https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40778

--- Comment #1 from Paul Derscheid <[email protected]> ---
Created attachment 189192
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=189192&action=edit
Bug 40778: Pin Node.js dependencies to exact resolved versions

- Replace all caret ranges (^) in package.json with exact versions
    - 37 dependencies pinned to exact versions
    - 32 devDependencies pinned to exact versions
    - 2 resolutions updated to exact versions
- This ensures reproducible builds by locking dependencies to their currently
resolved versions from yarn.lock
- This also ensures that we don't update to a compromised package by accident
just by running `yarn install` without `--frozen-lockfile`

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to