chore: pin dependencies with lockfile (#729)

Author: Belco90

.github/workflows/pipeline.yml

@@ -3,13 +3,14 @@ name: Pipeline
 on:
   push:
     branches:
-      # semantic-release valid branches
+      # semantic-release valid branches and all-contributors branches
       - '+([0-9])?(.{+([0-9]),x}).x'
       - 'main'
       - 'next'
       - 'next-major'
       - 'beta'
       - 'alpha'
+      - 'all-contributors/**'
   pull_request:
     types: [opened, synchronize]
 

.gitignore

@@ -67,7 +67,6 @@ yarn-error.log
 # Yarn Integrity file
 .yarn-integrity
 
-# these cause more harm than good
-# when working with contributors
-package-lock.json
+# Ignore locks other than npm
+pnpm-lock.yaml
 yarn.lock

.npmrc

@@ -1,3 +1,2 @@
-package-lock=false
 auto-install-peers=true
 enable-pre-post-scripts=true