web: Fix missing integrity fields in package-lock.json (#11509)

* web: Fix missing integrity fields in lockfile

* website: revert lockfile lint, re-add integrity

* web,website: Require integrity also for subpackages

web/package-lock.json

@@ -30366,7 +30366,9 @@
                 "chokidar": {
                     "optional": true
                 }
-            }
+            },
+            "resolved": "https://registry.npmjs.org/@swc/cli/-/cli-0.4.0.tgz",
+            "integrity": "sha512-4JdVrPtF/4rCMXp6Q1h5I6YkYZrCCcqod7Wk97ZQq7K8vNGzJUryBv4eHCvqx5sJOJBrbYm9fcswe1B0TygNoA=="
         },
         "packages/sfe/node_modules/chokidar": {
             "version": "3.6.0",
@@ -30391,7 +30393,9 @@
             },
             "optionalDependencies": {
                 "fsevents": "~2.3.2"
-            }
+            },
+            "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz",
+            "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw=="
         },
         "packages/sfe/node_modules/commander": {
             "version": "8.3.0",
@@ -30399,7 +30403,9 @@
             "license": "MIT",
             "engines": {
                 "node": ">= 12"
-            }
+            },
+            "resolved": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz",
+            "integrity": "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww=="
         },
         "packages/sfe/node_modules/glob-parent": {
             "version": "5.1.2",
@@ -30412,7 +30418,9 @@
             },
             "engines": {
                 "node": ">= 6"
-            }
+            },
+            "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
+            "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow=="
         },
         "packages/sfe/node_modules/picomatch": {
             "version": "2.3.1",
@@ -30439,7 +30447,9 @@
             },
             "engines": {
                 "node": ">=8.10.0"
-            }
+            },
+            "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
+            "integrity": "sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA=="
         },
         "packages/sfe/node_modules/semver": {
             "version": "7.6.3",
@@ -30450,7 +30460,9 @@
             },
             "engines": {
                 "node": ">=10"
-            }
+            },
+            "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz",
+            "integrity": "sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A=="
         }
     }
 }

web/package.json

@@ -263,7 +263,7 @@
         "lint:lockfile": {
             "__comment": "The lockfile-lint package does not have an option to ensure resolved hashes are set everywhere",
             "shell": true,
-            "command": "[ -z \"$(jq -r '.packages | to_entries[] | select((.key | startswith(\"node_modules\")) and (.value | has(\"resolved\") | not)) | .key' < package-lock.json)\" ]"
+            "command": "[ -z \"$(jq -r '.packages | to_entries[] | select((.key | contains(\"node_modules\")) and (.value | has(\"resolved\") | not)) | .key' < package-lock.json)\" ]"
         },
         "lint:lockfiles": {
             "dependencies": [

website/.gitignore

@@ -16,6 +16,9 @@
 .env.test.local
 .env.production.local
 
+# Wireit's cache
+.wireit
+
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*

website/package.json

@@ -8,7 +8,7 @@
         "build-bundled": "cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && cross-env NODE_OPTIONS='--max_old_space_size=65536' docusaurus build",
         "deploy": "docusaurus deploy",
         "docusaurus": "docusaurus",
-        "lint:lockfile": "lockfile-lint --path package.json --type npm --allowed-hosts npm --validate-https",
+        "lint:lockfile": "wireit",
         "prettier": "prettier --write .",
         "prettier-check": "prettier --check .",
         "serve": "docusaurus serve",
@@ -56,9 +56,16 @@
         "@docusaurus/types": "^3.3.2",
         "@types/react": "^18.3.9",
         "cross-env": "^7.0.3",
-        "lockfile-lint": "^4.14.0",
         "prettier": "3.3.3",
-        "typescript": "~5.6.2"
+        "typescript": "~5.6.2",
+        "wireit": "^0.14.9"
+    },
+    "wireit": {
+        "lint:lockfile": {
+            "__comment": "The lockfile-lint package does not have an option to ensure resolved hashes are set everywhere",
+            "shell": true,
+            "command": "[ -z \"$(jq -r '.packages | to_entries[] | select((.key | contains(\"node_modules\")) and (.value | has(\"resolved\") | not)) | .key' < package-lock.json)\" ]"
+        }
     },
     "engines": {
         "node": ">=20"