Stop recording registry URLs in the sidecar lockfile

[Jamie Magee (JamieMagee)]

Summary

Add omit-lockfile-registry-resolved=true to samples/nodejs/entra-agent-id-sidecar and regenerate its package lock with npm 10.9.4. This removes registry-specific resolved URLs while keeping dependency versions, integrity hashes, lockfile version 3, and platform metadata unchanged.

npm will resolve registry tarball URLs from the active registry during installation.

Tooling

I used npm 10.9.4, which is compatible with the sample's Node.js 22 or later requirement.

Validation

• npx --yes npm@10.9.4 config get omit-lockfile-registry-resolved
• npx --yes npm@10.9.4 install --package-lock-only --ignore-scripts --no-audit --no-fund
• Repeated lockfile generation and confirmed a clean result
• npx --yes npm@10.9.4 ci --ignore-scripts --no-audit --no-fund
• npm run build

All commands passed. The lockfile checks were:

config=true
target_feed_urls=0
all_registry_resolved=0
metadata_preserved=true
second_regeneration_clean=true