archetech / archon / 33700669976

95%

push

github

fix(ci): Resolve changed lockfiles in the consistency check (#1029)

The check asserted only that a changed package.json came with a changed
lockfile. A lockfile can satisfy that and still be unusable: a regeneration
that prunes a nested version leaves an incompatible hoisted one behind, and
npm ci refuses to install it.

Six dependabot PRs are in that state (#1022). None of them touches a
package.json at all -- they change a lockfile alone -- so the existing step
finds no manifests and exits before looking at anything. The check passed
on lockfiles that cannot be installed, and the failure surfaced minutes
later in build-and-test and the image matrix instead.

Each changed lockfile is now resolved with npm ci --dry-run in its own
directory. Verified against the lockfile from #1015, which fails with
Missing: yaml@2.9.0 from lock file, and against the same file on main,
which resolves.

Refs #1022.


Claude-Session: https://claude.ai/code/session_01GYGMfX3foBcVqP7AQNXjWj

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

3880 of 4464 branches covered (86.92%)

Branch coverage included in aggregate %.

8528 of 8953 relevant lines covered (95.25%)

717.59 hits per line