☕ chore (deps): bump actions and npm dependencies (#39)

* ⚙️ setup: allow Dependabot auto-generated commit messages

* ⚙️ setup: remove Dependabot commit message skip logic

* ⚙️ setup: ensure target-branch is set for npm, GitHub Actions, and Docker

* ⚙️ setup: update CodeQL and landing page artifact actions to latest versions

* ⚙️ setup: allow Dependabot auto-generated commit messages

* ⚙️ setup: remove Dependabot commit message skip logic

* ⚙️ setup: ensure target-branch is set for npm, GitHub Actions, and Docker

* ⚙️ setup: update CodeQL and landing page artifact actions to latest versions

* ☕ chore (deps): revert vite-plugin-svelte to v6 for vite 7 compat

Author: warengonzaga

.github/dependabot.yml

@@ -3,6 +3,7 @@ updates:
   # npm dependencies
   - package-ecosystem: "npm"
     directory: "/"
+    target-branch: "dev"
     schedule:
       interval: "weekly"
       day: "monday"
@@ -22,6 +23,7 @@ updates:
   # GitHub Actions versions
   - package-ecosystem: "github-actions"
     directory: "/"
+    target-branch: "dev"
     schedule:
       interval: "weekly"
       day: "monday"
@@ -35,6 +37,7 @@ updates:
   # Docker base image
   - package-ecosystem: "docker"
     directory: "/"
+    target-branch: "dev"
     schedule:
       interval: "weekly"
       day: "monday"

.github/workflows/codeql.yml

@@ -24,14 +24,14 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4
         with:
           languages: ${{ matrix.language }}
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4
         with:
           category: '/language:${{ matrix.language }}'

.github/workflows/landing.yml

@@ -31,7 +31,7 @@ jobs:
         run: bun run --cwd src/landing build
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
         with:
           path: src/landing/dist
 

.github/workflows/package.yml

@@ -31,7 +31,7 @@ jobs:
 
       - uses: oven-sh/setup-bun@v2
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
         with:
           node-version: '22'
 

bun.lock

@@ -34,7 +34,7 @@
   "devDependencies": {
     "@biomejs/biome": "^2.4.4",
     "@types/bun": "latest",
-    "@types/node": "^22.10.0",
+    "@types/node": "^25.3.0",
     "husky": "^9.1.7",
     "typescript": "^5.7.0"
   },

package.json

@@ -15,7 +15,7 @@
     "svelte": "^5.20.1"
   },
   "devDependencies": {
-    "@sveltejs/vite-plugin-svelte": "^6.1.4",
+    "@sveltejs/vite-plugin-svelte": "^6.2.4",
     "@tailwindcss/vite": "^4.1.18",
     "tailwindcss": "^4.1.18",
     "vite": "^7.2.4"

src/landing/package.json

@@ -23,12 +23,12 @@
     "@tinyclaw/logger": "workspace:*",
     "@tinyclaw/types": "workspace:*",
     "dompurify": "^3.2.6",
-    "marked": "^12.0.2",
+    "marked": "^17.0.3",
     "qrcode": "^1.5.4",
     "svelte": "^5.20.1"
   },
   "devDependencies": {
-    "@sveltejs/vite-plugin-svelte": "^6.1.4",
+    "@sveltejs/vite-plugin-svelte": "^6.2.4",
     "@tailwindcss/vite": "^4.1.18",
     "@types/qrcode": "^1.5.6",
     "tailwindcss": "^4.1.18",