chore: adds required npm audit check to PRs (#880)

* chore: adds npm audit ci check

* chore: using v4 for actions where available

* npm audit fix

.github/workflows/e2e-tests.yml

@@ -22,9 +22,9 @@ jobs:
           - 18
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
 

.github/workflows/lint.yml

@@ -19,9 +19,9 @@ jobs:
         node:
           - 20
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
       - run: npm install -g npm

.github/workflows/mitm.yml

@@ -23,9 +23,9 @@ jobs:
           - 20
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
 

.github/workflows/npm-audit.yml

@@ -0,0 +1,26 @@
+name: NPM Audit
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - edited
+      - synchronize
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+      matrix:
+        ghc: ['8.8.4']
+        node:
+          - 22
+    steps:
+      - uses: actions/checkout@v4
+      - name: Use Node.js ${{ matrix.node }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node }}
+      - run: npm ci
+      - run: npm audit

.github/workflows/prepare-release.yml

@@ -16,7 +16,7 @@ jobs:
       - uses: actions/checkout@v4
       - name: Cache node modules
         id: cache-npm
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         env:
           cache-name: cache-node-modules
         with:

.github/workflows/prettier.yml

@@ -19,9 +19,9 @@ jobs:
         node:
           - 20
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
       - run: npm install -g npm

.github/workflows/publish.yml

@@ -26,13 +26,13 @@ jobs:
         run: |
           gh release edit "${{ env.VERSION_TAG }}" --draft=false --prerelease=false --latest=true
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: '20.x'
           registry-url: 'https://registry.npmjs.org'
       - name: Cache node modules
         id: cache-npm
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         env:
           cache-name: cache-node-modules
         with:

.github/workflows/size-limit.yml

@@ -6,8 +6,8 @@ jobs:
     env:
       CI_JOB_NUMBER: 1
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: '20.x'
           registry-url: 'https://registry.npmjs.org'

.github/workflows/unit-tests.yml

@@ -23,9 +23,9 @@ jobs:
           - 20
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
 

docs/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## [Unreleased]
 
+### Added
+
+- chore: adds required `npm audit` check to PRs
+
+### Changed
+
+- chore: upgrades github actions to v4
+
 ## [1.2.1] - 2024-04-25
 
 ### Changed