habsi/authentik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

web: Fix missing integrity fields in package-lock.json (#11509)

Browse Source 
* web: Fix missing integrity fields in lockfile

* website: revert lockfile lint, re-add integrity

* web,website: Require integrity also for subpackages
This commit is contained in:
Jan van Brügge
2024-09-27 13:28:21 +02:00
committed by GitHub
parent 6d291d378e
commit cdeed5e13b
5 changed files with 3062 additions and 112 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
web/package-lock.json generated
View File

@ -30366,7 +30366,9 @@
"chokidar": {
"optional": true
}
}
},
"resolved": "https://registry.npmjs.org/@swc/cli/-/cli-0.4.0.tgz",
"integrity": "sha512-4JdVrPtF/4rCMXp6Q1h5I6YkYZrCCcqod7Wk97ZQq7K8vNGzJUryBv4eHCvqx5sJOJBrbYm9fcswe1B0TygNoA=="
},
"packages/sfe/node_modules/chokidar": {
"version": "3.6.0",
@ -30391,7 +30393,9 @@
},
"optionalDependencies": {
"fsevents": "~2.3.2"
}
},
"resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz",
"integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw=="
},
"packages/sfe/node_modules/commander": {
"version": "8.3.0",
@ -30399,7 +30403,9 @@
"license": "MIT",
"engines": {
"node": ">= 12"
}
},
"resolved": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz",
"integrity": "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww=="
},
"packages/sfe/node_modules/glob-parent": {
"version": "5.1.2",
@ -30412,7 +30418,9 @@
},
"engines": {
"node": ">= 6"
}
},
"resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
"integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow=="
},
"packages/sfe/node_modules/picomatch": {
"version": "2.3.1",
@ -30439,7 +30447,9 @@
},
"engines": {
"node": ">=8.10.0"
}
},
"resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
"integrity": "sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA=="
},
"packages/sfe/node_modules/semver": {
"version": "7.6.3",
@ -30450,7 +30460,9 @@
},
"engines": {
"node": ">=10"
}
},
"resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz",
"integrity": "sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A=="
}
}
}

2
web/package.json
View File

@ -263,7 +263,7 @@
"lint:lockfile": {
"__comment": "The lockfile-lint package does not have an option to ensure resolved hashes are set everywhere",
"shell": true,
"command": "[ -z \"$(jq -r '.packages | to_entries[] | select((.key | startswith(\"node_modules\")) and (.value | has(\"resolved\") | not)) | .key' < package-lock.json)\" ]"
"command": "[ -z \"$(jq -r '.packages | to_entries[] | select((.key | contains(\"node_modules\")) and (.value | has(\"resolved\") | not)) | .key' < package-lock.json)\" ]"
},
"lint:lockfiles": {
"dependencies": [

3
website/.gitignore vendored
View File

@ -16,6 +16,9 @@
.env.test.local
.env.production.local
# Wireit's cache
.wireit
npm-debug.log*
yarn-debug.log*
yarn-error.log*

3132
website/package-lock.json generated
View File

File diff suppressed because it is too large Load Diff

13
website/package.json
View File

@ -8,7 +8,7 @@
"build-bundled": "cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && cross-env NODE_OPTIONS='--max_old_space_size=65536' docusaurus build",
"deploy": "docusaurus deploy",
"docusaurus": "docusaurus",
"lint:lockfile": "lockfile-lint --path package.json --type npm --allowed-hosts npm --validate-https",
"lint:lockfile": "wireit",
"prettier": "prettier --write .",
"prettier-check": "prettier --check .",
"serve": "docusaurus serve",
@ -56,9 +56,16 @@
"@docusaurus/types": "^3.3.2",
"@types/react": "^18.3.9",
"cross-env": "^7.0.3",
"lockfile-lint": "^4.14.0",
"prettier": "3.3.3",
"typescript": "~5.6.2"
"typescript": "~5.6.2",
"wireit": "^0.14.9"
},
"wireit": {
"lint:lockfile": {
"__comment": "The lockfile-lint package does not have an option to ensure resolved hashes are set everywhere",
"shell": true,
"command": "[ -z \"$(jq -r '.packages | to_entries[] | select((.key | contains(\"node_modules\")) and (.value | has(\"resolved\") | not)) | .key' < package-lock.json)\" ]"
}
},
"engines": {
"node": ">=20"