From 6473fd8556a0515bdad40576a30327d669d34069 Mon Sep 17 00:00:00 2001 From: Elton Tay Date: Wed, 29 Jul 2026 15:40:59 +0800 Subject: [PATCH] chore(deps): pin @supabase/ssr and @supabase/supabase-js to locked versions Both packages were specified as the floating "latest" tag, which is non-reproducible and can break builds when upstream publishes a new release. Pin each to the version already resolved in package-lock.json so this is a pin rather than an upgrade: @supabase/ssr latest -> 0.8.0 @supabase/supabase-js latest -> 2.93.3 The lockfile change is limited to the two matching specifier strings in the root dependencies block. A full `npm install` rewrite was rejected because it churns ~5900 unrelated lines; the same churn reproduces on an unmodified master, so it reflects pre-existing lockfile drift. ADLC-45 --- package-lock.json | 4 ++-- package.json | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 05de657..fc84cad 100644 --- a/package-lock.json +++ b/package-lock.json @@ -18,8 +18,8 @@ "@radix-ui/react-separator": "^1.1.7", "@radix-ui/react-slot": "^1.2.3", "@radix-ui/react-tooltip": "^1.2.8", - "@supabase/ssr": "latest", - "@supabase/supabase-js": "latest", + "@supabase/ssr": "0.8.0", + "@supabase/supabase-js": "2.93.3", "@tanstack/react-query": "^5.90.2", "@tanstack/react-table": "^8.21.3", "class-variance-authority": "^0.7.1", diff --git a/package.json b/package.json index 6cc83cf..a9430e7 100644 --- a/package.json +++ b/package.json @@ -23,8 +23,8 @@ "@radix-ui/react-separator": "^1.1.7", "@radix-ui/react-slot": "^1.2.3", "@radix-ui/react-tooltip": "^1.2.8", - "@supabase/ssr": "latest", - "@supabase/supabase-js": "latest", + "@supabase/ssr": "0.8.0", + "@supabase/supabase-js": "2.93.3", "@tanstack/react-query": "^5.90.2", "@tanstack/react-table": "^8.21.3", "class-variance-authority": "^0.7.1",