chore: restore package-lock.json without exposing internal registry URLs

Author: yogeshchoudhary147

.github/actions/build/action.yml

@@ -15,10 +15,11 @@ runs:
       uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node }}
+        cache: npm
 
     - name: Install dependencies
       shell: bash
-      run: npm i
+      run: npm ci
 
     - name: Build package
       shell: bash

.github/actions/framework/action.yml

@@ -31,6 +31,7 @@ runs:
       uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node }}
+        cache: npm
 
     - name: Restore build artifacts
       uses: actions/cache/restore@v3
@@ -40,7 +41,7 @@ runs:
 
     - name: Install dependencies
       shell: bash
-      run: npm i
+      run: npm ci
 
     - name: Create application
       shell: bash

.github/actions/npm-publish/action.yml

@@ -21,14 +21,15 @@ runs:
       uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node-version }}
+        cache: npm
 
     - name: Update npm
       shell: bash
       run: npm install -g npm@11.10.0
 
     - name: Install dependencies
       shell: bash
-      run: npm i --include=dev
+      run: npm ci
 
     - name: Build package
       if: inputs.require-build == 'true'

.github/workflows/cross-browser.yml

@@ -43,9 +43,10 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.NODE_VERSION }}
+          cache: npm
 
       - name: Install dependencies
-        run: npm i --include=dev
+        run: npm ci
 
       - name: Run cross-browser tests
         uses: cypress-io/github-action@fa4a118725a8f001170d49631ea89e5d66fee626 # v7.4.1

.github/workflows/sca_scan.yml

@@ -10,7 +10,7 @@ jobs:
   snyk-cli:
     uses: auth0/devsecops-tooling/.github/workflows/sca-scan.yml@main
     with:
-      pre-scan-commands: "npm install"
+      pre-scan-commands: "npm ci"
       additional-arguments: "--exclude=README.md"
       node-version: 24
     secrets: inherit

.github/workflows/snyk.yml

@@ -35,7 +35,7 @@ jobs:
         with:
           ref: ${{ github.event.pull_request.head.sha || github.ref }}
 
-      - run: npm install
+      - run: npm ci
 
       - uses: snyk/actions/node@9adf32b1121593767fc3c057af55b55db032dc04 # pin@1.0.0
         env:

.github/workflows/test.yml

@@ -63,6 +63,7 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.NODE_VERSION }}
+          cache: npm
 
       - name: Restore build artifacts
         uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
@@ -92,6 +93,7 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.NODE_VERSION }}
+          cache: npm
 
       - name: Restore build artifacts
         uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0

.gitignore

@@ -10,7 +10,6 @@ cypress.env.json
 .idea
 test-results
 yarn.lock
-package-lock.json
 .DS_Store
 release-tmp*
 bundle-stats

.npmrc

@@ -1 +1,2 @@
 ignore-scripts=true
+omit-lockfile-registry-resolved=true

Makefile

@@ -2,7 +2,7 @@
 
 install:
 	@echo "Running install..."
-	npm install
+	npm ci
 
 lint:
 	@echo "Running lint..."