fix(actions): Updated actions to latest and lock versions

.github/actions/install/action.yaml

@@ -5,18 +5,18 @@ runs:
 
   steps:
     - name: Setup pnpm
-      uses: pnpm/action-setup@v2.2.4
+      uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
       with:
-        version: 8.x
+        version: 10.x
         run_install: false
 
     - name: Setup node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
       with:
         node-version-file: '.nvmrc'
         cache: 'pnpm'
         registry-url: 'https://registry.npmjs.org'
 
     - name: Install dependencies
       shell: bash
-      run: pnpm install --frozen-lockfile
+      run: pnpm install

.github/actions/playwright/action.yaml

@@ -13,7 +13,7 @@ runs:
 
     - name: Cache playwright browsers per version
       id: cache-playwright-browsers
-      uses: actions/cache@v3
+      uses: actions/cache@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
       with:
         path: ~/.cache/ms-playwright
         key: playwright-browsers-${{ env.PLAYWRIGHT_VERSION }}

.github/workflows/cd.yaml

@@ -4,6 +4,9 @@ on:
   release:
     types: [ released ]
 
+permissions:
+  contents: read
+
 jobs:
 
   publish:
@@ -12,7 +15,9 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - name: Build lib
@@ -22,6 +27,6 @@ jobs:
           BUILD: production
       - name: Publish package
         shell: bash
-        run: pnpm publish --no-git-checks
+        run: pnpm publish --no-git-checks --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN  }}

.github/workflows/ci.yaml

@@ -8,6 +8,9 @@ on:
 env:
   CI: true
 
+permissions:
+  contents: read
+
 jobs:
 
   setup:
@@ -16,7 +19,9 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
 
@@ -28,15 +33,17 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - name: Run Build
         run: pnpm run build:lib
         env:
           BUILD: production
       - run: pnpm run test:integration
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         if: always()
         with:
           name: playwright-results

.github/workflows/pull-request.yaml

@@ -13,6 +13,9 @@ on:
 env:
   CI: true
 
+permissions:
+  contents: read
+
 jobs:
 
   setup:
@@ -21,7 +24,9 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
 
@@ -33,7 +38,9 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - name: Check Lint
@@ -49,7 +56,9 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - run: pnpm run test:components
@@ -62,12 +71,14 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - run: pnpm run build:app
       - run: pnpm run test:end-to-end
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         if: always()
         with:
           name: playwright-results

.nvmrc

@@ -1 +1 @@
-18.16
+24.13.0

demo/app/components/package.json

@@ -17,8 +17,8 @@
     "webpack.config.js"
   ],
   "dependencies": {
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0"
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4"
   },
   "devDependencies": {
     "@demo/config": "workspace:^1.0.0",

demo/app/main/package.json

@@ -15,9 +15,9 @@
   },
   "dependencies": {
     "@bndl/lib": "workspace:^1.0.0",
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0",
-    "react-router-dom": "^6.6.2"
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.0"
   },
   "devDependencies": {
     "@demo/config": "workspace:^1.0.0",

demo/app/package.json

@@ -13,14 +13,14 @@
   },
   "dependencies": {
     "@app/components": "workspace:^1.0.0",
-    "@app/vendors": "workspace:^1.0.0",
     "@app/main": "workspace:^1.0.0",
+    "@app/vendors": "workspace:^1.0.0",
     "@app/views": "workspace:^1.0.0",
     "@bndl/lib": "workspace:^1.0.0",
     "@demo/config": "workspace:^1.0.0",
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0",
-    "react-router-dom": "^6.6.2"
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.0"
   },
   "devDependencies": {
     "@swc/core": "^1.3.41",

demo/app/vendors/package.json

@@ -15,9 +15,9 @@
   },
   "dependencies": {
     "@bndl/lib": "workspace:^1.0.0",
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0",
-    "react-router-dom": "^6.6.2"
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.0"
   },
   "devDependencies": {
     "@demo/config": "workspace:^",

demo/app/views/package.json

@@ -14,9 +14,9 @@
     "./webpack.config": "./webpack.config.js"
   },
   "dependencies": {
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0",
-    "react-router-dom": "^6.6.2"
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.0"
   },
   "devDependencies": {
     "@demo/config": "workspace:^1.0.0",

demo/package.json

@@ -19,9 +19,9 @@
     "@demo/server": "workspace:^1.0.0",
     "koa": "^2.14.1",
     "koa-mount": "^4.0.0",
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0",
-    "react-router-dom": "^6.6.2"
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.0"
   },
   "devDependencies": {
     "@koa/router": "^12.0.0",

demo/server/tsconfig.json

@@ -3,7 +3,7 @@
 
   "compilerOptions": {
     "target": "esnext",
-    "module": "esnext",
+    "module": "nodenext",
     "moduleResolution": "nodenext",
   }
 }

lib/esbuild.bundle.js

@@ -3,7 +3,7 @@ import { fileURLToPath } from 'url';
 
 import { build } from 'esbuild';
 
-import pkg from './package.json' assert { type: 'json' };
+import pkg from './package.json' with { type: 'json' };
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);

lib/package.json

@@ -12,15 +12,15 @@
     "test:components": "jest"
   },
   "dependencies": {
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0"
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4"
   },
   "devDependencies": {
     "@jest/globals": "^29.5.0",
     "@swc/core": "^1.3.36",
     "@testing-library/jest-dom": "^5.16.5",
     "@testing-library/react": "^14.0.0",
-    "@types/node": "^18.11.18",
+    "@types/node": "^25.0.10",
     "@types/testing-library__jest-dom": "^5.14.5",
     "esbuild": "0.17.18",
     "eslint-plugin-react": "^7.32.2",

package.json

@@ -51,6 +51,6 @@
     "@bndl/lib": "workspace:^",
     "@playwright/experimental-ct-react": "^1.33.0",
     "@playwright/test": "^1.33.0",
-    "@types/node": "^18.11.18"
+    "@types/node": "^25.0.10"
   }
 }