ci: trusted npm package publishing (OIDC)

Ref: https://docs.npmjs.com/trusted-publishers

.github/workflows/lint.yml

@@ -10,10 +10,10 @@ jobs:
   lint:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
+      - uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6.0.1
 
       - name: "Setup Node.js"
-        uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
+        uses: "actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f" # v6.1.0
         with:
           node-version: "lts/*"
           cache: "npm"

.github/workflows/release.yml

@@ -4,6 +4,10 @@ on:
   push:
     branches: [main, beta]
 
+permissions:
+  id-token: "write" # OIDC
+  contents: "read"
+
 jobs:
   release:
     runs-on: "ubuntu-latest"
@@ -13,13 +17,13 @@ jobs:
       pull-requests: "write"
       id-token: "write"
     steps:
-      - uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
+      - uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
 
       - name: "Setup Node.js"
-        uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
+        uses: "actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f" # v6.1.0
         with:
           node-version: "lts/*"
           cache: "npm"
@@ -34,4 +38,3 @@ jobs:
         run: "node --run release"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/test.yml

@@ -10,10 +10,10 @@ jobs:
   test:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
+      - uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6.0.1
 
       - name: "Setup Node.js"
-        uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
+        uses: "actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f" # v6.1.0
         with:
           node-version: "lts/*"
           cache: "npm"

.oxlintrc.json

@@ -14,6 +14,7 @@
   },
   "rules": {
     "no-await-in-loop": "off",
+    "constructor-super": "error",
     "for-direction": "error",
     "no-async-promise-executor": "error",
     "no-class-assign": "error",
@@ -41,6 +42,7 @@
     "no-loss-of-precision": "error",
     "no-new-native-nonconstructor": "error",
     "no-obj-calls": "error",
+    "no-promise-executor-return": "error",
     "no-prototype-builtins": "error",
     "no-self-assign": "error",
     "no-self-compare": "error",
@@ -99,6 +101,7 @@
     "no-array-constructor": "error",
     "no-caller": "error",
     "no-delete-var": "error",
+    "no-implicit-coercion": "error",
     "no-extra-boolean-cast": [
       "error",
       {
@@ -141,6 +144,7 @@
     "no-useless-constructor": "error",
     "no-useless-escape": "error",
     "no-useless-rename": "error",
+    "no-useless-return": "error",
     "no-else-return": [
       "error",
       {
@@ -352,6 +356,14 @@
         "@typescript-eslint/prefer-as-const": "error",
         "@typescript-eslint/prefer-function-type": "error",
         "@typescript-eslint/prefer-includes": "error",
+        "@typescript-eslint/prefer-nullish-coalescing": [
+          "error",
+          {
+            "ignoreTernaryTests": true,
+            "ignoreConditionalTests": false,
+            "ignoreMixedLogicalExpressions": false
+          }
+        ],
         "@typescript-eslint/prefer-reduce-type-parameter": "error",
         "@typescript-eslint/prefer-return-this-type": "error",
         "@typescript-eslint/promise-function-async": "error",

README.md

@@ -39,7 +39,7 @@ npm install --save-dev \
   eslint-plugin-promise@^7.2.1 \
   eslint-plugin-unicorn@^62.0.0 \
   eslint-plugin-import-x@^4.6.1 \
-  globals@^16.0.0 \
+  globals@^17.0.0 \
   typescript@^5.9.3 \
   typescript-eslint@^8.32.0 \
   eslint-config-conventions@latest

package.json

@@ -51,7 +51,7 @@
     "eslint-plugin-promise": "^7.2.1",
     "eslint-plugin-unicorn": "^61.0.0 || ^62.0.0",
     "eslint-plugin-import-x": "^4.6.1",
-    "globals": "^16.0.0",
+    "globals": "^16.0.0 || ^17.0.0",
     "typescript-eslint": "^8.32.0"
   },
   "peerDependenciesMeta": {
@@ -75,17 +75,17 @@
     }
   },
   "devDependencies": {
-    "@types/node": "24.10.1",
-    "globals": "16.5.0",
+    "@types/node": "25.0.8",
+    "globals": "17.0.0",
     "editorconfig-checker": "6.1.1",
-    "oxlint": "1.30.0",
-    "@oxlint/migrate": "1.30.0",
-    "eslint": "9.39.1",
+    "oxlint": "1.39.0",
+    "@oxlint/migrate": "1.39.0",
+    "eslint": "9.39.2",
     "eslint-plugin-promise": "7.2.1",
     "eslint-plugin-unicorn": "62.0.0",
     "eslint-plugin-import-x": "4.16.1",
-    "typescript-eslint": "8.48.0",
-    "prettier": "3.7.0",
+    "typescript-eslint": "8.53.0",
+    "prettier": "3.7.4",
     "semantic-release": "25.0.2",
     "typescript": "5.9.3"
   }