Unpin npm but specify npm as packageManager in package.json to fix dependabot issues
#1989
pull_request_opened.yml
on: pull_request_target
automation
3s