about summary refs log tree commit diff
path: root/src/ci/docker
diff options
context:
space:
mode:
authorbinarycat <binarycat@envs.net>2025-06-27 14:29:39 -0500
committerbinarycat <binarycat@envs.net>2025-07-19 14:44:15 -0500
commitc8e2a65ed16b948819cee23d883d8e598665318b (patch)
tree888ffd5808554c06ad65e5a66d147c1256b7ba25 /src/ci/docker
parent4bd3b74aa9ec4a21507d73f712186619baf93ba0 (diff)
downloadrust-c8e2a65ed16b948819cee23d883d8e598665318b.tar.gz
rust-c8e2a65ed16b948819cee23d883d8e598665318b.zip
tidy: use a lockfile for js tools instead of npx
this makes us less vulnerable to MITM and supply chain attacks.

it also means that the CI scripts are no longer responsible for
tracking the versions of these tools.

it should also avoid the situation where local tsc and CI
disagree on the presense of errors due to them being different versions.
Diffstat (limited to 'src/ci/docker')
-rw-r--r--src/ci/docker/host-x86_64/pr-check-1/Dockerfile4
1 files changed, 0 insertions, 4 deletions
diff --git a/src/ci/docker/host-x86_64/pr-check-1/Dockerfile b/src/ci/docker/host-x86_64/pr-check-1/Dockerfile
index e63a383ec99..d3c3cd1b63e 100644
--- a/src/ci/docker/host-x86_64/pr-check-1/Dockerfile
+++ b/src/ci/docker/host-x86_64/pr-check-1/Dockerfile
@@ -27,10 +27,6 @@ COPY scripts/nodejs.sh /scripts/
 RUN sh /scripts/nodejs.sh /node
 ENV PATH="/node/bin:${PATH}"
 
-# Install es-check
-# Pin its version to prevent unrelated CI failures due to future es-check versions.
-RUN npm install es-check@6.1.1 eslint@8.6.0 typescript@5.7.3 -g
-
 COPY scripts/sccache.sh /scripts/
 RUN sh /scripts/sccache.sh