npm dependency/audit and CI version updates

.github/workflows/ci.yml

@@ -10,23 +10,23 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: "16.x"
+          node-version: "24.x"
       - run: npm ci
       - run: npm test
   publish:
     if: github.ref == 'refs/heads/main'
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v1
+      - uses: actions/setup-node@v7
         with:
-          node-version: "16.x"
+          node-version: "24.x"
       - run: npm ci
       - run: npm run build
       - uses: peaceiris/actions-gh-pages@v3

.github/workflows/prettier.yaml

@@ -5,9 +5,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: "16.x"
+          node-version: "24.x"
       - run: npm ci
       - run: npm run format:check

.github/workflows/wgutils-automerge.yml

@@ -17,12 +17,12 @@ jobs:
     steps:
       # SECURITY: it's critical we do not check out the source pull request!
       - name: Checkout the main branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
         with:
           ref: main
 
       # We need wgutils to be installed
-      - run: yarn install
+      - run: npm ci
 
       - name: Wait for checks to pass
         env:
@@ -49,6 +49,6 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
-          if yarn wgutils can-automerge "${{ github.event.pull_request.number }}" "${{ github.event.pull_request.head.sha }}"; then
+          if npm exec wgutils -- can-automerge "${{ github.event.pull_request.number }}" "${{ github.event.pull_request.head.sha }}"; then
             gh pr merge "${{ github.event.pull_request.number }}" --squash --auto --match-head-commit "${{ github.event.pull_request.head.sha }}"
           fi

.npmrc

@@ -0,0 +1,3 @@
+ignore-scripts=true
+min-release-age=7
+min-release-age-exclude[]=wgutils