Pushing pnpm lock file to lock package versions (#672)

Author: naveenkoppula

.github/workflows/lint-prettier.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Install Node.js modules
         run: |
           npm install -g pnpm
-          pnpm install
+          pnpm install --frozen-lockfile
       - name: Analyze TypeScript files
         run: |
           pnpm recursive run lint

.github/workflows/release.yml

@@ -71,7 +71,7 @@ jobs:
           OUTPUT_DIR: templates
         run: |
           cd "${INSTALLER_STACK_DIR}"
-          pnpm install
+          pnpm install --frozen-lockfile
           pnpx cdk synth --output "${OUTPUT_DIR}" "${INSTALLER_STACK_NAME}"
           echo ::set-output name=template_name::${INSTALLER_STACK_NAME}.template.json
           echo ::set-output name=template_path::$(realpath "${OUTPUT_DIR}/${INSTALLER_STACK_NAME}.template.json")

.gitignore

@@ -1,6 +1,5 @@
 cdk.out
 node_modules
-pnpm-lock.yaml
 .DS_Store
 *.log
 config.json

docs/developer/developer-guide.md

@@ -176,7 +176,7 @@ new codebuild.PipelineProject(stack, 'InstallerProject', {
           nodejs: 12,
         },
         // The flag '--unsafe-perm' is necessary to run pnpm scripts in Docker
-        commands: ['npm install --global pnpm', 'pnpm install --unsafe-perm'],
+        commands: ['npm install --global pnpm', 'pnpm install --unsafe-perm --frozen-lockfile'],
       },
       build: {
         commands: [
@@ -242,7 +242,7 @@ WORKDIR /app
 # Copy over the project root to the /app directory
 ADD . /app/
 # Install the dependencies
-RUN pnpm install --unsafe-perm
+RUN pnpm install --unsafe-perm --frozen-lockfile
 ```
 
 When this CodeBuild project executes, it uses the Docker image as base -- the dependencies are already installed -- and runs the same commands as the `CdkDeployProject` to deploy the `Phase` stacks.

pnpm-lock.yaml

@@ -5,6 +5,6 @@ export ACCELERATOR_PREFIX="PBMMAccel-"
 export ACCELERATOR_STATE_MACHINE_NAME="PBMMAccel-MainStateMachine_sm"
 
 # Make sure initial-setup-lambdas and all custom resources are built
-pnpm install
+pnpm install --frozen-lockfile
 
 pnpx cdk --require-approval never $@

src/core/cdk/cdk.sh

@@ -181,7 +181,7 @@ async function main() {
             nodejs: 12,
           },
           // The flag '--unsafe-perm' is necessary to run pnpm scripts in Docker
-          commands: ['npm install --global pnpm', 'pnpm install --unsafe-perm'],
+          commands: ['npm install --global pnpm', 'pnpm install --unsafe-perm --frozen-lockfile'],
         },
         build: {
           commands: [

src/installer/cdk/src/index.ts

@@ -184,7 +184,7 @@ function installPackageManagerCommands(packageManager: PackageManager) {
 function installDependenciesCommands(packageManager: PackageManager) {
   if (packageManager === 'pnpm') {
     // The flag '--unsafe-perm' is necessary to run pnpm scripts in Docker
-    return ['pnpm install --unsafe-perm'];
+    return ['pnpm install --unsafe-perm --frozen-lockfile'];
   }
   throw new Error(`Unknown package manager ${packageManager}`);
 }