fix(ci): stabilize npm shrinkwrap metadata

extensions/acpx/npm-shrinkwrap.json

@@ -704,7 +704,6 @@
       "version": "0.16.0",
       "resolved": "https://registry.npmjs.org/@zed-industries/codex-acp/-/codex-acp-0.16.0.tgz",
       "integrity": "sha512-XKzqztT5R8Wg1BVFnk6/U4JVx5GNUaZgxpf9gP2Cw6BsknvJWh3aefcAGZQljgdMivRqczjNKYL4F6H65dc5vA==",
-      "deprecated": "This package has been replaced by @agentclientprotocol/codex-acp. Please migrate to continue receiving updates.",
       "license": "Apache-2.0",
       "bin": {
         "codex-acp": "bin/codex-acp.js"
@@ -725,7 +724,6 @@
       "cpu": [
         "arm64"
       ],
-      "deprecated": "This package has been replaced by @agentclientprotocol/codex-acp. Please migrate to continue receiving updates.",
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -742,7 +740,6 @@
       "cpu": [
         "x64"
       ],
-      "deprecated": "This package has been replaced by @agentclientprotocol/codex-acp. Please migrate to continue receiving updates.",
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -759,7 +756,6 @@
       "cpu": [
         "arm64"
       ],
-      "deprecated": "This package has been replaced by @agentclientprotocol/codex-acp. Please migrate to continue receiving updates.",
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -776,7 +772,6 @@
       "cpu": [
         "x64"
       ],
-      "deprecated": "This package has been replaced by @agentclientprotocol/codex-acp. Please migrate to continue receiving updates.",
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -793,7 +788,6 @@
       "cpu": [
         "arm64"
       ],
-      "deprecated": "This package has been replaced by @agentclientprotocol/codex-acp. Please migrate to continue receiving updates.",
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -810,7 +804,6 @@
       "cpu": [
         "x64"
       ],
-      "deprecated": "This package has been replaced by @agentclientprotocol/codex-acp. Please migrate to continue receiving updates.",
       "license": "Apache-2.0",
       "optional": true,
       "os": [

scripts/generate-npm-shrinkwrap.mjs

@@ -697,8 +697,9 @@ function normalizeNpmVersionDrift(lockfile) {
     if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) {
       continue;
     }
-    // npm 11 patch releases disagree on these package-lock v3 metadata fields.
-    // Keep the shrinkwrap stable across supported Node 24 patch versions.
+    // npm versions and mutable registry metadata disagree on these package-lock
+    // fields. None affect resolution, so keep generated shrinkwraps stable.
+    delete metadata.deprecated;
     delete metadata.libc;
     if (metadata.peer === true) {
       delete metadata.peer;

test/scripts/generate-npm-shrinkwrap.test.ts

@@ -364,6 +364,7 @@ describe("generate-npm-shrinkwrap", () => {
           },
           "node_modules/zod": {
             version: "4.4.3",
+            deprecated: "Use another package",
             peer: true,
           },
           "node_modules/keeps-peer-false": {