chore: use npm ci

Author: wkillerud

.github/workflows/publish.yml

@@ -28,7 +28,7 @@ jobs:
         with:
           node-version: 22
 
-      - run: npm install
+      - run: npm ci
 
       - run: npm test
 

.github/workflows/pull-request.yml

@@ -24,6 +24,6 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
 
-      - run: npm install
+      - run: npm ci
 
       - run: npm test

.npmrc

@@ -1 +1,18 @@
+; Don't download optionalDependencies and peerDependencies.
+; Conflicting peerDependencies is a source of issues with npm install.
+; This setting forces us to be explicit about listing dependencies.
+omit=optional
+omit=peer
+
 registry=https://registry.npmjs.org
+
+; Prefer specifying dependency versions explicitly. Renovate will open
+; pull requests that handle most dependency updates for you.
+save-exact=true
+
+; Treat conflicting peerDependencies as a failure,
+; even if npm can reasonably guess an appropriate resolution.
+strict-peer-deps=true
+
+; Renovate will update packageManager for us.
+update-notifier=false