From 6ac400e7c182d2b957313c7d3f370e266e823927 Mon Sep 17 00:00:00 2001
From: tumbonea <9964968+tumbone@users.noreply.github.com>
Date: Thu, 28 May 2026 00:03:11 +0200
Subject: [PATCH 1/2] chore: Pinned npm dev dependencies and updated deploy
 workflows

---
 .github/workflows/ci-build.yml           |  9 +++++++--
 .github/workflows/ci-codeql-analysis.yml |  6 +++---
 .github/workflows/ci-npm-publish.yml     | 15 +++++++++++----
 package.json                             | 18 +++++++++---------
 4 files changed, 30 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index c3152bd..a50f564 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -21,10 +21,12 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Check out repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
           registry-url: https://registry.npmjs.org/
@@ -32,6 +34,9 @@ jobs:
       - name: Install NPM dependencies
         run: npm install --ignore-scripts
 
+      - name: Audit packages
+        run: npm audit --audit-level=high --omit=dev
+
       - name: Run linting
         run: npm run lint
 
diff --git a/.github/workflows/ci-codeql-analysis.yml b/.github/workflows/ci-codeql-analysis.yml
index 1256cf9..dfc9a8d 100644
--- a/.github/workflows/ci-codeql-analysis.yml
+++ b/.github/workflows/ci-codeql-analysis.yml
@@ -25,11 +25,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -38,4 +38,4 @@ jobs:
           # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
diff --git a/.github/workflows/ci-npm-publish.yml b/.github/workflows/ci-npm-publish.yml
index 0dfc230..d78e73d 100644
--- a/.github/workflows/ci-npm-publish.yml
+++ b/.github/workflows/ci-npm-publish.yml
@@ -15,9 +15,11 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Check out repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org/
@@ -25,18 +27,23 @@ jobs:
       # script could steal NODE_AUTH_TOKEN.
       - name: Install NPM dependencies
         run: npm install --ignore-scripts
+      - name: Audit packages
+        run: npm audit --audit-level=high --omit=dev
       - name: Run linting
         run: npm run lint
 
   publish-npm:
     name: NPM Publish
     needs: build
+    environment: npm-publish
     runs-on: ubuntu-latest
     steps:
       - name: Check out repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@6
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org/
diff --git a/package.json b/package.json
index 0036e18..8d5c2f8 100644
--- a/package.json
+++ b/package.json
@@ -61,14 +61,14 @@
     "underscore.string": "3.3.6"
   },
   "devDependencies": {
-    "@eslint/js": "^10.0.1",
-    "eslint": "^10.1.0",
-    "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-prettier": "^5.5.5",
-    "eslint-plugin-sonarjs": "^4.0.2",
-    "globals": "^17.4.0",
-    "mocha": "^11.7.5",
-    "nyc": "^18.0.0",
-    "prettier": "^3.8.1"
+    "@eslint/js": "10.0.1",
+    "eslint": "10.4.0",
+    "eslint-config-prettier": "10.1.8",
+    "eslint-plugin-prettier": "5.5.5",
+    "eslint-plugin-sonarjs": "4.0.3",
+    "globals": "17.6.0",
+    "mocha": "11.7.6",
+    "nyc": "18.0.0",
+    "prettier": "3.8.3"
   }
 }

From febbc470476e145e761d5ecf904a6569c029b403 Mon Sep 17 00:00:00 2001
From: tumbonea <9964968+tumbone@users.noreply.github.com>
Date: Thu, 28 May 2026 00:03:15 +0200
Subject: [PATCH 2/2] 3.0.2

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 8d5c2f8..e2c452f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@synatic/schema-magic",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "description": "JSON Schema Utilities",
   "main": "index.js",
   "types": "index.d.ts",