Make container builds reproducible with the committed frontend lockfile

Browse Source

Constraint: hk-8-8 deploy path builds the frontend in Docker and requires web/package-lock.json to satisfy npm ci.
Rejected: Hotfix the remote Dockerfile to bypass lockfile usage | would diverge deploy logic from repo source of truth.
Confidence: high
Scope-risk: narrow
Directive: Keep package.json and package-lock.json committed together for frontend dependency changes.
Tested: Verified lockfile presence locally; previous hk-8-8 build failure reproduced missing-lockfile requirement.
Not-tested: Fresh remote image build after this follow-up commit (next step in current rollout).

...

This commit is contained in:

ikmkj

2026-05-05 15:31:00 +08:00

parent 8ee89478a9

commit ca368972b3

1 changed files with 15585 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

15585

web/package-lock.json generated vendored Normal file

File diff suppressed because it is too large Load Diff