From b5ab33ec55f18fd6158d5f3ee58e6689e12b238c Mon Sep 17 00:00:00 2001 From: Arun Sharma Date: Thu, 9 Jul 2026 16:48:09 -0700 Subject: [PATCH 1/2] Remove global npm upgrade from deploy-nodejs/deploy-wasm jobs The 'npm install -g npm@latest' step causes MODULE_NOT_FOUND errors for the 'sigstore' module needed by --provenance during npm publish. This is a known issue where npm 11's in-place global upgrade on GitHub hosted runners fails to properly lay down its restructured dependency tree (sigstore is missing from node_modules). The bundled npm 10.9.x in both Node 20 and Node 22 already supports --provenance (added in npm 9.5.0), so the upgrade is unnecessary. --- .github/workflows/build-and-deploy.yml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/.github/workflows/build-and-deploy.yml b/.github/workflows/build-and-deploy.yml index ca4bfc99a..3b0ac43a3 100644 --- a/.github/workflows/build-and-deploy.yml +++ b/.github/workflows/build-and-deploy.yml @@ -419,9 +419,6 @@ jobs: node-version: "22" registry-url: "https://registry.npmjs.org" - - name: Upgrade npm - run: npm install -g npm@latest - - name: Package Node.js API (main + per-platform sub-packages) run: node package working-directory: tools/nodejs_api @@ -524,9 +521,6 @@ jobs: node-version: "20" registry-url: "https://registry.npmjs.org" - - name: Upgrade npm - run: npm install -g npm@latest - - name: Show tarball contents run: tar -tvf lbug-wasm.tar.gz working-directory: tools/wasm From f231ed2c2f6bd4bd2f8daf18196cdf8858be50d3 Mon Sep 17 00:00:00 2001 From: Arun Sharma Date: Thu, 9 Jul 2026 17:50:03 -0700 Subject: [PATCH 2/2] Guard httplib set_ca_cert_path call under CPPHTTPLIB_OPENSSL_SUPPORT The wasm build does not define CPPHTTPLIB_OPENSSL_SUPPORT because OpenSSL is not available for Emscripten, causing set_ca_cert_path to be absent from the httplib Client interface. Wrap the call in a preprocessor guard; on wasm, CA cert configuration is skipped, which is fine since wasm's HTTP client path cannot use OpenSSL certificates. --- src/extension/extension_installer.cpp | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/extension/extension_installer.cpp b/src/extension/extension_installer.cpp index c0d2f9476..3da8f9ea7 100644 --- a/src/extension/extension_installer.cpp +++ b/src/extension/extension_installer.cpp @@ -28,7 +28,9 @@ void configureSSLCerts(httplib::Client& client, const ExtensionRepoInfo& repoInf return; } if (auto caCertPath = ExtensionUtils::getCaCertPath()) { +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT client.set_ca_cert_path(caCertPath->caCertFilePath, caCertPath->caCertDirPath); +#endif } }