Modernize tooling: highlight.js v11, package.json, CI workflows

* Update highlight.js from ancient pre-2015 to v11.11.1
* Add package.json to pin esbuild, highlight.js, and typescript versions
* Split CI: test.yml (Ruby), typecheck.yml (TypeScript), gem_push.yml (RubyGems)
* Add npm ecosystem to dependabot.yml
* Remove legacy fix_permissions rake task

Author: sferik

.github/dependabot.yml

@@ -17,3 +17,14 @@ updates:
         update-types:
           - minor
           - patch
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: daily
+    cooldown:
+      default-days: 7
+    groups:
+      minor-and-patch:
+        update-types:
+          - minor
+          - patch

.github/workflows/gem_push.yml

@@ -0,0 +1,37 @@
+name: Push gem to RubyGems
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: read
+
+jobs:
+  push:
+    if: github.repository == 'simplecov-ruby/simplecov-html'
+    runs-on: ubuntu-latest
+    environment:
+      name: rubygems.org
+      url: https://rubygems.org/gems/simplecov-html
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v6
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ruby
+          bundler-cache: true
+      - uses: rubygems/configure-rubygems-credentials@v1.0.0
+      - name: Update RubyGems
+        run: gem update --system
+      - name: Build gem
+        run: bundle exec rake build
+      - name: Sign gem with Sigstore
+        run: gem exec sigstore-cli sign pkg/*.gem --bundle pkg/simplecov-html.gem.sigstore.json
+      - name: Push gem
+        run: gem push pkg/*.gem --attestation pkg/simplecov-html.gem.sigstore.json
+      - name: Wait for release
+        run: gem exec rubygems-await pkg/*.gem

.github/workflows/main.yml .github/workflows/test.yml.github/workflows/main.yml renamed to .github/workflows/test.yml

@@ -0,0 +1,17 @@
+name: typecheck
+
+on: [push, pull_request]
+
+jobs:
+  typecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - run: npm install
+
+      - run: npm run typecheck

.github/workflows/typecheck.yml

@@ -20,6 +20,9 @@ tmtags
 ## RUBYMINE
 .idea
 
+## NODE
+node_modules
+
 ## PROJECT::GENERAL
 coverage
 rdoc

.gitignore

@@ -3,14 +3,6 @@
 require "bundler"
 Bundler::GemHelper.install_tasks
 
-# See https://github.com/simplecov-ruby/simplecov/issues/171
-desc "Set permissions on all files so they are compatible with both user-local and system-wide installs"
-task :fix_permissions do
-  system 'bash -c "find . -type f -exec chmod 644 {} \; && find . -type d -exec chmod 755 {} \;"'
-end
-# Enforce proper permissions on each build
-Rake::Task[:build].prerequisites.unshift :fix_permissions
-
 require "rake/testtask"
 Rake::TestTask.new(:test) do |test|
   test.libs << "lib" << "test"
@@ -34,10 +26,8 @@ namespace :assets do
   task :compile do
     puts "Compiling assets"
 
-    # JS: esbuild compiles TypeScript directly, then we concatenate with highlight.js and minify
-    sh "esbuild src/app.ts --bundle --minify --target=es2015 " \
-       "--banner:js=\"$(cat assets/javascripts/plugins/highlight.pack.js)\" " \
-       "--outfile=public/application.js"
+    # JS: esbuild bundles TypeScript + highlight.js and minifies
+    sh "esbuild src/app.ts --bundle --minify --target=es2015 --outfile=public/application.js"
 
     # CSS: concatenate in order and minify
     css = %w[