update test infra

.github/renovate.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:base"],
+  "labels": [":dependabot:", ":label: dependencies"],
+  "packageRules": [
+    {
+      "matchManagers": ["github-actions"],
+      "groupName": "github-actions"
+    }
+  ],
+  "npm": {
+    "stabilityDays": 3
+  },
+  "rangeStrategy": "bump",
+  "prHourlyLimit": 10,
+  "vulnerabilityAlerts": {
+    "labels": [":label: security"],
+    "automerge": false,
+    "assignees": ["@runspired"],
+    "enabled": true
+  },
+  "ignorePaths": ["node_modules/**", "**/node_modules/**"]
+}

.github/workflows/main.yml

@@ -4,12 +4,7 @@ on:
   pull_request:
   push:
     branches:
-      - master
       - main
-      - beta
-      - release
-      - 'release-*'
-      - 'lts-*'
     tags:
       - '*'
 
@@ -22,26 +17,32 @@ jobs:
     timeout-minutes: 5
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+      - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
+      - uses: actions/setup-node@v4
         with:
-          node-version: "16"
-          cache: "yarn"
-      - name: Yarn install
-        run: yarn --frozen-lockfile
+          registry-url: 'https://registry.npmjs.org'
+          node-version-file: 'package.json'
+          node-version: "18"
+          cache: "pnpm"
+      - name: Pnpm install
+        run: pnpm--frozen-lockfile
       - name: Lint js
-        run: yarn lint:js
+        run: pnpm lint:js
 
   basic-tests:
     name: Basic Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+      - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
+      - uses: actions/setup-node@v4
         with:
-          node-version: "16"
-          cache: "yarn"
+          registry-url: 'https://registry.npmjs.org'
+          node-version-file: 'package.json'
+          node-version: "18"
+          cache: "pnpm"
       - name: Install Dependencies
-        run: yarn install --frozen-lockfile
+        run: pnpm install
       - name: Basic Development Tests
-        run: yarn test:development
+        run: pnpm test:development

.gitignore

@@ -14,7 +14,6 @@
 .eslintcache
 /DEBUG
 /packages/*/DEBUG
-/.github/
 /.sass-cache
 /connect.lock
 /coverage/*