From 302d04a3ad13137abbe8a77833f66a79d756775c Mon Sep 17 00:00:00 2001
From: Christoph Reiter <reiter.christoph@gmail.com>
Date: Wed, 16 Feb 2022 14:14:58 +0100
Subject: [PATCH] CI: Always pass "--frozen-lockfile" to yarn install

We don't want yarn to update the lock file on install which
wouldn't be reproducible.
---
 .gitlab-ci.yml        | 6 +++---
 .gitlab-ci/deploy.php | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index d116bf13..94f97a6d 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -16,13 +16,13 @@ stages:
 test:
   stage: test
   script:
-    - yarn install
+    - yarn install --frozen-lockfile
     - yarn run test
 
 linting:
   stage: test
   script:
-    - yarn install
+    - yarn install --frozen-lockfile
     - yarn run lint
 
 publish:
@@ -36,7 +36,7 @@ publish:
     # NPM_TOKEN needs to be a "Publish" token with 2FA disabled!
     # "Automation" tokens don't work with lerna (even if they would work with "npm publish")
     - echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > ~/.npmrc
-    - yarn install
+    - yarn install --frozen-lockfile
     - yarn run build
     - yarn run publish
 
diff --git a/.gitlab-ci/deploy.php b/.gitlab-ci/deploy.php
index 2f134048..1ce2babe 100644
--- a/.gitlab-ci/deploy.php
+++ b/.gitlab-ci/deploy.php
@@ -39,7 +39,7 @@ host('development')
 
 task('build', function () {
     $stage = get('stage');
-    runLocally("yarn install");
+    runLocally("yarn install --frozen-lockfile");
     runLocally("APP_ENV=$stage yarn run build");
 });
 
-- 
GitLab