Use latest ubuntu on CI, as well as node cache

2 files changed, 12 insertions, 8 deletions

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 241b6a2..7e1da8a 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -20,8 +20,8 @@ on:
 
 jobs:
   analyze:
-    runs-on: ubuntu-20.04
     name: Analyze
+    runs-on: ubuntu-latest
 
     # The maximum number of minutes to let a workflow run
     # before GitHub automatically cancels it. Default: 360
@@ -72,7 +72,7 @@ jobs:
             ${{ runner.os }}-node-
 
       - name: Install a project with a clean slate
-        run: npm ci
+        run: npm ci --ignore-scripts
 
       - name: Build site
         run: |
diff --git a/.github/workflows/cs.yml b/.github/workflows/cs.yml
index faf298e..e886fd8 100644
--- a/.github/workflows/cs.yml
+++ b/.github/workflows/cs.yml
@@ -7,19 +7,15 @@ on:
       - 'feature/**'
       - 'release/**'
       - 'fix/**'
-    paths-ignore:
-      - README.md
   # The branches below must be a subset of the branches above
   pull_request:
     branches:
       - main
-    paths-ignore:
-      - README.md
 
 jobs:
   lint:
-    runs-on: ubuntu-20.04
     name: Code linting
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout code
@@ -30,8 +26,16 @@ jobs:
         with:
           node-version: '20.x'
 
+      - name: Setup npm cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.npm
+          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node-
+
       - name: Install npm dependencies
-        run: npm ci
+        run: npm ci --ignore-scripts
 
       - name: Code linting
         run: npm run lint