build: dependabot, packages cooldown (#273)

Author: cdcabrera

.github/dependabot.yml

@@ -4,7 +4,9 @@ updates:
     directory: /
     schedule:
       interval: weekly
-      day: monday
+      day: wednesday
+    cooldown:
+      default-days: 14
     commit-message:
       prefix: "build"
       include: "scope"
@@ -30,7 +32,9 @@ updates:
     directory: /
     schedule:
       interval: monthly
-      day: monday
+      day: wednesday
+    cooldown:
+      default-days: 14
     open-pull-requests-limit: 2
     target-branch: "main"
     labels:

.github/workflows/commit_lint.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [22.x]
     steps:
       - uses: actions/checkout@v5
         with:

.github/workflows/coverage.yml

@@ -25,7 +25,7 @@ jobs:
     strategy:
       matrix:
         # Coverage node version
-        node-version: [20.x]
+        node-version: [22.x]
     steps:
       - uses: actions/checkout@v5
       - uses: actions/configure-pages@v5
@@ -44,7 +44,7 @@ jobs:
             ${{ runner.os }}-${{ matrix.node-version }}-modules
       - name: Install Node.js packages
         if: ${{ steps.modules-cache.outputs.cache-hit != 'true' }}
-        run: npm install
+        run: npm ci
       - name: Setup coverage report
         run: npm run test:coverage
       - name: Upload artifact

.github/workflows/documentation_lint.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [22.x]
     steps:
       - uses: actions/checkout@v5
       - name: Setup Node.js ${{ matrix.node-version }}
@@ -27,7 +27,7 @@ jobs:
             ${{ runner.os }}-${{ matrix.node-version }}-modules
       - name: Install Node.js packages
         if: ${{ steps.modules-cache.outputs.cache-hit != 'true' }}
-        run: npm install
+        run: npm ci
       - name: Build
         run: npm run build:docs
       - name: Git modified files

.github/workflows/integration.yml

@@ -27,7 +27,9 @@ jobs:
             ${{ runner.os }}-${{ matrix.node-version }}-modules
       - name: Install Node.js packages
         if: ${{ steps.modules-cache.outputs.cache-hit != 'true' }}
-        run: npm install
+        run: npm ci
+      - name: Audit packages
+        run: npm audit --audit-level=high
       - name: Lint and test
         run: npm test
       - name: Confirm integration

.github/workflows/packages_lint.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [22.x]
     steps:
       - uses: actions/checkout@v5
       - name: Setup Node.js ${{ matrix.node-version }}
@@ -27,7 +27,9 @@ jobs:
             ${{ runner.os }}-${{ matrix.node-version }}-modules
       - name: Install Node.js packages
         if: ${{ steps.modules-cache.outputs.cache-hit != 'true' }}
-        run: npm install
+        run: npm ci
+      - name: Audit packages
+        run: npm audit --audit-level=high
       - name: Build
         run: npm run build:packages-lib
       - name: Git modified files

.github/workflows/publishing.yml

@@ -12,7 +12,7 @@ jobs:
       id-token: write
     strategy:
       matrix:
-        node: [ 20.x ]
+        node: [22.x]
     steps:
       - uses: actions/checkout@v5
       - name: Setup Node.js ${{ matrix.node-version }}