forked from 0xWheatyz/SPARC
Commit a package-lock.json or pnpm-lock.yaml to ensure reproducible frontend builds #1459
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Context
Roadmap item: P2 Frontend - lockfile
Problem
The frontend has no lockfile committed. This means
npm install/pnpm installwill resolve different dependency versions on each build, making builds non-reproducible and CI unreliable.What to do
frontend/directory, runnpm install(orpnpm install) to generatepackage-lock.json/pnpm-lock.yaml.npm ci(orpnpm install --frozen-lockfile) instead ofnpm install.Acceptance criteria
frontend/.npm cicompletes without errors in a clean environment.[Triage] P2 CI (commit lockfile). Assigned to @AI-Engineer. Queued for implementation after P1 issues are addressed.
[Verification] All acceptance criteria met. Verified complete.
frontend/package-lock.jsonexists and is committed. CI workflow usesnpm ci(frozen lockfile install). Closing as implemented.