Remove comments.

Apply suggestions from code review
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com>
2026-05-06 07:02:51 +02:00 · 2026-02-17 18:43:24 +01:00 · 2026-02-17 18:42:02 +01:00 · 2026-02-17 18:35:13 +01:00 · 2026-02-17 18:32:51 +01:00 · 2026-02-17 18:32:51 +01:00
10 changed files with 793 additions and 91 deletions
--- a/.github/workflows/ci-web.yml
+++ b/.github/workflows/ci-web.yml
@@ -12,6 +12,9 @@ on:
      - main
      - version-*

+env:
+  NPM_VERSION: "11.10.0"
+
 jobs:
  lint:
    runs-on: ubuntu-latest
@@ -37,9 +40,10 @@ jobs:
          node-version-file: ${{ matrix.project }}/package.json
          cache: "npm"
          cache-dependency-path: ${{ matrix.project }}/package-lock.json
+      - name: Install NPM
+        run: npm install -g npm@${{ env.NPM_VERSION }}
      - working-directory: ${{ matrix.project }}/
-        run: |
-          npm ci
+        run: npm ci
      - name: Generate API
        run: make gen-client-ts
      - name: Lint
@@ -54,6 +58,8 @@ jobs:
          node-version-file: web/package.json
          cache: "npm"
          cache-dependency-path: web/package-lock.json
+      - name: Install npm
+        run: npm install -g npm@${{ env.NPM_VERSION }}
      - working-directory: web/
        run: npm ci
      - name: Generate API
@@ -61,6 +67,7 @@ jobs:
      - name: build
        working-directory: web/
        run: npm run build
+
  ci-web-mark:
    if: always()
    needs:
@@ -71,6 +78,7 @@ jobs:
      - uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # release/v1
        with:
          jobs: ${{ toJSON(needs) }}
+
  test:
    needs:
      - ci-web-mark
@@ -82,6 +90,8 @@ jobs:
          node-version-file: web/package.json
          cache: "npm"
          cache-dependency-path: web/package-lock.json
+      - name: Install NPM
+        run: npm install -g npm@${{ env.NPM_VERSION }}
      - working-directory: web/
        run: npm ci
      - name: Generate API
--- a/.github/workflows/dependabot-lockfile-reconciliation.yml
+++ b/.github/workflows/dependabot-lockfile-reconciliation.yml
@@ -0,0 +1,72 @@
+---
+name: Dependabot - Lockfile Reconciliation
+
+on:
+  pull_request:
+    branches:
+      - main
+      - version-*
+
+permissions:
+  contents: write
+
+env:
+  NPM_VERSION: "11.10.0"
+
+jobs:
+  fix-lockfile:
+    if: github.actor == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - id: app-token
+        name: Generate app token
+        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+
+      - id: get-user-id
+        name: Get GitHub app user ID
+        run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
+        env:
+          GH_TOKEN: "${{ steps.app-token.outputs.token }}"
+
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+          fetch-depth: 0
+          token: "${{ steps.app-token.outputs.token }}"
+      - name: Detect changed lockfiles
+        id: detect
+        run: |
+          changed=$(git diff --name-only origin/${{ github.event.pull_request.base.ref }}...HEAD)
+
+          npm_matches=$(echo "$changed" | grep -E 'package(-lock)?\.json$' || true)
+          npm_dirs=$(echo "$npm_matches" | xargs -I{} dirname {} | sort -u)
+
+          echo "npm_dirs=$(echo "$npm_dirs" | tr '\n' ' ')" >> "$GITHUB_OUTPUT"
+
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v5
+        if: steps.detect.outputs.npm_dirs != ''
+        with:
+          node-version-file: package.json
+
+      - name: Install NPM
+        if: steps.detect.outputs.npm_dirs != ''
+        run: npm install -g npm@${{ env.NPM_VERSION }}
+
+      - name: Fix npm lockfiles
+        if: steps.detect.outputs.npm_dirs != ''
+        run: |
+          for dir in ${{ steps.detect.outputs.npm_dirs }}; do
+            echo "::group::npm - $dir"
+            node scripts/lint-lockfile.mjs --warn "$dir/" || true
+            echo "::endgroup::"
+          done
+      - name: Commit fixes
+        run: |
+          git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
+          git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com'
+          git add -A
+          git diff --staged --quiet || git commit -m "fix: regenerate lockfiles [dependabot skip]"
+          git push
--- a/8
+++ b/8
@@ -148,11 +148,11 @@ bump:  ## Bump authentik version. Usage: make bump version=20xx.xx.xx
 ifndef version
 	$(error Usage: make bump version=20xx.xx.xx )
 endif
-	$(eval current_version := $(shell cat ${PWD}/internal/constants/VERSION))
-	$(SED_INPLACE) 's/^version = ".*"/version = "$(version)"/' ${PWD}/pyproject.toml
-	$(SED_INPLACE) 's/^VERSION = ".*"/VERSION = "$(version)"/' ${PWD}/authentik/__init__.py
+	$(SED_INPLACE) 's/^version = ".*"/version = "$(version)"/' pyproject.toml
+	$(SED_INPLACE) 's/^VERSION = ".*"/VERSION = "$(version)"/' authentik/__init__.py
 	$(MAKE) gen-build gen-compose aws-cfn
-	$(SED_INPLACE) "s/\"${current_version}\"/\"$(version)\"/" ${PWD}/package.json ${PWD}/package-lock.json ${PWD}/web/package.json ${PWD}/web/package-lock.json
+	npm version --no-git-tag-version --allow-same-version $(version)
+	cd ${PWD}/web && npm version --no-git-tag-version --allow-same-version $(version)
 	echo -n $(version) > ${PWD}/internal/constants/VERSION

 #########################
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,6 +15,7 @@
                "@typescript-eslint/eslint-plugin": "^8.48.1",
                "@typescript-eslint/parser": "^8.48.1",
                "eslint": "^9.39.1",
+                "npm-run-all": "^4.1.5",
                "prettier": "^3.7.4",
                "prettier-plugin-packagejson": "^2.5.20",
                "typescript": "^5.9.3",
@@ -1677,6 +1678,15 @@
            "integrity": "sha512-0Drusm6MVRXSOJpGbaSVgcQsuB4hEkMpHXaVstcPmhu5LIedxs1xNK/nIxmQIU/RPC0+1/o0AVZfBTkTNJOdUw==",
            "license": "ISC"
        },
+        "node_modules/error-ex": {
+            "version": "1.3.4",
+            "resolved": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.4.tgz",
+            "integrity": "sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==",
+            "license": "MIT",
+            "dependencies": {
+                "is-arrayish": "^0.2.1"
+            }
+        },
        "node_modules/es-abstract": {
            "version": "1.24.0",
            "resolved": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.24.0.tgz",
@@ -3042,6 +3052,12 @@
                "hermes-estree": "0.25.1"
            }
        },
+        "node_modules/hosted-git-info": {
+            "version": "2.8.9",
+            "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.9.tgz",
+            "integrity": "sha512-mxIDAb9Lsm6DoOJ7xH+5+X4y1LU/4Hi50L9C5sIswK3JzULS4bwk1FvjdBgvYR4bzT4tuUQiC15FE2f5HbLvYw==",
+            "license": "ISC"
+        },
        "node_modules/ignore": {
            "version": "7.0.5",
            "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz",
@@ -3130,6 +3146,12 @@
                "url": "https://github.com/sponsors/ljharb"
            }
        },
+        "node_modules/is-arrayish": {
+            "version": "0.2.1",
+            "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz",
+            "integrity": "sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==",
+            "license": "MIT"
+        },
        "node_modules/is-async-function": {
            "version": "2.1.1",
            "resolved": "https://registry.npmjs.org/is-async-function/-/is-async-function-2.1.1.tgz",
@@ -3593,6 +3615,12 @@
            "integrity": "sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==",
            "license": "MIT"
        },
+        "node_modules/json-parse-better-errors": {
+            "version": "1.0.2",
+            "resolved": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz",
+            "integrity": "sha512-mrqyZKfX5EhL7hvqcV6WG1yYjnjeuYDzDhhcAAUrq8Po85NBQBJP+ZDUT75qZQ98IkUoBqdkExkukOU7Ts2wrw==",
+            "license": "MIT"
+        },
        "node_modules/json-schema-traverse": {
            "version": "0.4.1",
            "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
@@ -3666,6 +3694,21 @@
                "node": ">= 0.8.0"
            }
        },
+        "node_modules/load-json-file": {
+            "version": "4.0.0",
+            "resolved": "https://registry.npmjs.org/load-json-file/-/load-json-file-4.0.0.tgz",
+            "integrity": "sha512-Kx8hMakjX03tiGTLAIdJ+lL0htKnXjEZN6hk/tozf/WOuYGdZBJrZ+rCJRbVCugsjB3jMLn9746NsQIf5VjBMw==",
+            "license": "MIT",
+            "dependencies": {
+                "graceful-fs": "^4.1.2",
+                "parse-json": "^4.0.0",
+                "pify": "^3.0.0",
+                "strip-bom": "^3.0.0"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
        "node_modules/locate-path": {
            "version": "6.0.0",
            "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz",
@@ -3742,6 +3785,14 @@
                "node": ">= 0.4"
            }
        },
+        "node_modules/memorystream": {
+            "version": "0.3.1",
+            "resolved": "https://registry.npmjs.org/memorystream/-/memorystream-0.3.1.tgz",
+            "integrity": "sha512-S3UwM3yj5mtUSEfP41UZmt/0SCoVYUcU1rkXv+BQ5Ig8ndL4sPoJNBUJERafdPb5jjHJGuMgytgKvKIf58XNBw==",
+            "engines": {
+                "node": ">= 0.10.0"
+            }
+        },
        "node_modules/minimatch": {
            "version": "9.0.5",
            "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
@@ -3796,6 +3847,12 @@
            "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==",
            "license": "MIT"
        },
+        "node_modules/nice-try": {
+            "version": "1.0.5",
+            "resolved": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz",
+            "integrity": "sha512-1nh45deeb5olNY7eX82BkPO7SSxR5SSYJiPTrTdFUVYwAl8CKMA5N9PjTYkHiRjisVcxcQ1HXdLhx2qxxJzLNQ==",
+            "license": "MIT"
+        },
        "node_modules/node-cache": {
            "version": "5.1.2",
            "resolved": "https://registry.npmjs.org/node-cache/-/node-cache-5.1.2.tgz",
@@ -3814,6 +3871,212 @@
            "integrity": "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA==",
            "license": "MIT"
        },
+        "node_modules/normalize-package-data": {
+            "version": "2.5.0",
+            "resolved": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz",
+            "integrity": "sha512-/5CMN3T0R4XTj4DcGaexo+roZSdSFW/0AOOTROrjxzCG1wrWXEsGbRKevjlIL+ZDE4sZlJr5ED4YW0yqmkK+eA==",
+            "license": "BSD-2-Clause",
+            "dependencies": {
+                "hosted-git-info": "^2.1.4",
+                "resolve": "^1.10.0",
+                "semver": "2 || 3 || 4 || 5",
+                "validate-npm-package-license": "^3.0.1"
+            }
+        },
+        "node_modules/normalize-package-data/node_modules/semver": {
+            "version": "5.7.2",
+            "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
+            "integrity": "sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==",
+            "license": "ISC",
+            "bin": {
+                "semver": "bin/semver"
+            }
+        },
+        "node_modules/npm-run-all": {
+            "version": "4.1.5",
+            "resolved": "https://registry.npmjs.org/npm-run-all/-/npm-run-all-4.1.5.tgz",
+            "integrity": "sha512-Oo82gJDAVcaMdi3nuoKFavkIHBRVqQ1qvMb+9LHk/cF4P6B2m8aP04hGf7oL6wZ9BuGwX1onlLhpuoofSyoQDQ==",
+            "license": "MIT",
+            "dependencies": {
+                "ansi-styles": "^3.2.1",
+                "chalk": "^2.4.1",
+                "cross-spawn": "^6.0.5",
+                "memorystream": "^0.3.1",
+                "minimatch": "^3.0.4",
+                "pidtree": "^0.3.0",
+                "read-pkg": "^3.0.0",
+                "shell-quote": "^1.6.1",
+                "string.prototype.padend": "^3.0.0"
+            },
+            "bin": {
+                "npm-run-all": "bin/npm-run-all/index.js",
+                "run-p": "bin/run-p/index.js",
+                "run-s": "bin/run-s/index.js"
+            },
+            "engines": {
+                "node": ">= 4"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/ansi-styles": {
+            "version": "3.2.1",
+            "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz",
+            "integrity": "sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==",
+            "license": "MIT",
+            "dependencies": {
+                "color-convert": "^1.9.0"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/brace-expansion": {
+            "version": "1.1.12",
+            "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+            "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+            "license": "MIT",
+            "dependencies": {
+                "balanced-match": "^1.0.0",
+                "concat-map": "0.0.1"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/chalk": {
+            "version": "2.4.2",
+            "resolved": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz",
+            "integrity": "sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==",
+            "license": "MIT",
+            "dependencies": {
+                "ansi-styles": "^3.2.1",
+                "escape-string-regexp": "^1.0.5",
+                "supports-color": "^5.3.0"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/color-convert": {
+            "version": "1.9.3",
+            "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz",
+            "integrity": "sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==",
+            "license": "MIT",
+            "dependencies": {
+                "color-name": "1.1.3"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/color-name": {
+            "version": "1.1.3",
+            "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz",
+            "integrity": "sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==",
+            "license": "MIT"
+        },
+        "node_modules/npm-run-all/node_modules/cross-spawn": {
+            "version": "6.0.6",
+            "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.6.tgz",
+            "integrity": "sha512-VqCUuhcd1iB+dsv8gxPttb5iZh/D0iubSP21g36KXdEuf6I5JiioesUVjpCdHV9MZRUfVFlvwtIUyPfxo5trtw==",
+            "license": "MIT",
+            "dependencies": {
+                "nice-try": "^1.0.4",
+                "path-key": "^2.0.1",
+                "semver": "^5.5.0",
+                "shebang-command": "^1.2.0",
+                "which": "^1.2.9"
+            },
+            "engines": {
+                "node": ">=4.8"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/escape-string-regexp": {
+            "version": "1.0.5",
+            "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz",
+            "integrity": "sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=0.8.0"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/has-flag": {
+            "version": "3.0.0",
+            "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz",
+            "integrity": "sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=4"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/minimatch": {
+            "version": "3.1.2",
+            "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
+            "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+            "license": "ISC",
+            "dependencies": {
+                "brace-expansion": "^1.1.7"
+            },
+            "engines": {
+                "node": "*"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/path-key": {
+            "version": "2.0.1",
+            "resolved": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz",
+            "integrity": "sha512-fEHGKCSmUSDPv4uoj8AlD+joPlq3peND+HRYyxFz4KPw4z926S/b8rIuFs2FYJg3BwsxJf6A9/3eIdLaYC+9Dw==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=4"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/semver": {
+            "version": "5.7.2",
+            "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
+            "integrity": "sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==",
+            "license": "ISC",
+            "bin": {
+                "semver": "bin/semver"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/shebang-command": {
+            "version": "1.2.0",
+            "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz",
+            "integrity": "sha512-EV3L1+UQWGor21OmnvojK36mhg+TyIKDh3iFBKBohr5xeXIhNBcx8oWdgkTEEQ+BEFFYdLRuqMfd5L84N1V5Vg==",
+            "license": "MIT",
+            "dependencies": {
+                "shebang-regex": "^1.0.0"
+            },
+            "engines": {
+                "node": ">=0.10.0"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/shebang-regex": {
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz",
+            "integrity": "sha512-wpoSFAxys6b2a2wHZ1XpDSgD7N9iVjg29Ph9uV/uaP9Ex/KXlkTZTeddxDPSYQpgvzKLGJke2UU0AzoGCjNIvQ==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=0.10.0"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/supports-color": {
+            "version": "5.5.0",
+            "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz",
+            "integrity": "sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==",
+            "license": "MIT",
+            "dependencies": {
+                "has-flag": "^3.0.0"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
+        "node_modules/npm-run-all/node_modules/which": {
+            "version": "1.3.1",
+            "resolved": "https://registry.npmjs.org/which/-/which-1.3.1.tgz",
+            "integrity": "sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==",
+            "license": "ISC",
+            "dependencies": {
+                "isexe": "^2.0.0"
+            },
+            "bin": {
+                "which": "bin/which"
+            }
+        },
        "node_modules/object-assign": {
            "version": "4.1.1",
            "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
@@ -4014,6 +4277,19 @@
                "node": ">=6"
            }
        },
+        "node_modules/parse-json": {
+            "version": "4.0.0",
+            "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-4.0.0.tgz",
+            "integrity": "sha512-aOIos8bujGN93/8Ox/jPLh7RwVnPEysynVFE+fQZyg6jKELEHwzgKdLRFHUgXJL6kylijVSBC4BvN9OmsB48Rw==",
+            "license": "MIT",
+            "dependencies": {
+                "error-ex": "^1.3.1",
+                "json-parse-better-errors": "^1.0.1"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
        "node_modules/parse5": {
            "version": "6.0.1",
            "resolved": "https://registry.npmjs.org/parse5/-/parse5-6.0.1.tgz",
@@ -4062,6 +4338,18 @@
            "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==",
            "license": "MIT"
        },
+        "node_modules/path-type": {
+            "version": "3.0.0",
+            "resolved": "https://registry.npmjs.org/path-type/-/path-type-3.0.0.tgz",
+            "integrity": "sha512-T2ZUsdZFHgA3u4e5PfPbjd7HDDpxPnQb5jN0SrDsjNSuVXHJqtwTnWqG0B1jZrgmJ/7lj1EmVIByWt1gxGkWvg==",
+            "license": "MIT",
+            "dependencies": {
+                "pify": "^3.0.0"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
        "node_modules/picocolors": {
            "version": "1.1.1",
            "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -4080,6 +4368,27 @@
                "url": "https://github.com/sponsors/jonschlinkert"
            }
        },
+        "node_modules/pidtree": {
+            "version": "0.3.1",
+            "resolved": "https://registry.npmjs.org/pidtree/-/pidtree-0.3.1.tgz",
+            "integrity": "sha512-qQbW94hLHEqCg7nhby4yRC7G2+jYHY4Rguc2bjw7Uug4GIJuu1tvf2uHaZv5Q8zdt+WKJ6qK1FOI6amaWUo5FA==",
+            "license": "MIT",
+            "bin": {
+                "pidtree": "bin/pidtree.js"
+            },
+            "engines": {
+                "node": ">=0.10"
+            }
+        },
+        "node_modules/pify": {
+            "version": "3.0.0",
+            "resolved": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz",
+            "integrity": "sha512-C3FsVNH1udSEX48gGX1xfvwTWfsYWj5U+8/uK15BGzIGrKoUpghX8hWZwa/OFnakBiiVNmBvemTJR5mcy7iPcg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=4"
+            }
+        },
        "node_modules/possible-typed-array-names": {
            "version": "1.1.0",
            "resolved": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz",
@@ -4205,6 +4514,20 @@
            "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==",
            "license": "MIT"
        },
+        "node_modules/read-pkg": {
+            "version": "3.0.0",
+            "resolved": "https://registry.npmjs.org/read-pkg/-/read-pkg-3.0.0.tgz",
+            "integrity": "sha512-BLq/cCO9two+lBgiTYNqD6GdtK8s4NpaWrl6/rCO9w0TUS8oJl7cmToOZfRYllKTISY6nt1U7jQ53brmKqY6BA==",
+            "license": "MIT",
+            "dependencies": {
+                "load-json-file": "^4.0.0",
+                "normalize-package-data": "^2.3.2",
+                "path-type": "^3.0.0"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
        "node_modules/reflect.getprototypeof": {
            "version": "1.0.10",
            "resolved": "https://registry.npmjs.org/reflect.getprototypeof/-/reflect.getprototypeof-1.0.10.tgz",
@@ -4468,6 +4791,18 @@
                "node": ">=8"
            }
        },
+        "node_modules/shell-quote": {
+            "version": "1.8.3",
+            "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.3.tgz",
+            "integrity": "sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
        "node_modules/side-channel": {
            "version": "1.1.0",
            "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
@@ -4576,6 +4911,38 @@
                "node": ">=0.10.0"
            }
        },
+        "node_modules/spdx-correct": {
+            "version": "3.2.0",
+            "resolved": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.2.0.tgz",
+            "integrity": "sha512-kN9dJbvnySHULIluDHy32WHRUu3Og7B9sbY7tsFLctQkIqnMh3hErYgdMjTYuqmcXX+lK5T1lnUt3G7zNswmZA==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "spdx-expression-parse": "^3.0.0",
+                "spdx-license-ids": "^3.0.0"
+            }
+        },
+        "node_modules/spdx-exceptions": {
+            "version": "2.5.0",
+            "resolved": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz",
+            "integrity": "sha512-PiU42r+xO4UbUS1buo3LPJkjlO7430Xn5SVAhdpzzsPHsjbYVflnnFdATgabnLude+Cqu25p6N+g2lw/PFsa4w==",
+            "license": "CC-BY-3.0"
+        },
+        "node_modules/spdx-expression-parse": {
+            "version": "3.0.1",
+            "resolved": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz",
+            "integrity": "sha512-cbqHunsQWnJNE6KhVSMsMeH5H/L9EpymbzqTQ3uLwNCLZ1Q481oWaofqH7nO6V07xlXwY6PhQdQ2IedWx/ZK4Q==",
+            "license": "MIT",
+            "dependencies": {
+                "spdx-exceptions": "^2.1.0",
+                "spdx-license-ids": "^3.0.0"
+            }
+        },
+        "node_modules/spdx-license-ids": {
+            "version": "3.0.22",
+            "resolved": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.22.tgz",
+            "integrity": "sha512-4PRT4nh1EImPbt2jASOKHX7PB7I+e4IWNLvkKFDxNhJlfjbYlleYQh285Z/3mPTHSAK/AvdMmw5BNNuYH8ShgQ==",
+            "license": "CC0-1.0"
+        },
        "node_modules/stop-iteration-iterator": {
            "version": "1.1.0",
            "resolved": "https://registry.npmjs.org/stop-iteration-iterator/-/stop-iteration-iterator-1.1.0.tgz",
@@ -4662,6 +5029,24 @@
                "url": "https://github.com/sponsors/ljharb"
            }
        },
+        "node_modules/string.prototype.padend": {
+            "version": "3.1.6",
+            "resolved": "https://registry.npmjs.org/string.prototype.padend/-/string.prototype.padend-3.1.6.tgz",
+            "integrity": "sha512-XZpspuSB7vJWhvJc9DLSlrXl1mcA2BdoY5jjnS135ydXqLoqhs96JjDtCkjJEQHvfqZIp9hBuBMgI589peyx9Q==",
+            "license": "MIT",
+            "dependencies": {
+                "call-bind": "^1.0.7",
+                "define-properties": "^1.2.1",
+                "es-abstract": "^1.23.2",
+                "es-object-atoms": "^1.0.0"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
        "node_modules/string.prototype.repeat": {
            "version": "1.0.0",
            "resolved": "https://registry.npmjs.org/string.prototype.repeat/-/string.prototype.repeat-1.0.0.tgz",
@@ -5083,6 +5468,16 @@
                "node": ">= 4"
            }
        },
+        "node_modules/validate-npm-package-license": {
+            "version": "3.0.4",
+            "resolved": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz",
+            "integrity": "sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "spdx-correct": "^3.0.0",
+                "spdx-expression-parse": "^3.0.0"
+            }
+        },
        "node_modules/validator": {
            "version": "13.15.23",
            "resolved": "https://registry.npmjs.org/validator/-/validator-13.15.23.tgz",
--- a/package.json
+++ b/package.json
@@ -2,6 +2,11 @@
    "name": "@goauthentik/authentik",
    "version": "2026.5.0-rc1",
    "private": true,
+    "scripts": {
+        "lint": "run-s lint:spellcheck lint:lockfile",
+        "lint:lockfile": "./scripts/lint-lockfile.mjs",
+        "lint:spellcheck": "echo 'Skipping spellcheck linting'"
+    },
    "type": "module",
    "dependencies": {
        "@eslint/js": "^9.39.1",
@@ -11,6 +16,7 @@
        "@typescript-eslint/eslint-plugin": "^8.48.1",
        "@typescript-eslint/parser": "^8.48.1",
        "eslint": "^9.39.1",
+        "npm-run-all": "^4.1.5",
        "prettier": "^3.7.4",
        "prettier-plugin-packagejson": "^2.5.20",
        "typescript": "^5.9.3",
--- a/scripts/lint-lockfile.mjs
+++ b/scripts/lint-lockfile.mjs
@@ -0,0 +1,289 @@
+#!/usr/bin/env node
+/**
+ * @file Lints the package-lock.json file to ensure it is in sync with package.json.
+ *
+ * Usage:
+ *   lint-lockfile [options] [directory]
+ *
+ * Options:
+ *   --warn    Report issues as warnings instead of failing. The lockfile is
+ *             still regenerated on disk, but the process exits 0.
+ *
+ * Exit codes:
+ *   0  Lockfile is in sync (or --warn was passed)
+ *   1  Unexpected error
+ *   2  Lockfile drift detected
+ */
+
+import * as assert from "node:assert/strict";
+import { exec } from "node:child_process";
+import * as fs from "node:fs/promises";
+import { findPackageJSON } from "node:module";
+import * as path from "node:path";
+import { isDeepStrictEqual, promisify } from "node:util";
+
+//#region Utilities
+
+const execAsync = promisify(exec);
+
+const prefix = "(lint:lockfile)";
+const logger = {
+    info: console.info.bind(console, "INFO", prefix),
+    error: console.error.bind(console, "ERROR", prefix),
+    warn: console.warn.bind(console, "WARN", prefix),
+};
+
+/**
+ * Find the nearest directory containing both package.json and package-lock.json,
+ * starting from the given directory and walking upward.
+ *
+ * @param {string} start The directory to start searching from.
+ * @returns {Promise<string>} The path to the package-lock.json file.
+ * @throws {Error} If no co-located package.json and package-lock.json are found.
+ */
+async function findNearestLockfile(start) {
+    let currentDir = start;
+
+    while (currentDir !== path.dirname(currentDir)) {
+        const packageJSONPath = path.join(currentDir, "package.json");
+        const lockfilePath = path.join(currentDir, "package-lock.json");
+
+        try {
+            await Promise.all([fs.access(packageJSONPath), fs.access(lockfilePath)]);
+            return lockfilePath;
+        } catch {
+            // Continue searching up the directory tree
+        }
+
+        currentDir = path.dirname(currentDir);
+    }
+
+    throw new Error(`No co-located package.json and package-lock.json found above ${start}`);
+}
+
+/**
+ * @param {string} jsonPath
+ * @returns {Promise<Record<string, unknown>>}
+ */
+function loadJSON(jsonPath) {
+    return fs
+        .readFile(jsonPath, "utf-8")
+        .then(JSON.parse)
+        .catch((cause) => {
+            throw new Error(`Failed to load JSON file at ${jsonPath}`, { cause });
+        });
+}
+
+/**
+ * Checks whether the given file has uncommitted changes in git.
+ *
+ * @param {string} filePath
+ * @returns {Promise<{ clean: boolean, available: boolean }>}
+ */
+async function gitStatus(filePath) {
+    try {
+        const { stdout } = await execAsync(`git status --porcelain ${filePath}`);
+        return { clean: !stdout.trim(), available: true };
+    } catch {
+        return { clean: false, available: false };
+    }
+}
+
+/**
+ * @typedef {{
+ *   warnOnly: boolean;
+ *   cwd: string;
+ * }} Options
+ */
+
+/**
+ * @param {string[]} argv
+ * @returns {Options}
+ */
+function parseArgs(argv) {
+    const args = argv.slice(2);
+    let warnOnly = false;
+    /** @type {string[]} */
+    const positional = [];
+
+    for (const arg of args) {
+        if (arg === "--warn") {
+            warnOnly = true;
+        } else if (arg.startsWith("-")) {
+            logger.error(`Unknown option: ${arg}`);
+            process.exit(1);
+        } else {
+            positional.push(arg);
+        }
+    }
+
+    // `INIT_CWD` is present only if the script is run via npm.
+    const initCWD = process.env.INIT_CWD || process.cwd();
+
+    const cwd = (positional.length ? path.resolve(initCWD, positional[0]) : initCWD) + path.sep;
+
+    return { warnOnly, cwd };
+}
+
+//#endregion
+
+/**
+ * Exit code when lockfile drift is detected (distinct from general errors)
+ */
+const EXIT_DRIFT = 2;
+
+/**
+ * @param {Options} options
+ * @returns {Promise<string[]>} The list of issues detected.
+ */
+async function run({ warnOnly, cwd }) {
+    /** @type {string[]} */
+    const issues = [];
+
+    /**
+     * Records an issue. In strict mode, throws immediately.
+     * In warn mode, collects the message for later reporting.
+     *
+     * @param {boolean} ok
+     * @param {string} message
+     */
+    const check = (ok, message) => {
+        if (ok) return;
+
+        if (warnOnly) {
+            issues.push(message);
+            return;
+        }
+
+        assert.fail(message);
+    };
+
+    /**
+     * Checks deep equality of two values. In strict mode, throws if they are not equal.
+     * In warn mode, records an issue instead.
+     *
+     * @param {unknown} a
+     * @param {unknown} b
+     * @param {string} message
+     */
+    const checkDeep = (a, b, message) => {
+        if (warnOnly) {
+            if (!isDeepStrictEqual(a, b)) {
+                issues.push(message);
+            }
+
+            return;
+        }
+
+        assert.deepStrictEqual(a, b, message);
+    };
+
+    logger.info(`Checking lockfile integrity in: ${cwd}`);
+
+    // MARK: Locate files
+
+    const resolvedPath = import.meta.resolve(cwd);
+    const packageJSONPath = findPackageJSON(resolvedPath);
+
+    assert.ok(
+        packageJSONPath,
+        "Could not find package.json in the current directory or any parent directories",
+    );
+
+    const packageDir = path.dirname(packageJSONPath);
+    const lockfilePath = await findNearestLockfile(packageDir);
+    const lockfileDir = path.dirname(lockfilePath);
+    const isWorkspace = lockfileDir !== packageDir;
+
+    const before = {
+        lockfile: await loadJSON(lockfilePath),
+        package: await loadJSON(packageJSONPath),
+    };
+
+    logger.info(`package.json: ${packageJSONPath} (${before.package.name})`);
+    logger.info(`package-lock.json: ${lockfilePath}${isWorkspace ? " (workspace root)" : ""}`);
+
+    // MARK: Uncommitted changes
+
+    const packageStatus = await gitStatus(packageJSONPath);
+    const lockfileStatus = await gitStatus(lockfilePath);
+
+    if (!packageStatus.available || !lockfileStatus.available) {
+        logger.warn("Git is not available; skipping uncommitted change detection.");
+    } else {
+        check(packageStatus.clean, `package.json has uncommitted changes: ${packageJSONPath}`);
+
+        check(lockfileStatus.clean, `package-lock.json has uncommitted changes: ${lockfilePath}`);
+    }
+
+    // MARK: Regenerate
+
+    logger.info("Running npm install --package-lock-only...");
+
+    const npmVersion = await execAsync("npm --version").then(({ stdout }) => stdout.trim());
+
+    logger.info(`Detected npm version: ${npmVersion}`);
+
+    await execAsync("npm install --package-lock-only", {
+        cwd: lockfileDir,
+    }).catch((cause) => {
+        throw new Error("npm install --package-lock-only failed", { cause });
+    });
+
+    logger.info("npm install complete.");
+
+    const after = {
+        lockfile: await loadJSON(lockfilePath),
+        package: await loadJSON(packageJSONPath),
+    };
+
+    // MARK: Compare
+
+    assert.deepStrictEqual(
+        before.package,
+        after.package,
+        `package.json was unexpectedly modified during lockfile check: ${packageJSONPath}`,
+    );
+
+    checkDeep(
+        before.lockfile,
+        after.lockfile,
+        `package-lock.json is out of sync with package.json`,
+    );
+
+    return issues;
+}
+
+const options = parseArgs(process.argv);
+
+run(options)
+    .then((issues) => {
+        if (issues.length) {
+            logger.warn(`⚠️  ${issues.length} issue(s) detected:`);
+
+            for (const issue of issues) {
+                logger.warn(`  - ${issue}`);
+            }
+
+            if (options.warnOnly) {
+                logger.warn(
+                    "The lockfile on disk has been regenerated. Review and commit the changes.",
+                );
+                process.exit(EXIT_DRIFT);
+            }
+        } else {
+            logger.info("✅ Lockfile is in sync.");
+        }
+    })
+    .catch((error) => {
+        const message = error instanceof Error ? error.message : String(error);
+        const cause = error instanceof Error && error.cause instanceof Error ? error.cause : null;
+
+        logger.error(`❌ ${message}`);
+
+        if (cause) {
+            logger.error("Caused by:", cause);
+        }
+
+        process.exit(1);
+    });
--- a/web/package.json
+++ b/web/package.json
@@ -14,7 +14,7 @@
        "lint": "eslint --fix .",
        "lint-check": "eslint --max-warnings 0 .",
        "lint:imports": "knip --config scripts/knip.config.ts",
-        "lint:lockfile": "wireit",
+        "lint:lockfile": "../scripts/lint-lockfile.mjs",
        "lint:types": "wireit",
        "lit-analyse": "wireit",
        "precommit": "wireit",
@@ -262,11 +262,6 @@
                "build-locales"
            ]
        },
-        "lint:lockfile": {
-            "__comment": "The lockfile-lint package does not have an option to ensure resolved hashes are set everywhere",
-            "shell": true,
-            "command": "sh ./scripts/lint-lockfile.sh package-lock.json"
-        },
        "lit-analyse": {
            "command": "lit-analyzer src"
        },
@@ -319,5 +314,17 @@
        "rapidoc": {
            "@apitools/openapi-parser": "0.0.37"
        }
+    },
+    "devEngines": {
+        "runtime": {
+            "name": "node",
+            "onFail": "warn",
+            "version": ">=24"
+        },
+        "packageManager": {
+            "name": "npm",
+            "onFail": "warn",
+            "version": ">=11.6.2"
+        }
    }
 }
--- a/web/scripts/lint-lockfile.sh
+++ b/web/scripts/lint-lockfile.sh
@@ -1,21 +0,0 @@
-#!/usr/bin/env bash
-
-if ! command -v jq  >/dev/null 2>&1 ; then
-    echo "This check requires the jq program be installed."
-    echo "To install jq, visit"
-    echo "    https://jqlang.github.io/jq/"
-    exit 1
-fi
-
-CMD=$(jq -r '.packages | to_entries[] | select((.key | contains("node_modules")) and (.value | has("resolved") | not)) | .key' < "$1")
-
-if [ -n "$CMD" ]; then
-    echo "ERROR package-lock.json entries missing 'resolved' field:"
-    echo ""
-    # Shellcheck erroneously believes that shell string substitution can be used here, but that
-    # feature lacks a "start of line" discriminator.
-    # shellcheck disable=SC2001
-    echo "$CMD" | sed 's/^/    /g'
-    echo ""
-    exit 1
-fi    
--- a/website/package-lock.json
+++ b/website/package-lock.json
@@ -138,7 +138,6 @@
            "dependencies": {
                "@docusaurus/preset-classic": "^3.9.2",
                "@goauthentik/docusaurus-config": "^2.2.2",
-                "@iconify-json/logos": "^1.2.9",
                "@types/semver": "^7.7.1",
                "clsx": "^2.1.1",
                "fast-glob": "^3.3.3",
@@ -382,7 +381,6 @@
            "resolved": "https://registry.npmjs.org/@algolia/client-search/-/client-search-5.46.0.tgz",
            "integrity": "sha512-22SHEEVNjZfFWkFks3P6HilkR3rS7a6GjnCIqR22Zz4HNxdfT0FG+RE7efTcFVfLUkTTMQQybvaUcwMrHXYa7Q==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@algolia/client-common": "5.46.0",
                "@algolia/requester-browser-xhr": "5.46.0",
@@ -538,7 +536,6 @@
            "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.28.5.tgz",
            "integrity": "sha512-e7jT4DxYvIDLk1ZHmU/m/mB19rex9sv0c2ftBtjSBv+kVM/902eh0fINUzD7UwLLNR+jU585GxUJ8/EBfAM5fw==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@babel/code-frame": "^7.27.1",
                "@babel/generator": "^7.28.5",
@@ -2373,7 +2370,6 @@
                }
            ],
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=18"
            },
@@ -2396,7 +2392,6 @@
                }
            ],
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=18"
            }
@@ -2506,7 +2501,6 @@
            "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
            "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "cssesc": "^3.0.0",
                "util-deprecate": "^1.0.2"
@@ -2928,7 +2922,6 @@
            "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
            "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "cssesc": "^3.0.0",
                "util-deprecate": "^1.0.2"
@@ -3682,7 +3675,6 @@
            "resolved": "https://registry.npmjs.org/@docusaurus/core/-/core-3.9.2.tgz",
            "integrity": "sha512-HbjwKeC+pHUFBfLMNzuSjqFE/58+rLVKmOU3lxQrpsxLBOGosYco/Q0GduBb0/jEMRiyEqjNT/01rRdOMWq5pw==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@docusaurus/babel": "3.9.2",
                "@docusaurus/bundler": "3.9.2",
@@ -4002,7 +3994,6 @@
            "resolved": "https://registry.npmjs.org/@docusaurus/plugin-content-docs/-/plugin-content-docs-3.9.2.tgz",
            "integrity": "sha512-C5wZsGuKTY8jEYsqdxhhFOe1ZDjH0uIYJ9T/jebHwkyxqnr4wW0jTkB72OMqNjsoQRcb0JN3PcSeTwFlVgzCZg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@docusaurus/core": "3.9.2",
                "@docusaurus/logger": "3.9.2",
@@ -4271,7 +4262,6 @@
            "resolved": "https://registry.npmjs.org/@docusaurus/theme-common/-/theme-common-3.9.2.tgz",
            "integrity": "sha512-6c4DAbR6n6nPbnZhY2V3tzpnKnGL+6aOsLvFL26VRqhlczli9eWG0VDUNoCQEPnGwDMhPS42UhSAnz5pThm5Ag==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@docusaurus/mdx-loader": "3.9.2",
                "@docusaurus/module-type-aliases": "3.9.2",
@@ -4414,7 +4404,6 @@
            "resolved": "https://registry.npmjs.org/@docusaurus/utils/-/utils-3.9.2.tgz",
            "integrity": "sha512-lBSBiRruFurFKXr5Hbsl2thmGweAPmddhF3jb99U4EMDA5L+e5Y1rAkOS07Nvrup7HUMBDrCV45meaxZnt28nQ==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@docusaurus/logger": "3.9.2",
                "@docusaurus/types": "3.9.2",
@@ -4460,7 +4449,6 @@
            "resolved": "https://registry.npmjs.org/@docusaurus/utils-validation/-/utils-validation-3.9.2.tgz",
            "integrity": "sha512-l7yk3X5VnNmATbwijJkexdhulNsQaNDwoagiwujXoxFbWLcxHQqNQ+c/IAlzrfMMOfa/8xSBZ7KEKDesE/2J7A==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@docusaurus/logger": "3.9.2",
                "@docusaurus/utils": "3.9.2",
@@ -4970,15 +4958,6 @@
                "@iconify/types": "*"
            }
        },
-        "node_modules/@iconify-json/logos": {
-            "version": "1.2.10",
-            "resolved": "https://registry.npmjs.org/@iconify-json/logos/-/logos-1.2.10.tgz",
-            "integrity": "sha512-qxaXKJ6fu8jzTMPQdHtNxlfx6tBQ0jXRbHZIYy5Ilh8Lx9US9FsAdzZWUR8MXV8PnWTKGDFO4ZZee9VwerCyMA==",
-            "license": "CC0-1.0",
-            "dependencies": {
-                "@iconify/types": "*"
-            }
-        },
        "node_modules/@iconify-json/mdi": {
            "version": "1.2.3",
            "resolved": "https://registry.npmjs.org/@iconify-json/mdi/-/mdi-1.2.3.tgz",
@@ -6038,7 +6017,6 @@
            "resolved": "https://registry.npmjs.org/@rspack/core/-/core-1.6.7.tgz",
            "integrity": "sha512-tkd4nSzTf+pDa9OAE4INi/JEa93HNszjWy5C9+trf4ZCXLLHsHxHQFbzoreuz4Vv2PlCWajgvAdiPMV1vGIkuw==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@module-federation/runtime-tools": "0.21.6",
                "@rspack/binding": "1.6.7",
@@ -6283,7 +6261,6 @@
            "resolved": "https://registry.npmjs.org/@svgr/core/-/core-8.1.0.tgz",
            "integrity": "sha512-8QqtOQT5ACVlmsvKOJNEaWmRPmcojMOzCz4Hs2BGG/toAp/K38LcsMRyLp349glq5AzJbCEeimEoxaX6v/fLrA==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@babel/core": "^7.21.3",
                "@svgr/babel-preset": "8.1.0",
@@ -6388,7 +6365,6 @@
            "integrity": "sha512-Qd8eBPkUFL4eAONgGjycZXj1jFCBW8Fd+xF0PzdTlBCWQIV1xnUT7B93wUANtW3KGjl3TRcOyxwSx/u/jyKw/Q==",
            "hasInstallScript": true,
            "license": "Apache-2.0",
-            "peer": true,
            "dependencies": {
                "@swc/counter": "^0.1.3",
                "@swc/types": "^0.1.25"
@@ -7361,7 +7337,6 @@
            "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.7.tgz",
            "integrity": "sha512-MWtvHrGZLFttgeEj28VXHxpmwYbor/ATPYbBfSFZEIRK0ecCFLl2Qo55z52Hss+UV9CRN7trSeq1zbgx7YDWWg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "csstype": "^3.2.2"
            }
@@ -7558,7 +7533,6 @@
            "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.49.0.tgz",
            "integrity": "sha512-N9lBGA9o9aqb1hVMc9hzySbhKibHmB+N3IpoShyV6HyQYRGIhlrO5rQgttypi+yEeKsKI4idxC8Jw6gXKD4THA==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@typescript-eslint/scope-manager": "8.49.0",
                "@typescript-eslint/types": "8.49.0",
@@ -8038,7 +8012,6 @@
            "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz",
            "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==",
            "license": "MIT",
-            "peer": true,
            "bin": {
                "acorn": "bin/acorn"
            },
@@ -8133,7 +8106,6 @@
            "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
            "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "fast-deep-equal": "^3.1.1",
                "fast-json-stable-stringify": "^2.0.0",
@@ -8198,7 +8170,6 @@
            "resolved": "https://registry.npmjs.org/algoliasearch/-/algoliasearch-5.46.0.tgz",
            "integrity": "sha512-7ML6fa2K93FIfifG3GMWhDEwT5qQzPTmoHKCTvhzGEwdbQ4n0yYUWZlLYT75WllTGJCJtNUI0C1ybN4BCegqvg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@algolia/abtesting": "1.12.0",
                "@algolia/client-abtesting": "5.46.0",
@@ -8899,7 +8870,6 @@
                }
            ],
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "baseline-browser-mapping": "^2.9.0",
                "caniuse-lite": "^1.0.30001759",
@@ -9287,7 +9257,6 @@
            "resolved": "https://registry.npmjs.org/chevrotain/-/chevrotain-11.0.3.tgz",
            "integrity": "sha512-ci2iJH6LeIkvP9eJW6gpueU8cnZhv85ELY8w8WiFtNjMHA5ad6pQLaJo9mEly/9qUyCpvqX8/POVUTf18/HFdw==",
            "license": "Apache-2.0",
-            "peer": true,
            "dependencies": {
                "@chevrotain/cst-dts-gen": "11.0.3",
                "@chevrotain/gast": "11.0.3",
@@ -10121,7 +10090,6 @@
            "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
            "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "cssesc": "^3.0.0",
                "util-deprecate": "^1.0.2"
@@ -10441,7 +10409,6 @@
            "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.33.1.tgz",
            "integrity": "sha512-iJc4TwyANnOGR1OmWhsS9ayRS3s+XQ185FmuHObThD+5AeJCakAAbWv8KimMTt08xCCLNgneQwFp+JRJOr9qGQ==",
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=0.10"
            }
@@ -10851,7 +10818,6 @@
            "resolved": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz",
            "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==",
            "license": "ISC",
-            "peer": true,
            "engines": {
                "node": ">=12"
            }
@@ -11389,7 +11355,6 @@
            "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.11.0.tgz",
            "integrity": "sha512-wGgprdCvMalC0BztXvitD2hC04YffAvtsUn93JbGXYLAtCUO4xd17mCCZQxUOItiBwZvJScWo8NIvQMQ71rdpg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "fast-deep-equal": "^3.1.1",
                "json-schema-traverse": "^1.0.0",
@@ -12625,7 +12590,6 @@
            "resolved": "https://registry.npmjs.org/react-redux/-/react-redux-7.2.9.tgz",
            "integrity": "sha512-Gx4L3uM182jEEayZfRbI/G11ZpYdNAnBs70lFVMNdHJI76XYtR+7m0MN+eAs7UHBPhWXcnFPaS+9owSCJQHNpQ==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@babel/runtime": "^7.15.4",
                "@types/react-redux": "^7.1.20",
@@ -13298,7 +13262,6 @@
            "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.39.1.tgz",
            "integrity": "sha512-BhHmn2yNOFA9H9JmmIVKJmd288g9hrVRDkdoIgRCRuSySRUHH7r/DI6aAXW9T1WwUuY3DFgrcaqB+deURBLR5g==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@eslint-community/eslint-utils": "^4.8.0",
                "@eslint-community/regexpp": "^4.12.1",
@@ -20804,7 +20767,6 @@
            "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
            "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "fast-deep-equal": "^3.1.3",
                "fast-uri": "^3.0.1",
@@ -21444,7 +21406,6 @@
                }
            ],
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "nanoid": "^3.3.11",
                "picocolors": "^1.1.1",
@@ -22348,7 +22309,6 @@
            "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
            "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "cssesc": "^3.0.0",
                "util-deprecate": "^1.0.2"
@@ -22966,7 +22926,6 @@
            "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.7.4.tgz",
            "integrity": "sha512-v6UNi1+3hSlVvv8fSaoUbggEM5VErKmmpGA7Pl3HF8V6uKY7rvClBOJlH6yNwQtfTueNkGVpOv/mtWL9L4bgRA==",
            "license": "MIT",
-            "peer": true,
            "bin": {
                "prettier": "bin/prettier.cjs"
            },
@@ -22982,7 +22941,6 @@
            "resolved": "https://registry.npmjs.org/prettier-plugin-packagejson/-/prettier-plugin-packagejson-2.5.20.tgz",
            "integrity": "sha512-G8cowPh+QmJJECTZlrPDKWkVVcwrFjF2rGcw546w3N8blLoc4szSs8UUPfFVxHUNLUjiru71Ah83g1lZkeK9Bw==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "sort-package-json": "3.5.0",
                "synckit": "0.11.11"
@@ -23274,7 +23232,6 @@
            "resolved": "https://registry.npmjs.org/react/-/react-19.2.1.tgz",
            "integrity": "sha512-DGrYcCWK7tvYMnWh79yrPHt+vdx9tY+1gPZa7nJQtO/p8bLTDaHp4dzwEhQB7pZ4Xe3ok4XKuEPrVuc+wlpkmw==",
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=0.10.0"
            }
@@ -23294,7 +23251,6 @@
            "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.1.tgz",
            "integrity": "sha512-ibrK8llX2a4eOskq1mXKu/TGZj9qzomO+sNfO98M6d9zIPOEhlBkMkBUBLd1vgS0gQsLDBzA+8jJBVXDnfHmJg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "scheduler": "^0.27.0"
            },
@@ -23331,7 +23287,6 @@
            "resolved": "https://registry.npmjs.org/react-hook-form/-/react-hook-form-7.68.0.tgz",
            "integrity": "sha512-oNN3fjrZ/Xo40SWlHf1yCjlMK417JxoSJVUXQjGdvdRCU07NTFei1i1f8ApUAts+IVh14e4EdakeLEA+BEAs/Q==",
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=18.0.0"
            },
@@ -23392,7 +23347,6 @@
            "resolved": "https://registry.npmjs.org/@docusaurus/react-loadable/-/react-loadable-6.0.0.tgz",
            "integrity": "sha512-YMMxTUQV/QFSnbgrP3tjDzLHRg7vsbMn8e9HAa8o/1iXoiomo48b7sk/kkmWEuWNDPJVlKSJRB6Y2fHqdJk+SQ==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@types/react": "*"
            },
@@ -24115,7 +24069,6 @@
            "resolved": "https://registry.npmjs.org/react-router/-/react-router-5.3.4.tgz",
            "integrity": "sha512-Ys9K+ppnJah3QuaRiLxk+jDWOR1MekYQrlytiXxC1RyfbdsZkS5pvKAzCCr031xHixZwpnsYNT5xysdFHQaYsA==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@babel/runtime": "^7.12.13",
                "history": "^4.9.0",
@@ -24285,7 +24238,6 @@
            "resolved": "https://registry.npmjs.org/redux/-/redux-4.2.1.tgz",
            "integrity": "sha512-LAUYz4lc+Do8/g7aeRa8JkyDErK6ekstQaqWQrNRW//MY1TvCEpMtpTWvlQ+FPbWCx+Xixu/6SHt5N0HR+SB4w==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@babel/runtime": "^7.9.2"
            }
@@ -25015,7 +24967,6 @@
            "resolved": "https://registry.npmjs.org/sass/-/sass-1.96.0.tgz",
            "integrity": "sha512-8u4xqqUeugGNCYwr9ARNtQKTOj4KmYiJAVKXf2CTIivTCR51j96htbMKWDru8H5SaQWpyVgTfOF8Ylyf5pun1Q==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "chokidar": "^4.0.0",
                "immutable": "^5.0.2",
@@ -25141,7 +25092,6 @@
            "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
            "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "fast-deep-equal": "^3.1.3",
                "fast-uri": "^3.0.1",
@@ -26829,7 +26779,6 @@
            "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
            "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=12"
            },
@@ -26995,8 +26944,7 @@
            "version": "2.8.1",
            "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
            "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
-            "license": "0BSD",
-            "peer": true
+            "license": "0BSD"
        },
        "node_modules/type-check": {
            "version": "0.4.0",
@@ -27144,7 +27092,6 @@
            "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
            "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
            "license": "Apache-2.0",
-            "peer": true,
            "bin": {
                "tsc": "bin/tsc",
                "tsserver": "bin/tsserver"
@@ -27158,7 +27105,6 @@
            "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.49.0.tgz",
            "integrity": "sha512-zRSVH1WXD0uXczCXw+nsdjGPUdx4dfrs5VQoHnUWmv1U3oNlAKv4FUNdLDhVUg+gYn+a5hUESqch//Rv5wVhrg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@typescript-eslint/eslint-plugin": "8.49.0",
                "@typescript-eslint/parser": "8.49.0",
@@ -27900,7 +27846,6 @@
            "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.103.0.tgz",
            "integrity": "sha512-HU1JOuV1OavsZ+mfigY0j8d1TgQgbZ6M+J75zDkpEAwYeXjWSqrGJtgnPblJjd/mAyTNQ7ygw0MiKOn6etz8yw==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@types/eslint-scope": "^3.7.7",
                "@types/estree": "^1.0.8",
@@ -28739,7 +28684,6 @@
            "resolved": "https://registry.npmjs.org/zod/-/zod-4.1.13.tgz",
            "integrity": "sha512-AvvthqfqrAhNH9dnfmrfKzX5upOdjUVJYFqNSlkmGf64gRaTzlPwz99IHYnVs28qYAybvAlBV+H7pn0saFY4Ig==",
            "license": "MIT",
-            "peer": true,
            "funding": {
                "url": "https://github.com/sponsors/colinhacks"
            }
--- a/website/package.json
+++ b/website/package.json
@@ -11,7 +11,7 @@
        "docusaurus": "docusaurus",
        "lint": "eslint --fix .",
        "lint-check": "eslint --max-warnings 0 .",
-        "lint:lockfile": "echo 'Skipping lockfile linting'",
+        "lint:lockfile": "../scripts/lint-lockfile.mjs",
        "prettier": "prettier --write .",
        "prettier-check": "prettier --check .",
        "start": "npm start -w docs",
Author	SHA1	Message	Date
Teffen Ellis	204db0ce77	Remove comments.	2026-02-17 18:43:24 +01:00
Teffen Ellis	51ea88b2dc	Apply suggestions from code review Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com>	2026-02-17 18:42:02 +01:00
Teffen Ellis	5acb401b30	Fix newlines.	2026-02-17 18:35:13 +01:00
Teffen Ellis	49ed3fe30a	Install latest NPM	2026-02-17 18:32:51 +01:00
Teffen Ellis	477811373b	Log NPM version.	2026-02-17 18:32:51 +01:00
Teffen Ellis	a946b93c4e	Add dev engines.	2026-02-17 18:32:50 +01:00
Teffen Ellis	4a41e6513c	Clarify logs.	2026-02-17 18:32:50 +01:00
Teffen Ellis	112b5ed3b8	Bump package.json	2026-02-17 18:32:50 +01:00
Teffen Ellis	adedec8daf	Revise.	2026-02-17 18:32:50 +01:00
Teffen Ellis	f22cc47e68	Flesh out dependabot action.	2026-02-17 18:32:50 +01:00
Teffen Ellis	78b714bdf7	Flesh out.	2026-02-17 18:32:49 +01:00
Teffen Ellis	f0759cdee4	Flesh out lockfile linting script.	2026-02-17 18:32:49 +01:00
Teffen Ellis	390c73e46f	Revert "root: do not rely on npm cli for version bump (#20276 )" This reverts commit `68d4d6d346`.	2026-02-17 18:32:49 +01:00