npm

npm ci fails with an out-of-sync lockfile: repair the dependency contract

Fix npm ci failures caused by package.json and package-lock.json disagreement without replacing a reproducible CI install with an uncontrolled npm install.