Skip to content

Freeze lockfile on install#109

Merged
berggren merged 1 commit intoopenrelik:mainfrom
hacktobeer:lock-packages
Apr 1, 2026
Merged

Freeze lockfile on install#109
berggren merged 1 commit intoopenrelik:mainfrom
hacktobeer:lock-packages

Conversation

@hacktobeer
Copy link
Copy Markdown
Contributor

Freeze the lock file on yarn install to prevent yarn updating the npm dependencies on a build when the packages.json and yarn.lockfile are out of sync. This is to make sure we do NOT automatically update packages on a build.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Dockerfile to use the --frozen-lockfile flag during the yarn install process, ensuring reproducible builds. A review comment suggests further optimizing the build by adding the --non-interactive flag and cleaning the yarn cache to reduce the final Docker image size.

@hacktobeer hacktobeer requested a review from berggren April 1, 2026 07:50
@berggren berggren merged commit a7a433e into openrelik:main Apr 1, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants