From 5d8e019943649947384ef44db7b4deb03c64669d Mon Sep 17 00:00:00 2001 From: Tboy123-emm Date: Fri, 28 Aug 2026 12:35:57 +0100 Subject: [PATCH] fix: Update deploy workflow to use yarn instead of npm The repository is configured for yarn (yarn.lock, .yarnrc.yml) but the deploy workflow was using npm ci which requires package-lock.json and was failing during the frontend build phase. Changes: - Switch from npm ci to yarn install --immutable in deploy-frontend job - Update cache from npm to yarn - Add corepack enable step for Node 18 compatibility - Update generate-sbom job to use yarn consistently This fixes the build failure on commit 42362f3 where npm ci was failing with 'npm ci requires existing package-lock.json' Fixes: #385 (automated rollback incident) Related to: #236 (automated rollback feature) --- .github/workflows/deploy.yml | 16 +++++++++++----- 1 file changed, 11 insertions(+), 5 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index cc19748d..a658007c 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -23,13 +23,16 @@ jobs: uses: actions/setup-node@v7 with: node-version: '18.x' - cache: 'npm' + cache: 'yarn' + + - name: Enable Corepack + run: corepack enable - name: Install dependencies - run: npm ci + run: yarn install --immutable - name: Build frontend - run: npm run build + run: yarn run build env: CI: true @@ -299,13 +302,16 @@ jobs: uses: actions/setup-node@v7 with: node-version: '18.x' - cache: 'npm' + cache: 'yarn' - name: Enable Corepack run: corepack enable + - name: Install dependencies + run: yarn install --immutable + - name: Install CycloneDX tooling - run: npm install -g @cyclonedx/cyclonedx-npm + run: yarn global add @cyclonedx/cyclonedx-npm - name: Generate frontend SBOM (CycloneDX) run: |