chore: update dependencies (#285) (#286)

- Update AWS SDK packages from 3.971.0 to 3.987.0
- Update Babel packages from 7.28.x to 7.29.x
- Update @types/node from 24.10.9 to 24.10.13
- Update prettier from 3.8.0 to 3.8.1
- Update typescript-eslint from 8.53.1 to 8.55.0
- Update ci-info from 4.3.1 to 4.4.0
- Update semver from 7.7.3 to 7.7.4
- Update esbuild from 0.27.2 to 0.27.3
- Update diff from 5.2.0 to 5.2.2
- Update strnum from 2.1.1 to 2.1.2
- Remove unused aws-lambda and esbuild-jest dependencies
- Update Makefile unit-test targets to use 'pnpm run unit'

Resolves #285

Author: adrianjhunter

.github/workflows/auto_assign.yml

@@ -3,11 +3,10 @@ on:
   pull_request:
     types: [opened, ready_for_review]
 
-permissions:
-  pull-requests: write
-
 jobs:
   add-reviews:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - uses: kentaro-m/auto-assign-action@v2.0.1

.github/workflows/build_test.yml

@@ -10,7 +10,6 @@ on:
       - 'unicorn_web/**'
 
 permissions:
-  id-token: write
   contents: read
 
 jobs:
@@ -37,7 +36,7 @@ jobs:
 
     - run: echo "**** Setup Python ****"
     - name: Setup Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@v6.2.0
       with:
         python-version: ${{ env.PYTHON_VERSION }}
     - run: python --version
@@ -54,7 +53,7 @@ jobs:
     - run: 'echo "NodeJS version: $(node --version)"'
 
     - run: echo "**** Setup pnpm ****"
-    - uses: pnpm/action-setup@v4
+    - uses: pnpm/action-setup@v4.2.0
       with:
         version: 10
     - run: 'echo "pnpm version: $(pnpm --version)"'

.github/workflows/label_pr_on_title.yml

@@ -6,9 +6,6 @@ on:
     types:
       - completed
 
-permissions:
-  pull-requests: write
-
 jobs:
   get_pr_details:
     # Guardrails to only ever run if PR recording workflow was indeed
@@ -23,6 +20,8 @@ jobs:
   label_pr:
     needs: get_pr_details
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6

.github/workflows/on_merged_pr.yml

@@ -6,9 +6,6 @@ on:
     types:
       - completed
 
-permissions:
-  issues: write
-
 jobs:
   get_pr_details:
     if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success'
@@ -22,6 +19,8 @@ jobs:
     needs: get_pr_details
     runs-on: ubuntu-latest
     if: needs.get_pr_details.outputs.prIsMerged == 'true'
+    permissions:
+      issues: write
     steps:
       - uses: actions/checkout@v6
       - name: "Label PR related issue for release"

.github/workflows/on_opened_pr.yml

@@ -6,9 +6,6 @@ on:
     types:
       - completed
 
-permissions:
-  pull-requests: write
-
 jobs:
   get_pr_details:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
@@ -21,6 +18,8 @@ jobs:
   check_related_issue:
     needs: get_pr_details
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - uses: actions/checkout@v6
       - name: "Ensure related issue is present"
@@ -38,6 +37,8 @@ jobs:
   check_acknowledge_section:
     needs: get_pr_details
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - uses: actions/checkout@v6
       - name: "Ensure acknowledgement section is present"

package.json

@@ -6,9 +6,9 @@
 		"@eslint/js": "^9.39.2",
 		"eslint": "^9.39.2",
 		"eslint-config-prettier": "^10.1.8",
-		"globals": "^16.5.0",
+		"globals": "^17.3.0",
 		"husky": "^9.1.7",
-		"prettier": "^3.8.0",
-		"typescript-eslint": "^8.53.1"
+		"prettier": "^3.8.1",
+		"typescript-eslint": "^8.55.0"
 	}
 }