feat(release): enable npm trusted packages

.changeset/chatty-tables-brake.md

@@ -0,0 +1,5 @@
+---
+"@labdigital/commercetools-mock": patch
+---
+
+Update release process to use trusted publishing

.changeset/polite-cows-grow.md

@@ -0,0 +1,5 @@
+---
+"@labdigital/commercetools-mock": patch
+---
+
+update various depdendencies to resolve potential security issues

.github/workflows/ci-cd.yaml

@@ -16,7 +16,7 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'pull_request'
     strategy:
       matrix:
-        node: ["18.x", "20.x", "22.x"]
+        node: ["20.x", "22.x", "24.x"]
         os: [ubuntu-latest, windows-latest, macOS-latest]
     runs-on: ${{ matrix.os }}
     env:
@@ -76,6 +76,10 @@ jobs:
     timeout-minutes: 15
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/main' && github.event.pull_request.draft == false
+    permissions:
+      id-token: write  
+      contents: read
+    environment: release
     needs: validate
     steps:
       - name: Checkout repo
@@ -96,5 +100,5 @@ jobs:
           version: pnpm publish:version
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TOKEN: ''
+          NPM_CONFIG_PROVENANCE: true

biome.json

@@ -1,38 +1,41 @@
 {
-	"$schema": "https://biomejs.dev/schemas/1.9.4/schema.json",
+	"$schema": "https://biomejs.dev/schemas/2.3.7/schema.json",
 	"vcs": {
 		"enabled": false,
 		"clientKind": "git",
 		"useIgnoreFile": false
 	},
 	"files": {
 		"ignoreUnknown": false,
-		"ignore": ["vendor/*", "dist/*"],
-		"include": ["src/**/*"]
+		"includes": ["**/src/**/*", "!**/vendor/**/*", "!**/dist/**/*"]
 	},
 	"formatter": {
 		"enabled": true,
 		"indentStyle": "tab"
 	},
-	"organizeImports": {
-		"enabled": true
-	},
+	"assist": { "actions": { "source": { "organizeImports": "on" } } },
 	"linter": {
 		"enabled": true,
 		"rules": {
 			"recommended": true,
 			"complexity": {
 				"noForEach": "off"
 			},
+			"correctness": {
+				"noUnusedFunctionParameters": "off",
+				"noUnusedImports": "error",
+				"noUnusedVariables": "warn",
+				"useImportExtensions": "error"
+			},
 			"style": {
 				"noNonNullAssertion": "off",
 				"noParameterAssign": "off"
 			},
 			"suspicious": {
-				"noConsoleLog": "error",
 				"noImplicitAnyLet": "off",
 				"noExplicitAny": "off",
-				"noExportsInTest": "off"
+				"noExportsInTest": "off",
+				"noConsole": { "level": "error", "options": { "allow": ["log"] } }
 			}
 		}
 	},

package.json

@@ -7,6 +7,10 @@
 	"exports": {
 		".": "./dist/index.js"
 	},
+	"imports": {
+		"#src/*": "./src/*",
+		"#vendor/*": "./vendor/*"
+	},
 	"main": "dist/index.js",
 	"module": "dist/index.js",
 	"typings": "dist/index.d.ts",
@@ -29,45 +33,45 @@
 	},
 	"dependencies": {
 		"basic-auth": "2.0.1",
-		"body-parser": "2.2.0",
+		"body-parser": "2.2.1",
 		"decimal.js": "10.5.0",
 		"express": "5.1.0",
 		"light-my-request": "6.6.0",
-		"morgan": "1.10.0",
+		"morgan": "1.10.1",
 		"msw": "2.8.4",
 		"uuid": "11.1.0",
 		"zod": "3.24.2",
 		"zod-validation-error": "3.4.0"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "1.9.4",
-		"@types/express": "^5.0.1",
-		"@changesets/changelog-github": "0.5.1",
-		"@changesets/cli": "2.28.1",
+		"@biomejs/biome": "2.3.7",
+		"@changesets/changelog-github": "0.5.2",
+		"@changesets/cli": "2.29.7",
 		"@commercetools/platform-sdk": "8.16.0",
 		"@types/basic-auth": "1.1.8",
 		"@types/body-parser": "1.19.5",
-		"@types/express-serve-static-core": "^5.0.6",
+		"@types/express": "5.0.5",
+		"@types/express-serve-static-core": "^5.1.0",
 		"@types/morgan": "1.9.9",
 		"@types/node": "20.16.14",
 		"@types/qs": "6.9.11",
-		"@types/supertest": "6.0.2",
+		"@types/supertest": "6.0.3",
 		"@types/uuid": "9.0.8",
-		"@vitest/coverage-v8": "3.1.1",
-		"esbuild": "0.25.2",
+		"@vitest/coverage-v8": "4.0.13",
 		"fishery": "2.2.3",
-		"supertest": "7.1.0",
+		"supertest": "7.1.4",
 		"timekeeper": "2.3.1",
-		"tsdown": "^0.9.9",
-		"typescript": "5.8.3",
-		"vitest": "3.1.1"
+		"tsdown": "0.16.8",
+		"typescript": "5.9.3",
+		"vitest": "4.0.13"
 	},
 	"packageManager": "pnpm@10.8.0",
 	"engines": {
 		"node": ">=18",
 		"pnpm": ">=9.0.2"
 	},
 	"publishConfig": {
-		"access": "public"
+		"access": "public",
+		"provenance": true
 	}
 }