https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40778 --- Comment #1 from Paul Derscheid <paul.derscheid@lmscloud.de> --- Created attachment 189192 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=189192&action=edit Bug 40778: Pin Node.js dependencies to exact resolved versions - Replace all caret ranges (^) in package.json with exact versions - 37 dependencies pinned to exact versions - 32 devDependencies pinned to exact versions - 2 resolutions updated to exact versions - This ensures reproducible builds by locking dependencies to their currently resolved versions from yarn.lock - This also ensures that we don't update to a compromised package by accident just by running `yarn install` without `--frozen-lockfile` -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.