Pin dependencies in release branch

[amcasey]

With this change, you can build the branch using npm ci && npm run build.

[amcasey]

I'd like to do this for every release branch, going forward. Re-adding people to the PR, since they probably care more now that it's not about 3.3. 😄

[weswigham]

Should we also edit https://github.com/microsoft/TypeScript/blob/master/.github/workflows/new-release-branch.yaml (on master) to do this for new branches automatically, while we're at it?

[amcasey]

@weswigham What is it?

[weswigham]

It's a bot powered workflow for setting up new release branches~

[amcasey]

@weswigham TBH, I prefer @andrewbranch's suggestion that we move to an automatically updated, checked in package-lock.json in master. However, if we decide not to pursue that option, I agree that automating this process would be worthwhile.

[amcasey]

I want to merge this regardless of what we decide to do in master. Objections?

[sandersn]

👍 for this while we decide on a general solution.