update package-lock

[Bojan131]

Note

Low Risk
CI-only workflow changes that tighten PR validation around dependency/lockfile consistency; risk is limited to potential false positives/negatives in the git/jq diff checks.

Overview
Tightens the check-package-lock GitHub Action by fetching full git history and, on pull requests, detecting whether package.json/package-lock.json changed and whether dependency fields actually changed via a jq-sorted comparison.

If dependency fields changed but package-lock.json did not, the workflow now fails the PR. Node setup and npm ci --dry-run validation are also made conditional so they only run on pushes to main or when the package files changed in the PR.

^{Written by Cursor Bugbot for commit 3f56e34. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

This PR is being reviewed by Cursor Bugbot

Details

Your team is on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle for each member of your team.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.