chore: bump deps and enable Trusted Publishing

.github/workflows/ci.yml

@@ -0,0 +1,39 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+env:
+  NODE_VER: 24.13
+  CI: true
+
+jobs:
+  test-module:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: pnpm/action-setup@v4
+        name: Install pnpm
+        with:
+          run_install: false
+
+      - name: Use Node.js ${{ env.NODE_VER }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VER }}
+          cache: 'pnpm'
+
+      - name: Install deps and prepare types
+        run: pnpm i
+
+      # Check building
+      - run: pnpm build
+
+      # Check linting and typing
+      - run: pnpm lint && pnpm format:check
+

.github/workflows/release.yml

@@ -9,7 +9,7 @@ permissions:
   id-token: write # required for npm provenance
 
 env:
-  NODE_VER: 24.7
+  NODE_VER: 24.13
   CI: true
 
 jobs:
@@ -57,9 +57,6 @@ jobs:
       # Note: no build step because npm publish would run `prepack` script which builds the module
 
       - name: Publish to npm with provenance
-        env:
-          # Environment variable used by `setup-node` action
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           TAG="${{ github.event.release.tag_name }}"
 

.oxlintrc.json

@@ -4,9 +4,13 @@
     "correctness": "error",
     "suspicious": "warn",
     "pedantic": "warn",
-    "perf": "warn",
+    "perf": "warn"
   },
   "rules": {
-    "no-array-callback-reference": "off"
+    "max-lines-per-function": "off",
+    "no-array-callback-reference": "off",
+    "no-inline-comments": "off",
+    "no-unsafe-assignment": "off",
+    "strict-boolean-expressions": "off"
   }
 }

package.json

@@ -39,20 +39,20 @@
   "license": "MIT",
   "packageManager": "pnpm@10.18.1+sha512.77a884a165cbba2d8d1c19e3b4880eee6d2fcabd0d879121e282196b80042351d5eb3ca0935fa599da1dc51265cc68816ad2bddd2a2de5ea9fdf92adbec7cd34",
   "dependencies": {
-    "@aws-sdk/client-ssm": "^3.939.0",
+    "@aws-sdk/client-ssm": "^3.990.0",
     "@napi-rs/keyring": "^1.2.0",
-    "commander": "^14.0.2",
-    "dotenv": "^17.2.3",
+    "commander": "^14.0.3",
+    "dotenv": "^17.3.1",
     "inquirer": "^12.11.1",
-    "zod": "^4.1.13"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@stylistic/eslint-plugin": "^5.6.1",
-    "@types/node": "^24.10.1",
-    "@typescript-eslint/parser": "^8.48.0",
-    "eslint": "^9.39.1",
-    "oxlint": "^1.30.0",
-    "oxlint-tsgolint": "^0.8.2",
+    "@stylistic/eslint-plugin": "^5.8.0",
+    "@types/node": "^24.10.13",
+    "@typescript-eslint/parser": "^8.55.0",
+    "eslint": "^9.39.2",
+    "oxlint": "^1.48.0",
+    "oxlint-tsgolint": "^0.13.0",
     "typescript": "^5.9.3"
   }
 }