Update npm

[josepjaume]

This updates npm to the latest released version and also locks yarn's version.

• Related to https://github.com/decidim/decidim/pull/2254#issuecomment-347550529