diff options
| author | binarycat <binarycat@envs.net> | 2025-06-27 14:29:39 -0500 |
|---|---|---|
| committer | binarycat <binarycat@envs.net> | 2025-07-19 14:44:15 -0500 |
| commit | c8e2a65ed16b948819cee23d883d8e598665318b (patch) | |
| tree | 888ffd5808554c06ad65e5a66d147c1256b7ba25 /src/ci | |
| parent | 4bd3b74aa9ec4a21507d73f712186619baf93ba0 (diff) | |
| download | rust-c8e2a65ed16b948819cee23d883d8e598665318b.tar.gz rust-c8e2a65ed16b948819cee23d883d8e598665318b.zip | |
tidy: use a lockfile for js tools instead of npx
this makes us less vulnerable to MITM and supply chain attacks. it also means that the CI scripts are no longer responsible for tracking the versions of these tools. it should also avoid the situation where local tsc and CI disagree on the presense of errors due to them being different versions.
Diffstat (limited to 'src/ci')
| -rw-r--r-- | src/ci/docker/host-x86_64/pr-check-1/Dockerfile | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/src/ci/docker/host-x86_64/pr-check-1/Dockerfile b/src/ci/docker/host-x86_64/pr-check-1/Dockerfile index e63a383ec99..d3c3cd1b63e 100644 --- a/src/ci/docker/host-x86_64/pr-check-1/Dockerfile +++ b/src/ci/docker/host-x86_64/pr-check-1/Dockerfile @@ -27,10 +27,6 @@ COPY scripts/nodejs.sh /scripts/ RUN sh /scripts/nodejs.sh /node ENV PATH="/node/bin:${PATH}" -# Install es-check -# Pin its version to prevent unrelated CI failures due to future es-check versions. -RUN npm install es-check@6.1.1 eslint@8.6.0 typescript@5.7.3 -g - COPY scripts/sccache.sh /scripts/ RUN sh /scripts/sccache.sh |