feat: upgrade deps, node, bump semantic-release to v25

.github/workflows/release.yml

@@ -8,9 +8,11 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # Required for semantic-release and tag pushing
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: semantic-release
         id: semantic
@@ -34,6 +36,14 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Update major version tag
+        if: steps.semantic.outputs.new-release-published == 'true'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag -fa v${{ steps.semantic.outputs.release-major }} -m "Update v${{ steps.semantic.outputs.release-major }} tag"
+          git push origin v${{ steps.semantic.outputs.release-major }} --force
+
       - name: Dump semantic outputs
         if: steps.semantic.outputs.new-release-published == 'true'
         run: |
@@ -80,7 +90,7 @@ jobs:
           TAGS="${TAGS},ghcr.io/codfish/semantic-release-action:v${{ steps.semantic.outputs.release-major }}"
           echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"
 
-      # Push docker images to GCR 
+      # Push docker images to GCR
       # Dockerhub is auto synced with the repo, no need to explicitly deploy
       - name: Build and push docker images to GCR
         uses: docker/build-push-action@v5

.github/workflows/validate.yml

@@ -1,20 +1,19 @@
 name: Validate
 
 on: pull_request_target
+
 permissions: {}
 
 jobs:
   validate:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
-          ref: ${{ github.event.pull_request.head.sha || github.ref }}
+          ref: ${{ github.event.pull_request.head.sha }}
 
-      - uses: codfish/actions/setup-node-and-install@v1.0.0
-        with:
-          node-version: lts/*
+      - uses: codfish/actions/setup-node-and-install@v3
 
       - run: npm run lint
 

.nvmrc

@@ -1 +1 @@
-v22.18.0
+v24.13.0