Use package-lock.json to pin conformance test dependencies (#1247)

Author: halter73

.github/workflows/ci-build-test.yml

@@ -16,6 +16,8 @@ on:
       - "*.props"
       - "Makefile"
       - "global.json"
+      - "package.json"
+      - "package-lock.json"
       - "src/**"
       - "tests/**"
       - "samples/**"
@@ -52,15 +54,8 @@ jobs:
       with:
         node-version: '20'
 
-    - name: 📦 Install dependencies for tests
-      run: npm install @modelcontextprotocol/server-everything@2025.12.18
-
-    - name: 📦 Install dependencies for tests
-      run: npm install @modelcontextprotocol/server-memory
-
-    # Keep version in sync with McpConformanceVersion in Directory.Packages.props
-    - name: 📦 Install conformance test runner
-      run: npm install @modelcontextprotocol/conformance@0.1.10
+    - name: 📦 Install pinned npm dependencies for tests
+      run: npm ci
 
     - name: 🏗️ Build
       run: make build CONFIGURATION=${{ matrix.configuration }}

.gitignore

@@ -34,6 +34,9 @@ _ReSharper*/
 **/packages/*
 !**/packages/build/
 
+# npm
+node_modules/
+
 # MSTest test Results
 [Tt]est[Rr]esult*/
 [Bb]uild[Ll]og.*

Directory.Packages.props

@@ -5,9 +5,6 @@
     <System9Version>9.0.11</System9Version>
     <System10Version>10.0.2</System10Version>
     <MicrosoftExtensionsVersion>10.2.0</MicrosoftExtensionsVersion>
-    <!-- Pin the conformance tester Node package version for CI stability.
-         Keep in sync npm install step at ci-build-test.yml -->
-    <McpConformanceVersion>0.1.10</McpConformanceVersion>
   </PropertyGroup>
 
   <!-- Product dependencies shared -->