chore(ci): prevent publishing invalid SRIs (#2042)

* chore(ci): prevent publishing invalid SRIs

* chore: run npm ci in prebump release hook

Author: WilcoFiers

.circleci/config.yml

@@ -39,7 +39,7 @@ jobs:
       - checkout
       - <<: *set_npm_auth
       - <<: *restore_dependency_cache_unix
-      - run: npm install
+      - run: npm ci
       - save_cache:
           key: v8-cache-unix-{{ checksum "package.json" }}
           paths:
@@ -51,7 +51,7 @@ jobs:
       - checkout
       - <<: *set_npm_auth
       - <<: *restore_dependency_cache_win
-      - run: npm install
+      - run: npm ci
       - save_cache:
           key: v8-cache-win-{{ checksum "package.json" }}
           paths:
@@ -158,6 +158,7 @@ jobs:
       - <<: *set_npm_auth
       - <<: *restore_dependency_cache_unix
       - run: npm run build
+      - run: npm run sri-validate
       - run: npm publish
 
   # Create a GitHub release.

.gitignore

@@ -1,7 +1,7 @@
 # defaults
 node_modules
 npm-shrinkwrap.json
-package-lock.json
+doc/examples/*/package-lock.json
 .DS_Store
 .vscode
 

.npmrc

@@ -1,2 +1 @@
-package-lock=false
 registry=https://registry.npmjs.org