Please upgrade chokidar to v5
What versions are you using? (if relevant)
react-email
Describe the Bug
The react-email package is currently pinned to ^4.0.3.
https://github.com/resend/react-email/blob/0f0cb94e1f15581131a2d50b80f8daa13dd1c9fc/packages/react-email/package.json#L51
As you can see on npm/chokidar's versions list 5.0.0 was released 9 months ago, the version before it 4.0.3 is 2 years old. Also 4.0.2-4.0.3 were released without provenance meaning trustPolicy: no-downgrade will error on the package. https://github.com/paulmillr/chokidar/issues/1440
The main breaking change is increasing the minimum node.js version to v20.19 to support loading the ESM-only package from CJS. Which should be a mild change since react-email already requires v20. https://github.com/resend/react-email/blob/0f0cb94e1f15581131a2d50b80f8daa13dd1c9fc/packages/react-email/package.json#L40-L42
What is affected (leave empty if unsure)
CLI
Link to the code that reproduces this issue
n/a
To Reproduce
In a new mcr.microsoft.com/devcontainers/typescript-node:5-24-trixie devcontainer:
wget -qO- https://get.pnpm.io/install.sh | env PNPM_VERSION=latest-12 ENV="$HOME/.bashrc" SHELL="$(which bash)" bash - # Downloading pnpm 12.3.4 ...
source ~/.bashrc
pnpm --version # 12.3.4
pnpm config set --location project trustPolicy no-downgrade
pnpm install -D react-email
# Progress: resolved 0, reused 0, downloaded 108, added 0
# Error: × adding a new package
# ╰─▶ Failed to resolve dependency tree: Failed to resolve dependency: High-risk trust
# downgrade for "[email protected]" (possible package takeover)Expected Behavior
In a new mcr.microsoft.com/devcontainers/typescript-node:5-24-trixie devcontainer:
wget -qO- https://get.pnpm.io/install.sh | env PNPM_VERSION=latest-12 ENV="$HOME/.bashrc" SHELL="$(which bash)" bash - # Downloading pnpm 12.3.4 ...
source ~/.bashrc
pnpm --version # 12.3.4
pnpm config set --location project trustPolicy no-downgrade
pnpm install -D react-email
# Should complete with recent dependencies and without a trustPolicy warningWhat's your node version? (if relevant)
No response
Source: resend/react-email