npm v9.3.0 is out, but seems to have a bug with `npm ci` on macOS where it will complain that `node_modules/.bin` is a directory. We specify an exact version for reproducibility of builds.
npm v9 is not compatible with Node 12, so we can't update to it yet.