mengw15 opened a new issue, #6210: URL: https://github.com/apache/texera/issues/6210
### Task Summary The shared-editing service (`bin/y-websocket-server`) depends on `y-websocket` (`^2.0.0`) and runs the bundled server via the Dockerfile's `CMD ["npx", "y-websocket"]`. As of **y-websocket 3.0.0 the bundled server was removed** and split into a dedicated package, [`@y/websocket-server`](https://github.com/yjs/y-websocket-server). The service is therefore pinned to the 2.x line and can't take the 3.x major bump — Dependabot #6166 was closed with `@dependabot ignore this major version`. Migrate the dependency to `@y/websocket-server` to get back onto a maintained server package. ### Context - Verified in #6166: bumping to 3.0.0 breaks the server — `npx y-websocket` fails with `could not determine executable to run` (2.1.0 starts fine). - `@y/websocket-server` keeps the same `y-websocket` bin name, so the Dockerfile's `CMD ["npx", "y-websocket"]` stays unchanged. A local end-to-end check (two browser sessions syncing on the same workflow) passed against it. ### Scope - `bin/y-websocket-server/package.json`: replace `"y-websocket": "^2.0.0"` with `@y/websocket-server` (latest). - Regenerate the lockfile. - Dockerfile: no change needed — `CMD ["npx", "y-websocket"]` still resolves via the new package's bin. - Verify: rebuild the container and confirm two browser sessions on the same workflow sync correctly. Follow-up to #6166. ### Task Type - [x] Refactor / Cleanup - [x] DevOps / Deployment / CI - [ ] Testing / QA - [ ] Documentation - [ ] Performance - [ ] Other -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
