Update dev dependencies to fix vulnerabilities

.github/workflows/release.yaml

@@ -15,23 +15,22 @@ on:
 
 jobs:
   release:
-    runs-on: ubuntu-latest
-    concurrency: 1
     environment: release
+    runs-on: ubuntu-latest
+    concurrency:
+      group: release-${{ github.repository }}-${{ github.ref_name }}
+      cancel-in-progress: false
 
     steps:
     - name: Checkout code
       uses: actions/checkout@v4
       with:
-        token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
+        persist-credentials: false
 
     - name: Setup Node.js version
       uses: actions/setup-node@v4
       with:
-        node-version: 20
-
-    - name: Enable yarn
-      run: corepack enable
+        node-version: 22
 
     - name: Install dependencies
       run: yarn install --frozen-lockfile
@@ -40,11 +39,12 @@ jobs:
       run: |
         git config user.name "Uphold"
         git config user.email "bot@uphold.com"
+        git config --global url.https://${{ secrets.RELEASE_GITHUB_TOKEN }}@github.com/.insteadOf https://github.com/
+
+    - name: Configure npm
+      run: npm config set //registry.npmjs.org/:_authToken ${{ secrets.RELEASE_NPM_TOKEN }}
 
     - name: Generate release
       env:
         GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}
-        NPM_TOKEN: ${{ secrets.RELEASE_NPM_TOKEN }}
-      run: |
-        echo "//registry.npmjs.org/:_authToken=\${NPM_TOKEN}" > .npmrc
-        npm run release -- --increment "${{ github.event.inputs.VERSION_BUMP }}" -V
+      run: npm run release -- --increment "${{ github.event.inputs.VERSION_BUMP }}" -V

package.json

@@ -44,32 +44,32 @@
   },
   "devDependencies": {
     "@fastify/pre-commit": "^2.2.0",
-    "@uphold/github-changelog-generator": "^3.4.0",
-    "abavalidator": "^2.0.1",
-    "bignumber.js": "^9.0.0",
+    "@uphold/github-changelog-generator": "^4.0.2",
+    "abavalidator": "^2.0.2",
+    "bignumber.js": "^9.3.0",
     "cpf": "^2.0.1",
-    "creditcard": "^0.1.2",
-    "curp": "^1.2.3",
+    "creditcard": "^0.1.3",
+    "curp": "^1.3.1",
     "eslint": "~9.28.0",
     "eslint-config-uphold": "^6.5.2",
-    "google-libphonenumber": "^3.2.35",
+    "google-libphonenumber": "^3.2.41",
     "iban": "0.0.6",
     "isoc": "0.0.1",
-    "moment": "^2.29.1",
+    "moment": "^2.30.1",
     "prettier": "^3.5.3",
-    "release-it": "^17.0.1",
-    "tin-validator": "^1.0.0",
+    "release-it": "^19.0.3",
+    "tin-validator": "^1.1.0",
     "uk-modulus-checking": "0.0.3",
     "urijs": "^1.17.1",
     "validate-rfc": "^2.0.3",
-    "validator": "^13.7.0"
+    "validator": "^13.15.15"
   },
   "engines": {
     "node": ">=20"
   },
   "optionalPeerDependencies": {
     "abavalidator": ">=2 <3",
-    "bignumber.js": ">=7 <=9.0.0",
+    "bignumber.js": ">=7 <=9.3.0",
     "cpf": "^2.0.1",
     "creditcard": ">=0.0.1 <1.0.0",
     "curp": "^1.2.3",
@@ -81,7 +81,7 @@
     "uk-modulus-checking": "0.0.2",
     "urijs": ">=1 <2",
     "validate-rfc": "^2.0.3",
-    "validator": ">=3 <6"
+    "validator": ">=3 <14"
   },
   "pre-commit": [
     "lint"

test/asserts/taxpayer-identification-number-assert.test.js

@@ -68,13 +68,13 @@ describe('TaxpayerIdentificationNumberAssert', () => {
 
   it('should accept a valid `tin`', ({ assert }) => {
     assert.doesNotThrow(() => {
-      Assert.taxpayerIdentificationNumber().validate('123456789');
+      Assert.taxpayerIdentificationNumber().validate('900700000');
     });
   });
 
   it('should accept a correctly formatted `tin`', ({ assert }) => {
     assert.doesNotThrow(() => {
-      Assert.taxpayerIdentificationNumber().validate('123-45-6789');
+      Assert.taxpayerIdentificationNumber().validate('900-70-0000');
     });
   });
 });