William Woodruff 5960f93ec0 chore: use npm ci --ignore-scripts in CI and scripts (#276) ...

Replaces various uses of `npm install` with `npm ci --ignore-scripts`.
This should both be more hermetic (it'll always use the locked versions
rather than re-resolving) and will partially mitigate some build-time
code execution risk.

There should be no breakage risk, as the current dependency footprint is
small and shouldn't include anything that uses build scripts 🙂

Signed-off-by: William Woodruff <william@astral.sh>

2025-12-02 08:09:27 +01:00

..

codeql-analysis.yml

Bump github/codeql-action from 3.29.11 to 3.30.5 (#234)

2025-10-02 21:54:51 +02:00

release-drafter.yml

chore(ci): address all lint findings (#206)

2025-08-20 00:07:37 +02:00

test.yml

chore: use npm ci --ignore-scripts in CI and scripts (#276)

2025-12-02 08:09:27 +01:00

update-known-checksums.yml

chore: use npm ci --ignore-scripts in CI and scripts (#276)

2025-12-02 08:09:27 +01:00

update-major-minor-tags.yml

chore(ci): address all lint findings (#206)

2025-08-20 00:07:37 +02:00