chore(deps): lock file maintenance #1445

	name: ci
	on:
	push:
	branches:
	- "**"

	defaults:
	run:
	# NOTE: A bit stricter than the default bash options used by GitHub Actions
	# (bash --noprofile --norc -e -o pipefail {0})
	shell: bash --noprofile --norc -euo pipefail {0}

	# NOTE: Set concurrency for the current workflow to 1
	concurrency: ci-${{ github.ref }}-${{ github.workflow }}

	jobs:
	build-and-release:
	timeout-minutes: 60
	runs-on: ubuntu-24.04
	permissions:
	contents: write
	pull-requests: write
	issues: write
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- uses: capralifecycle/actions-lib/check-runtime-dependencies@7887a32ad872a79a8e00817659a30876f0a8f1be # v1.5.5

	- uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
	with:
	node-version: 20

	- uses: capralifecycle/actions-lib/configure-npm@7887a32ad872a79a8e00817659a30876f0a8f1be # v1.5.5

	- name: install dependencies
	run: npm ci

	- name: lint
	run: npm run lint

	- name: prepare
	run: npm run test

	- name: verify cdk snapshots
	run: npm run snapshots && git status __snapshots__ && git add __snapshots__ --intent-to-add && git diff --exit-code __snapshots__

	- name: conditionally semantic release
	if: ${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }}
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_TOKEN: ${{ secrets.SHARED_NPMJS_TOKEN }}
	run: npm run semantic-release

Provide feedback