Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: preserve sha1 integrity and auto detect lockfile #10

Merged
merged 3 commits into from
Dec 3, 2024

Conversation

asos-danielc
Copy link
Contributor

Issue

Fixes #9

Also improves support for private NPM registries (such as Azure Artifacts) which does not support anything but sha1 integrity hashes, as well as auto detection of lockfile and additional eslint 9 dependency support.

Details

Brief summary of PR purpose and code changes.

  • bug: added --preserve-integrity flag to prevent removal of integrity hash when sha1 is used due to private repositories such as Azure Artifacts not supporting anything other than sha1.
  • feat: removed need for --lockfile flag if a yarn.lock or package-lock.json exists. Defaults to yarn.lock if not found. You can still specify a lockfile if you wish.
  • chore: updated eslint-plugin-import to ^2.31.0 for eslint 9 support

CheckList

  • PR starts with [ISSUE_ID].
  • Has been tested (where required) before merge to main.

…y hash when `sha1` is used due to private repositories such as Azure Artifacts not supporting anything other than `sha1`.

feat: removed need for `--lockfile` flag if a `yarn.lock` or `package-lock.json` exists. Defaults to `yarn.lock` if not found. You can still specify a lockfile if you wish.

chore: updated eslint-plugin-import to ^2.31.0 for eslint 9 support
README.md Show resolved Hide resolved
src/index.js Outdated Show resolved Hide resolved
Copy link
Member

@asos-tomp asos-tomp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🦾

@asos-danielc asos-danielc merged commit fd95b77 into main Dec 3, 2024
3 checks passed
@asos-danielc asos-danielc deleted the bug/9-prevent-sha1-integrity-removal branch December 3, 2024 11:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Ability to disable the sha1 integrity removal (npm package manager)
2 participants