chore(deps): lock file maintenance #1076

	name: ci
	on:
	push:
	branches:
	- "**"

	defaults:
	run:
	# NOTE: A bit stricter than the default bash options used by GitHub Actions
	# (bash --noprofile --norc -e -o pipefail {0})
	shell: bash --noprofile --norc -euo pipefail {0}

	# NOTE: Set concurrency for the current workflow to 1
	concurrency: ci-${{ github.ref }}-${{ github.workflow }}

	jobs:
	build-and-release:
	timeout-minutes: 60
	runs-on: ubuntu-22.04
	permissions:
	contents: write
	pull-requests: write
	issues: write
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

	- uses: capralifecycle/actions-lib/check-runtime-dependencies@3dcbb3bf9fff687253cc5f1756238eda2fbc2fef # v1.5.3

	- uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
	with:
	node-version: 20

	- uses: capralifecycle/actions-lib/configure-npm@3dcbb3bf9fff687253cc5f1756238eda2fbc2fef # v1.5.3

	- name: install dependencies
	run: npm ci

	- name: lint
	run: npm run lint

	- name: prepare
	run: npm run test

	- name: verify cdk snapshots
	run: npm run snapshots && git status __snapshots__ && git add __snapshots__ --intent-to-add && git diff --exit-code __snapshots__

	- name: conditionally semantic release
	if: ${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }}
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_TOKEN: ${{ secrets.SHARED_NPMJS_TOKEN }}
	run: npm run semantic-release

Provide feedback