Pin npm dependencies using yarn --frozen-lockfile

Use yarn install --frozen-lockfile to ensure dependencies are installed
from the lock file.

Fixes PDE-190

Co-authored-by: Ona <no-reply@ona.com>

Author: jespino

.devcontainer/devcontainer.json

@@ -8,7 +8,7 @@
   "features": {
     "ghcr.io/devcontainers/features/node:1": {}
   },
-  "postCreateCommand": "yarn install",
+  "postCreateCommand": "yarn install --frozen-lockfile",
   "customizations": {
     "vscode": {
       "extensions": ["esbenp.prettier-vscode"]

.github/workflows/publish-npm.yml

@@ -23,7 +23,7 @@ jobs:
 
       - name: Install dependencies
         run: |
-          yarn install
+          yarn install --frozen-lockfile
 
       - name: Publish to NPM
         run: |