From 010f3b39bf6b57c1a78943b9e8248289cc11dd5e Mon Sep 17 00:00:00 2001
From: Alain Perkaz <alain.perkaz@fortnox.se>
Date: Thu, 28 May 2026 08:57:22 +0200
Subject: [PATCH 1/2] Pin package versions (#174)

---
 package.json | 116 +++++++++++++++++++++++++--------------------------
 1 file changed, 58 insertions(+), 58 deletions(-)

diff --git a/package.json b/package.json
index f266c1e..1acf7f4 100644
--- a/package.json
+++ b/package.json
@@ -29,74 +29,74 @@
   },
   "devDependencies": {
     "@types/babel__core": "7.1.2",
-    "@types/babel__generator": "^7.6.2",
-    "@types/babel__template": "^7.0.3",
-    "@types/babel__traverse": "^7.0.15",
-    "@types/chalk": "^2.2.0",
+    "@types/babel__generator": "7.6.2",
+    "@types/babel__template": "7.0.3",
+    "@types/babel__traverse": "7.0.15",
+    "@types/chalk": "2.2.0",
     "@types/estree": "0.0.44",
-    "@types/jest": "^30.0.0",
-    "@types/koa": "^2.0.49",
-    "@types/koa-router": "^7.0.42",
-    "@types/mkdirp": "^0.5.2",
-    "@types/node": "^20.19.40",
-    "@types/node-fetch": "^1.6.7",
+    "@types/jest": "30.0.0",
+    "@types/koa": "2.0.49",
+    "@types/koa-router": "7.0.42",
+    "@types/mkdirp": "0.5.2",
+    "@types/node": "20.19.40",
+    "@types/node-fetch": "1.6.9",
     "@types/ora": "1.3.1",
-    "@types/readline-sync": "^1.4.2",
-    "@types/serialize-javascript": "^1.5.0",
-    "@types/tmp": "^0.0.33",
-    "@types/walk": "^2.3.0",
-    "@types/yargs": "^17.0.35",
-    "babel-core": "^7.0.0-bridge.0",
-    "babel-plugin-react-compiler": "^19.1.0-rc.2",
-    "husky": "^0.14.3",
-    "jest": "^30.4.2",
-    "lint-staged": "^17.0.4",
-    "prettier": "^1.19.1",
-    "ts-jest": "^29.4.9",
-    "ts-node": "^10.9.2",
-    "typescript": "^5.5.4"
+    "@types/readline-sync": "1.4.3",
+    "@types/serialize-javascript": "1.5.0",
+    "@types/tmp": "0.0.33",
+    "@types/walk": "2.3.0",
+    "@types/yargs": "17.0.35",
+    "babel-core": "7.0.0-bridge.0",
+    "babel-plugin-react-compiler": "19.1.0-rc.2",
+    "husky": "0.14.3",
+    "jest": "30.4.2",
+    "lint-staged": "17.0.4",
+    "prettier": "1.19.1",
+    "ts-jest": "29.4.9",
+    "ts-node": "10.9.2",
+    "typescript": "5.5.4"
   },
   "dependencies": {
-    "@babel/core": "^7.29.0",
-    "@babel/generator": "^7.29.1",
-    "@babel/plugin-proposal-decorators": "^7.29.0",
-    "@babel/plugin-proposal-export-default-from": "^7.27.1",
-    "@babel/preset-env": "^7.29.5",
-    "@babel/preset-flow": "^7.27.1",
-    "@babel/preset-react": "^7.28.5",
-    "@babel/preset-typescript": "^7.28.5",
-    "@babel/template": "^7.28.6",
+    "@babel/core": "7.29.0",
+    "@babel/generator": "7.29.1",
+    "@babel/plugin-proposal-decorators": "7.29.0",
+    "@babel/plugin-proposal-export-default-from": "7.27.1",
+    "@babel/preset-env": "7.29.5",
+    "@babel/preset-flow": "7.27.1",
+    "@babel/preset-react": "7.28.5",
+    "@babel/preset-typescript": "7.28.5",
+    "@babel/template": "7.28.6",
     "babel-plugin-ttag": "1.8.16",
-    "chalk": "^2.4.2",
-    "cross-spawn": "^7.0.6",
-    "estree-walker": "^2.0.1",
-    "gettext-parser": "^6.0.0",
+    "chalk": "2.4.2",
+    "cross-spawn": "7.0.6",
+    "estree-walker": "2.0.1",
+    "gettext-parser": "6.0.0",
     "glob": "13.0.0",
-    "hunspell-spellchecker": "^1.0.2",
-    "ignore": "^5.1.8",
-    "is-glob": "^4.0.3",
-    "koa": "^2.16.4",
-    "koa-body": "^7.0.1",
-    "koa-router": "^14.0.0",
-    "mkdirp": "^0.5.1",
-    "node-fetch": "^2.7.0",
-    "open": "^6.4.0",
+    "hunspell-spellchecker": "1.0.2",
+    "ignore": "5.1.8",
+    "is-glob": "4.0.3",
+    "koa": "2.16.4",
+    "koa-body": "7.0.1",
+    "koa-router": "14.0.0",
+    "mkdirp": "0.5.5",
+    "node-fetch": "2.7.0",
+    "open": "6.4.0",
     "ora": "1.3.0",
     "plural-forms": "0.5.3",
-    "readline-sync": "^1.4.7",
-    "serialize-javascript": "^7.0.5",
-    "svelte": "^5.55.5",
-    "tmp": "^0.2.5",
-    "vue-sfc-parser": "^0.1.2",
+    "readline-sync": "1.4.9",
+    "serialize-javascript": "7.0.5",
+    "svelte": "5.55.5",
+    "tmp": "0.2.5",
+    "vue-sfc-parser": "0.1.2",
     "walk": "2.3.9",
-    "yargs": "^16.2.0"
+    "yargs": "16.2.0"
   },
   "overrides": {
-    "@babel/runtime": "^7.29.1",
-    "ajv": "^6.15.0",
-    "brace-expansion": "^1.1.13",
-    "js-yaml": "^3.14.2",
-    "yaml": "^1.10.3"
+    "@babel/runtime": "7.29.2",
+    "ajv": "6.15.0",
+    "brace-expansion": "1.1.14",
+    "js-yaml": "3.14.2",
+    "yaml": "1.10.3"
   },
   "jest": {
     "snapshotFormat": {
@@ -104,7 +104,7 @@
       "printBasicPrototype": true
     },
     "transform": {
-      "^.+\\.tsx?$": "ts-jest"
+      ".+\\.tsx?$": "ts-jest"
     },
     "testRegex": "(/tests/.*|(\\.|/)(test|spec))\\.(tsx?)$",
     "testPathIgnorePatterns": [

From 5afb2123e27dd324c6d3183f97ef3257dd5564c2 Mon Sep 17 00:00:00 2001
From: Alain Perkaz <alain.perkaz@fortnox.se>
Date: Thu, 28 May 2026 08:57:36 +0200
Subject: [PATCH 2/2] Add deterministic package installs to the CI (#174)

---
 .github/workflows/ci.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 810f952..b521394 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,5 +16,5 @@ jobs:
         with:
           node-version: 24
 
-      - run: npm i
+      - run: npm ci
       - run: npm test