fix: fallback to npm install on npm ci failure due to lockfile drift

.gitea/workflows/code-analysis.yml

@@ -88,7 +88,11 @@ jobs:
           rm -f gitleaks.tar.gz
 
       - name: Install dependencies
-        run: npm ci
+        run: |
+          if ! npm ci; then
+            echo "WARNING: npm ci fehlgeschlagen (Lockfile-Drift?). Fallback auf npm install."
+            npm install
+          fi
 
       - name: Lint
         run: npm run lint

deploy-production.sh

@@ -57,7 +57,10 @@ has_tracked_files_under() {
 install_dependencies() {
   if [ -f "package-lock.json" ]; then
     echo "   Running: npm ci"
-    npm ci
+    if ! npm ci; then
+      echo "   WARNING: npm ci fehlgeschlagen (Lockfile ggf. nicht synchron). Fallback auf npm install..."
+      npm install
+    fi
   else
     echo "   WARNING: package-lock.json fehlt. Führe npm install aus..."
     npm install
@@ -92,6 +95,10 @@ install_dependencies_if_needed() {
     echo "   package-lock.json unverändert, überspringe npm ci"
   fi
 
+  if [ -f "package-lock.json" ]; then
+    current_lock_hash="$(sha256sum package-lock.json | awk '{print $1}')"
+  fi
+
   printf '%s\n' "$current_lock_hash" > "$lock_hash_file"
 }
 

deploy-test.sh

@@ -70,7 +70,10 @@ has_tracked_files_under() {
 install_dependencies() {
   if [ -f "package-lock.json" ]; then
     echo "   Running: npm ci"
-    npm ci
+    if ! npm ci; then
+      echo "   WARNING: npm ci fehlgeschlagen (Lockfile ggf. nicht synchron). Fallback auf npm install..."
+      npm install
+    fi
   else
     echo "   WARNING: package-lock.json fehlt. Führe npm install aus..."
     npm install
@@ -105,6 +108,10 @@ install_dependencies_if_needed() {
     echo "   package-lock.json unverändert, überspringe npm ci"
   fi
 
+  if [ -f "package-lock.json" ]; then
+    current_lock_hash="$(sha256sum package-lock.json | awk '{print $1}')"
+  fi
+
   printf '%s\n' "$current_lock_hash" > "$lock_hash_file"
 }