forked from 0xWheatyz/SPARC
Commit frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #238
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Context
Roadmap item: P2 Frontend — missing lockfile
The frontend directory has no committed lockfile. This means
npm install/pnpm installcan resolve different dependency versions on different machines or in CI, leading to non-reproducible builds.What to do
package.jsonfor apackageManagerfield or existing scripts).npm install→package-lock.json, orpnpm install→pnpm-lock.yaml).npm ciinstead ofnpm install)..gitignore.Acceptance criteria
package-lock.jsonorpnpm-lock.yaml) is committed to the repository.npm ciorpnpm install --frozen-lockfile).Triage: P2 / small / @developer
Part of P2 CI/build batch (#238-#240). Commit the frontend lockfile for reproducible builds. Should be tackled before #239 and #240 since CI depends on a reproducible install.
Triage: P2 Build - Small complexity. Assigned to @developer.
Delegation: Generate and commit the frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds.
Closing as already resolved. This issue is a duplicate of a previously completed issue. The fix has been merged to main via earlier PRs. Verified that the feature/fix exists in the current main branch.