remove package-lock.json

I don't remember transitive depenencies ever causing an issue. Mostly I
don't like dependabot. We can update stuff on an as-needed basis;
automatically keeping dependencies up-to-date could even be _less_
secure than that.

Author: chearon

.github/workflows/ci.yaml

@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: mlugg/setup-zig@v2
       - name: Install
-        run: npm ci --force # https://github.com/npm/cli/issues/6138
+        run: npm install --force # https://github.com/npm/cli/issues/6138
       - name: Build
         run: zig build
       - name: Test
@@ -36,7 +36,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: mlugg/setup-zig@v2
       - name: Install
-        run: npm ci --force
+        run: npm install --force
       - name: Build
         run: zig build
       - name: Test
@@ -55,7 +55,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: mlugg/setup-zig@v2
       - name: Install
-        run: npm ci --force
+        run: npm install --force
       - name: Build
         run: zig build
       - name: Test
@@ -70,7 +70,7 @@ jobs:
           node-version: 26.7.0
       - uses: actions/checkout@v4
       - name: Install
-        run: npm ci --force
+        run: npm install --force
       - name: Lint
         run: npm run lint
       - name: Lint Types

.github/workflows/publish.yaml

@@ -35,7 +35,7 @@ jobs:
           package-manager-cache: false  # never use caching in release builds
       - uses: mlugg/setup-zig@v2
       - name: Install
-        run: npm ci --force # https://github.com/npm/cli/issues/6138
+        run: npm install --force # https://github.com/npm/cli/issues/6138
       - name: Build
         run: zig build -Dtarget=${{ matrix.target }} -Doptimize=ReleaseFast
       - name: Publish
@@ -51,6 +51,6 @@ jobs:
         with:
           node-version: 26
       - name: Install
-        run: npm ci --force # https://github.com/npm/cli/issues/6138
+        run: npm install --force # https://github.com/npm/cli/issues/6138
       - name: Publish
         run: npm publish --tag next