chore(ci): fix workflows

Author: Sec-ant

.github/actions/setup/action.yml

@@ -5,13 +5,18 @@ runs:
   using: composite
   steps:
     - name: Setup PNPM
-      uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+      uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
 
     - name: Setup Node.js
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
       with:
         node-version-file: .node-version
         cache: pnpm
+        registry-url: https://registry.npmjs.org
+
+    - name: Upgrade npm for trusted publishing
+      shell: bash
+      run: npm install -g npm@latest
 
     - name: Install Dependencies
       shell: bash

.github/workflows/preview-release.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Setup
         uses: ./.github/actions/setup

.github/workflows/release.yml

@@ -1,7 +1,6 @@
 name: Release
 
 on:
-  workflow_dispatch:
   push:
     branches:
       - main
@@ -17,32 +16,32 @@ permissions:
 env:
   NPM_CONFIG_PROVENANCE: true
 
-concurrency: ${{ github.workflow }}-${{ github.ref }}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   release:
-    if: ${{ github.repository != 'Sec-ant/vanilla-ts' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Setup
         uses: ./.github/actions/setup
 
       - name: Test
-        run: pnpm -s test
+        run: pnpm -s test:ci
 
       - name: Get Next Package Version
         id: package-version
         run: echo "version=$(pnpm -s changeset status --output=release.json && jq -r '.releases[0].newVersion // '$(npm pkg get version)'' release.json && rm release.json)" >> $GITHUB_OUTPUT
 
       - name: Create Release Pull Request or Publish to NPM
         id: changesets
-        uses: changesets/action@c8bada60c408975afd1a20b3db81d6eee6789308 # v1.4.9
+        uses: changesets/action@e0145edc7d9d8679003495b11f87bd8ef63c0cba # v1.5.3
         with:
           publish: pnpm -s changeset publish
           commit: "chore(release): v${{ steps.package-version.outputs.version }}"
         env:
-          GITHUB_TOKEN: ${{ secrets.CHANGESET_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Setup
         uses: ./.github/actions/setup
 
       - name: Test
-        run: pnpm -s test
+        run: pnpm -s test:ci

.prettierignore

@@ -10,4 +10,6 @@
 *.tsx
 *.json
 *.jsonc
+pnpm-lock.yaml
+tests/**/fixtures/**/*
 .all-contributorsrc

package.json

@@ -71,6 +71,7 @@
     "nocheck-chevrotain-types": "tsx ./scripts/nocheck-chevrotain-types.ts",
     "copy": "copy-files-from-to",
     "postbuild": "tsc --project ./tsconfig.production.json && conc \"pnpm:add-glob-import-types\" \"pnpm:nocheck-chevrotain-types\" \"pnpm:copy\"",
+    "test:ci": "vitest --run",
     "test": "vitest",
     "test:ui": "vitest --ui",
     "process-readme": "tsx ./scripts/process-readme",
@@ -81,7 +82,7 @@
     "bump-biome:nightly": "pnpm add -DE @biomejs/biome@nightly"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.3.9",
+    "@biomejs/biome": "2.3.10",
     "@changesets/cli": "^2.29.8",
     "@commitlint/cli": "^20.2.0",
     "@commitlint/config-conventional": "^20.2.0",
@@ -90,9 +91,9 @@
     "@prettier/plugin-ruby": "^4.0.4",
     "@prettier/plugin-xml": "^3.4.2",
     "@stedi/prettier-plugin-jsonata": "^2.1.8",
-    "@types/node": "^25.0.2",
-    "@vitest/coverage-istanbul": "^4.0.15",
-    "@vitest/ui": "^4.0.15",
+    "@types/node": "^25.0.3",
+    "@vitest/coverage-istanbul": "^4.0.16",
+    "@vitest/ui": "^4.0.16",
     "@xml-tools/parser": "^1.0.11",
     "chevrotain": "7.1.1",
     "concurrently": "^9.2.1",
@@ -118,11 +119,11 @@
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vite": "^7.3.0",
-    "vitest": "^4.0.15"
+    "vitest": "^4.0.16"
   },
   "dependencies": {
     "@types/estree": "^1.0.8",
-    "dedent": "^1.7.0",
+    "dedent": "^1.7.1",
     "micro-memoize": "^5.1.1",
     "package-up": "^5.0.0",
     "tiny-jsonc": "^1.0.2",