Pin npm version in workflows

Author: lseppala

.github/workflows/dependency-submission-example.yml

@@ -12,7 +12,12 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@v3
       - uses: actions/setup-node@v3
-      - run: npm install npm@latest -g
+      # As of 2023-02-22, the ubuntu-latest image uses npm v8.3.1. This version
+      # has a bug that prevents loading dependency-submission-toolkit in the
+      # 'example/' project. npm v8.4.1 (same version in Codespace created on
+      # same date) is known to work. Not pinned to latest to avoid
+      # reproducibility issues.
+      - run: npm install [email protected] -g
       - name: Install NPM dependencies
         run: npm ci
       - name: Run all NPM build/test actions

.github/workflows/test.yml

@@ -14,7 +14,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - run: npm version
+      # As of 2023-02-22, the ubuntu-latest image uses npm v8.3.1. This version
+      # has a bug that prevents loading dependency-submission-toolkit in the
+      # 'example/' project. npm v8.4.1 (same version in Codespace created on
+      # same date) is known to work. Not pinned to latest to avoid
+      # reproducibility issues.
+      - run: npm install [email protected] -g
       - name: Install NPM dependencies
         run: npm ci
       - run: npm install