WIP: chore: remove bun.lockb #12
Reference in New Issue
Block a user
Delete Branch "chore-remove-bun-lock"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Dependency versions should be fixed at build time. Loss of reproducibility on dev machine is not significant enough to justify pinning package versions that will never be updated.
CI needs to be adjusted to ensure that the versions used during testing are also being bundled in the final OCI image.
chore: remove bun.lockbto WIP: chore: remove bun.lockbConsidering recent npm supply chain attacks, removing the lock file is no longer good practice without external review of deps.
Pull request closed