use --frozen-lockfile to ensure dependency integrity across builds

.travis.yml

@@ -25,7 +25,7 @@ services:
   - docker
 
 install:
-  - yarn install
+  - yarn install --frozen-lockfile
   - if [[ "$TRAVIS_OS_NAME" == "linux" ]]; then sudo apt-get update && sudo apt-get -y install snap squashfs-tools && sudo snap install snapcraft --classic; fi;
 
 script:

appveyor.yml

@@ -10,7 +10,7 @@ install:
   - ps: Install-Product node 19
 
 build_script:
-  - yarn
+  - yarn install --frozen-lockfile
   - yarn build
   - yarn prepare-release
   - yarn package appx

docker/cloneBuildAndTest.sh

@@ -5,7 +5,7 @@ git clone https://github.com/thomasnordquist/MQTT-Explorer.git /app
 cd /app
 git checkout travis-ui-tests
 
-yarn
+yarn install --frozen-lockfile
 yarn build
 
 yarn ui-test

scripts/prepare-release.ts

@@ -17,18 +17,18 @@ async function prepareRelease() {
 
   // Install app dependencies
   chdir('app')
-  await exec('yarn')
+  await exec('yarn', ['install', '--frozen-lockfile'])
   chdir('..')
 
   // Install electron dependencies
-  await exec('yarn')
+  await exec('yarn', ['install', '--frozen-lockfile'])
 
   // Build App and Electron backend
   await exec('yarn', ['build'])
 
   // Clean up
   await fs.remove('node_modules')
-  await exec('yarn', ['install', '--production']) // Do not clean up, electron version detection will fail otherwise
+  await exec('yarn', ['install', '--production', '--frozen-lockfile']) // Do not clean up, electron version detection will fail otherwise
   await fs.remove(path.join('app', 'node_modules'))
 
   chdir(originalDir)