From 975d7322c6be75f1d560ec6bdd7ea44d24bc6d28 Mon Sep 17 00:00:00 2001 From: Joakim Olsson Date: Sat, 31 Oct 2026 16:16:20 +0100 Subject: [PATCH] chore(renovate): pin npm to v11 for lockfile updates Renovate installs the latest npm (12.2.1) when unconstrained. npm 12 defaults to allow-remote=none and then refuses to read a package with bundleDependencies by its registry tarball URL (EALLOWREMOTE, npm/cli#9800), which breaks lockfile updates. npm 11 is what Node 24 ships. Drop the constraint once #9800 is fixed. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01BWDQY44qgQoePAsr8zpW4a --- renovate.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/renovate.json b/renovate.json index c705b82..69a08e0 100644 --- a/renovate.json +++ b/renovate.json @@ -27,6 +27,7 @@ } ], "constraints": { - "node": ">=24" + "node": ">=24", + "npm": "^11" } } -- 2.54.0