codesandbox-client icon indicating copy to clipboard operation
codesandbox-client copied to clipboard

Unable to build with Yarn 3 when @codesandbox/common is included in a project

Open matyasf opened this issue 2 years ago • 1 comments

🐛 bug report

Preflight Checklist

  • [ x] I have read the Contributing Guidelines for this project.
  • [x ] I agree to follow the Code of Conduct that this project adheres to.
  • [ x] I have searched the issue tracker for an issue that matches the one I want to file, without success.

Description of the problem

Unable to build with Yarn 3 included. Yarn 3 does not like (rightfully) the inclusion of a git repo dependency and will fail with the following error:

YN0018: │ humps@https://github.com/CompuIves/humps.git#commit=7ee34e874c808cf60e7119ee71ac71b8bf2189b7: The remote archive doesn't match the expected checksum

To Reproduce

make a project that uses Yarn 3 and has @codesandbox/common as a dependency There is a workaround: Use YARN_CHECKSUM_BEHAVIOR=update yarn install, but this turns off Yarn's checksum validation mechanism which introduces a large security hole.

How to fix

Publish CompuIves/humps as an npm package

matyasf avatar Apr 06 '22 17:04 matyasf

Hey @matyasf ,

I'm afraid we're not supporting Yarn3 just yet, we'd recommend using Yarn2 on Codesandbox to avoid any issues

JamesACS avatar Apr 14 '22 10:04 JamesACS