ci: regenerate and verify security lockfile

Author: ECorreia45

.github/workflows/regenerate-security-lockfile.yml

@@ -0,0 +1,40 @@
+name: Regenerate security lockfile
+
+on:
+  push:
+    branches:
+      - automation/cwco-esbuild-0.28.1
+
+permissions:
+  contents: write
+
+jobs:
+  regenerate-and-verify:
+    if: ${{ !contains(github.event.head_commit.message, '[lockfile-regenerated]') }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: automation/cwco-esbuild-0.28.1
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 22
+      - name: Regenerate npm lockfile
+        run: |
+          npm install --global npm@8.19.4
+          rm -rf node_modules
+          npm install --package-lock-only --ignore-scripts
+      - name: Verify clean install
+        run: npm ci
+      - name: Verify build
+        run: npm run build
+      - name: Verify tests
+        run: npm test -- --runInBand
+      - name: Commit validated lockfile
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add package-lock.json
+          git rm .github/workflows/regenerate-security-lockfile.yml
+          git commit -m "fix(deps): regenerate lockfile for esbuild 0.28.1 [lockfile-regenerated]"
+          git push origin HEAD:automation/cwco-esbuild-0.28.1