chore: use lockfiles for NPM dependencies

.github/workflows/release.yml

@@ -44,15 +44,8 @@ jobs:
         GIT_COMMITTER_EMAIL: amplitude-sdk-bot@users.noreply.github.com
         GEM_HOST_API_KEY: ${{secrets.GEM_HOST_API_KEY}}
       run: |
-        npx \
-        -p lodash \
-        -p semantic-release@17 \
-        -p @semantic-release/changelog@5 \
-        -p @semantic-release/git@9 \
-        -p @google/semantic-release-replace-plugin@1.0 \
-        -p @semantic-release/exec@5 \
-        -p semantic-release-rubygem \
-        semantic-release --dry-run
+        npm ci
+        npm exec semantic-release -- --dry-run
 
     - name: Semantic Release
       if: ${{ github.event.inputs.dryRun == 'false'}}
@@ -64,12 +57,5 @@ jobs:
         GIT_COMMITTER_EMAIL: amplitude-sdk-bot@users.noreply.github.com
         GEM_HOST_API_KEY: ${{secrets.GEM_HOST_API_KEY}}
       run: |
-        npx \
-        -p lodash \
-        -p semantic-release@17 \
-        -p @semantic-release/changelog@5 \
-        -p @semantic-release/git@9 \
-        -p @google/semantic-release-replace-plugin@1.0 \
-        -p @semantic-release/exec@5 \
-        -p semantic-release-rubygem \
-        semantic-release
+        npm ci
+        npm exec semantic-release

.gitignore

@@ -12,6 +12,7 @@
 .idea/
 *.iml
 .DS_Store
+node_modules/
 
 # Used by dotenv library to load environment variables.
 .env