Pin npm hash

Author: trask

.github/renovate.json5

@@ -205,7 +205,7 @@
         '.github/workflows/**',
       ],
       matchStrings: [
-        'npm install (?<depName>[^@\\s]+)@(?<currentValue>[^\\s]+)',
+        'npm install (?<depName>[^@\\s]+)@(?<currentValue>[^\\s]+)(?:\\s+--integrity=(?<currentDigest>sha[0-9]+-.+?))?',
       ],
     },
     {

.github/workflows/assign-issue-owners.yml

@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install yaml
-        run: npm install yaml@2.8.1
+        run: npm install yaml@2.8.0 --integrity=sha512-4lLa/EcQCB0cJkyts+FpIRx5G/llPxfP6VQU5KByHEhLxY3IJCH0f0Hy1MHI8sClTvsIb8qwRJ6R/ZdlDJ/leQ==
 
       - name: Parse component label and assign owners
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0