Pin dependencies

.github/workflows/codeql.yml

@@ -17,8 +17,6 @@ on:
   pull_request:
     # The branches below must be a subset of the branches above
     branches: ["main"]
-  schedule:
-    - cron: "0 0 * * 1"
 
 permissions:
   contents: read
@@ -71,7 +69,7 @@ jobs:
       - name: Build cpp
         if: matrix.language == 'cpp'
         run: |
-          npm install -g cmake-js@6.3.2 && npm install && npm test
+          npm ci --ignore-scripts && npm test
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun

.github/workflows/linter.yml

@@ -15,7 +15,7 @@ jobs:
           egress-policy: audit
 
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - run: npm install
+      - run: npm ci --ignore-scripts
       - name: check clang-format
         run: |
           git config clangFormat.binary node_modules/.bin/clang-format

.github/workflows/nodejs.yml

@@ -3,8 +3,6 @@ name: Node.js CI
 on:
   push:
   pull_request:
-  schedule:
-    - cron: "0 0 * * *"
 
 permissions:
   contents: read
@@ -29,8 +27,7 @@ jobs:
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: ${{ matrix.node-version }}
-      - run: npm install -g cmake-js@6.3.2
-      - run: npm install
+      - run: npm ci --ignore-scripts
       - name: Environment Information
         run: npx envinfo
       - name: Run Test
@@ -50,8 +47,7 @@ jobs:
       - run: node -p process.versions
       - name: Environment Information
         run: npx envinfo
-      - run: npm install -g cmake-js@6.3.2
-      - run: npm install
+      - run: npm ci --ignore-scripts
       - name: Environment Information
         run: npx envinfo
       - name: Run Test

.gitignore

@@ -4,7 +4,6 @@ Debug/
 Release/
 *.lock
 *.log
-package-lock.json
 npm-debug.log*
 
 .idea/