build: use package.json to manage semrel and its deps

Signed-off-by: Phil Adams <phil_adams@us.ibm.com>

Author: padamstx

.gitignore

@@ -76,6 +76,5 @@ test/__init__.py
 /.settings/
 
 # files produced by "npm install" commands during build
-package.json
 package-lock.json
 node_modules/

.travis.yml

@@ -22,16 +22,12 @@ script:
 
 before_deploy:
 - nvm install 14
-- npm install npm@latest -g
-- npm install @semantic-release/changelog
-- npm install @semantic-release/exec
-- npm install @semantic-release/git
-- npm install @semantic-release/github
+- npm install
 - pip install bump2version
 
 deploy:
 - provider: script
-  script: npx semantic-release
+  script: npm run semantic-release
   skip_cleanup: true
   on:
     python: '3.7'

package.json

@@ -0,0 +1,15 @@
+{
+  "name": "semantic-release-dependencies",
+  "version": "0.0.0",
+  "description": "This package.json is being used to manage semantic-release and its dependencies",
+  "license": "Apache-2.0",
+  "devDependencies": {
+    "semantic-release": "19.0.5",
+    "@semantic-release/changelog": "6.0.2",
+    "@semantic-release/exec": "6.0.3",
+    "@semantic-release/git": "10.0.1"
+  },
+  "scripts": {
+    "semantic-release": "semantic-release"
+  }
+}