chore: Upgrade dependencies and use trusted publishing

.changeset/pink-apples-swim.md

@@ -0,0 +1,5 @@
+---
+'workspace-meta': patch
+---
+
+Upgrade dependencies and use trusted publishing

.github/workflows/lint-pr.yml

@@ -19,6 +19,6 @@ jobs:
       pull-requests: read
 
     steps:
-      - uses: amannn/action-semantic-pull-request@v5.5.3
+      - uses: amannn/action-semantic-pull-request@e7d011b07ef37e089bea6539210f6a0d360d8af9 # v6.1.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/lint.yml

@@ -13,14 +13,13 @@ jobs:
 
     steps:
       - name: Check out Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Set up pnpm
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+        uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
       - name: Set up Node.JS
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version-file: package.json
-          cache: 'pnpm'
 
       - name: Install Dependencies
         run: pnpm install --frozen-lockfile

.github/workflows/release.yml

@@ -11,27 +11,29 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
-    environment: Release
+    environment: release
     permissions:
       contents: write
       pull-requests: write
       id-token: write
-
     steps:
       - name: Check out Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Set up pnpm
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+        uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
       - name: Set up Node.JS
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version-file: package.json
-          cache: 'pnpm'
           registry-url: 'https://registry.npmjs.org'
+          scope: ${{ env.NPM_SCOPE }}
 
       - name: Install Dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Upgrade npm to v11
+        run: npm install -g npm@11
+
       - name: Create Release Pull Request or Publish to NPM
         id: changesets
         uses: changesets/action@e0145edc7d9d8679003495b11f87bd8ef63c0cba # v1.5.3
@@ -40,4 +42,3 @@ jobs:
           title: 'chore: Version Packages'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/test.yml

@@ -13,14 +13,13 @@ jobs:
 
     steps:
       - name: Check out Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Set up pnpm
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+        uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
       - name: Set up Node.JS
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version-file: package.json
-          cache: 'pnpm'
 
       - name: Install Dependencies
         run: pnpm install --frozen-lockfile

CHANGELOG.md

@@ -12,7 +12,6 @@
 
 - 96a9f4a: Add ensureFileFromTemplate helper function that allows copying template files from the config directory to packages. This is useful for maintaining consistent configuration files across packages.
 - 9ae0e68: Add configDirectory and workspacePackages fields to PluginContext. Plugins now have access to:
-
   - configDirectory: The path to the config directory (inferred as `${workspacePath}/.workspace-meta`)
   - workspacePackages: Information about all packages in the workspace, allowing plugins to reference other packages
 

mise.toml

@@ -0,0 +1,5 @@
+min_version = "2025.8.14"
+
+[tools]
+node = "22.19.0"
+pnpm = "10.17.0"

package.json

@@ -61,25 +61,22 @@
     "pkg-types": "^2.1.0"
   },
   "devDependencies": {
-    "@changesets/cli": "^2.29.4",
-    "@ktam/lint-node": "0.4.2",
-    "@tsconfig/node20": "^20.1.5",
+    "@changesets/cli": "2.29.7",
+    "@ktam/lint-node": "0.5.1",
+    "@tsconfig/node20": "^20.1.6",
     "@types/micromatch": "^4.0.9",
-    "@types/node": "~20.17.57",
-    "eslint": "^9.28.0",
-    "memfs": "^4.17.2",
-    "prettier": "^3.5.3",
-    "tsx": "^4.19.4",
-    "typescript": "~5.7.3",
-    "vitest": "3.1.4"
+    "@types/node": "^20.19.17",
+    "eslint": "9.36.0",
+    "memfs": "4.43.0",
+    "prettier": "3.6.2",
+    "tsx": "4.20.5",
+    "typescript": "5.8.3",
+    "vitest": "3.2.4"
   },
-  "packageManager": "pnpm@10.11.0",
+  "packageManager": "pnpm@10.17.0",
   "engines": {
-    "node": ">=20.0.0",
-    "pnpm": ">=10.0.0"
-  },
-  "volta": {
-    "node": "22.16.0"
+    "node": ">=20",
+    "pnpm": ">=9"
   },
   "publishConfig": {
     "access": "public",