build: use package.json to manage semrel and its deps

Signed-off-by: Phil Adams <phil_adams@us.ibm.com>

.gitignore

@@ -19,6 +19,5 @@ coverage.txt
 /.vscode/
 
 # files produced by "npm install" commands during build
-package.json
 package-lock.json
-node_modules/
+node_modules/

.travis.yml

@@ -28,16 +28,12 @@ script:
 
 before_deploy:
   - nvm install 14
-  - npm install -g npm@6.x
-  - npm install @semantic-release/changelog
-  - npm install @semantic-release/exec
-  - npm install @semantic-release/git
-  - npm install @semantic-release/github
+  - npm install
   - pip install --user bump2version
 
 deploy:
   - provider: script
-    script: npx semantic-release@19
+    script: npm run semantic-release
     skip_cleanup: true
     on:
       go: '1.16.x'

package.json

@@ -0,0 +1,15 @@
+{
+  "name": "semantic-release-dependencies",
+  "version": "0.0.0",
+  "description": "This package.json is being used to manage semantic-release and its dependencies",
+  "license": "Apache-2.0",
+  "devDependencies": {
+    "semantic-release": "19.0.5",
+    "@semantic-release/changelog": "6.0.2",
+    "@semantic-release/exec": "6.0.3",
+    "@semantic-release/git": "10.0.1"
+  },
+  "scripts": {
+    "semantic-release": "semantic-release"
+  }
+}