ci: include package manifest in dependency cache keys

[rfgamaral]

🗺 Overview

A recent Reactist dependency update introduced a peer dependency conflict. Because the update changed package.json without changing package-lock.json, CI restored cached node_modules, skipped npm ci, and passed with the previous dependency installed. A later lockfile change invalidated the cache and exposed the installation failure, blocking unrelated work.

After fixing the immediate Reactist issue, I audited other active projects for the same cache pattern. This PR adds package.json to the node_modules cache key so manifest-only changes run dependency installation and expose failures immediately.

This can cause an extra cache miss when a package.json change does not affect installed dependencies, but it’s a small price to pay for catching broken dependency changes before they merge and block unrelated work.

🔗 Reference

• chore(deps): remove redundant Jest watch plugin #1173

[doistbot]

This PR adds package.json to the node_modules cache keys across all workflow files so that manifest-only dependency changes invalidate the cache and force npm ci to run, catching conflicts before they merge. No inline issues were flagged.

I also left one optional follow-up note in the details below.

Optional follow-up note (1)

• .github/workflows/check-ci-validation.yml:41: package.json is a bare path while the other entries in this hashFiles call are globs (**/package-lock.json, **/.node-version). Today there's only a root package.json, so it's functionally fine, but if a sub-package is ever added its package.json changes wouldn't invalidate the cache while its package-lock.json would — the exact manifest/lockfile asymmetry this PR is meant to prevent. Using **/package.json keeps it consistent with the surrounding globs.

_{Share Feedback • Review Logs}

[nvignola]

LGTM ✅

[doist-release-bot]

🎉 This PR is included in version 37.0.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀