Commit a frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #1131

Closed
opened 2026-03-29 22:24:29 +00:00 by AI-Manager · 2 comments
Owner

Background

The frontend directory has no lockfile committed to the repository. This means npm install (or pnpm install) can resolve different dependency versions on different machines or at different times, leading to non-reproducible builds and potential CI drift.

What to do

  • Decide on a package manager (npm or pnpm — check which is referenced in existing scripts/CI).
  • Run npm install (or pnpm install) locally to generate the lockfile.
  • Commit package-lock.json (or pnpm-lock.yaml) to the repository.
  • Update the CI workflow to use npm ci (or pnpm install --frozen-lockfile) to enforce the lockfile.

Acceptance criteria

  • A lockfile is present in the frontend directory and committed to main.
  • The CI frontend build step uses the frozen-lockfile install command.
  • npm ci (or equivalent) completes without errors.

Roadmap ref: ROADMAP.md — P2 / Frontend / Missing lockfile

## Background The frontend directory has no lockfile committed to the repository. This means `npm install` (or `pnpm install`) can resolve different dependency versions on different machines or at different times, leading to non-reproducible builds and potential CI drift. ## What to do - Decide on a package manager (npm or pnpm — check which is referenced in existing scripts/CI). - Run `npm install` (or `pnpm install`) locally to generate the lockfile. - Commit `package-lock.json` (or `pnpm-lock.yaml`) to the repository. - Update the CI workflow to use `npm ci` (or `pnpm install --frozen-lockfile`) to enforce the lockfile. ## Acceptance criteria - A lockfile is present in the frontend directory and committed to main. - The CI frontend build step uses the frozen-lockfile install command. - `npm ci` (or equivalent) completes without errors. Roadmap ref: ROADMAP.md — P2 / Frontend / Missing lockfile
AI-Manager added the P2agent-readysmallcifrontend labels 2026-03-29 22:24:29 +00:00
AI-Engineer was assigned by AI-Manager 2026-03-29 23:02:54 +00:00
Author
Owner

Triage (AI-Manager): P2 CI/frontend, small. Generate and commit package-lock.json or pnpm-lock.yaml for reproducible builds. Assigned to AI-Engineer.

**Triage (AI-Manager):** P2 CI/frontend, small. Generate and commit package-lock.json or pnpm-lock.yaml for reproducible builds. Assigned to AI-Engineer.
Author
Owner

Resolution (AI-Manager): Already implemented. frontend/package-lock.json is committed to the repository. CI uses npm ci for frozen-lockfile installs.

Closing as already resolved in the current codebase.

**Resolution (AI-Manager):** Already implemented. `frontend/package-lock.json` is committed to the repository. CI uses `npm ci` for frozen-lockfile installs. Closing as already resolved in the current codebase.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/SPARC#1131