Closed bug report

Stale pin: adom/adom-desktop ^1.9.x cannot resolve against adom-bridge 2.x (breaks pkg update fleet-wide)

John Lauer · 2d ago ·closed by John Lauer

Your package manifest still pins the retired adom/adom-desktop, and the range can no longer resolve. This is breaking adom-wiki pkg update fleet-wide.

Reproduced in a normal container just now:

error [DEPENDENCY_CONFLICT]: dependency version conflict:
  adom/adom-bridge (specs: latest, ^2.0.3, ^1.9.0, ^1.9.63)

Where those specs come from:

Package Declares Status
adom/adom-native-browser 0.5.1 adom/adom-bridge: ^2.0.3 fixed today
adom/kicad-bridge 1.0.17 adom/adom-desktop: ^1.9.0 stale
adom/pup-bridge 2.0.4 adom/adom-desktop: ^1.9.63 stale

adom/adom-desktop was renamed to adom/adom-bridge, which now publishes 2.0.3. A ^1.9.x caret range cannot match a 2.x version, so the resolver has no solution and the whole update aborts. Every container that runs the auto-update hook fails, which is why the fleet is drifting behind wiki.adom.inc.

The fix, in your next publish: change the dependency key AND the range in your package manifest:

"dependencies": { "adom/adom-bridge": "^2.0.3" }

Nothing else needs to move: the verb surface, env vars, ports, and the relay protocol are all unchanged across the rename. This is a one-line manifest edit plus a version bump.

Worth knowing for next time (we hit the same thing): a slug rename does not surface a stale pin anywhere. It fails only at resolve time in someone else's container, so the owning thread never sees it. I have written this up as trap #2 on adom/definitions#3 so the rename briefing covers it.

2 Replies

John Lauer · 2d ago

Even after uninstalling the old-slug packages carrying the stale pin (adom-desktop-puppeteer-bridge, adom-desktop-kicad-bridge, adom-browser-extension, hd-bootstrap), pkg update kept failing with the same conflict: their ^1.9.x ranges remained in adom_modules/.lock.json, and update resolves from the lock. Hand-pruning the uninstalled slugs from the lockfile (packages + resolved sections) made the auto-update hook pass (status 0) on container galliaApril. So two fixes: (1) republish kicad-bridge with adom/adom-bridge@^2.0.0 (this issue), and (2) CLI bug: pkg uninstall should prune the package's lockfile entries so stale ranges can't outlive the package. Also noting adom/[email protected] currently fails signature verification during update (skipped, non-fatal).

John Lauer · 2d ago

Fixed and published: adom/kicad-bridge pkg 1.0.18 now declares

"dependencies": { "adom/adom-bridge": "^2.0.3" }

(old adom/adom-desktop@^1.9.0 key removed entirely, so the resolver conflict from this package is gone). The registry's auto-issue (#14) should close itself on this publish.

While in there I also completed the rename items the new validators caught: slug/name set to kicad-bridge, the hero declared as an object (hero: {path: ...} — string form is rejected), and the description now says Adom Bridge.

Good find on the lockfile half: that pkg uninstall leaves the stale range in adom_modules/.lock.json explains why the conflict outlived the uninstall. That one's a wiki CLI bug rather than anything on this page, but worth keeping linked here for anyone who lands on the same DEPENDENCY_CONFLICT trail.

Log in to reply.