xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 11 Pull Requests 2 Actions 4 Packages Projects Releases 7 Wiki Activity

fix(ci): Frontend Lint使用本地二进制替代npx，避免自动下载不兼容版本 #346

Closed
xiaoxia wants to merge 1 commits from fix/frontend-lint-npx-local into develop
pull from: fix/frontend-lint-npx-local
merge into: xiaoxia:develop
Conversation 1 Commits 1 Files Changed 1
+3 -3
xiaoxia commented 2026-07-15 10:07:18 +08:00
Owner
Copy Link
Copy Source

问题

多个PR的Frontend Lint失败，根因是 npx eslint 自动下载了 eslint@10.7.0（最新版），而项目锁定的是 eslint@^8.57.0。

失败链路：

  1. npm缓存脏数据 → 缓存命中但node_modules里没有eslint
  2. npx eslint 找不到本地版本 → 自动下载npm上的最新版
  3. eslint@10 只支持 flat config（eslint.config.js），不认项目的 .eslintrc.* → 直接报错

修复

将Frontend Lint中的三个npx调用全部改为本地二进制路径：

  • npx eslint → node_modules/.bin/eslint
  • npx tsc → node_modules/.bin/tsc
  • npx prettier → node_modules/.bin/prettier

效果：本地没有对应二进制时直接失败（command not found），不会偷偷下载最新不兼容版本，问题暴露更直接。

配合PR #345的缓存完整性校验，形成双重保障：

  1. 缓存校验不通过 → 自动重装依赖
  2. 即使校验漏网 → 本地命令不存在直接报错，不会拉下大版本搞破坏

相关PR

  • #341: 引入npm缓存机制（源头）
  • #345: 增加缓存完整性校验 + 失败重试（第一层防护）
  • #346: 本PR - 使用本地二进制替代npx（第二层防护）
## 问题 多个PR的Frontend Lint失败，根因是 `npx eslint` 自动下载了 `eslint@10.7.0`（最新版），而项目锁定的是 `eslint@^8.57.0`。 失败链路： 1. npm缓存脏数据 → 缓存命中但node_modules里没有eslint 2. `npx eslint` 找不到本地版本 → 自动下载npm上的最新版 3. eslint@10 只支持 flat config（`eslint.config.js`），不认项目的 `.eslintrc.*` → 直接报错 ## 修复 将Frontend Lint中的三个npx调用全部改为本地二进制路径： - `npx eslint` → `node_modules/.bin/eslint` - `npx tsc` → `node_modules/.bin/tsc` - `npx prettier` → `node_modules/.bin/prettier` **效果**：本地没有对应二进制时直接失败（command not found），不会偷偷下载最新不兼容版本，问题暴露更直接。 配合PR #345的缓存完整性校验，形成双重保障： 1. 缓存校验不通过 → 自动重装依赖 2. 即使校验漏网 → 本地命令不存在直接报错，不会拉下大版本搞破坏 ## 相关PR - #341: 引入npm缓存机制（源头） - #345: 增加缓存完整性校验 + 失败重试（第一层防护） - #346: 本PR - 使用本地二进制替代npx（第二层防护）
xiaoxia added 1 commit 2026-07-15 10:07:18 +08:00
fix(ci): Frontend Lint使用本地二进制替代npx，避免自动下载不兼容版本
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 53s
Details
CI/CD Pipeline / Unit Tests (pull_request) Successful in 2m43s
Details
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 2m52s
Details
CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
Details
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
Details
CI/CD Pipeline / Integration Tests (pull_request) Successful in 2m12s
Details
e295cf27c7
xiaoxia closed this pull request 2026-07-15 10:49:52 +08:00
xiaoxia commented 2026-07-15 10:49:53 +08:00
Author
Owner
Copy Link
Copy Source

关闭，与 PR #347 功能重复。

#347 方案更完整：不仅用 npx --no-install 防止下载错误版本，还补上了 prettier 到 devDependencies（之前 prettier 不在依赖里，全靠 npx 现场下载）。

#346 的直接路径方案 node_modules/.bin/xxx 因 prettier 缺失同样会失败。

关闭，与 PR #347 功能重复。 #347 方案更完整：不仅用 `npx --no-install` 防止下载错误版本，还补上了 `prettier` 到 devDependencies（之前 prettier 不在依赖里，全靠 npx 现场下载）。 #346 的直接路径方案 `node_modules/.bin/xxx` 因 prettier 缺失同样会失败。
Some checks are pending
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 53s
Details
CI/CD Pipeline / Unit Tests (pull_request) Successful in 2m43s
Details
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 2m52s
Details
CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
Details
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
Details
CI/CD Pipeline / Integration Tests (pull_request) Successful in 2m12s
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
P0
阻塞性，必须立即处理
 P1
高优先级
 P2
中优先级
 P3
低优先级/后考虑
 architecture
架构设计
 backend
后端相关
 blocked
阻塞中
 bug
Bug修复
 ci-bug
CI本身的bug
 ci-optimization
CI优化类任务
 ci-pipeline
CI流水线/workflow相关
 cleanup
代码清理
 devops
运维/部署/CI
 documentation
文档相关
 feature
新功能
 frontend
前端相关
 question
需要讨论确认
 ready
PR CI通过，可合并
 refactor
代码重构
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
auto-approve-bot xiaoxia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: xiaoxia/xiaoxia-saas#346
Delete Branch "fix/frontend-lint-npx-local"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?