Robert Jaros
08/17/2026, 1:49 PM2.4.20-RC problem, because I have never encountered this on earlier versions. After number of test builds I was blocked by Github. See 🧵Robert Jaros
08/17/2026, 1:50 PMExecution failed for task ':kotlinNpmInstall' (registered by plugin class 'org.jetbrains.kotlin.gradle.targets.js.nodejs.NodeJsRootPlugin').
> Process 'Resolving NPM dependencies using yarn' returns 1
yarn install v1.22.22
info No lockfile found.
[1/4] Resolving packages...
info Visit <https://yarnpkg.com/en/docs/cli/install> for documentation about this command.
(node:237627) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
(Use `node --trace-deprecation ...` to show where the warning was created)
warning html-differ > coa > q@0.9.7: You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.
(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)
warning html-differ > vow-fs > uuid@2.0.3: uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
warning html-differ > vow-fs > glob@7.2.3: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting <mailto:i@izs.me|i@izs.me>
warning html-differ > vow-fs > glob > inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
warning workspace-aggregator-80692ff9-19ae-428c-8860-ed315ba74420 > template-test > mocha > glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting <mailto:i@izs.me|i@izs.me>
warning workspace-aggregator-80692ff9-19ae-428c-8860-ed315ba74420 > template-test > karma-webpack > glob@7.2.3: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting <mailto:i@izs.me|i@izs.me>
error Error: <https://raw.githubusercontent.com/Kotlin/karma/239a8fc984584f0d96b1dd750e7a5e2c79da93a6/package.json>: Request "<https://raw.githubusercontent.com/Kotlin/karma/239a8fc984584f0d96b1dd750e7a5e2c79da93a6/package.json>" returned a 429
at params.callback [as _callback] (/opt/rjaros/.gradle/yarn/yarn-v1.22.22/lib/cli.js:66689:18)
at self.callback (/opt/rjaros/.gradle/yarn/yarn-v1.22.22/lib/cli.js:141410:22)
at Request.emit (node:events:514:20)
at Request.<anonymous> (/opt/rjaros/.gradle/yarn/yarn-v1.22.22/lib/cli.js:142382:10)
at Request.emit (node:events:514:20)
at IncomingMessage.<anonymous> (/opt/rjaros/.gradle/yarn/yarn-v1.22.22/lib/cli.js:142304:12)
at IncomingMessage.wrapper (node:events:639:12)
at IncomingMessage.emit (node:events:526:24)
at endReadableNT (node:internal/streams/readable:1772:12)
at process.processTicksAndRejections (node:internal/process/task_queues:90:21)Robert Jaros
08/17/2026, 1:51 PM429: Too Many Requests
For more on scraping GitHub and how it may affect your rights, please review our Terms of Service (<https://docs.github.com/en/site-policy/github-terms/github-terms-of-service>).Robert Jaros
08/17/2026, 1:52 PMRobert Jaros
08/17/2026, 1:57 PMIvan Kubyshkin
08/17/2026, 1:58 PMRobert Jaros
08/17/2026, 1:59 PMRobert Jaros
08/17/2026, 2:00 PMRobert Jaros
08/17/2026, 2:04 PMYoussef Shoaib [MOD]
08/17/2026, 2:24 PMAdam Semenenko
08/18/2026, 6:57 AMI suspect new JS tooling is downloading some karma configuration files directly from github.It looks like the regular downloading of the Kotlin/karma fork. https://github.com/JetBrains/kotlin/blob/v2.4.20-RC/libraries/tools/kotlin-gradle-plugin/kotlin-npm-tooling/package-lock.json#L3677