use the lockfile inside ci workflow

Author: gms1

.github/workflows/ci.yml

@@ -49,7 +49,7 @@ jobs:
         with:
           node-version: 24
       - name: Install dependencies
-        run: yarn install --ignore-scripts
+        run: yarn install --frozen-lockfile --ignore-scripts
       - name: Run lint
         run: yarn lint
 
@@ -116,7 +116,7 @@ jobs:
           msbuild-architecture: ${{ matrix.target }}
 
       - name: Install dependencies
-        run: yarn install --ignore-scripts
+        run: yarn install --frozen-lockfile --ignore-scripts
 
       - name: Check Node compatibility
         run: node tools/semver-check.js
@@ -203,7 +203,7 @@ jobs:
           retention-days: 7
 
       - name: Upload binaries to GitHub Release
-        run: yarn install --ignore-scripts && yarn upload --upload-all ${{ github.token }}
+        run: yarn install --frozen-lockfile --ignore-scripts && yarn upload --upload-all ${{ github.token }}
         if: startsWith(github.ref, 'refs/tags/')
 
   publish-npm:
@@ -221,7 +221,7 @@ jobs:
           registry-url: https://registry.npmjs.org
 
       - name: Install dependencies
-        run: yarn install --ignore-scripts
+        run: yarn install --frozen-lockfile --ignore-scripts
 
       - name: Publish to npm
         run: npm publish

package.json

@@ -74,6 +74,7 @@
     "prebuild": "prebuild --runtime napi --all --verbose",
     "rebuild": "node-gyp rebuild",
     "upload": "prebuild --verbose --prerelease",
+    "frozen-install": "yarn install --frozen-lockfile",
     "lint": "eslint lib/ test/ tools/",
     "test": "node test/support/createdb.js && mocha -R spec --timeout 480000"
   },