Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Pin crane and npm dependencies #3477

Draft
wants to merge 3 commits into
base: main
Choose a base branch
from
Draft

Pin crane and npm dependencies #3477

wants to merge 3 commits into from

Conversation

3u13r
Copy link
Member

@3u13r 3u13r commented Nov 11, 2024 •
edited
Loading

Context

OpenSSF's scorecard found 2 places where dependencies are not pinned. This fixes those places.

Proposed change(s)

  • Pin crane install by latest release commit
  • Use package lock to pin npm dependencies, use npm ci to not override the package lock.

Checklist

@3u13r 3u13r added the no changelog Change won't be listed in release changelog label Nov 11, 2024
@3u13r 3u13r added this to the v2.20.0 milestone Nov 11, 2024
@netlify Netlify
Copy link

netlify bot commented Nov 11, 2024 •
edited
Loading

❌ Deploy Preview for constellation-docs failed. Why did it fail? →

Name Link
🔨 Latest commit d53fb75
🔍 Latest deploy log https://app.netlify.com/sites/constellation-docs/deploys/673203bad0f9020008ff9e39

@3u13r 3u13r marked this pull request as draft November 11, 2024 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@msanft msanft msanft approved these changes

@katexochen katexochen Awaiting requested review from katexochen

@thomasten thomasten Awaiting requested review from thomasten thomasten is a code owner

Assignees
No one assigned
Labels
no changelog Change won't be listed in release changelog
Projects
None yet
Milestone
v2.20.0
Development

Successfully merging this pull request may close these issues.
2 participants
@3u13r @msanft