shrinkwrap CLI dependencies (#4004)

* create shrinkwrap file

* update tests to check for shrinkwrap

* add changelog

.github/workflows/node-test.yml

@@ -27,7 +27,7 @@ jobs:
         uses: actions/cache@v2
         with:
           path: ~/.npm
-          key: ${{ runner.os }}-node-${{ matrix.node-version }}-${{ hashFiles('**/package-lock.json') }}
+          key: ${{ runner.os }}-node-${{ matrix.node-version }}-${{ hashFiles('**/npm-shrinkwrap.json') }}
 
       - run: npm i -g npm@8
       - run: npm ci
@@ -51,7 +51,7 @@ jobs:
         uses: actions/cache@v2
         with:
           path: ~/.npm
-          key: ${{ runner.os }}-node-${{ matrix.node-version }}-${{ hashFiles('**/package-lock.json') }}
+          key: ${{ runner.os }}-node-${{ matrix.node-version }}-${{ hashFiles('**/npm-shrinkwrap.json') }}
 
       - run: npm i -g npm@8
       - run: npm ci
@@ -92,7 +92,7 @@ jobs:
         uses: actions/cache@v2
         with:
           path: ~/.npm
-          key: ${{ runner.os }}-node-${{ matrix.node-version }}-${{ hashFiles('**/package-lock.json') }}
+          key: ${{ runner.os }}-node-${{ matrix.node-version }}-${{ hashFiles('**/npm-shrinkwrap.json') }}
 
       - name: Cache firebase emulators
         uses: actions/cache@v2
@@ -127,7 +127,7 @@ jobs:
       - run: npm i -g npm@8
       # --ignore-scripts prevents the `prepare` script from being run.
       - run: npm install --package-lock-only --ignore-scripts
-      - run: "git diff --exit-code -- package-lock.json || (echo 'Error: package-lock.json is changed during npm install! Please make sure to use npm >= 8 and commit package-lock.json.' && false)"
+      - run: "git diff --exit-code -- npm-shrinkwrap.json || (echo 'Error: npm-shrinkwrap.json is changed during npm install! Please make sure to use npm >= 8 and commit npm-shrinkwrap.json.' && false)"
 
   check-json-schema:
     runs-on: ubuntu-latest

CHANGELOG.md

@@ -1,2 +1,3 @@
+- Now publishes npm-shrinkwrap.json which pins dependencies for the CLI.
 - Preserve empty vpc connector setting on function deploy. (#3973)
 - Upgrades google-auth-library to 7.x.x, enabling support for workload identity federation