Skip to content

Reproducible npm build#83

Merged
nosborn merged 1 commit intomasterfrom
reproducible-npm
Jun 12, 2025
Merged

Reproducible npm build#83
nosborn merged 1 commit intomasterfrom
reproducible-npm

Conversation

@nosborn
Copy link
Copy Markdown
Owner

@nosborn nosborn commented Jun 12, 2025

No description provided.

@nosborn nosborn force-pushed the reproducible-npm branch 2 times, most recently from 3af3e60 to ca6d2b4 Compare June 12, 2025 06:14
@nosborn nosborn marked this pull request as ready for review June 12, 2025 06:20
Copilot AI review requested due to automatic review settings June 12, 2025 06:20

This comment was marked as outdated.

@nosborn nosborn force-pushed the reproducible-npm branch 5 times, most recently from 60d65b5 to 4b1ea35 Compare June 12, 2025 06:31
@nosborn nosborn requested a review from Copilot June 12, 2025 06:33

This comment was marked as outdated.

@nosborn nosborn force-pushed the reproducible-npm branch from 4b1ea35 to e02980c Compare June 12, 2025 06:36
@nosborn nosborn requested a review from Copilot June 12, 2025 06:43
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR aims to ensure reproducible npm builds by updating dependency management and streamlining command execution. Key changes include adding a package.json with updated dependencies, modifying the entrypoint and Dockerfile for more reliable execution, and updating documentation and pre-commit configurations to reflect these changes.

Reviewed Changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Adds dependency and version details for reproducible builds
entrypoint.sh Updates markdownlint-cli invocation to use npx
README.md Updates action version reference to 3.4.0
Dockerfile Replaces global npm install with npm ci for production installs
.pre-commit-config.yaml Adds a hook for package-lock and excludes package-lock.json
.github/dependabot.yml Introduces dependabot config for npm ecosystem updates
.gitattributes Marks package-lock.json as linguist-generated

@nosborn nosborn merged commit 66a3c79 into master Jun 12, 2025
4 checks passed
@nosborn nosborn deleted the reproducible-npm branch June 12, 2025 06:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants