chore(deps): lock file maintenance #1715

	name: Node CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	bundle-and-lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version: 22.x
	- run: npm ci
	- run: npx --no-install microbundle
	- run: npx --no-install eslint src

	test:
	needs: bundle-and-lint
	runs-on: ubuntu-latest

	strategy:
	matrix:
	# Reduce at EOL - https://github.com/nodejs/Release
	node-version: [18.x, 20.x, 22.x]

	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version: ${{ matrix.node-version }}
	- run: npm ci
	- run: npx --no-install jest
	- uses: codecov/[email protected]
	env:
	CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
	release:
	needs: test
	if: success() && github.ref == 'refs/heads/main'
	runs-on: ubuntu-latest
	permissions:
	contents: write # to be able to publish a GitHub release
	issues: write # to be able to comment on released issues
	pull-requests: write # to be able to comment on released pull requests
	id-token: write # to enable use of OIDC for npm provenance
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-node@v4
	with:
	node-version: 22.x
	- run: npm ci
	- run: npx --no-install microbundle
	- name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
	run: npm audit signatures
	- name: Release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
	run: npx semantic-release

Provide feedback