(cherry picked from commit 1819db3c)

Use "npm ci" instead of "npm install" to avoid pulling in newer versions
of dependencies automatically.

(cherry picked from commit c50d6787)

`npm ci` speeds up installs by using package-lock.json directly.
Note: it does not check the 'engines' property, that is only
done when adding or changing dependencies.

(cherry picked from commit 589b2b26)

Prevents an ever-changing hash in package-lock.json for a SNAPSHOT
dependency.

The previous SNAPSHOT version no longer exists.