Fix npm pinning (again)

Author: trask

.github/package-lock.json

@@ -0,0 +1,9 @@
+{
+  "name": "workflows",
+  "version": "1.0.0",
+  "description": "Dependencies for GitHub Action workflows",
+  "private": true,
+  "dependencies": {
+    "yaml": "2.8.1"
+  }
+}

.github/package.json

@@ -23,7 +23,8 @@ jobs:
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
 
       - name: Install yaml dependency used below
-        run: npm install [email protected] --integrity=sha512-lcYcMxX2PO9XMGvAJkJ3OsNMw+/7FKes7/hgerGUYWIoWu5j/+YQqcZr5JnPZWzOsEBgMbSbiSTn/dv/69Mkpw==
+        run: npm ci
+        working-directory: .github
 
       - name: Parse component label and assign owners
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0

.github/workflows/assign-issue-owners.yml

@@ -56,3 +56,6 @@ bin
 
 # Gradle build scans
 build-scan.txt
+
+# Node
+node_modules