Skip to content

mint@4.2.469: keytar dependency breaks headless CI (openapi-check) #5077

@veganbeef

Description

@veganbeef

Bug

mint@4.2.469 (via @mintlify/cli@4.0.1072) added keytar as a hard dependency. keytar is a native module that requires libsecret-1.so.0 on Linux, which isn't available on standard CI runners (e.g. GitHub Actions ubuntu-24.04).

This breaks headless usage of commands like npx mint openapi-check that don't need keychain access.

Repro

# GitHub Actions on ubuntu-24.04
- run: npx mint openapi-check my-spec.yaml
Error: libsecret-1.so.0: cannot open shared object file: No such file or directory
    at Object..node (node:internal/modules/cjs/loader:1864:18)
    ...
    at Object.<anonymous> (/home/runner/.npm/_npx/.../keytar/lib/keytar.js:1:14)

Expected

keytar should be an optional dependency or lazily loaded, since it's only needed for interactive login flows — not for openapi-check or other headless commands.

Workaround

Pin to the previous version: npx mint@4.2.468 openapi-check ...

Versions

  • mint@4.2.469 / @mintlify/cli@4.0.1072 — broken
  • mint@4.2.468 / @mintlify/cli@4.0.1071 — works

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions