diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 00000000..4af09b82
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,4 @@
+# CODEOWNERS — all files require review from the project maintainer.
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+*       @jonobr1
\ No newline at end of file
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 772977a0..c0c61e8d 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -29,7 +29,7 @@ jobs:
           cache: "npm"
 
       - name: Install dependencies
-        run: npm install
+        run: npm ci
 
       - name: Build
         run: npm run build
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 88d8844e..6f7e6eed 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -11,6 +11,6 @@ jobs:
       # checkout@v5
     - uses: jonobr1/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
     - name: Install modules
-      run: npm install
+      run: npm ci
     - name: Run ESLint
       run: npm run lint
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0a552ea4..2ed078e1 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -24,7 +24,7 @@ jobs:
 
       # Ensure npm 11.5.1 or later is installed
       - name: Update npm
-        run: npm install -g npm@latest
+        run: npm install -g npm@11.5.1
       - run: npm ci
       - run: npm run build --if-present
       # - run: npm test