chore: dependency updates

.github/workflows/check-dist.yml

@@ -32,7 +32,7 @@ jobs:
           version: 9.1.4
 
       - name: "Setup: Node"
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 20
           cache: pnpm

.github/workflows/ci.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: "Setup: Node"
         id: setup-node
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 20
           cache: pnpm
@@ -43,16 +43,12 @@ jobs:
         id: npm-format-check
         run: pnpm run format:check
 
-      - name: Lint
-        id: npm-lint
-        run: pnpm run lint
-
       - name: Test
         id: npm-ci-test
         run: pnpm run test
 
       - name: "Test: Sonar"
-        uses: SonarSource/sonarcloud-github-action@5ee47de3c96f0c1c51b09d2ff1fec0cfeefcf67c # master
+        uses: SonarSource/sonarcloud-github-action@13a24e453e2e6262f3bb0c5fa8241031e637a028 # master
         continue-on-error: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
@@ -69,7 +65,7 @@ jobs:
             -Dsonar.testExecutionReportPaths=test-report.xml
 
       - name: "Report: Coverage"
-        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 

.github/workflows/codeql-analysis.yml

@@ -43,17 +43,17 @@ jobs:
 
       - name: Initialize CodeQL
         id: initialize
-        uses: github/codeql-action/init@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           languages: ${{ matrix.language }}
           source-root: src
 
       - name: Autobuild
         id: autobuild
         continue-on-error: true
-        uses: github/codeql-action/autobuild@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
 
       - name: Perform CodeQL Analysis
         id: analyze
         continue-on-error: true
-        uses: github/codeql-action/analyze@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18

.github/workflows/dependency-review.yml

@@ -24,4 +24,4 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@72eb03d02c7872a771aacd928f3123ac62ad6d3a # v4.3.3
+        uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1

.github/workflows/scorecards.yml

@@ -71,6 +71,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           sarif_file: results.sarif

package.json

@@ -26,40 +26,40 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@actions/cache": "4.0.2",
+    "@actions/cache": "4.0.3",
     "@actions/core": "1.11.1",
     "@actions/exec": "1.1.1",
-    "@actions/github": "6.0.0",
+    "@actions/github": "6.0.1",
     "@actions/http-client": "2.2.3",
     "@actions/io": "1.1.3",
     "@actions/tool-cache": "2.0.2",
     "octokit": "3.1.1",
     "which": "5.0.0"
   },
   "devDependencies": {
-    "@commitlint/cli": "17.8.0",
-    "@commitlint/config-conventional": "17.8.0",
+    "@commitlint/cli": "19.8.1",
+    "@commitlint/config-conventional": "19.8.1",
     "@jest/globals": "29.7.0",
     "@types/jest": "29.5.14",
-    "@types/node": "22.13.10",
-    "@typescript-eslint/eslint-plugin": "6.7.5",
-    "@typescript-eslint/parser": "6.7.5",
+    "@types/node": "22.15.21",
+    "@typescript-eslint/eslint-plugin": "8.32.1",
+    "@typescript-eslint/parser": "8.32.1",
     "@vercel/ncc": "0.38.3",
-    "bun": "1.2.5",
-    "eslint": "8.51.0",
-    "eslint-plugin-github": "4.10.1",
-    "eslint-plugin-jest": "27.4.2",
-    "eslint-plugin-jsonc": "2.19.1",
-    "eslint-plugin-prettier": "5.2.3",
-    "husky": "8.0.3",
+    "bun": "1.2.13",
+    "eslint": "9.27.0",
+    "eslint-plugin-github": "6.0.0",
+    "eslint-plugin-jest": "28.11.0",
+    "eslint-plugin-jsonc": "2.20.1",
+    "eslint-plugin-prettier": "5.4.0",
+    "husky": "9.1.7",
     "jest": "29.7.0",
     "jest-sonar-reporter": "2.0.0",
     "js-yaml": "4.1.0",
     "make-coverage-badge": "1.2.0",
     "prettier": "3.5.3",
-    "prettier-eslint": "16.3.0",
-    "ts-jest": "29.2.6",
-    "typescript": "5.8.2"
+    "prettier-eslint": "16.4.2",
+    "ts-jest": "29.3.4",
+    "typescript": "5.8.3"
   },
   "scripts": {
     "turbo:build": "pnpm exec turbo build --token $BUILDLESS_APIKEY --no-daemon --remote-only",
@@ -70,11 +70,11 @@
     "ci:test": "pnpm run turbo:test",
     "format:write": "prettier --write **/*.ts",
     "format:check": "prettier --check **/*.ts",
-    "lint": "npx eslint . -c ./.github/linters/.eslintrc.yml",
+    "lint": "npx eslint . -c ./.github/linters/.eslintrc.yaml",
     "package": "ncc build src/index.ts --v8-cache --minify --source-map --license licenses.txt --target es2024",
     "package:watch": "pnpm run package -- --watch",
     "test": "jest --detectOpenHandles && make-coverage-badge --output-path ./.github/badges/coverage.svg",
-    "all": "pnpm run format:write && pnpm run lint && pnpm run build && pnpm run test"
+    "all": "pnpm run format:write && pnpm run build && pnpm run test"
   },
   "license": "MIT",
   "jestSonar": {},