fix(package): pin dependencies and disable install scripts (#1103)

targos · web-flow · commit 35e5048f1b35 · 2025-09-24T08:33:18.000+02:00
Refs: nodejs/node-core-utils#976 Refs: nodejs/node-core-utils#975
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -24,7 +24,7 @@ jobs:
           node-version: lts/*
 
       - name: Install packages
-        run: npm install
+        run: npm ci
 
       - name: Run lint
         run: npm run lint
diff --git a/.github/workflows/test-module.yml b/.github/workflows/test-module.yml
@@ -56,7 +56,7 @@ jobs:
           node-version: ${{ matrix.node-version }}
 
       - name: Install packages
-        run: npm install
+        run: npm ci
 
       - name: Run CITGM
         run: node bin/citgm.js ${{ github.event.inputs.module }}
diff --git a/.npmrc b/.npmrc
@@ -1 +1 @@
-package-lock=false
+ignore-scripts=true
diff --git a/.prettierignore b/.prettierignore
@@ -1,2 +1,3 @@
 /README.md
+/npm-shrinkwrap.json
 /test/fixtures/custom-lookup-broken.json
diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json
diff --git a/package.json b/package.json

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`/README.md`
	`2`	`+/npm-shrinkwrap.json`
`2`	`3`	`/test/fixtures/custom-lookup-broken.json`