dependabot-core
dependabot-core copied to clipboard
Fix ArgumentError Malformed version number string in NPM & Yarn
Is there an existing issue for this?
Sentry link: https://github.sentry.io/issues/5450311195/events/c10de4ced9be414f9cc2876e5008a539/ https://github.sentry.io/issues/5450311195/events/99e103d789dd44cdb76122d9a2e2869c/?project=1451818
- [X] I have searched the existing issues
Package ecosystem
npm
Package manager version
No response
Language version
No response
Manifest location and content before the Dependabot update
No response
dependabot.yml content
No response
Updated dependency
No response
What you expected to see, versus what you actually saw
We need to discuss and agree how we handle git commit SHAs when they are presented as the version. Should we just raise an error? How can we compare SHAs?
What I'm seeing:
ArgumentError
Malformed version number string 2.4.1
(node:7461) V8: /home/dependabot/dependabot-updater/repo/.yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs:45727 Invalid asm.js: Unexpected token
ArgumentError
Malformed version number string 9a829aed8932ab58ed4027ebec01051043551373
Native package manager behavior
No response
Images of the diff or a link to the PR, issue, or logs
No response
Smallest manifest that reproduces the issue
No response