build: version the forked packages 14.0.3-quantus.1, not upstream's 14.0.3
Publishing under upstream's exact version was not merely confusing in a lockfile — it was unsafe. @polkadot/util-crypto pins @polkadot/networks at an exact version, and @polkadot/keyring pins util-crypto the same way. With every fork numbered 14.0.3, a consumer that forgot one resolution would have yarn quietly satisfy that pin from npm: the *unforked* upstream package, installing cleanly, with no Quantus network entry or no isDilithium, and nothing to indicate anything was wrong until something failed much later for an unrelated-looking reason. Renaming the forks makes that a resolution failure instead. Verified by deleting the @polkadot/networks resolution in quantus/ui and running an install: YN0082: @polkadot/networks@npm:14.0.3-quantus.1: No candidates found Unforked dependencies keep upstream's numbers — @polkadot/util, x-bigint, x-randomvalues, wasm-* — because they come from npm and should. Published with `--tag quantus`, which npm requires for a prerelease version and which is the honest dist-tag anyway: these are not upstream's `latest`. The tag is informational, since consumers pin by tarball URL. The old 14.0.3 artifacts have been deleted from the registry so nothing can resolve to them. Refs quantus/extension#2 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012uDUodEcRbBwNRi3UCmw8f
This commit is contained in:
@@ -18,11 +18,11 @@
|
||||
"./packageDetect.cjs"
|
||||
],
|
||||
"type": "module",
|
||||
"version": "14.0.3",
|
||||
"version": "14.0.3-quantus.1",
|
||||
"main": "index.js",
|
||||
"dependencies": {
|
||||
"@polkadot/util": "14.0.3",
|
||||
"@polkadot/util-crypto": "14.0.3",
|
||||
"@polkadot/util-crypto": "14.0.3-quantus.1",
|
||||
"@quantus/crypto": "^0.1.0",
|
||||
"tslib": "^2.8.0"
|
||||
},
|
||||
|
||||
@@ -3,4 +3,4 @@
|
||||
|
||||
// Do not edit, auto-generated by @polkadot/dev
|
||||
|
||||
export const packageInfo = { name: '@polkadot/keyring', path: 'auto', type: 'auto', version: '14.0.3' };
|
||||
export const packageInfo = { name: '@polkadot/keyring', path: 'auto', type: 'auto', version: '14.0.3-quantus.1' };
|
||||
|
||||
@@ -15,7 +15,7 @@
|
||||
},
|
||||
"sideEffects": false,
|
||||
"type": "module",
|
||||
"version": "14.0.3",
|
||||
"version": "14.0.3-quantus.1",
|
||||
"main": "index.js",
|
||||
"dependencies": {
|
||||
"@polkadot/util": "14.0.3",
|
||||
|
||||
@@ -3,4 +3,4 @@
|
||||
|
||||
// Do not edit, auto-generated by @polkadot/dev
|
||||
|
||||
export const packageInfo = { name: '@polkadot/networks', path: 'auto', type: 'auto', version: '14.0.3' };
|
||||
export const packageInfo = { name: '@polkadot/networks', path: 'auto', type: 'auto', version: '14.0.3-quantus.1' };
|
||||
|
||||
@@ -20,7 +20,7 @@
|
||||
"./packageDetect.cjs"
|
||||
],
|
||||
"type": "module",
|
||||
"version": "14.0.3",
|
||||
"version": "14.0.3-quantus.1",
|
||||
"browser": {
|
||||
"crypto": false,
|
||||
"stream": false
|
||||
@@ -29,7 +29,7 @@
|
||||
"dependencies": {
|
||||
"@noble/curves": "^1.3.0",
|
||||
"@noble/hashes": "^1.3.3",
|
||||
"@polkadot/networks": "14.0.3",
|
||||
"@polkadot/networks": "14.0.3-quantus.1",
|
||||
"@polkadot/util": "14.0.3",
|
||||
"@polkadot/wasm-crypto": "^7.5.3",
|
||||
"@polkadot/wasm-util": "^7.5.3",
|
||||
|
||||
@@ -3,4 +3,4 @@
|
||||
|
||||
// Do not edit, auto-generated by @polkadot/dev
|
||||
|
||||
export const packageInfo = { name: '@polkadot/util-crypto', path: 'auto', type: 'auto', version: '14.0.3' };
|
||||
export const packageInfo = { name: '@polkadot/util-crypto', path: 'auto', type: 'auto', version: '14.0.3-quantus.1' };
|
||||
|
||||
Reference in New Issue
Block a user