chore: update dependencies

.devcontainer/Dockerfile

@@ -11,7 +11,7 @@
 # limitations under the License.
 #
 
-FROM ubuntu:20.04
+FROM ubuntu:24.04
 
 # Avoid warnings by switching to noninteractive
 ENV DEBIAN_FRONTEND=noninteractive
@@ -21,7 +21,7 @@ ENV DEBIAN_FRONTEND=noninteractive
 # will be updated to match your local UID/GID (when using the dockerFile property).
 # See https://aka.ms/vscode-remote/containers/non-root-user for details.
 ARG USERNAME=vscode
-ARG USER_UID=1000
+ARG USER_UID=1001
 ARG USER_GID=$USER_UID
 
 # Uncomment the following COPY line and the corresponding lines in the `RUN` command if you wish to
@@ -48,8 +48,8 @@ RUN apt-get update \
     && export NVM_DIR="$HOME/.nvm" \
     && \. "$NVM_DIR/nvm.sh" \
     #
-    # Install Node 16.14.0 (latest LTS)
-    && nvm install v16.14.0 \
+    # Install Node 22.16 (latest LTS)
+    && nvm install v22.16.0 \
     #
     # Install Typescript Globally
     && npm install -g typescript \

.devcontainer/devcontainer.json

@@ -5,32 +5,36 @@
   "dockerFile": "Dockerfile",
 
   // Set *default* container specific settings.json values on container create.
-  "settings": {
-    "terminal.integrated.profiles.linux": {
-      "bash": {
-        "path": "bash"
-      },
-      "zsh": {
-        "path": "zsh"
-      },
-      "fish": {
-        "path": "fish"
-      },
-      "tmux": {
-        "path": "tmux",
-        "icon": "terminal-tmux"
-      },
-      "pwsh": {
-        "path": "pwsh",
-        "icon": "terminal-powershell"
+  "customizations": {
+    "vscode": {
+      // Add the IDs of extensions you want installed when the container is created.
+      "extensions": ["ms-azuretools.vscode-dapr"],
+      // Use 'settings' to set *default* container specific settings.json values on container create.
+      "settings": {
+        "terminal.integrated.profiles.linux": {
+          "bash": {
+            "path": "bash"
+          },
+          "zsh": {
+            "path": "zsh"
+          },
+          "fish": {
+            "path": "fish"
+          },
+          "tmux": {
+            "path": "tmux",
+            "icon": "terminal-tmux"
+          },
+          "pwsh": {
+            "path": "pwsh",
+            "icon": "terminal-powershell"
+          }
+        },
+        "terminal.integrated.defaultProfile.linux": "bash"
       }
-    },
-    "terminal.integrated.defaultProfile.linux": "bash"
+    }
   },
 
-  // Add the IDs of extensions you want installed when the container is created.
-  "extensions": ["ms-azuretools.vscode-dapr"],
-
   "mounts": ["source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind"],
 
   "postCreateCommand": "npm install"

.github/workflows/build.yml

@@ -27,20 +27,20 @@ on:
   workflow_dispatch: {}
 
 env:
-  NODE_VER: 16.14.0
+  NODE_VER: 22.16.0
 
 jobs:
   build:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
-        node_version: [16.14.0]
+        node_version: [22.16.0]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Setup Node ${{ matrix.node_version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node_version }}
 
@@ -53,18 +53,18 @@ jobs:
         run: npm run test:unit:all
 
       - name: Upload test coverage
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
 
   publish:
     needs: build
     if: startswith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
     environment: production
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Setup Node ${{ env.NODE_VER }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VER }}
           registry-url: "https://registry.npmjs.org"
@@ -103,10 +103,10 @@ jobs:
     runs-on: ubuntu-latest
     environment: development
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Setup Node ${{ env.NODE_VER }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VER }}
           registry-url: "https://registry.npmjs.org"

.github/workflows/dapr-bot.yml

@@ -22,7 +22,7 @@ jobs:
     name: bot-processor
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2 # to make the JS script available for the next step
+      - uses: actions/checkout@v4 # to make the JS script available for the next step
       - name: Comment analyzer
         uses: actions/github-script@v4
         with:

.github/workflows/fossa.yaml

@@ -21,15 +21,15 @@ jobs:
       FOSSA_API_KEY: b88e1f4287c3108c8751bf106fb46db6 # This is a PUSH ONLY token that is safe to be shared with the public
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: "Run FOSSA Scan"
-        uses: fossas/fossa-action@v1.1.0 # Use a specific version if locking is preferred
+        uses: fossas/fossa-action@c0a7d013f84c8ee5e910593186598625513cc1e4 # v1.6.0
         with:
           api-key: ${{ env.FOSSA_API_KEY }}
 
       - name: "Run FOSSA Test"
-        uses: fossas/fossa-action@v1.1.0 # Use a specific version if locking is preferred
+        uses: fossas/fossa-action@c0a7d013f84c8ee5e910593186598625513cc1e4 # v1.6.0
         with:
           api-key: ${{ env.FOSSA_API_KEY }}
           run-tests: true

.github/workflows/test-e2e.yml

@@ -40,7 +40,7 @@ jobs:
       DAPR_INSTALL_URL: https://raw.githubusercontent.com/dapr/cli/master/install/install.sh
       DAPR_CLI_REF: ""
       DAPR_REF: ""
-      NODE_VER: 16.14.0
+      NODE_VER: 22.16.0
     services:
       emqx:
         image: emqx/emqx
@@ -61,20 +61,20 @@ jobs:
 
       - name: Set up Go ${{ env.GOVER }}
         if: env.DAPR_REF != '' || env.DAPR_CLI_REF != ''
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GOVER }}
 
       - name: Checkout Dapr CLI repo to custom reference
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         if: env.DAPR_CLI_REF != ''
         with:
           repository: dapr/cli
           ref: ${{ env.DAPR_CLI_REF }}
           path: cli
 
       - name: Checkout Dapr runtime repo to custom reference
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         if: env.DAPR_REF != ''
         with:
           repository: dapr/dapr
@@ -111,12 +111,12 @@ jobs:
           ./dist/linux_amd64/release/placement &
 
       - name: Checkout JS-SDK
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       # Setup .npmrc file to publish to npm
       # https://docs.github.com/en/actions/publishing-packages/publishing-nodejs-packages
       - name: NodeJS - Install
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VER }}
           registry-url: "https://registry.npmjs.org"
@@ -136,4 +136,4 @@ jobs:
           dapr run --app-id typescript-build npm run start
 
       - name: Upload test coverage
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2