build(dev): bump deps, move to pnpm (#111)

.github/workflows/ci.yml

@@ -78,24 +78,31 @@ jobs:
               - 'jest.config.js'
               - 'tsconfig.json'
 
+      - name: 🚧 Install pnpm
+        if: ${{ steps.changes.outputs.app == 'true' }}
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+          run_install: false
+
       - name: 🚧 Setup Node
         if: ${{ steps.changes.outputs.app == 'true' }}
         uses: actions/setup-node@v4
         with:
           node-version-file: .node-version
-          cache: npm
+          cache: pnpm
 
       - name: 🔀 Install dependencies
         if: ${{ steps.changes.outputs.app == 'true' }}
-        run: npm ci
+        run: pnpm install --frozen-lockfile
 
       - name: 🏗️ Build
         if: ${{ steps.changes.outputs.app == 'true' }}
-        run: npm run build:ci
+        run: pnpm build:ci
 
       - name: 🧪 Test
         if: ${{ steps.changes.outputs.app == 'true' }}
-        run: npm run test:ci:cov
+        run: pnpm test:ci:cov
         continue-on-error: true
 
       - name: 📤 Upload test results

.github/workflows/linter.yml

@@ -14,6 +14,10 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   linter:
     uses: raven-actions/.workflows/.github/workflows/__linter.yml@main

.gitignore

@@ -118,3 +118,4 @@ __tests__/runner/*
 /dist
 tests/*.js
 /reports
+.dev.*

.pre-commit-config.yaml

@@ -13,7 +13,7 @@ repos:
         # files: .pre-commit-config.yaml
 
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.5.0
+    rev: v4.6.0
     hooks:
       - id: check-symlinks
       - id: trailing-whitespace
@@ -40,7 +40,7 @@ repos:
         exclude: package-lock.json
 
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.18.2
+    rev: v8.18.4
     hooks:
       - id: gitleaks
         args: