Merge pull request #1590 from Adyen/copilot/fix-automated-commits-security

fix: secure workflows with pinned actions and npm ci

Author: gcatanese

.github/workflows/format.yml

@@ -7,7 +7,7 @@ on:
 
 jobs:
   format:
-    if: ${{ github.event.commits != null && !startsWith(github.event.head_commit.message, 'style(fmt)') }}  
+    if: ${{ github.event.commits != null && !startsWith(github.event.head_commit.message, 'style(fmt)') }}
     permissions:
       contents: write
     runs-on: ubuntu-latest
@@ -19,7 +19,7 @@ jobs:
         with:
           node-version: 20.x
       - run: |
-          npm install 
+          npm ci --legacy-peer-deps
           npm run lint:fix
       - run: |
           git config user.name AdyenAutomationBot

.github/workflows/node-ci.yml

@@ -32,7 +32,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-node-
       - name: Install dependencies
-        run: npm install
+        run: npm ci --legacy-peer-deps
       - name: Lint code
         run: npm run lint:fix && npm run lint
 
@@ -58,6 +58,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-node-
       - name: Install dependencies
-        run: npm install
+        run: npm ci --legacy-peer-deps
       - name: Run tests with coverage
         run: npm run test:coverage

.github/workflows/npmpublish.yml

@@ -19,7 +19,7 @@ jobs:
         with:
           node-version: '18.x'
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: npm ci --legacy-peer-deps
       - name: Build package
         run: npm run build
       - name: Run tests
@@ -51,4 +51,3 @@ jobs:
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_ADYEN_NODE_API_LIBRARY_TOKEN }}
-        

.github/workflows/sonarcloud.yml

@@ -25,7 +25,7 @@ jobs:
           cache: 'npm'
 
       - name: Install dependencies
-        run: npm install
+        run: npm ci --legacy-peer-deps
 
       - name: Run tests with coverage
         run: npm run test:coverage

.gitignore

@@ -13,5 +13,4 @@ node_modules
 coverage/
 .env
 lib/
-build/
-package-lock.json
+build/