updates (#1119)

* updates

* lock file rebase

* fix permissions for test action

* vulns

Author: juanri0s

.github/workflows/dependency-review.yml

@@ -0,0 +1,20 @@
+name: dependency review
+
+on: [pull_request]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+      - name: Perform dependency review
+        uses: actions/dependency-review-action@v4
+        with:
+          fail-on-severity: low
+          comment-summary-in-pr: on-failure

.github/workflows/test.yml

@@ -2,11 +2,17 @@ name: Test
 
 on:
   push:
-    branches:    # Array of patterns that match refs/heads
-      - main     # Push events on main branch
-  pull_request:  # Specify a second event with pattern matching
+    branches: # Array of patterns that match refs/heads
+      - main # Push events on main branch
+  pull_request: # Specify a second event with pattern matching
 env:
   CI: true
+
+permissions:
+  contents: read
+  actions: read
+  checks: write
+
 jobs:
   unit:
     runs-on: ubuntu-latest
@@ -34,8 +40,8 @@ jobs:
       - run: npm run benchmarks
       - name: Coveralls GitHub Action
         # Per Actions best practices, SHA is the safest for third party actions
-        # https://github.com/coverallsapp/github-action/releases/tag/v2.3.4
-        uses: coverallsapp/github-action@cfd0633edbd2411b532b808ba7a8b5e04f76d2c8
+        # https://github.com/coverallsapp/github-action/releases/tag/v2.3.6
+        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           flag-name: run-unit-${{ matrix.node-version }}
@@ -47,8 +53,8 @@ jobs:
     steps:
       - name: Coveralls Finished
         # Per Actions best practices, SHA is the safest for third party actions
-        # https://github.com/coverallsapp/github-action/releases/tag/v2.3.4
-        uses: coverallsapp/github-action@cfd0633edbd2411b532b808ba7a8b5e04f76d2c8
+        # https://github.com/coverallsapp/github-action/releases/tag/v2.3.6
+        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b
         with:
           github-token: ${{ secrets.github_token }}
           parallel-finished: true

.nvmrc

@@ -1 +1 @@
-20.18.0
+20.19.0

.prettierrc

@@ -2,5 +2,16 @@
   "singleQuote": true,
   "printWidth": 120,
   "trailingComma": "all",
-  "tabWidth": 4
+  "tabWidth": 4,
+  "overrides": [
+    {
+      "files": ["*.{yaml,yml}"],
+      "options": {
+        "tabWidth": 2,
+        "useTabs": false,
+        "singleQuote": true,
+        "bracketSpacing": true
+      }
+    }
+  ]
 }

documentation/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@fast-csv/docs",
-    "version": "5.0.3",
+    "version": "5.0.4",
     "private": true,
     "scripts": {
         "start": "docusaurus start --port=3001",
@@ -9,8 +9,8 @@
         "deploy": "docusaurus deploy"
     },
     "dependencies": {
-        "@docusaurus/core": "3.7.0",
-        "@docusaurus/preset-classic": "3.7.0",
+        "@docusaurus/core": "3.8.1",
+        "@docusaurus/preset-classic": "3.8.1",
         "classnames": "2.5.1",
         "react": "18.3.1",
         "react-dom": "18.3.1"