#6146·windmill

bug: Pinned dependencies of imported scripts not resolved (Typescript)

Author: Galarzaa90Created Jul 8, 2025Updated Sep 4, 2026
Labelsbug

Describe the bug

If you pin a dependency on a script using @ and then you import this script into another script, the version pin will be ignored and the latest version will be installed.

To reproduce

  • Create a script with a pinned dependency:
    typescript
    import _ from "lodash@3";
    
    export function main() {
      return _.chunk(['a', 'b', 'c', 'd'], 2);
    }
  • Calling this script installs the following:
    bun install v1.2.3 (8c4d3ff8)
    Resolving dependencies
    Resolved, downloaded and extracted [1]
    Saved lockfile
    + [email protected] (v4.17.21 available)
    1 package installed [87.00ms]
  • Create another script that imports the previous script:
    typescript
    import { main as test } from "./ebullient_script"
    
    export function main() {
      return test()
    }
  • Calling the first script installs the following:
    bun install v1.2.3 (8c4d3ff8)
    Resolving dependencies
    Resolved, downloaded and extracted [1]
    Saved lockfile
    + [email protected]
    1 package installed [90.00ms]

Expected behavior

The pinned version of lodash should have been installed.

Screenshots

No response

Browser information

Chrome Version 138.0.7204.50

Application version

Windmill CE v1.495.1

Additional Context

No response