From d267884cc1be9ea1266e3598690ebc34df310835 Mon Sep 17 00:00:00 2001 From: Anders Kaseorg Date: Mon, 20 May 2019 15:56:51 -0700 Subject: [PATCH] node_cache: Run yarn install with --frozen-lockfile. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This way a yarn.lock inconsistent with package.json can’t slip through unnoticed. Signed-off-by: Anders Kaseorg --- scripts/lib/node_cache.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/lib/node_cache.py b/scripts/lib/node_cache.py index 22dc53910d..c2a17817b0 100644 --- a/scripts/lib/node_cache.py +++ b/scripts/lib/node_cache.py @@ -97,7 +97,7 @@ def do_yarn_install(target_path, yarn_args, success_stamp, stdout=None, stderr=N cd_exec = os.path.join(ZULIP_PATH, "scripts/lib/cd_exec") if os.environ.get('CUSTOM_CA_CERTIFICATES'): cmds.append([YARN_BIN, "config", "set", "cafile", os.environ['CUSTOM_CA_CERTIFICATES']]) - cmds.append([cd_exec, target_path, YARN_BIN, "install", "--non-interactive"] + + cmds.append([cd_exec, target_path, YARN_BIN, "install", "--non-interactive", "--frozen-lockfile"] + yarn_args) cmds.append(['touch', success_stamp])