GitHub dependency conflicts break installs
Dev tooling5 posts from 4 people4d active+22 posts in the last 7 days, 2 the 7 days before (steady)
Posts per day
The posts behind it
5, newest first`detectContentType` types `<!--ftypavif-->` SVG as AVIF and sends it to sharp## Link to the code that reproduces this issue https://github.com/lion9453/CVE-2026-96889-nextjs-rce Control file: [`app/public/avif-control.svg`](https://github.com/lion9453/CVE-2026-96889-nextjs-rce/blob/main/app/public/avif-control.svg) Follow-up to...vercel/next.js · lion94531 repliesOpen ↗`detectContentType` types `<!--ftypavif-->` SVG as AVIF and sends it to sharp### Link to the code that reproduces this issue https://github.com/lion9453/CVE-2026-96889-nextjs-rce Control file: [`app/public/avif-control.svg`](https://github.com/lion9453/CVE-2026-96889-nextjs-rce/blob/main/app/public/avif-control.svg) Follow-up to...vercel/next.js · lion94531 repliesOpen ↗`next/dynamic` script preloads lack `crossOrigin`, so Turbopack can't reuse them since #92070 — ~1s delay per chunk with a cross-site `assetPrefix`...context - Removing `crossOrigin` from the config avoids the delay, but it isn't a good workaround. Without `crossorigin`, errors in scripts from a cross-origin asset host are masked as `Script error.`. With `@sentry/nextjs`, errors thrown in event handlers and unhandled promise...vercel/next.js · yu12221 reactionsOpen ↗next analyze silently ignores native compilation errors and exits successfully...is discarded. Expected: show the returned Turbopack compilation diagnostics and return a failing exit status for errors, consistent with Next.js's production `printBuildErrors` handling. ### Reproduction Create these files and leave `app/missing-module.js` absent....vercel/next.js · alexboii1 repliesOpen ↗Turbopack: `Module not found: Can't resolve 'styled-jsx/style.js'` warning on every Pages Router build with pnpm...at the project root makes the warning go away, which confirms this is the failing lookup. The failure is harmless because `require_hook_modules` traces the same three requests again from the `next` package, so the file ends up in the trace anyway:...vercel/next.js · itsUndefined1 repliesOpen ↗
Companies and products named
About this problem
Evidence
5 posts from 4 people in 1 place, about 2 a week over 15 days. Mostly on vercel/next.js. Tools named alongside: Vercel, npm.
Frustration Frustration 0 of 3· Seen on GitHub issues
How it was grouped
Posts that state a pain and match the "dependency-hell" rule about GitHub. First post Oct 2, 2026, latest Oct 16, 2026. Corroborated: 3 or more posts from 2 or more people or places. Method
The same problem elsewhere
Other GitHub problems
Trouble with GitHub terminalTrouble with GitHub nextTrouble with GitHub checkGitHub outages and slowdowns disrupt workMigrating to or off GitHub is slow and riskyGitHub rate limits and usage caps block workRAG on GitHub returns irrelevant or missing contextTrouble with GitHub testGitHub lock-in makes switching costlyTrouble with GitHub proxyGitHub vulnerabilities are hard to triage and patchGitHub deprecations force unplanned migrations
History
rising to steady
unverified to corroborated
fading to rising
steady to fading
new to steady
GitHub dependency conflicts break installs (2 posts)