build: Add and publish npm package lockfile

.github/workflows/integrate.yml

@@ -47,9 +47,8 @@ jobs:
 
       - name: Install dependencies
         if: steps.cacheNpm.outputs.cache-hit != 'true'
-        run: |
-          npm update --no-save
-          npm update --save-dev --no-save
+        run: npm ci
+
       - name: Unit tests (AWS SDK v2)
         # Some tests depend on TTY support, which is missing in GA runner
         # Workaround taken from https://github.com/actions/runner/issues/241#issuecomment-577360161
@@ -93,9 +92,8 @@ jobs:
 
       - name: Install dependencies
         if: steps.cacheNpm.outputs.cache-hit != 'true'
-        run: |
-          npm update --no-save
-          npm update --save-dev --no-save
+        run: npm ci
+
       - name: Unit tests
         run: npm test -- -b
 
@@ -123,9 +121,8 @@ jobs:
 
       - name: Install dependencies
         if: steps.cacheNpm.outputs.cache-hit != 'true'
-        run: |
-          npm update --no-save
-          npm update --save-dev --no-save
+        run: npm ci
+
       - name: Unit tests
         # Some tests depend on TTY support, which is missing in GA runner
         # Workaround taken from https://github.com/actions/runner/issues/241#issuecomment-577360161

.github/workflows/publish.yml

@@ -30,9 +30,7 @@ jobs:
 
       - name: Install dependencies
         if: steps.cacheNpm.outputs.cache-hit != 'true'
-        run: |
-          npm update --no-save
-          npm update --save-dev --no-save
+        run: npm ci
 
       # Store the name of the release
       # See https://stackoverflow.com/questions/58177786/get-the-current-pushed-tag-in-github-actions
@@ -85,16 +83,17 @@ jobs:
       # - We've pushed tag manually before `main` build finalized
       - name: Install dependencies
         if: steps.cacheNpm.outputs.cache-hit != 'true'
-        run: |
-          npm update --no-save
-          npm update --save-dev --no-save
+        run: npm ci
 
       # Store the name of the release
       # See https://stackoverflow.com/questions/58177786/get-the-current-pushed-tag-in-github-actions
       - run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
 
       - run: npm version $RELEASE_VERSION --no-git-tag-version
 
+      - name: Generate shrinkwrap lockfile
+        run: npm shrinkwrap
+
       - name: Publish new version
         # Note: Setting NODE_AUTH_TOKEN as job|workspace wide env var won't work
         #       as it appears actions/setup-node sets own value

.github/workflows/validate.yml

@@ -49,9 +49,8 @@ jobs:
 
       - name: Install dependencies
         if: steps.cacheNpm.outputs.cache-hit != 'true'
-        run: |
-          npm update --no-save
-          npm update --save-dev --no-save
+        run: npm ci
+
       - name: Validate formatting
         run: npm run prettier-check:updated
       - name: Validate lint rules
@@ -108,9 +107,8 @@ jobs:
 
       - name: Install dependencies
         if: steps.cacheNpm.outputs.cache-hit != 'true'
-        run: |
-          npm update --no-save
-          npm update --save-dev --no-save
+        run: npm ci
+
       - name: Unit tests
         run: npm test -- -b
 
@@ -140,9 +138,8 @@ jobs:
 
       - name: Install dependencies
         if: steps.cacheNpm.outputs.cache-hit != 'true'
-        run: |
-          npm update --no-save
-          npm update --save-dev --no-save
+        run: npm ci
+
       - name: Unit tests
         # Some tests depend on TTY support, which is missing in GA runner
         # Workaround taken from https://github.com/actions/runner/issues/241#issuecomment-577360161

.gitignore

@@ -2,7 +2,6 @@
 /dist
 /node_modules
 npm-debug.log
-/package-lock.json
 /yarn.lock
 **/.DS_Store
 bun.lockb