Pin npm hash

Author: trask

.github/renovate.json5

@@ -205,8 +205,9 @@
         '.github/workflows/**',
       ],
       matchStrings: [
-        'npm install (?<depName>[^@\\s]+)@(?<currentValue>[^\\s]+)',
+        'npm install (?<depName>[^@\\s]+)@(?<currentValue>[^\\s]+)(?:\\s+--integrity=(?<currentDigest>sha\\d+-[A-Za-z0-9+/]+=*))?',
       ],
+      autoReplaceStringTemplate: 'npm install {{depName}}@{{newValue}}{{#if newDigest}} --integrity={{newDigest}}{{/if}}',
     },
     {
       customType: 'regex',

.github/workflows/assign-issue-owners.yml

@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install yaml
-        run: npm install yaml@2.8.1
+        run: npm install yaml@2.8.0 --integrity=sha512-4lLa/EcQCB0cJkyts+FpIRx5G/llPxfP6VQU5KByHEhLxY3IJCH0f0Hy1MHI8sClTvsIb8qwRJ6R/ZdlDJ/leQ==
 
       - name: Parse component label and assign owners
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0