From b06bebe2c858de97f0a5141656187c28e24deef3 Mon Sep 17 00:00:00 2001
From: Osama Khalid <osama@codinghazard.com>
Date: Mon, 16 Feb 2026 14:09:19 -0500
Subject: [PATCH] chore: update workflows to node-22 and use trusted publishing

---
 .github/workflows/cd.yml | 11 +++++++++--
 .github/workflows/ci.yml |  8 +++++++-
 package-lock.json        | 25 ++++++++++++++++++-------
 package.json             |  2 +-
 4 files changed, 35 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index bd7e142..43bd82d 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -10,14 +10,21 @@ jobs:
   release:
     runs-on: ubuntu-22.04
     if: ${{ github.event.workflow_run.conclusion == 'success' && github.repository == 'good-tools/wiregasm' }}
+    permissions:
+      contents: write
+      id-token: write
     steps:
     - uses: actions/checkout@v3
 
     - name: Configure Node.js
       uses: actions/setup-node@v3
       with:
-        node-version: 18
+        node-version: 22
         cache: 'npm'
+        registry-url: 'https://registry.npmjs.org'
+
+    - name: Update npm for Trusted Publishers
+      run: npm install -g npm@latest
 
     - name: Download artifacts
       uses: dawidd6/action-download-artifact@v2
@@ -36,5 +43,5 @@ jobs:
       id: release
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        NPM_CONFIG_PROVENANCE: true
       run: npx semantic-release
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3be9ac0..3ac18a0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,13 @@ jobs:
 
     steps:
     - uses: actions/checkout@v3
-    
+
+    - name: Configure Node.js
+      uses: actions/setup-node@v3
+      with:
+        node-version: 22
+        cache: 'npm'
+
     - name: Stash old path
       run: echo "OLD_PATH=$PATH" >> "${GITHUB_ENV}"
 
diff --git a/package-lock.json b/package-lock.json
index 9531a88..84df750 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,19 +1,19 @@
 {
   "name": "@goodtools/wiregasm",
-  "version": "1.6.1",
+  "version": "1.9.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@goodtools/wiregasm",
-      "version": "1.6.1",
+      "version": "1.9.0",
       "license": "GPLV2",
       "devDependencies": {
         "@parcel/packager-ts": "^2.8.2",
         "@parcel/transformer-typescript-types": "^2.8.2",
         "@semantic-release/git": "^10.0.1",
         "@types/jest": "^29.2.5",
-        "@types/node": "^18.11.18",
+        "@types/node": "^22.19.11",
         "@types/pako": "^2.0.0",
         "@typescript-eslint/eslint-plugin": "^5.48.1",
         "@typescript-eslint/parser": "^5.48.1",
@@ -3104,10 +3104,14 @@
       "peer": true
     },
     "node_modules/@types/node": {
-      "version": "18.11.18",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.11.18.tgz",
-      "integrity": "sha512-DHQpWGjyQKSHj3ebjFI/wRKcqQcdR+MoFBygntYOZytCqNfkd2ZC4ARDJ2DQqhjH5p85Nnd3jhUJIXrszFX/JA==",
-      "dev": true
+      "version": "22.19.11",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.19.11.tgz",
+      "integrity": "sha512-BH7YwL6rA93ReqeQS1c4bsPpcfOmJasG+Fkr6Y59q83f9M1WcBRHR2vM+P9eOisYRcN3ujQoiZY8uk5W+1WL8w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~6.21.0"
+      }
     },
     "node_modules/@types/normalize-package-data": {
       "version": "2.4.1",
@@ -12898,6 +12902,13 @@
         "node": ">=0.8.0"
       }
     },
+    "node_modules/undici-types": {
+      "version": "6.21.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
+      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/unique-string": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/unique-string/-/unique-string-2.0.0.tgz",
diff --git a/package.json b/package.json
index d5c1854..d38b60f 100644
--- a/package.json
+++ b/package.json
@@ -36,7 +36,7 @@
     "@parcel/transformer-typescript-types": "^2.8.2",
     "@semantic-release/git": "^10.0.1",
     "@types/jest": "^29.2.5",
-    "@types/node": "^18.11.18",
+    "@types/node": "^22.19.11",
     "@types/pako": "^2.0.0",
     "@typescript-eslint/eslint-plugin": "^5.48.1",
     "@typescript-eslint/parser": "^5.48.1",