chore: merge all open Dependabot dependency updates

[Copilot]

Summary

Merges all 4 open Dependabot PRs into a single consolidated update. All dependencies have been validated to build and pass all 60 tests.

Dependabot PRs merged

PR	Package(s)	Change
#1966	lodash	4.17.23 → 4.18.1
#1954	@eslint/js, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint-plugin-jest, eslint-plugin-prettier	Various updates
#1952	@actions/core, @actions/exec, @actions/github, @actions/io	2.x/7.x → 3.x/9.x (now ESM-only)
#1910	jest, typescript, @types/jest, @types/node, prettier, rimraf, ts-jest	jest 29→30, typescript 5.8→6.0, and others

Changes Required

Beyond the package.json/yarn.lock updates, the following changes were needed to accommodate the upgraded packages:

Project converted to proper ESM

The @actions/core, @actions/exec, @actions/github, and @actions/io packages are now ESM-only in v3/v9. The project has been converted to native ESM to support them properly:

• package.json — Added "type": "module" so the compiled lib/*.js files run as native ES modules.
• tsconfig.json — Changed module and moduleResolution to nodenext. TypeScript now emits proper Node.js ESM output with .js extensions on relative imports.
• src/*.ts — All relative imports updated with .js extensions (required by NodeNext module resolution).
• __mocks__/@actions/*.js — Standard Jest manual mocks (proper __mocks__ convention for node_modules) replacing the previous stubs approach. __mocks__/package.json sets "type": "commonjs" so the mocks work in Jest's CJS mode. @actions/exec and @actions/io mocks include functional implementations so worktree.test.ts integration tests continue running real git commands.
• jest.config.js → jest.config.cjs — Renamed to explicit CJS; moduleNameMapper strips .js extensions so ts-jest can resolve .ts source files; ts-jest compiles tests with module: "commonjs" override.
• eslint.config.mjs — Updated ignores to __mocks__/**.

TypeScript 6

• tsconfig.json — Updated target to es2022 and added explicit types: ["node", "jest"] (TypeScript 6 requires this with the explicit lib setting).

Jest 30

• Removed testRunner: 'jest-circus/runner' (jest-circus is now the built-in default runner in Jest 30) and removed jest-circus from devDependencies.

New lint rules (updated eslint/typescript-eslint)

• preserve-caught-error — Added {cause: error} to error rethrow calls in src/git.ts, src/ssh.ts, and src/worktree.ts.
• no-useless-assignment — Added // eslint-disable-next-line comment for the status = Status.RUNNING initialization in src/lib.ts that TypeScript requires but ESLint flags as redundant.

Validation

• ✅ yarn build — TypeScript compiles cleanly; lib/*.js output is proper ESM
• ✅ yarn test — All 60 tests pass (93%+ coverage)
• ✅ yarn lint:check — No lint errors
• ✅ yarn lint:format:check — All files properly formatted
• ✅ CodeQL Security Scan — 0 alerts

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.55%. Comparing base (58bf4c7) to head (e160ec0).
⚠️ Report is 1 commits behind head on dev.

Additional details and impacted files

@@            Coverage Diff             @@
##              dev    #1967      +/-   ##
==========================================
+ Coverage   93.45%   93.55%   +0.10%     
==========================================
  Files           7        7              
  Lines         321      326       +5     
  Branches       88       97       +9     
==========================================
+ Hits          300      305       +5     
  Misses         21       21              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[JamesIves]

@copilot convert things to esm instead of writing around it

[Copilot]

@copilot convert things to esm instead of writing around it

Done in e160ec0. The project now uses proper ESM:

• package.json has "type": "module" so compiled lib/*.js files run as native ES modules
• tsconfig.json uses module: "nodenext" + moduleResolution: "nodenext" — TypeScript emits proper ESM with .js extensions
• All source and test files updated with .js extensions on relative imports
• Replaced __tests__/stubs/ + moduleNameMapper with __mocks__/@actions/*.js (the standard Jest manual mock convention for node_modules); __mocks__/package.json sets "type": "commonjs" so the mocks work in Jest's CJS mode, and the exec/io mocks include functional implementations so the worktree.test.ts integration tests keep running real git commands