Other/ci cd updates(AST-160402)

.github/workflows/ci.yml

@@ -18,6 +18,18 @@ jobs:
           sudo apt-get install git-lfs
           git lfs install
 
+      - name: Verify single lockfile
+        run: |
+          if [ -f package-lock.json ] && [ -f yarn.lock ]; then
+            echo "ERROR: Both lockfiles exist"
+            exit 1
+          fi
+
+          if [ ! -f yarn.lock ] && [ ! -f package-lock.json ]; then
+            echo "ERROR: No lockfile found,Policy requires exactly ONE package manager lockfile"
+            exit 1
+          fi
+
       - name: Use Node.js 22.11.0
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:

.github/workflows/release.yml

@@ -77,6 +77,19 @@ jobs:
           fetch-depth: 0
           lfs: true  # Ensure LFS files are checked out
 
+      # VERIFY SINGLE LOCKFILE
+      - name: Verify single lockfile
+        run: |
+          if [ -f package-lock.json ] && [ -f yarn.lock ]; then
+            echo "ERROR: Both lockfiles exist"
+            exit 1
+          fi
+
+          if [ ! -f yarn.lock ] && [ ! -f package-lock.json ]; then
+            echo "ERROR: No lockfile found,Policy requires exactly ONE package manager lockfile"
+            exit 1
+          fi
+
       # GIT CONFIGURATION
       - run: |
           git config user.name github-actions

.npmrc

@@ -0,0 +1,4 @@
+# Default registry for most packages
+registry=https://npm.echohq.com/
+
+ignore-scripts=true

package.json

@@ -46,7 +46,8 @@
     "serialize-javascript": "6.0.2",
     "brace-expansion": "2.0.3",
     "lodash": "4.18.0",
-    "uuid": "14.0.0"
+    "uuid": "14.0.0",
+    "js-yaml": "4.2.0"
   },
   "publishConfig": {
     "registry": "https://npm.pkg.github.com"