change(npm): without global install, add package-lock.json

action.yml

@@ -23,7 +23,7 @@ runs:
         ref: change/composite-action
 
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: '3.11'
         cache: 'pip'
@@ -37,20 +37,13 @@ runs:
       shell: bash
 
     - name: Install Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: '20'
+        cache: 'npm'
 
-    - name: Cache npm dependencies
-      uses: actions/cache@v3
-      with:
-        path: ~/.npm/_cacache
-        key: node-${{ hashFiles('package-lock.json') }}
-        restore-keys: |
-          node-
-
-    - name: Install markdown2confluence
-      run: npm install -g @shogobg/[email protected]
+    - name: Install npm dependencies (markdown2confluence)
+      run: npm ci
       shell: bash
 
     - name: Run sync_to_jira.py

package.json

@@ -0,0 +1,5 @@
+{
+  "dependencies": {
+    "@shogobg/markdown2confluence": "^0.1.6"
+  }
+}

sync_jira_actions/sync_issue.py

@@ -224,7 +224,8 @@ def _markdown2wiki(markdown):
                 mdf.write('\n')
 
         try:
-            subprocess.check_call(['markdown2confluence', md_path, conf_path])  # noqa: S603, S607
+            # subprocess.check_call(['markdown2confluence', md_path, conf_path])  # noqa: S603, S607
+            subprocess.check_call(['npx', 'markdown2confluence', md_path, conf_path])  # noqa: S603, S607
             with open(conf_path, 'r', encoding='utf-8') as file:
                 result = file.read()
             if len(result) > 16384:  # limit any single body of text to 16KB (JIRA API limits total text to 32KB)