fix: update node, regenerate the lockfile and run the audit pass

.github/workflows/ci.yml

@@ -11,7 +11,7 @@ jobs:
       should-skip-job: ${{steps.skip-check.outputs.should_skip}}
     steps:
       - id: skip-check
-        uses: fkirc/skip-duplicate-actions@v5.3.0
+        uses: fkirc/skip-duplicate-actions@v5.3.2
         with:
           github_token: ${{github.token}}
 
@@ -28,7 +28,7 @@ jobs:
     runs-on: ${{matrix.os}}
     steps:
     - name: checkout code
-      uses: actions/checkout@v3
+      uses: actions/checkout@v6
 
     - name: read node version from .nvmrc
       run: echo "NVMRC=$(cat .nvmrc)" >> $GITHUB_OUTPUT
@@ -45,7 +45,7 @@ jobs:
       run: pulseaudio -D
 
     - name: setup node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v6
       with:
         node-version: '${{steps.nvm.outputs.NVMRC}}'
         cache: npm
@@ -59,12 +59,10 @@ jobs:
       run: npm i --prefer-offline --no-audit
 
     - name: run npm test
-      uses: coactions/setup-xvfb@v1
-      with:
-        run: npm run test
+      run: npm run test
 
     - name: coverage
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@v6
       with:
         token: ${{secrets.CODECOV_TOKEN}}
         files: './test/dist/coverage/coverage-final.json'

.github/workflows/release.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         # We neeed to fetch the entire history as conventional-changelog needs
         # access to any number of git commits to build the changelog.
         with:
@@ -26,7 +26,7 @@ jobs:
         id: nvm
 
       - name: setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
           node-version: '${{steps.nvm.outputs.NVMRC}}'
           cache: npm
@@ -65,7 +65,7 @@ jobs:
         if: env.NETLIFY_BASE != ''
 
       - name: Create Github release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v3
         with:
           body_path: CHANGELOG.md
           token: ${{github.token}}

.nvmrc

@@ -1 +1 @@
-10
+24