Pin dependencies

.github/workflows/codeql.yml

@@ -71,7 +71,7 @@ jobs:
       - name: Build cpp
         if: matrix.language == 'cpp'
         run: |
-          npm install -g cmake-js@6.3.2 && npm install && npm test
+          npm ci --ignore-scripts && npm test
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun

.github/workflows/linter.yml

@@ -15,7 +15,7 @@ jobs:
           egress-policy: audit
 
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - run: npm install
+      - run: npm ci --ignore-scripts
       - name: check clang-format
         run: |
           git config clangFormat.binary node_modules/.bin/clang-format

.github/workflows/nodejs.yml

@@ -29,8 +29,7 @@ jobs:
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: ${{ matrix.node-version }}
-      - run: npm install -g cmake-js@6.3.2
-      - run: npm install
+      - run: npm ci --ignore-scripts
       - name: Environment Information
         run: npx envinfo
       - name: Run Test
@@ -50,8 +49,7 @@ jobs:
       - run: node -p process.versions
       - name: Environment Information
         run: npx envinfo
-      - run: npm install -g cmake-js@6.3.2
-      - run: npm install
+      - run: npm ci --ignore-scripts
       - name: Environment Information
         run: npx envinfo
       - name: Run Test

.gitignore

@@ -4,7 +4,6 @@ Debug/
 Release/
 *.lock
 *.log
-package-lock.json
 npm-debug.log*
 
 .idea/