There's an issue where the `npm` plugin for `semantic-release`
effectively runs `npm prepack` twice when `tarballDir` is set. Worse, if
the `tarballDir` is within the package directory and not excluded (by
`.npmignore`, for example) then the tarball from the first `prepack`
will end up inside the tarball for the second `prepack`, effectively
doubling the package size.
See https://github.com/semantic-release/npm/issues/535
This fixes "spawn E2BIG" errors with VERY long commit messages, which
can happen with the first release after enabling semantic-release.
We should consider whether it's possible to merge multiple dependency
updates into one line, since in our situation that's the source of many
redundant lines in the changelog.
Instead of merging the configuration values in `package.json` with those
in `relase.config.js`, the `package.json` configuration was treated as
the only configuration.
