From b88251bb583c429f7b6c8a42a141e5a184395cc1 Mon Sep 17 00:00:00 2001 From: Ross Kaffenberger Date: Tue, 31 Mar 2020 21:35:27 -0400 Subject: [PATCH] Add deployment note in README It's recommended to use `yarn install --frozen-lockfile` in a deployment context prior to compiling assets for production. This practice may help offset potential concerns with the removal of the yarn integrity check, at least in production environemnts. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 0db4c2089..9f23c98e1 100644 --- a/README.md +++ b/README.md @@ -604,6 +604,7 @@ Webpacker::Compiler.watched_paths << 'bower_components' Webpacker hooks up a new `webpacker:compile` task to `assets:precompile`, which gets run whenever you run `assets:precompile`. If you are not using Sprockets, `webpacker:compile` is automatically aliased to `assets:precompile`. Similar to sprockets both rake tasks will compile packs in production mode but will use `RAILS_ENV` to load configuration from `config/webpacker.yml` (if available). +When compiling assets for production on a remote server, such as a continuous integration environment, it's recommended to use `yarn install --frozen-lockfile` to install NPM packages on the remost host to ensure that the installed packages match the `yarn.lock` file. ## Docs