Skip to content

ci: add package-lock.json to git for docs-website - #11783

Merged
anakin87 merged 2 commits into
mainfrom
website-lock
Jun 26, 2026
Merged

ci: add package-lock.json to git for docs-website#11783
anakin87 merged 2 commits into
mainfrom
website-lock

Conversation

@anakin87

@anakin87 anakin87 commented Jun 26, 2026

Copy link
Copy Markdown
Member

Related Issues

In #11777, npm ci was adopted for security reasons; now it fails with

The npm ci command can only install with an existing package-lock.json...

See https://github.com/deepset-ai/haystack/actions/runs/28211861205/job/83574692472

Proposed Changes:

  • commit package-lock.json: Dependabot should already be configured to take care of keeping it up to date

How did you test it?

Locally executing npm ci now works. CI.

Notes for the reviewer

We could also revert to using npm install but this would partially defeat the purpose of the original PR (more security).

Checklist

  • I have read the contributors guidelines and the code of conduct.
  • I have updated the related issue with new insights and changes.
  • I have added unit tests and updated the docstrings.
  • I've used one of the conventional commit types for my PR title: fix:, feat:, build:, chore:, ci:, docs:, style:, refactor:, perf:, test: and added ! in case the PR includes breaking changes.
  • I have documented my code.
  • I have added a release note file, following the contributors guidelines.
  • I have run pre-commit hooks and fixed any issue.

@vercel

vercel Bot commented Jun 26, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
haystack-docs Ready Ready Preview, Comment Jun 26, 2026 7:17am

Request Review

@github-actions

Copy link
Copy Markdown
Contributor

Coverage report

This PR does not seem to contain any modification to coverable code.

Comment thread pyproject.toml
ignore-words-list = "ans,astroid,nd,ned,nin,ue,rouge,ist, Claus,SME"
quiet-level = 3
skip = "./test,./e2e,*.svg"
skip = "./test,./e2e,*.svg,*/abbreviations/*,*/package-lock.json"

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • we need to exclude package-lock from codespell
  • I also centralized configs here instead of in pre-coomit hooks

@anakin87
anakin87 marked this pull request as ready for review June 26, 2026 07:21
@anakin87
anakin87 requested a review from a team as a code owner June 26, 2026 07:22
@anakin87
anakin87 requested review from julian-risch and sjrl and removed request for a team June 26, 2026 07:22
@claude

claude Bot commented Jun 26, 2026

Copy link
Copy Markdown

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.

@anakin87 anakin87 self-assigned this Jun 26, 2026
@julian-risch
julian-risch removed the request for review from sjrl June 26, 2026 08:01
@anakin87
anakin87 merged commit 24cb0ec into main Jun 26, 2026
31 checks passed
@anakin87
anakin87 deleted the website-lock branch June 26, 2026 08:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants