fix(wishlist): use --frozen-lockfile for pnpm install

Without --frozen-lockfile, pnpm resolves newer transitive dependencies (e.g. http2-wrapper) that break the build. The upstream Dockerfile uses --frozen-lockfile to pin exact versions from the lockfile. Fixes #12867
2026-03-15 22:43:00 +01:00 · 2026-03-14 21:31:57 +01:00
2 changed files with 2 additions and 2 deletions
--- a/ct/wishlist.sh
+++ b/ct/wishlist.sh
@@ -46,7 +46,7 @@ function update_script() {

    msg_info "Updating Wishlist"
    cd /opt/wishlist
-    $STD pnpm install
+    $STD pnpm install --frozen-lockfile
    $STD pnpm svelte-kit sync
    $STD pnpm prisma generate
    sed -i 's|/usr/src/app/|/opt/wishlist/|g' $(grep -rl '/usr/src/app/' /opt/wishlist)
--- a/install/wishlist-install.sh
+++ b/install/wishlist-install.sh
@@ -30,7 +30,7 @@ cp .env.example .env
 sed -i "s|^ORIGIN=.*|ORIGIN=http://${LOCAL_IP}:3280|" /opt/wishlist/.env
 echo "" >>/opt/wishlist/.env
 echo "NODE_ENV=production" >>/opt/wishlist/.env
-$STD pnpm install
+$STD pnpm install --frozen-lockfile
 $STD pnpm svelte-kit sync
 $STD pnpm prisma generate
 sed -i 's|/usr/src/app/|/opt/wishlist/|g' $(grep -rl '/usr/src/app/' /opt/wishlist)