chore: upgrade deps and publish on npm with staging step

Author: akiver

.github/workflows/checks.yaml

@@ -3,29 +3,27 @@ name: Checks
 on:
   push:
     branches:
-      - '**'
-    paths-ignore:
-      - 'README.md'
+      - main
   pull_request:
     types: [opened, synchronize]
+    paths-ignore:
+      - "README.md"
 
 jobs:
   checks:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Set up NodeJS
-        uses: actions/setup-node@v5
-        with:
-          node-version-file: '.node-version'
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
 
       - name: Install dependencies
         run: npm ci
 
-      - name: TSC compile
-        run: npm run compile
+      - name: Typecheck
+        run: npm run typecheck
 
       - name: Test
         run: npm run test

.github/workflows/release.yaml

@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0 # Required to get all existing tags
           fetch-tags: true
@@ -40,10 +40,13 @@ jobs:
           exit 0
 
       - name: Setup NodeJS
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version-file: '.node-version'
           registry-url: 'https://registry.npmjs.org'
+          package-manager-cache: false
+
+      - name: Upgrade npm
+        run: npm install -g npm@11.17.0
 
       - name: Install dependencies
         run: npm ci
@@ -61,4 +64,4 @@ jobs:
       - name: Publish new version
         run: |
           git push --follow-tags
-          npm publish
+          npm stage publish

.node-version

@@ -4,4 +4,3 @@ package-lock.json
 .*ignore
 __snapshots__
 LICENSE
-.node-version