitempty"`
|
|
License License `json:"license,omitempty"`
|
|
ProjectURL string `json:"project_url,omitempty"`
|
|
Keywords []string `json:"keywords,omitempty"`
|
|
Dependencies map[string]string `json:"dependencies,omitempty"`
|
|
BundleDependencies []string `json:"bundleDependencies,omitempty"`
|
|
DevelopmentDependencies map[string]string `json:"development_dependencies,omitempty"`
|
|
PeerDependencies map[string]string `json:"peer_dependencies,omitempty"`
|
|
PeerDependenciesMeta map[string]any `json:"peer_dependencies_meta,omitempty"`
|
|
OptionalDependencies map[string]string `json:"optional_dependencies,omitempty"`
|
|
Bin map[string]string `json:"bin,omitempty"`
|
|
Readme string `json:"readme,omitempty"`
|
|
Repository Repository `json:"repository"`
|
|
HasInstallScript bool `json:"has_install_script,omitempty"`
|
|
HasShrinkwrap bool `json:"has_shrinkwrap,omitempty"`
|
|
Engines map[string]string `json:"engines,omitempty"`
|
|
CPU []string `json:"cpu,omitempty"`
|
|
OS []string `json:"os,omitempty"`
|
|
Libc []string `json:"libc,omitempty"`
|
|
Directories map[string]string `json:"directories,omitempty"`
|
|
Funding any `json:"funding,omitempty"`
|
|
AcceptDependencies map[string]string `json:"accept_dependencies,omitempty"`
|
|
Deprecated string `json:"deprecated,omitempty"`
|
|
|
|
GiteaTarballPath string `json:"gitea_tarball_path,omitempty"` // Gitea-internal, fixed at upload because lockfiles pin it
|
|
}
|