Deps

.github/workflows/codeql.yaml

@@ -24,14 +24,14 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # tag=v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # tag=v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # tag=v4.35.1
+        uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # tag=v4.38.2
         with:
           languages: ${{ matrix.language }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # tag=v4.35.1
+        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # tag=v4.38.2
         with:
           category: '/language:${{matrix.language}}'

.github/workflows/eslint.yaml

@@ -15,10 +15,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # tag=v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # tag=v7.0.1
 
       - name: Setup node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # tag=v6.3.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # tag=v7.0.0
         with:
           node-version: 24
 
@@ -29,7 +29,7 @@ jobs:
         continue-on-error: true
 
       - name: Upload analysis results to GitHub
-        uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # tag=v4.35.1
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # tag=v4.38.2
         with:
           sarif_file: build/eslint-results.sarif
           wait-for-processing: true

.github/workflows/npm.yaml

@@ -15,13 +15,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # tag=v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # tag=v7.0.1
         with:
           fetch-depth: 0
           ref: ${{ github.event.release.tag_name }}
 
       - name: Setup node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # tag=v6.3.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # tag=v7.0.0
         with:
           node-version: 24
           registry-url: 'https://registry.npmjs.org'
@@ -33,7 +33,7 @@ jobs:
           npx lerna publish from-package -y
 
       - name: Upload logs
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # tag=v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # tag=v7.0.1
         if: failure()
         with:
           name: lerna-debug-log

.github/workflows/unit-tests.yaml

@@ -15,10 +15,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # tag=v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # tag=v7.0.1
 
       - name: Setup node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # tag=v6.3.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # tag=v7.0.0
         with:
           node-version: 24
 
@@ -31,7 +31,7 @@ jobs:
           TZ: America/Toronto
 
       - name: Publish test report
-        uses: mikepenz/action-junit-report@bccf2e31636835cf0874589931c4116687171386 # tag=v6.4.0
+        uses: mikepenz/action-junit-report@b7b80d7ac5b1da46d6aaff9fb57ad50d8453bcb3 # tag=v6.6.0
         if: always()
         with:
           report_paths: build/junit.xml

babel.config.js

@@ -2,7 +2,7 @@ module.exports = {
 	env: {
 		test: {
 			sourceMaps: 'both',
-			presets: [['@babel/env', {loose: true, targets: {node: true}}]],
+			presets: [['@babel/env', {targets: {node: true}}]],
 		},
 	},
 };

lefthook.yaml

@@ -0,0 +1,25 @@
+pre-commit:
+  parallel: true
+  jobs:
+    - name: lint-js
+      glob: '*.{js,mjs,ts}'
+      run: node_modules/.bin/eslint --fix --max-warnings 0 --no-ignore {staged_files} && node_modules/.bin/prettier --write {staged_files}
+      stage_fixed: true
+
+    - name: lint-other
+      glob: '*.{json,md,yaml,yml}'
+      run: node_modules/.bin/prettier --write {staged_files}
+      stage_fixed: true
+
+commit-msg:
+  jobs:
+    - name: commitlint
+      run: node_modules/.bin/commitlint -s -e {1}
+
+pre-push:
+  jobs:
+    - name: git-check-push
+      run: packages/push/cli.js {1}
+      use_stdin: true
+
+output: false