ts 6

.devcontainer/Dockerfile

@@ -1,4 +1,4 @@
-ARG VARIANT="22"
+ARG VARIANT="24"
 
 FROM mcr.microsoft.com/vscode/devcontainers/javascript-node:${VARIANT}
 

.devcontainer/devcontainer.json

@@ -3,7 +3,7 @@
   "build": {
     "dockerfile": "Dockerfile",
     "args": {
-      "VARIANT": "22"
+      "VARIANT": "24"
     }
   },
   "extensions": [

.github/actions/setup/action.yml

@@ -6,7 +6,7 @@ inputs:
   node_version:
     description: The Node.js version.
     required: false
-    default: '22'
+    default: '24'
   registry_url:
     description: The Node.js package registry URL.
     required: false
@@ -20,14 +20,13 @@ runs:
   using: composite
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v7
       if: inputs.install_dependencies == 'true'
       with:
-        cache: npm
         node-version: ${{ inputs.node_version }}
         registry-url: ${{ inputs.registry_url }}
     - name: Setup Node.js without cache
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v7
       if: inputs.install_dependencies == 'false'
       with:
         node-version: ${{ inputs.node_version }}

.github/workflows/_build.yml

@@ -8,7 +8,7 @@ on:
         description: The Node.js version.
         type: string
         required: false
-        default: '22'
+        default: '24'
     outputs:
       artifact_name:
         description: The artifact name.
@@ -21,7 +21,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Setup
         uses: ./.github/actions/setup
         with:
@@ -31,7 +31,7 @@ jobs:
       - name: Package
         run: npm pack
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: build-${{ github.sha }}
           if-no-files-found: error

.github/workflows/_publish.yml

@@ -15,7 +15,7 @@ on:
     secrets:
       registry_token:
         description: The package registry token.
-        required: true
+        required: false
 
 jobs:
   publish:
@@ -24,21 +24,21 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Setup
         uses: ./.github/actions/setup
         with:
           install_dependencies: 'false'
       - name: Download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.artifact_name }}
           path: .
       - name: Get meta
         id: meta
         run: echo "tgz=$(ls *.tgz | head -n1)" >> $GITHUB_OUTPUT
       - name: Publish
-        uses: JS-DevTools/npm-publish@v3
+        uses: JS-DevTools/npm-publish@v4
         with:
           access: public
           token: ${{ secrets.registry_token }}

.github/workflows/check.yml

@@ -20,14 +20,14 @@ jobs:
         os:
           - ubuntu-latest
         node:
-          - '20'
           - '22'
+          - '24'
         include:
           - os: ubuntu-latest
             os_name: Linux
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Setup
         uses: ./.github/actions/setup
         with:
@@ -42,11 +42,11 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - '20'
           - '22'
+          - '24'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Setup
         uses: ./.github/actions/setup
         with:
@@ -67,18 +67,18 @@ jobs:
         os:
           - ubuntu-latest
         node:
-          - '20'
           - '22'
+          - '24'
         include:
           - os: ubuntu-latest
             os_name: Linux
     steps:
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ matrix.node }}
       - name: Download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: ${{ needs.build.outputs.artifact_name }}
           path: .
@@ -113,11 +113,11 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - '20'
           - '22'
+          - '24'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Setup
         uses: ./.github/actions/setup
         with:

.github/workflows/format.yml

@@ -14,12 +14,12 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.head_ref }}
           token: ${{ secrets.GH_TOKEN }}
       - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@v7
         with:
           git_user_signingkey: true
           git_commit_gpgsign: true
@@ -32,7 +32,7 @@ jobs:
       - name: Format
         run: npm run format
       - name: Commit
-        uses: stefanzweifel/git-auto-commit-action@v6
+        uses: stefanzweifel/git-auto-commit-action@v7
         if: always()
         with:
           commit_message: 'ci: Format code'

.github/workflows/generate.yml

@@ -14,12 +14,12 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.head_ref }}
           token: ${{ secrets.GH_TOKEN }}
       - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@v7
         with:
           git_user_signingkey: true
           git_commit_gpgsign: true
@@ -38,7 +38,7 @@ jobs:
       - name: Normalize package-lock.json
         run: npm install
       - name: Commit
-        uses: stefanzweifel/git-auto-commit-action@v6
+        uses: stefanzweifel/git-auto-commit-action@v7
         with:
           commit_message: 'ci: Generate code'
           commit_user_name: ${{ secrets.GIT_USER_NAME }}

.github/workflows/publish.yml

@@ -19,11 +19,11 @@ jobs:
     needs: build
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: ${{ needs.build.outputs.artifact_name }}
           path: .
@@ -36,7 +36,7 @@ jobs:
           npx standard-changelog@^5.0.0 --release-count 2 --infile $outfile.tmp --outfile $outfile.tmp
           sed '1,3d' $outfile.tmp > $outfile
       - name: Create GitHub release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           token: ${{ secrets.GH_TOKEN }}
           fail_on_unmatched_files: true
@@ -47,11 +47,12 @@ jobs:
     name: npm
     uses: ./.github/workflows/_publish.yml
     needs: build
+    permissions:
+      contents: read
+      id-token: write
     with:
       artifact_name: ${{ needs.build.outputs.artifact_name }}
       registry_url: https://registry.npmjs.org
-    secrets:
-      registry_token: ${{ secrets.NPM_TOKEN }}
   github:
     name: GitHub Packages
     uses: ./.github/workflows/_publish.yml

.github/workflows/semantic-release.yml

@@ -27,12 +27,12 @@ jobs:
       new_release_version: ${{ steps.release.outputs.new_release_version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Semantic release
         id: release
-        uses: cycjimmy/semantic-release-action@v4
+        uses: cycjimmy/semantic-release-action@v6
         with:
           dry_run: true
   release:
@@ -43,7 +43,7 @@ jobs:
     if: needs.semantic.outputs.new_release_published == 'true' && needs.semantic.outputs.new_release_version != '1.0.0'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
       - name: Release version ${{ needs.semantic.outputs.new_release_version }} on ${{ github.ref_name }}

.github/workflows/version.yml

@@ -17,11 +17,11 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GH_TOKEN }}
       - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@v7
         with:
           git_user_signingkey: true
           git_commit_gpgsign: true

LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2021-2025 Seam Labs, Inc.
+Copyright (c) 2021-2026 Seam Labs, Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in

README.md

@@ -215,7 +215,6 @@ _GitHub Actions should already be configured: this section is for reference only
 
 The following repository secrets must be set on [GitHub Actions]:
 
-- `NPM_TOKEN`: npm token for installing and publishing packages.
 - `GH_TOKEN`: A personal access token for the bot user with
   `packages:write` and `contents:write` permission.
 - `GIT_USER_NAME`: The GitHub bot user's real name.

ava.config.js

@@ -1,12 +1,10 @@
 export default () => {
   return {
     files: ['**/*.test.ts', '!package/**/*'],
-    ignoreChanges: {
-      watchMode: ['tmp/**/*'],
-    },
-    extensions: {
-      ts: 'commonjs',
+    watchMode: {
+      ignoreChanges: ['tmp/**/*'],
     },
+    extensions: ['ts'],
     nodeArguments: ['--import=tsx'],
   }
 }