chore: generate lockfile for audit, install speed

Author: wkillerud

.github/workflows/publish.yml

@@ -18,22 +18,17 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
 
-      - name: npm install
-        run: npm install
+      - run: npm ci
 
-      - name: npm lint
-        run: npm run lint
+      - run: npm run lint
 
-      - name: npm types
-        run: npm run types
+      - run: npm run types
 
-      - name: npm test
-        run: npm test
+      - run: npm test
 
-      - name: npx semantic-release
-        run: npx semantic-release
+      - run: npx semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/test.yml

@@ -13,7 +13,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macOS-latest, windows-latest]
-        node-version: [18, 20]
+        node-version: [20, 22]
     runs-on: ${{ matrix.os }}
 
     steps:
@@ -24,14 +24,10 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
 
-      - name: npm install
-        run: npm install
+      - run: npm ci
 
-      - name: npm lint
-        run: npm run lint
+      - run: npm run lint
 
-      - name: npm types
-        run: npm run types
+      - run: npm run types
 
-      - name: npm test
-        run: npm test
+      - run: npm test

.npmrc

@@ -1,2 +1,18 @@
-package-lock=false
+; Don't download optionalDependencies and peerDependencies.
+; Conflicting peerDependencies is a source of issues with npm install.
+; This setting forces us to be explicit about listing dependencies.
+omit=optional
+omit=peer
+
+registry=https://registry.npmjs.org
+
+; Prefer specifying dependency versions explicitly. Renovate will open
+; pull requests that handle most dependency updates for you.
 save-exact=true
+
+; Treat conflicting peerDependencies as a failure,
+; even if npm can reasonably guess an appropriate resolution.
+strict-peer-deps=true
+
+; Renovate will update packageManager for us.
+update-notifier=false