package-lock.json out of sync (bluebird@3.5.5)

[MikeMcC399]

Situation

The npm package-lock.json lock file is out of sync with package.json.

npm ci results in the error message

npm error Invalid: lock file's bluebird@3.5.5 does not satisfy bluebird@3.7.2

Steps to reproduce

Ubuntu 24.04.2 LTS, Node.js 22.17.1 LTS

git clone https://github.com/cypress-io/commit-info
cd commit-info
npm ci

Logs

$ npm ci
npm error code EUSAGE
npm error
npm error `npm ci` can only install packages when your package.json and package-lock.json or npm-shrinkwrap.json are in sync. Please update your lock file with `npm install` before continuing.
npm error
npm error Invalid: lock file's bluebird@3.5.5 does not satisfy bluebird@3.7.2
npm error
npm error Clean install a project
npm error
npm error Usage:
npm error npm ci
npm error
npm error Options:
npm error [--install-strategy <hoisted|nested|shallow|linked>] [--legacy-bundling]
npm error [--global-style] [--omit <dev|optional|peer> [--omit <dev|optional|peer> ...]]
npm error [--include <prod|dev|optional|peer> [--include <prod|dev|optional|peer> ...]]
npm error [--strict-peer-deps] [--foreground-scripts] [--ignore-scripts] [--no-audit]
npm error [--no-bin-links] [--no-fund] [--dry-run]
npm error [-w|--workspace <workspace-name> [-w|--workspace <workspace-name> ...]]
npm error [-ws|--workspaces] [--include-workspace-root] [--install-links]
npm error
npm error aliases: clean-install, ic, install-clean, isntall-clean
npm error
npm error Run "npm help ci" for more info

Assessment

Renovate PR #150 updated to "bluebird": "3.7.2", however it is unclear where the error crept in. The line numbers in the PR don't match with those in package-lock.json. There were however several PRs merged on the same day (Nov 20, 2023) and they may have conflicted with one another.

Recommendation

• Merge chore: migrate to default npmjs registry #160 to remediate the issue that an outdated URL is being used for the npm registry
• Regenerate package-lock.json, updating to bluebird@3.7.2