[Pkg-javascript-devel] node-expat: versions of nodejs dependencies not properly documented

[Paul Gevers]

clone 963039 -1
affects 963039 src:node-cors
reassign -1 node-expat 2.3.18-1
retitle -1 versions of nodejs dependencies not properly documented
affects -1 =
thanks

Hi,

On 18/06/2020 10.06, Paul Gevers wrote:
> Source: node-iconv
> Version: 1.19.0-2
> Severity: serious
> Tags: sid bullseye
> User: debian-ci at lists.debian.org
> Usertags: needs-update
> Control: affects -1 src:nodejs src:node-body-parser
> Control: affects -1 src:node-client-sessions src:node-express
> 
> [X-Debbugs-CC: debian-ci at lists.debian.org,
> node-body-parser at packages.debian.org,
> node-client-sessions at packages.debian.org, node-express at packages.debian.org]
> 
> Dear maintainer(s),
> 
> With a recent upload of nodejs the autopkgtest of node-body-parser fails
> in testing when that autopkgtest is run with the binary packages of
> nodejs from unstable. It passes when run with only packages from
> testing. In tabular form:
> 
>                        pass            fail
> nodejs                 from testing    12.18.0~dfsg-3
> node-body-parser       from testing    1.19.0-2
> all others             from testing    from testing>
> I copied some of the output at the bottom of this report. As a nodejs
> non-expert, it seems to me that the version of node-iconv in testing is
> not compatible with the version of src:nodejs in unstable, but the
> package dependencies don't reflect that in any way. Looking at the error
> message, it seems to me that nodejs has an internal versioning scheme
> that should be exposed in the Debian control file. node-iconv is rebuilt
> in unstable and now has a dependency on the new version of libnodejsX,
> but an unversioned dependency on nodejs itself.

The same thing seems to happen with node-expat.

> Ideally, to fix the current situation some binary from src:nodejs, I
> think nodejs, needs to add a "Breaks: node-iconv << <first fixed
> version>", but unfortunately this shouldn't be done on binNMU versions,
> so this breaks can only happen if node-iconv gets a new upload, but it
> should be done in that case.
> 
> Currently this regression is blocking the migration of nodejs to testing
> [1].
> 
> More information about this bug and the reason for filing it can be found on
> https://wiki.debian.org/ContinuousIntegration/RegressionEmailInformation
> 
> Paul
> PS: there's probably more regressions (but not all) triggered by nodejs
> caused by this, I'll add them as affected when I see them.
> 
> [1] https://qa.debian.org/excuses.php?package=nodejs

https://ci.debian.net/data/autopkgtest/testing/amd64/n/node-expat/5930266/log.gz

autopkgtest [00:25:00]: test command1: node -e "require('node-expat')"
autopkgtest [00:25:00]: test command1: [-----------------------
/usr/share/nodejs/bindings/bindings.js:121
        throw e;
        ^

Error: The module '/usr/lib/nodejs/node-expat/build/Release/node_expat.node'
was compiled against a different Node.js version using
NODE_MODULE_VERSION 64. This version of Node.js requires
NODE_MODULE_VERSION 72. Please try re-compiling or re-installing
the module (for instance, using `npm rebuild` or `npm install`).
    at Object.Module._extensions..node
(internal/modules/cjs/loader.js:1188:18)
    at Module.load (internal/modules/cjs/loader.js:986:32)
    at Function.Module._load (internal/modules/cjs/loader.js:879:14)
    at Module.require (internal/modules/cjs/loader.js:1026:19)
    at require (internal/modules/cjs/helpers.js:72:18)
    at bindings (/usr/share/nodejs/bindings/bindings.js:112:48)
    at Object.<anonymous>
(/usr/lib/nodejs/node-expat/lib/node-expat.js:4:32)
    at Module._compile (internal/modules/cjs/loader.js:1138:30)
    at Object.Module._extensions..js
(internal/modules/cjs/loader.js:1158:10)
    at Module.load (internal/modules/cjs/loader.js:986:32)
bash: line 1:   584 Aborted                 bash -ec 'node -e
"require('\''node-expat'\'')"' 2> >(tee -a
/tmp/autopkgtest-lxc.c5u0432x/downtmp/command1-stderr >&2) > >(tee -a
/tmp/autopkgtest-lxc.c5u0432x/downtmp/command1-stdout)
autopkgtest [00:25:00]: test command1: -----------------------]



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20200618/66a06636/attachment.sig>