chore: secure frontend build toolchain

2026-07-14 11:49:12 +02:00
parent d7eadbc6ca
commit 68ee228f1b
6 changed files with 315 additions and 157 deletions
@@ -0,0 +1,19 @@
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parents[2]
+
+
+def test_frontend_toolchain_stays_on_audited_vite_and_node_versions() -> None:
+    package = json.loads((ROOT / "frontend" / "package.json").read_text(encoding="utf-8"))
+    lock = json.loads((ROOT / "frontend" / "package-lock.json").read_text(encoding="utf-8"))
+
+    assert package["engines"]["node"] == "^20.19.0 || >=22.12.0"
+    assert package["devDependencies"]["vite"] == "^7.3.6"
+    assert package["devDependencies"]["@vitejs/plugin-react"] == "^5.2.0"
+    assert lock["packages"]["node_modules/vite"]["version"] == "7.3.6"
+    assert lock["packages"]["node_modules/esbuild"]["version"] == "0.28.1"
+