forked from 0xWheatyz/SPARC
Commit frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #1606
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Context
Roadmap item: P2 - Frontend
The frontend has no lockfile committed to the repo, which means
npm install/pnpm installcan resolve different dependency versions on each run, leading to non-reproducible builds.What to do
npm install(orpnpm install) in the frontend directory to generate a lockfilepackage-lock.json(npm) orpnpm-lock.yaml(pnpm) to the repositorynpm ci(orpnpm install --frozen-lockfile) for deterministic installsAcceptance criteria
package-lock.jsonorpnpm-lock.yaml) is present in the frontend directorynpm cior--frozen-lockfile).gitignoreRef: ROADMAP.md P2 - Frontend
This issue is already resolved in main.
frontend/package-lock.jsonis tracked in git and committed to the repository.