[deps]: Lock file maintenance #1321

	# `dist/index.js` is a special file in Actions.
	# When you reference an action with `uses:` in a workflow,
	# `index.js` is the code that will run.
	# For our project, we generate this file through a build process from other source files.
	# We need to make sure the checked-in `index.js` actually matches what we expect it to be.
	name: Check dist

	on:
	push:
	branches:
	- main
	pull_request:
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	check-dist:
	name: Check dist
	runs-on: ubuntu-24.04
	steps:
	- name: Checkout repo
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	with:
	persist-credentials: false

	- name: Setup Node
	uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
	with:
	node-version: 20
	cache-dependency-path: "**/package-lock.json"
	cache: "npm"

	- name: Install dependencies
	run: npm ci

	- name: Rebuild the dist/ directory
	run: npm run all

	- name: Compare Expected and Actual Directories
	id: diff
	run: \|
	if [ "$(git diff --ignore-space-at-eol --text dist/ \| wc -l)" -gt "0" ]; then
	echo "Detected uncommitted changes after build. See status below:"
	git diff --ignore-space-at-eol --text dist/
	exit 1
	fi

	# If index.js was different than expected, upload the expected version as an artifact
	- name: Upload artifact
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
	if: ${{ failure() && steps.diff.conclusion == 'failure' }}
	with:
	name: dist
	path: dist/

Provide feedback