Merge pull request #3564 from baywet/bugfix/package-lock

adds missing package lock for reproductible CI

.github/workflows/convert-examples-to-json.yaml

@@ -24,8 +24,12 @@ jobs:
     steps:
     - uses: actions/checkout@v2 # checkout repo content
 
+    - uses: actions/setup-node@v4 # setup Node.js
+      with:
+        node-version: '20.x'
+
     - name: Install dependencies
-      run: npm i
+      run: npm ci
 
     - name: convert YAML examples to JSON
       run: find examples/v3* -type f -name "*.yaml" | xargs node scripts/yaml2json/yaml2json.js

.github/workflows/respec.yaml

@@ -25,8 +25,12 @@ jobs:
       with:
         fetch-depth: 0
 
+    - uses: actions/setup-node@v4 # setup Node.js
+      with:
+        node-version: '20.x'
+
     - name: Install dependencies
-      run: npm i
+      run: npm ci
 
     - uses: actions/checkout@v2 # checkout gh-pages branch
       with:

.github/workflows/schema-tests.yaml

@@ -28,8 +28,8 @@ jobs:
         node-version: '20.x'
     - name: Install dependencies from main
       run: |
-        git checkout remotes/origin/main -- package.json
-        npm i
+        git checkout remotes/origin/main -- package.json package-lock.json
+        npm ci
     - name: Run tests
       run: npm run test
 

.gitignore

@@ -5,7 +5,6 @@
 target
 atlassian-ide-plugin.xml
 node_modules/
-package-lock.json
 deploy/
 history
 Gemfile.lock