fix(deps): pin template systeminformation to 5.31.7 for JFrog cooldown

[MarioCadenas]

Problem

The Install template dependencies step fails with E403 in both CI jobs that build the template artifact:

• PR Template Artifact (ci.yml) on PRs
• template-artifact (prepare-release.yml) on main

npm error 403 Forbidden - GET https://databricks.jfrog.io/.../systeminformation/-/systeminformation-5.31.11.tgz
... blocked by jfrog packages curation service ... {7d-cooldown, Package version is 6 days old}

Both jobs run npm install (not npm ci) on a fresh copy of the template. That re-resolves the transitive requirement systeminformation@^5.31.6 (pulled in by @databricks/appkit → @opentelemetry/instrumentation-host-metrics@0.2.0) to the newest published version, 5.31.11. JFrog's curation service blocks packages younger than 7 days, so the download 403s.

This is not a one-off: because the step re-resolves to latest on every run, it breaks again on any fresh systeminformation release inside its 7-day cooldown window. The monorepo itself is unaffected — its pnpm lock pins 5.31.7 and CI installs with --frozen-lockfile.

Fix

Pin the transitive dep via the template's existing overrides block (same mechanism already used for vite/@opentelemetry/core) to 5.31.7 — the version AppKit is built/tested against and which JFrog already serves.

• template/package.json — add "systeminformation": "5.31.7" to overrides. prepare-template-artifact.ts copies package.json (overrides included) into the install dir before npm install, so this is what unblocks CI.
• template/package-lock.json — update the committed entry 5.31.11 → 5.31.7 (integrity taken from the monorepo pnpm lock) so the source snapshot stays consistent.

Verification

• tools/check-template-deps.ts → passes (pin check only inspects dependencies/devDependencies).
• tools/check-template-lock-registry.ts → passes (public npm registry only).

Note: this pins systeminformation for scaffolded apps until someone bumps it — acceptable for a telemetry transitive dep and consistent with the other pinned overrides.

[github-actions]

🔬  Run evals on this PR  ·  Go to Evals Monitor →