Fix audit

.github/workflows/qa.yml

@@ -16,16 +16,15 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node: [20, 22, 24]
+        node: [20, 22, 24, 26]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
 
-      - name: Clean pnpm setup cache
-        run: rm -rf ~/setup-pnpm
-
       - name: Setup pnpm
         uses: pnpm/action-setup@v5
+        with:
+          dest: ${{ runner.temp }}/setup-pnpm
 
       - name: Setup Node ${{ matrix.node }}
         uses: actions/setup-node@v6

.github/workflows/release.yml

@@ -28,11 +28,10 @@ jobs:
           client-id: ${{ secrets.AUTH_APP_ID }}
           private-key: ${{ secrets.AUTH_APP_KEY }}
 
-      - name: Clean pnpm setup cache
-        run: rm -rf ~/setup-pnpm
-
       - name: Setup pnpm
         uses: pnpm/action-setup@v5
+        with:
+          dest: ${{ runner.temp }}/setup-pnpm
 
       - name: Setup Node
         uses: actions/setup-node@v6
@@ -55,6 +54,7 @@ jobs:
     timeout-minutes: 10
     permissions:
       contents: write
+      id-token: write
     steps:
       - name: Generate token
         id: auth
@@ -68,11 +68,10 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Clean pnpm setup cache
-        run: rm -rf ~/setup-pnpm
-
       - name: Setup pnpm
         uses: pnpm/action-setup@v5
+        with:
+          dest: ${{ runner.temp }}/setup-pnpm
 
       - name: Setup Node
         uses: actions/setup-node@v6
@@ -97,7 +96,7 @@ jobs:
           fi
 
       - name: Publish to npm
-        run: pnpm publish --no-git-checks --tag ${{ steps.npm-tag.outputs.tag }} --access public
+        run: pnpm publish --no-git-checks --tag ${{ steps.npm-tag.outputs.tag }} --access public --provenance
 
       - name: Create and push git tag
         id: git-tag

.oxlintrc.json

@@ -56,6 +56,7 @@
     "unicorn/prefer-module": "off",
     "unicorn/catch-error-name": "off",
     "typescript/no-unnecessary-type-arguments": "off",
+    "typescript/explicit-member-accessibility": "off",
     // custom config
     // "eslint/func-style": ["error", "declaration"],
     "typescript/return-await": ["error", "error-handling-correctness-only"],

package.json

@@ -47,7 +47,7 @@
   "scripts": {
     "build": "rimraf dist && pnpm run main-ts:build && vite build",
     "bundle:visualize": "vite-bundle-visualizer",
-    "check": "pnpm run format && pnpm run lint && pnpm run typecheck && pnpm run build && pnpm run test:coverage",
+    "check": "pnpm run format && pnpm run lint && pnpm run typecheck && pnpm run build && pnpm run test",
     "check:fix": "pnpm run format:fix && pnpm run lint:fix",
     "dev": "vite & pnpm run main-ts:watch",
     "format": "oxfmt --check",
@@ -67,32 +67,31 @@
   },
   "dependencies": {
     "@localazy/languages": "^0.1.11",
-    "lodash-es": "^4.18.1"
+    "es-toolkit": "^1.46.1"
   },
   "devDependencies": {
-    "@microsoft/api-extractor": "^7.58.2",
+    "@microsoft/api-extractor": "^7.58.7",
     "@rollup/plugin-terser": "^1.0.0",
     "@tsconfig/node24": "^24.0.4",
     "@types/isomorphic-fetch": "^0.0.39",
-    "@types/lodash-es": "^4.17.12",
     "@types/node": "^22.19.17",
-    "@vitest/coverage-v8": "^4.1.4",
-    "@vitest/ui": "^4.1.4",
+    "@vitest/coverage-v8": "^4.1.6",
+    "@vitest/ui": "^4.1.6",
     "fetch-mock": "^12.6.0",
     "husky": "^9.1.7",
     "isomorphic-fetch": "^3.0.0",
-    "oxfmt": "^0.45.0",
-    "oxlint": "^1.60.0",
-    "oxlint-tsgolint": "^0.21.0",
+    "oxfmt": "^0.49.0",
+    "oxlint": "^1.64.0",
+    "oxlint-tsgolint": "^0.22.1",
     "reexport": "^1.4.1",
     "rimraf": "^6.1.3",
-    "typescript": "^6.0.2",
-    "unplugin-dts": "^1.0.0-beta.6",
-    "unplugin-replace": "^0.8.0",
-    "vite": "^8.0.8",
+    "typescript": "^6.0.3",
+    "unplugin-dts": "^1.0.0",
+    "unplugin-replace": "^0.9.0",
+    "vite": "^8.0.13",
     "vite-bundle-visualizer": "^1.2.1",
     "vite-plugin-node-polyfills": "^0.2.0",
-    "vitest": "^4.1.2"
+    "vitest": "^4.1.6"
   },
   "engines": {
     "node": ">=20"