Develop

.github/workflows/ci-build.yml

@@ -21,17 +21,22 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Check out repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
           registry-url: https://registry.npmjs.org/
 
       - name: Install NPM dependencies
         run: npm install --ignore-scripts
 
+      - name: Audit packages
+        run: npm audit --audit-level=high --omit=dev
+
       - name: Run linting
         run: npm run lint
 

.github/workflows/ci-codeql-analysis.yml

@@ -25,11 +25,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -38,4 +38,4 @@ jobs:
           # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/ci-npm-publish.yml

@@ -15,28 +15,35 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Check out repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org/
       # Skip post-install scripts here, as a malicious
       # script could steal NODE_AUTH_TOKEN.
       - name: Install NPM dependencies
         run: npm install --ignore-scripts
+      - name: Audit packages
+        run: npm audit --audit-level=high --omit=dev
       - name: Run linting
         run: npm run lint
 
   publish-npm:
     name: NPM Publish
     needs: build
+    environment: npm-publish
     runs-on: ubuntu-latest
     steps:
       - name: Check out repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@6
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org/

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synatic/schema-magic",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "description": "JSON Schema Utilities",
   "main": "index.js",
   "types": "index.d.ts",
@@ -61,14 +61,14 @@
     "underscore.string": "3.3.6"
   },
   "devDependencies": {
-    "@eslint/js": "^10.0.1",
-    "eslint": "^10.1.0",
-    "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-prettier": "^5.5.5",
-    "eslint-plugin-sonarjs": "^4.0.2",
-    "globals": "^17.4.0",
-    "mocha": "^11.7.5",
-    "nyc": "^18.0.0",
-    "prettier": "^3.8.1"
+    "@eslint/js": "10.0.1",
+    "eslint": "10.4.0",
+    "eslint-config-prettier": "10.1.8",
+    "eslint-plugin-prettier": "5.5.5",
+    "eslint-plugin-sonarjs": "4.0.3",
+    "globals": "17.6.0",
+    "mocha": "11.7.6",
+    "nyc": "18.0.0",
+    "prettier": "3.8.3"
   }
 }