Skip to content

Conversation

@pull
Copy link

@pull pull bot commented Dec 24, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

anthonyshew and others added 5 commits December 23, 2025 12:37
### Description

CLOSES #11301

### Testing Instructions

Verified the fix in the browser and added a test.
## Summary

Fixes multiple issues with `turbo prune` producing corrupted bun.lock
files that fail `bun install --frozen-lockfile`.

While investigating #11266 (git repository package corruption), I
discovered additional issues affecting the pruned lockfile format.

## Issues Fixed

### 1. GitHub/git package format corruption (fixes #11266)

The deserializer was type-blind when processing package entries - it
stored `registry: Some("")` for any package with an empty string at
position 1, including GitHub/git packages that should never have a
registry field.

Per bun.lock.zig, the format is:
- npm packages: 4 elements `[ident, registry, info, checksum]`
- github/git packages: 3 elements `[ident, info, .bun-tag]` — no
registry

The serializer then output 4-element arrays for GitHub packages, which
bun rejects.

### 2. Missing metadata sections

Pruned lockfiles were missing: `configVersion`, `trustedDependencies`,
`overrides`, `catalog`, `catalogs`, and `patchedDependencies`.

### 3. JSON formatting issues

- Missing trailing commas in nested structures (bun's parser requires
them)
- `optionalPeers` arrays formatted as `[ "a", "b", ]` instead of `["a",
"b"]`

## Test Plan

- Red/green tests for all fixes (tests fail without fix, pass with fix)
- Comprehensive coverage for all 9 package types and 6 metadata sections
- Tested with real monorepo using `bun install --frozen-lockfile`
- Verified both `turbo prune` and `turbo prune --docker` work (same
encode path)

## Related Issues

- Fixes #11266
- Related: #11007, #10782, #10783

---------

Co-authored-by: Anthony Shew <[email protected]>
)

## Summary
- Remove redundant "Turborepo " prefix from 7 workflow names since
everything in this repo is Turborepo already
- Purely cosmetic change to clean up GitHub Actions display names
@pull pull bot locked and limited conversation to collaborators Dec 24, 2025
@pull pull bot added the ⤵️ pull label Dec 24, 2025
@pull pull bot merged commit acfe9d6 into zys-contrib:main Dec 24, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants