fix: update node and run the audit pass

.github/workflows/ci.yml

@@ -11,7 +11,7 @@ jobs:
       should-skip-job: ${{steps.skip-check.outputs.should_skip}}
     steps:
       - id: skip-check
-        uses: fkirc/skip-duplicate-actions@v5.3.0
+        uses: fkirc/skip-duplicate-actions@v5.3.2
         with:
           github_token: ${{github.token}}
 
@@ -43,7 +43,7 @@ jobs:
     runs-on: ${{matrix.os}}
     steps:
     - name: checkout code
-      uses: actions/checkout@v3
+      uses: actions/checkout@v6
 
     - name: read node version from .nvmrc
       run: echo "NVMRC=$(cat .nvmrc)" >> $GITHUB_OUTPUT
@@ -63,7 +63,7 @@ jobs:
       if: ${{startsWith(matrix.os, 'ubuntu')}}
 
     - name: setup node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v6
       with:
         node-version: '${{steps.nvm.outputs.NVMRC}}'
         cache: npm
@@ -77,12 +77,10 @@ jobs:
       run: npm i --prefer-offline --no-audit
 
     - name: run npm test
-      uses: coactions/setup-xvfb@v1
-      with:
-        run: npm run test
+      run: xvfb-run --auto-servernum npm run test
 
     - name: coverage
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v6
       with:
         token: ${{secrets.CODECOV_TOKEN}}
         files: './test/dist/coverage/coverage-final.json'

.github/workflows/release.yml

@@ -18,7 +18,7 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         # We neeed to fetch the entire history as conventional-changelog needs
         # access to any number of git commits to build the changelog.
         with:
@@ -30,7 +30,7 @@ jobs:
         id: nvm
 
       - name: setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
           node-version: '${{steps.nvm.outputs.NVMRC}}'
           cache: npm
@@ -69,7 +69,7 @@ jobs:
         if: env.NETLIFY_BASE != ''
 
       - name: Create Github release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v3
         with:
           body_path: CHANGELOG.md
           token: ${{github.token}}

.jsdoc.json

@@ -0,0 +1,3 @@
+{
+  "plugins": ["plugins/markdown"]
+}

.nvmrc

@@ -1 +1 @@
-22
+24