qa: replace Dockerfile node check with a dedicated job `package-l…

…ock-up-to-date`

That new job uses `package-lock-utd` package to verify `package-lock.json` is up2date with what `package.json` requires.

Signed-off-by: Maximilian Bösing <[email protected]>

.github/workflows/continuous-integration.yml

@@ -154,3 +154,14 @@ jobs:
         run: "npm ci"
       - name: Run Jest
         run: "npm run test"
+
+  package-lock-up-to-date:
+    runs-on: "ubuntu-latest"
+    steps:
+      - uses: "actions/checkout@v4"
+      - uses: "actions/setup-node@v4"
+        with:
+          check-latest: true
+          node-version: 21
+      - name: "Check package-lock.json is up2date"
+        run: "npx --yes package-lock-utd"

Dockerfile

@@ -6,7 +6,6 @@ COPY package*.json ./
 COPY tsconfig.json ./
 COPY webpack.config.ts ./
 RUN npm ci
-RUN apk add --no-cache jq && npx semver -r $(jq -r '.packages."".engines.node' package-lock.json) $(node -v) || (echo "ERROR: package-lock.json is not synchronized with Dockerfile node version." && exit 1)
 COPY ./src ./src
 RUN npm run build