[Playwright] Improvements around node #347

New Issue

MrUnknownDE · 2026-04-05T20:57:57+02:00

MrUnknownDE commented

2026-04-05 20:57:57 +02:00

Originally created by @Timshel on 9/23/2025

In the context of the latest supply chain attack on npm (Shai-Hulud).

Use fixed dependencies version (since it's not deployed using a slightly out of date version is way less of a risk than installing a compromised minor update).
Replace npm install with npm ci --ignore-scripts to use the lock file (in the doc and docker image).

Additionally, updated the playwright docker image to trixie and backported the Keycloak update from the role PR.

*Originally created by @Timshel on 9/23/2025* In the context of the latest supply chain attack on npm (Shai-Hulud). - Use fixed dependencies version (since it's not deployed using a slightly out of date version is way less of a risk than installing a compromised minor update). - Replace `npm install` with `npm ci --ignore-scripts` to use the lock file (in the doc and docker image). Additionally, updated the playwright docker image to `trixie` and backported the Keycloak update from the role PR.

MrUnknownDE closed this issue

2026-04-05 20:57:57 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#347