microsoft/hve-core

Commit

fix(workflows): replace npm install with deterministic lockfile version sync

- use node -e to directly update package-lock.json version field
- avoids CodeQL 'unpinned npm command' false positive
- more precise: syncs only the version, no dependency resolution

🔧 - Generated by Copilot