This is an automated email from the ASF dual-hosted git repository.
klesh pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/devlake.git
The following commit(s) were added to refs/heads/main by this push:
new 4cf8bf3a5 build(e2e): commit package-lock.json for the Playwright
suite (#9199)
4cf8bf3a5 is described below
commit 4cf8bf3a53668acb2e738beec135a36a5b81430f
Author: Dirk <[email protected]>
AuthorDate: Thu Oct 8 15:15:12 2026 +0200
build(e2e): commit package-lock.json for the Playwright suite (#9199)
`e2e/` has been a Dependabot `npm` directory since #9089 but ships only a
`package.json` with a caret range. Without a lockfile every install
resolves whatever Playwright release is current, and Dependabot has to
guess the "from" version (#9098 was titled "1.63.0 -> 1.62.1" while it
actually raised the range from ^1.58.2).
- Add `e2e/package-lock.json` (lockfileVersion 3, public npm registry),
resolving `@playwright/test` ^1.63.0 to 1.63.0. `package.json` is the
npm-init scaffold and declares no `packageManager`, so npm is the
natural tool; `**/*.json` is already excluded in `.licenserc.yaml`.
- Update the `/e2e` comment in `.github/dependabot.yml`: the directory
now has a lockfile. `versioning-strategy: increase` stays, so the
declared range and the locked version move together.
Signed-off-by: DoDiODev <[email protected]>
---
.github/dependabot.yml | 5 +++--
e2e/package-lock.json | 58 ++++++++++++++++++++++++++++++++++++++++++++++++++
2 files changed, 61 insertions(+), 2 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4b2b60a3f..97009cc0b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -102,8 +102,9 @@ updates:
open-pull-requests-limit: 5
commit-message:
prefix: build(deps)
- # This directory has no lockfile. Without `increase`, Dependabot would stay
- # silent as long as a new release still satisfies the declared caret range.
+ # Raise the caret range in package.json together with package-lock.json so
+ # the declared minimum always matches the locked version. The default
+ # `auto` may classify this non-private package as a library and only widen.
versioning-strategy: increase
groups:
e2e-minor-patch:
diff --git a/e2e/package-lock.json b/e2e/package-lock.json
new file mode 100644
index 000000000..a0bf798fc
--- /dev/null
+++ b/e2e/package-lock.json
@@ -0,0 +1,58 @@
+{
+ "name": "e2e",
+ "version": "1.0.0",
+ "lockfileVersion": 3,
+ "requires": true,
+ "packages": {
+ "": {
+ "name": "e2e",
+ "version": "1.0.0",
+ "license": "ISC",
+ "dependencies": {
+ "@playwright/test": "^1.63.0"
+ }
+ },
+ "node_modules/@playwright/test": {
+ "version": "1.63.0",
+ "resolved":
"https://registry.npmjs.org/@playwright/test/-/test-1.63.0.tgz";,
+ "integrity":
"sha512-oxMK4vllB9RK5NQ2l1pq1IfOf2AvnEuj/vYGDj0H2nMtmtZpKtCwt/l00GEO6xjGfpBNAvjovvYdCm50dRQkpQ==",
+ "license": "Apache-2.0",
+ "dependencies": {
+ "playwright": "1.63.0"
+ },
+ "bin": {
+ "playwright": "cli.js"
+ },
+ "engines": {
+ "node": ">=20"
+ }
+ },
+ "node_modules/playwright": {
+ "version": "1.63.0",
+ "resolved":
"https://registry.npmjs.org/playwright/-/playwright-1.63.0.tgz";,
+ "integrity":
"sha512-+7ziBLidS4NaNCdt57SUDT+wYmmd5fmiQejUic/kb+YsYSCPyOOE9sebzMjNmQrsnNpDJqd4WHvV/8lfKfUDUg==",
+ "license": "Apache-2.0",
+ "dependencies": {
+ "playwright-core": "1.63.0"
+ },
+ "bin": {
+ "playwright": "cli.js"
+ },
+ "engines": {
+ "node": ">=20"
+ }
+ },
+ "node_modules/playwright-core": {
+ "version": "1.63.0",
+ "resolved":
"https://registry.npmjs.org/playwright-core/-/playwright-core-1.63.0.tgz";,
+ "integrity":
"sha512-rYCsBF/M5HjUch52bbtVONEFjv6Xu8sm8h72dNlR5bzIE1fvC/bxgspzkjSfU+MweEMmPM8KJebG6nnyxo5mCg==",
+ "license": "Apache-2.0",
+ "bin": {
+ "playwright-core": "cli.js"
+ },
+ "engines": {
+ "node": ">=20"
+ }
+ }
+ }
+}
