Do not upgrade locked dependencies during build.
This is only necessary to initialize the buf.lock file, once the
file exists, a regular "buf build" appears to pull them in.
Change-Id: I86d7734f8d6897bc30a6c9edd220eb51628be50c
Switch to "npm ci". This forces npm to use only dependencies explicitly
pinned in the lockfile and prevents changes.
Change-Id: I59f560bd38b1073a389024696fa4642101bb8c82
- update buf to latest to support ts-proto plugin
- add NodeJS dev dependency for web-proto codegen
Change-Id: I881f9da7461d5d4ff28a64304a2adc33037598d1
...except for libp2p, which broke compatibility
between go-libp2p and go-libp2p-core:
https://github.com/libp2p/go-libp2p-core/issues/168
I explicitly updated all transitive dependencies using
go get -u ./..., so the top-level go.mod file grew to include those.
Leo
Hendrik Hofstadt
jschuldt
Justin Schuldt
Stanisław Drozd
Leopold Schabel