community/prometheus: enforce npm lockfile

community/prometheus/APKBUILD

@@ -1,18 +1,20 @@
 # Maintainer: Pedro Lucas Porcellis <porcellis@eletrotupi.com>
 pkgname=prometheus
 pkgver=2.53.5 # LTS
-pkgrel=1
+pkgrel=2
 pkgdesc="The Prometheus monitoring system and time series database"
 url="https://github.com/prometheus/prometheus"
 arch="all"
 license="Apache-2.0"
 install="prometheus.pre-install"
 makedepends="go npm bash"
-options="!check"
+# net: npm, go dependencies
+options="net !check"
 subpackages="$pkgname-openrc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/prometheus/prometheus/archive/v$pkgver.tar.gz
 	prometheus.initd
 	prometheus.confd
+	enforce-npm-lockfile.patch
 	"
 
 # secfixes:
@@ -78,4 +80,5 @@ sha512sums="
 0a34e35a155e0323004208e2dabb6a99dd949a8afa3ae1964b4eba8342d2fac8dc8beb75ef1ed05839b9ac18647adb8c5b7648e68aeacbc650d5aecbbc5e9ba8  prometheus-2.53.5.tar.gz
 f4c222ba836f65d874fb30c62c7a55c27c4cedd6c473e39808a84bb7b4353c79c6ff3cefd3c4cf2ce966ce3a1234db3343cba397c83328ccc4e25072f683fcf5  prometheus.initd
 2e47a19e313cbf64f7a57a15de4bea959f5b1c307ef0c2b7f6b254f4abc5504b6ae31b02a1e11487fd82bc975f1cd8e1f3733393823b007f375acbdaf17af8ea  prometheus.confd
+b4eec73ba2921b0a7b7fa7dac9ea2e161f51fa98a4acb4bca3ccf11762e27f79fba3fb8e7a3b9b00ae9250398ca7267ef848955e7621e0c09c95a5ec04a2d74b  enforce-npm-lockfile.patch
 "

community/prometheus/enforce-npm-lockfile.patch

@@ -0,0 +1,11 @@
+--- ./Makefile.orig
++++ ./Makefile
+@@ -48,7 +48,7 @@
+ 
+ .PHONY: ui-install
+ ui-install:
+-	cd $(UI_PATH) && npm install
++	cd $(UI_PATH) && npm ci
+ 
+ .PHONY: ui-build
+ ui-build: